Borrowing it
Nothing to install: this file belongs to eriknewton/sanctuary-framework. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/eriknewton/sanctuary-framework/main/AGENTS.mdgit clone --depth 1 https://github.com/eriknewton/sanctuary-frameworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/eriknewton/sanctuary-framework/agents-md)<a href="https://agentmods.dev/instructions/eriknewton/sanctuary-framework/agents-md"><img src="https://agentmods.dev/badge/instructions/eriknewton/sanctuary-framework/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/eriknewton/sanctuary-framework/agents-md"><img src="https://agentmods.dev/badge/instructions/eriknewton/sanctuary-framework/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.06258 | $0.06258 |
| Opus 5.5 | $0.02503 | $0.02503 |
| Sonnet 5.5 | $0.01252 | $0.01252 |
| Haiku 4.5 | $0.00626 | $0.00626 |
Grade A, and why
sanctuary-framework AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md: Sanctuary & Concordia Security and Sovereignty Review Context
This file is a briefing for any AI coding agent working in these codebases. Read it before making any changes. It is the canonical, model-neutral source of truth for how to work in this repo; tool-specific files (for example CLAUDE.md) import this file rather than duplicating it.
Attribution Rule (MANDATORY)
No public-facing document, README, blog post, plugin manifest, package metadata, or software artifact may reference or attribute CIMC as author or creator of Sanctuary or Concordia. Erik Newton is the sole author. CIMC may be mentioned in internal/biographical context only.
Commit discipline: test baseline enforcement (MANDATORY)
Every commit to Sanctuary main MUST run npm run typecheck && npm test against a clean working tree before staging; block the commit if either fails, if any transform/collection error appears in vitest output, or if the passing-test count drops below the integer in .test-baseline at repo root.
This rule is now backed by structural enforcement, not just instruction, split across two local hooks by cost (2026-09-26):
- Pre-commit hook at
.githooks/pre-commitruns the fast tier locally on everygit commit:npm run typecheck, thennpx vitest related --runscoped to the commit's own staged.ts/.tsxfiles underserver/, with the same transform/collection-error scan. It does NOT check.test-baseline(measured shape is under a minute on a modern Mac). Bypass withgit commit --no-verify. - Pre-push hook at
.githooks/pre-pushruns the full tier on everygit push: the completenpm test, the transform/collection-error scan, the silent-test-file-drop check, and the.test-baselinefloor comparison (both directions), unchanged logic from what used to run inline in pre-commit. Measured shape is the full suite's own wall-clock time, roughly 8 to 19 minutes depending on the machine. Emergency bypass:SKIP_TEST_BASELINE=1 git push ...(logged to.test-baseline-overrides.logfor audit). - Install both once with
cd server && npm run install-hooks(copies both files into the real hooks directory git will execute from). - CI check at
.github/workflows/test-baseline-guard.ymlis UNCHANGED by this split: it runs the same full-suite gates on every PR and every push to main, and remains the merge gate. This is the enforcement layer for pushes that bypass the local pre-push hook with--no-verify,SKIP_TEST_BASELINE=1, or from an uninstalled environment. Seedocs/audit/branch-protection-setup.mdfor the Git branch-protection runbook required to make this check a hard merge gate. - Written instruction (this block) remains the human-facing contract. The structural layers make violations hard; this rule makes the intent explicit so a reviewer or auditor can cite it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed e01fa46ec7e4
- 9d ago Changed 0dbc722f64fb
- 13d ago Changed · +4 tokens per session 2262fc25ad48
- 17d ago Changed · +2 lines · +295 tokens per session ab784857d82a
- 20d ago Changed · -4 tokens per session a4fa9cc0f47c
- 1mo ago Changed · +4 lines · +270 tokens per session f877927fed69
- 1mo ago Changed · +219 tokens per session 8281b33e6522
- 1mo ago First seen · 110 lines · 5,474 tokens per session scan A 49819c052fdc
sanctuary-framework AGENTS.md is an instructions file published in the GitHub repository eriknewton/sanctuary-framework (9 stars, last pushed today), licensed Apache-2.0. It adds 6,258 tokens to every session, about $0.0250 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.