Borrowing it
Nothing to install: this file belongs to frostyard/snosi. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/frostyard/snosi/main/AGENTS.mdgit clone --depth 1 https://github.com/frostyard/snosiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/frostyard/snosi/agents-md)<a href="https://agentmods.dev/instructions/frostyard/snosi/agents-md"><img src="https://agentmods.dev/badge/instructions/frostyard/snosi/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/frostyard/snosi/agents-md"><img src="https://agentmods.dev/badge/instructions/frostyard/snosi/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.04236 | $0.04236 |
| Opus 5.5 | $0.01694 | $0.01694 |
| Sonnet 5.5 | $0.00847 | $0.00847 |
| Haiku 4.5 | $0.00424 | $0.00424 |
Grade B, and why
snosi AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
Reporting is off by default and opt-in: `sudo snosi-health reporting on|off` How it starts
The opening of the file, as written. The whole thing — 248 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Snosi contributor context
Snosi builds four Debian Trixie bootc OCI products (snow, snowfield,
floe, sundog) and /usr-only sysexts. Firn offers these four bootc choices
only. Snowfield ships untested on representative Surface hardware: its
catalog inclusion gate is waived, not passed. Snow, Floe and
Sundog have VM fresh-install PASS evidence (lab runs
bootc-only-iso-install-54wr4 and -fjrk8, minideb, 2026-10-24/25; the
earlier Sundog boot:no_report was a lab-harness race,
#1123).
The Firn ISO takes the newest published Firn release (no pin). Its GRUB
menu boots the TUI (default) or firn-gui in cage, with the TUI always on
serial; that graphics stack needs about 4.5 GiB of RAM to boot
(ADR-0022).
Native A/B and NBC build/runtime lanes were removed; see
ADR-0018 and
native prototype history.
Build and layout
just lists targets; just sysexts, just snow, just snowfield,
just sundog, just floe, just test-install and just run-qemu cover
local builds and bootc tests. The Justfile bootstraps mkosi at the commit
pinned in .github/workflows/build.yml. The retained
shared/native-ab/ci/bootstrap-mkosi.sh and check-mkosi-pin.sh enforce
the same pin for the installer ISO; their directory name is historical.
The root mkosi.conf builds base plus sysexts. Each profile resets the
inherited Dependencies= list before adding base, then includes bootc
packages, shared/bootc-secure/mkosi.conf, its product composition/kernel,
and shared/outformat/image/mkosi.conf. mkosi list-valued settings accumulate
in Include= order: check the resolved summary when rearranging fragments.
The himmelblau APT source is scoped to shared/himmelblau/sandbox/ and its
sysext builds in a separate mkosi invocation with
--sandbox-tree=shared/himmelblau/sandbox --incremental=no --cache-only=never,
in both just sysexts and build.yml (ADR-0020). --cache-only=never forces
the metadata sync (mkosi 57907f58 skips it when the base cache is current) and
mkosi requires --incremental=no with it. test/third-party-apt-source-scope-test.sh rejects a
new third-party source in mkosi.sandbox/. frostyard.sources lists
Components: main image (core ADR-0059); no image ships a Frostyard APT
source, and test/frostyard-apt-image-component-test.sh enforces both.
Only the firn-installer profile may install frostyard-firn-gui, which
erases disks; test/firn-gui-scope-test.sh rejects it in every other
package list and build script. No image may enable GDM automatic or timed
login, because no image creates the user it would name;
test/gdm-autologin-scope-test.sh enforces this.
Snow and Snowfield ship exactly one first-login trigger,
shared/snow/tree/etc/xdg/autostart/org.frostyard.ChairLift.FirstRun.desktop
(Exec=/usr/bin/chairlift-first-run), and the app list
usr/share/snow/first-run/apps.json; Sundog and Floe ship none, and no
build input may name snow-first-setup (ADR-0028).
shared/composition/first-login.finalize and
test/first-login-trigger-test.sh enforce this; base's
/etc/profile.d/snosi-brew.sh must stay guarded and skip root.
No image may give the gnome-remote-desktop daemons TPM access (no tss group):
48.1 seals credentials in saved TPM contexts that a reboot invalidates;
test/grd-no-tpm-access-test.sh enforces this.
The image script phases are BuildScripts, PostInstallationScripts,
FinalizeScripts and PostOutputScripts. Consult
build pipeline for the detailed composition.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +38 lines · +705 tokens per session scan A → B e572f0532d24
- yesterday Changed · +9 lines · +205 tokens per session fc5303a48e31
- 6d ago Changed · +6 lines · +119 tokens per session 1af1a6a60be0
- 7d ago Changed · +4 lines · +58 tokens per session 851f8cb22875
- 8d ago Changed · +5 lines · +121 tokens per session 96a6591b6bf7
- 9d ago Changed · +2 lines · +49 tokens per session ff7e00dc95df
- 10d ago Changed · +16 lines · +331 tokens per session 3e08f2813749
- 11d ago Changed · +11 lines · +181 tokens per session 0e6525e32c7a
- 12d ago Changed · +15 lines · +271 tokens per session 4042b3292837
- 13d ago First seen · 142 lines · 2,196 tokens per session scan A c3c241d3b9df
snosi AGENTS.md is an instructions file published in the GitHub repository frostyard/snosi (32 stars, last pushed today), licensed MIT. It adds 4,236 tokens to every session, about $0.0169 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
snosi AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| snosi AGENTS.mdfrostyard/snosi | Instructions file | 32 | today | MIT | B | 4,236 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |