sdlc-studio: Instructions file for Codex

AGENTS.md

sdlc-studio AGENTS.md is an instructions file for Codex, OpenCode from DarrenBenson/sdlc-studio. It costs 3,885 tokens per session, scanned A, original, MIT.

Repository instructions for sdlc-studio, a software-development workflow that uses reviews, status checks, lessons, and version-control updates before work begins.

In plain words
What is it for?
Use them at the start of each session, after context resets, and before design or implementation decisions in the sdlc-studio repository.
Why use it?
They help agents recover the current project state and follow rules that address recurring failures, including skipped checks and outdated repository data.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions Claude Code.

This is DarrenBenson/sdlc-studio's own configuration. It tells Codex and OpenCode how to work on sdlc-studio itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything sdlc-studio configures →

Reuse

Borrowing it

Nothing to install: this file belongs to DarrenBenson/sdlc-studio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/DarrenBenson/sdlc-studio/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/DarrenBenson/sdlc-studio

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sdlc-studio AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/darrenbenson/sdlc-studio/agents-md/github.svg)](https://agentmods.dev/instructions/darrenbenson/sdlc-studio/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/darrenbenson/sdlc-studio/agents-md"><img src="https://agentmods.dev/badge/instructions/darrenbenson/sdlc-studio/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sdlc-studio AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/darrenbenson/sdlc-studio/agents-md"><img src="https://agentmods.dev/badge/instructions/darrenbenson/sdlc-studio/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,885 This file is loaded in full into every session.
When invoked 3,885 The same file — it is already loaded in full.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03885 $0.03885
Opus 5.5 $0.01554 $0.01554
Sonnet 5.5 $0.00777 $0.00777
Haiku 4.5 $0.00388 $0.00388

Measured 6d ago against content hash 95755bd77e09, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

sdlc-studio AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

| `reconcile --verify` | whichever of `pytest`, `jest`, `vitest`, `go`, `curl`, `jq`, `rg` your Verify lines invoke |
AGENTS.md · 246 lines

How it starts

The opening of the file, as written. The whole thing — 246 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Guidance for coding agents working on this repository. Claude Code reads this via the @AGENTS.md import in CLAUDE.md; Codex, Copilot, Cursor, Gemini and others read it directly.

This file is always loaded. Keep it short enough to be read, and put nothing here that a command already prints. The pre-commit hook names every guard it runs, the rule it enforces, the offending line and the fix, so this file does not restate them.

Start here, every session

Do these four before acting, including after a context reset or compaction. They take under a minute and each one has cost a real sprint when skipped.

  1. sdlc-studio/reviews/LATEST.md - what the last run landed and what it left owed.
  2. /sdlc-studio status - pipeline state and the next step.
  3. .claude/skills/sdlc-studio/lessons/_index.md - the cross-project lessons. Read them before any design decision, not after.
  4. git fetch - a stale clone mints ids the remote already used and plans over artefacts somebody else changed.

The failure mode this repo actually has

Not ignorance. Rules that were read and then not followed. One session produced five instances: the lessons index went unread while the plan printed its digest; review prompts were hand-written though the shipped seat briefs exist; findings were not sorted into regression versus pre-existing; a backlog census was hand-scripted rather than taken from the tooling; and the full-suite-before-commit rule was broken one commit after being shipped, leaving main red for six commits.

So: when a rule matters, gate it in the command people actually run - LL0027 in the lessons registry. Adding a line here is the weakest available fix, and a rule stated here with no gate behind it should be read as a known-weak one.

What will refuse you

These block. Everything else in this file is guidance.

Gate Refuses
pre-commit + commit-msg hooks any lane .githooks/pre-commit --list or .githooks/commit-msg --list prints; the message rule (a multi-id subject with no Refs: trailer) and the collapsed-suite check are lanes there too
pre-push hook a red boundary gate (gate.py --boundary push, or release for a tag): a push runs the full suite once plus the core gate lanes, and a tag adds the slow release lanes; python3 tools/gate_timing.py estimate --suite boundary-push --warn-seconds 0 prints the current figure
sprint plan a batch whose units lack Affects: or Points:, or exceed the split threshold
transition -> Done a story whose executable ACs have not passed
transition -> Fixed a bug nothing speaks for (no ticked criterion, no Verify: line), or whose recorded verify_ac run is red
sprint close an uncommitted change to a file a batch unit declares (uncovered units, unanswered items and failing lanes are recorded as known issues on the report, not refused)
critic.py brief a unit whose author has recorded no self-check of its current diff with critic.py self-check record (review.author_self_check: block)
sprint sign a report that is not the run's, a page that no longer re-derives to what was filed, a tree changed since the close, or a principal who is a unit's author or a reviewer recorded on it

Read the full file on GitHub · 246 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · +2 lines · +68 tokens per session 95755bd77e09
  2. 9d ago Changed · +1 lines · +45 tokens per session ae45b102cd84
  3. 15d ago Changed · +1 lines · +35 tokens per session ab66113d4c9e
  4. 23d ago Changed · +14 tokens per session fa0d25ab11b1
  5. 1mo ago Changed · +44 tokens per session 993d1668bdfb
  6. 1mo ago Changed · -1 lines · -14 tokens per session 60abf53cae47
  7. 1mo ago Changed · -1 lines · -26 tokens per session 1ed69c76ffa1
  8. 1mo ago Changed · -1 lines · +2 tokens per session bf4a93a32b6b
  9. 1mo ago Changed · -50 lines · -965 tokens per session 67c9b189de4c
  10. 1mo ago First seen · 295 lines · 4,682 tokens per session scan A 908931c1e43d

Subscribe to this mod's changes

sdlc-studio AGENTS.md is an instructions file published in the GitHub repository DarrenBenson/sdlc-studio (24 stars, last pushed 2d ago), licensed MIT. It adds 3,885 tokens to every session, about $0.0155 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories