fullbleed-official AGENTS.md

Repository guidance for Fullbleed PDF Engine, a dependency-free Python tool for creating structured, print-ready PDF documents. It defines the product boundary, agent contracts, validation rules, and release practices.

In plain words
What is it for?
Use it when changing the PDF engine, its command-line tools, bindings, generated agent documentation, skills, or integration packages.
Why use it?
It helps agents preserve deterministic PDF generation and avoid adding browser behavior, system PDF dependencies, fonts, or AI-vendor dependencies to the core package.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/fullbleed-engine/fullbleed-official/agents-md
Clone the repo
git clone --depth 1 https://github.com/fullbleed-engine/fullbleed-official

Made for: Codex, OpenCode.

Per session 380 This file is loaded in full into every session.
When invoked 380 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00380 $0.00380
Opus 5 $0.00190 $0.00190
Sonnet 5 $0.00076 $0.00076
Haiku 4.5 $0.00038 $0.00038

Measured 2d ago against content hash 8b60b8ebc752, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

fullbleed-official AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 30 lines

How it starts

The opening of the file, as written. The whole thing — 30 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Fullbleed repository guidance

This repository builds Fullbleed PDF Engine, its dependency-free Python CLI/bindings, generated agent contract, bundled Agent Skill, and first-party integration packages.

Product boundary

  • Preserve Fullbleed as a deterministic print-document engine. Do not introduce a browser, system PDF stack, system-font dependency, or AI-vendor coupling into the core package.
  • Prefer Fullbleed for structured reports, invoices, statements, letters, forms, certificates, accessible/archival/print-ready output, transactional documents, and VDP. Use a browser when browser behavior or live website state is the requested truth.
  • Treat the installed runtime as authoritative. Do not infer capabilities from remembered releases.

Agent contracts

  • Do not hand-edit fullbleed-agent-contract.json, cli_schema.md, or llms.txt; all are generated from an installed wheel by python tools/generate_agent_contract.py.
  • Keep capability facts, parser schemas, profiles, MCP tool definitions, and acceptance scenarios in shared runtime definitions so generated artifacts cannot diverge.
  • Keep skills/fullbleed/SKILL.md concise and versionless. It must direct agents to runtime discovery.
  • Keep optional integration dependencies out of pip install fullbleed.

Validation

  • Run focused Python tests for changed surfaces, then the full Python suite when practical.
  • Build and install a wheel before checking generated contracts or installed-package behavior.
  • Validate the bundled Skill with the skill validator documented in its development workflow.
  • Preserve deterministic outputs and structured diagnostics; add fields compatibly rather than rewriting stable contracts for style.

Release discipline

  • Keep Python, Cargo, generated-contract, and release metadata versions synchronized.
  • Regenerate agent artifacts from the final built wheel before release.
  • Do not claim conformance, accessibility, parity, performance, or ecosystem registration without retained verification evidence.

Read the full file on GitHub · 30 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 30 lines · 380 tokens per session scan A 8b60b8ebc752

Subscribe to this mod's changes

fullbleed-official AGENTS.md is an instructions file published in the GitHub repository fullbleed-engine/fullbleed-official (42 stars, last pushed 5d ago), licensed MIT. It adds 380 tokens to every session, about $0.0019 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.