senpi AGENTS.md

Repository instructions for Senpi, an extension-first coding-agent monorepo. They define strict procedures for exploring, planning, tracking, implementing, reviewing, and merging requested changes.

In plain words
What is it for?
Use them for Senpi changes that require reading relevant guidance, creating a worktree, recording detailed tasks, running checks, opening a pull request, and collecting completion evidence.
Why use it?
They make the agent follow the project’s required process and preserve compatibility with the upstream repository before modifying code.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/code-yeongyu/senpi/agents-md
Clone the repo
git clone --depth 1 https://github.com/code-yeongyu/senpi

Made for: Codex, OpenCode.

Per session 4,113 This file is loaded in full into every session.
When invoked 4,113 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.04113 $0.04113
Opus 5 $0.02056 $0.02056
Sonnet 5 $0.00823 $0.00823
Haiku 4.5 $0.00411 $0.00411

Measured yesterday against content hash 13e6b95b869a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

senpi AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 151 lines

How it starts

The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Senpi Repository Guide

Generated: 2026-08-24 Commit: baf15a54d Branch: initdeep-refresh-20260824

Senpi is an extension-first coding-agent monorepo. Keep changes scoped, preserve upstream mergeability, and read the nearest AGENTS.md plus every applicable changes.md before editing.

MANDATORY EXECUTION PROTOCOLS — NON-NEGOTIABLE

PROTOCOL 1 — EXPLICITLY REQUESTED MODIFICATIONS

WHEN A PATCH MUST BE MADE TO THIS REPOSITORY AND THE USER HAS EXPLICITLY INSTRUCTED THE MODIFICATION, THE FOLLOWING SEQUENCE IS ABSOLUTE AND BINDING. EXECUTE EVERY STEP, IN THIS EXACT ORDER. SKIPPING, REORDERING, OR ABBREVIATING ANY STEP IS A DEFECT:

  1. EXPLORE — READ EVERY FILE, SYMBOL, AND TEST THE CHANGE TOUCHES BEFORE WRITING A SINGLE LINE.
  2. MAKE A PLAN — A DECISION-COMPLETE PLAN EXISTS BEFORE ANY CODE.
  3. ADD TODOS IN ULTRA-DETAIL — MIRROR EVERY ATOMIC PLAN STEP INTO THE TODO LIST.
  4. MAKE A NEW WORKTREE — NEVER IMPLEMENT IN THE SHARED WORKTREE.
  5. MAKE A PR AND WORK UNTIL IT GETS MERGED — AN UNMERGED PR IS UNFINISHED WORK.
  6. SET A GOAL AND RUN THE ULW LOOP — EVERY SUCCESS CRITERION PASSES WITH CAPTURED EVIDENCE.
  7. MANAGE TODOS OBSESSIVELY — UPDATE ON EVERY STATE TRANSITION. A STALE TODO LIST IS A DEFECT.

DELIVERY STOP INVARIANT: UNDER PROTOCOL 1, “PR OPENED” IS NEVER A VALID STOP CONDITION, GOAL SUCCESS CRITERION, OR FINAL TODO. DELIVERY ENDS ONLY WHEN GITHUB REPORTS MERGED AND THE TASK WORKTREE IS REMOVED. WHILE GATES ARE PENDING, KEEP MERGE/CLEANUP TODOS OPEN, MONITOR TO COMPLETION, THEN MERGE-COMMIT AND CLEAN UP BEFORE THE FINAL RESPONSE.

PROTOCOL 2 — USER-REQUESTED PR REVIEWS

WHEN THE USER REQUESTS A PR REVIEW, YOU MUST:

  1. MAKE A NEW WORKTREE — CREATE A DEDICATED GIT WORKTREE AND PULL THE PR BRANCH INTO IT. NEVER CHECK THE PR OUT IN THE SHARED WORKTREE.
  2. REVIEW INSIDE THAT WORKTREE — RUN THE FULL REVIEW (READ, BUILD, TEST, QA) THERE.
  3. CLEAN UP WHEN THE REVIEW IS DONE — THE MOMENT THE REVIEW IS FINISHED, REMOVE THE WORKTREE (git worktree remove THEN git worktree prune). A LEFTOVER REVIEW WORKTREE IS A DEFECT.

Read the full file on GitHub · 151 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 151 lines · 4,113 tokens per session scan A 13e6b95b869a

Subscribe to this mod's changes

senpi AGENTS.md is an instructions file published in the GitHub repository code-yeongyu/senpi (411 stars, last pushed yesterday), licensed MIT. It adds 4,113 tokens to every session, about $0.0206 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.