carve-harness: Instructions file for Claude Code

AGENTS.md

carve-harness AGENTS.md is an instructions file for Claude Code, Codex, OpenCode from claude-code-expert/carve-harness. It costs 1,810 tokens per session, scanned A, original, MIT.

Repository instructions in an AGENTS.md file describing shared rules for coding agents, including safety limits, communication, escalation, surgical changes, and separate creation and verification roles.

In plain words
What is it for?
Use it as the project’s agent rulebook when creating or reviewing changes in claude-code-expert/carve-harness.
Why use it?
It gives different coding agents one common set of guardrails for working in the project.

Instructions file for Claude CodeCodexOpenCode

Written for Claude Code and Codex and OpenCode: PreToolUse hook event, but also the file is AGENTS.md. Also seen: mentions CLAUDE.md; mentions Claude Code; mentions AGENTS.md.

This is claude-code-expert/carve-harness's own configuration. It tells Claude Code, Codex and OpenCode how to work on carve-harness itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything carve-harness configures →

Reuse

Borrowing it

Nothing to install: this file belongs to claude-code-expert/carve-harness. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/claude-code-expert/carve-harness/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/claude-code-expert/carve-harness

Made for: Claude Code, Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for carve-harness AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/claude-code-expert/carve-harness/agents-md/github.svg)](https://agentmods.dev/instructions/claude-code-expert/carve-harness/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/claude-code-expert/carve-harness/agents-md"><img src="https://agentmods.dev/badge/instructions/claude-code-expert/carve-harness/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for carve-harness AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/claude-code-expert/carve-harness/agents-md"><img src="https://agentmods.dev/badge/instructions/claude-code-expert/carve-harness/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,810 This file is loaded in full into every session.
When invoked 1,810 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01810 $0.01810
Opus 5.5 $0.00724 $0.00724
Sonnet 5.5 $0.00362 $0.00362
Haiku 4.5 $0.00181 $0.00181

Measured 1mo ago against content hash c532b8a7e48b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

carve-harness AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 106 lines

How it starts

The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — 에이전트 표준 (크로스 에이전트 가드레일)

이 파일은 모든 코딩 에이전트(Claude Code·Cursor·Codex·Aider·Gemini CLI 등)에 적용되는 공통 규칙이다. Claude Code는 CLAUDE.md + .claude/CLAUDE.md + PreToolUse 훅으로 이 규칙 일부를 자동 강제하지만, 훅이 없는 에이전트는 아래 규칙을 스스로 준수해야 한다. 규칙의 권위는 강제 수단이 아니라 이 문서에 있다. 스택별 세부 규칙은 .claude/rules/에 있다 — 해당 파일도 함께 읽어라.


0. 절대 금지 (언어·에이전트 무관, 강제)

  • 시크릿 하드코딩 금지 → 환경변수/시크릿 매니저. 코드·커밋·로그·에러메시지·URL에 시크릿/PII 노출 금지.
  • 위험 git 금지: push --force, reset --hard, 히스토리 재작성, commit --no-verify.
  • 기존 마이그레이션 수정 금지 → 새 버전만 추가(체크섬/이력 보존).
  • 파괴적 DB 작업 금지: WHERE 없는 DELETE/UPDATE, DROP/TRUNCATE, 볼륨 삭제 — 승인 없이 금지.
  • 미검증 완료 선언 금지 → 완료는 검증 가능한 완료기준(SC)으로만 증명한다.
  • eval/new Function/exec에 외부 입력 전달 금지, 미검증 HTML 렌더 금지(XSS).

1. 커뮤니케이션 · 에스컬레이션

사용자 신호를 정확히 해석하라. 불필요하게 되묻지 마라.

  • 오타는 맥락으로 해석하고 되묻지 않는다.
  • 사소한 분기(파일명·포맷 등)는 기본값으로 진행하고 1줄 고지한다.
  • 같은 지적을 두 번 받으면 즉시 규칙으로 정착시킨다. 세 번째는 없다.
  • 해석이 여럿이면 모두 제시하라 — 말없이 하나 고르지 마라.

다음은 자율 판단 금지 → 진행 전 에스컬레이션:

  • 아키텍처 변경 · 반복 실패 · 스펙 충돌 · 비가역 작업(덮어쓰기·삭제·퍼블리시).
  • 정본 소스가 불명확하거나 요구 범위가 서로 충돌할 때.
  • 작업 결과가 기존 산출물을 퇴행시킬 것으로 예상될 때.
  • 입력이 비어 있거나 대상이 실재하지 않을 때 → 멈추고 먼저 보고(빈 데이터 분석한 척 금지).

에스컬레이션 포맷:

[ESCALATION]
- 상황: / 막힌 지점: / 시도한 것: / 필요한 결정:

4. 외과적 변경

꼭 필요한 것만 건드려라. 네가 만든 것만 정리하라.

  • 인접 코드·주석·포맷을 "개선"하지 마라. 안 망가진 것 리팩터 금지.
  • 네 방식과 달라도 기존 스타일을 따르라.
  • 무관한 죽은 코드는 언급만, 삭제 금지(요청받지 않는 한).
  • 변경으로 고아가 된 import/변수/함수만 정리하라.
  • 지정 범위 밖 파일·섹션은 읽되 쓰지 마라. "다른 건 건들지 말고"가 항상 암묵적으로 붙어 있다고 가정.
  • 덮어쓰기 전 현재 상태를 읽어라 — 기존 삭제 내역 되살아남 방지. 부분 패치로 될 걸 전체 덮어쓰지 마라.
  • 이전 버전보다 나빠졌으면 변명 없이 즉시 롤백.
  • 판별 기준: 변경된 모든 줄은 사용자 요청으로 거슬러 올라갈 수 있어야 한다.

6. 역할 (생성/검증 분리)

  • 생성(Generator)과 검증(Evaluator)은 분리한다 (Self-Eval Blindspot 방지).
  • Planner: 작업 분해·SC 정의 / Generator: 구현 / Evaluator: 타입·보안·예외·상태 검증.
  • 출력은 SC 대비 자기 점검 후 제출.

7. 시각 산출물 게이트

  • 금지: 그라데이션 일체, 색 그림자, blur>=20px, 글래스모피즘, hover/load 장식, 무관한 배경 장식, 카드 상단 컬러바, 한쪽 테두리 radius, 이모지 불릿, 뱃지/pill 남발, 마케팅 상투어.
  • 강제: 무채색 베이스 + 액센트 1색(색은 의미에만), 그림자는 중성 회색 1단계 또는 없음, border-radius 0~8px, 폰트 의도적 선택, 흰 배경엔 진한 텍스트.
  • 시각 작업 전 설치된 UI 스킬/린터를 먼저 발동하고, 자동 검사기가 있으면 통과할 때까지 재작성.

Read the full file on GitHub · 106 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +91 tokens per session c532b8a7e48b
  2. 1mo ago First seen · 106 lines · 1,719 tokens per session scan A 36094a84e536

Subscribe to this mod's changes

carve-harness AGENTS.md is an instructions file published in the GitHub repository claude-code-expert/carve-harness (15 stars, last pushed 1mo ago), licensed MIT. It adds 1,810 tokens to every session, about $0.0072 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,581 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens