home-ops AGENTS.md

AGENTS.md instructions for gavinmcfall/home-ops, covering ai assistant configuration, ๐Ÿ“š documentation location, ๐Ÿ“– read first, โš ๏ธ critical invariants and capsule: gitopsreconciliation.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/gavinmcfall/home-ops/agents-md
Clone the repo
git clone --depth 1 https://github.com/gavinmcfall/home-ops

Made for: Codex, OpenCode.

Per session 2,690 This file is loaded in full into every session.
When invoked 2,690 The same file โ€” it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02690 $0.02690
Opus 5 $0.01345 $0.01345
Sonnet 5 $0.00538 $0.00538
Haiku 4.5 $0.00269 $0.00269

Measured today against content hash 1fd55955ce65, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

home-ops AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories โ€” prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency โ€” measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md ยท 299 lines

How it starts

The opening of the file, as written. The whole thing โ€” 299 lines โ€” stays where its author put it; the contents beside it link to each section on GitHub.

AI Assistant Configuration

This repository uses multiple AI coding assistants with shared context from a centralized documentation hub.

๐Ÿ“š Documentation Location

All AI assistant context is centralized in docs/ai-context/:

  • README.md - Overview and navigation
  • ARCHITECTURE.md - GitOps architecture, key decisions, and constraints
  • DOMAIN.md - Business rules, entity relationships, and invariants
  • WORKFLOWS.md - Operational workflows and procedures
  • TOOLS.md - Tool usage patterns and discovery commands
  • CONVENTIONS.md - Coding standards and project guidelines

This centralized approach provides:

  • โœ… Single source of truth for all AI tools
  • โœ… No duplication across tool-specific directories
  • โœ… Easy updates - change once, all tools benefit
  • โœ… Version controlled and team-friendly
  • โœ… Future-proof for new AI assistants

๐Ÿ“– Read First

  1. docs/ai-context/Ethos.md - Documentation philosophy
  2. docs/ai-context/ARCHITECTURE.md - System architecture
  3. docs/ai-context/CONVENTIONS.md - Coding standards

โš ๏ธ Critical Invariants

Capsule: GitOpsReconciliation

Invariant: Cluster state converges to match Git; Flux reverts manual changes.

Capsule: MakejinjaTemplates

Invariant: Edit templates in bootstrap/templates/; don't edit generated files.

CRITICAL: NEVER run task configure - it is for initial bootstrap only. Edit both the template AND the generated output file manually when making changes.

Capsule: SopsEncryption

Invariant: Secrets are SOPS-encrypted in Git; Flux decrypts at runtime.

Capsule: AppTemplateChart

Invariant: Apps use bjw-s/app-template chart; vendor charts are exceptions.

๐Ÿ”Œ MCP Server Configuration

Read the full file on GitHub ยท 299 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen ยท 299 lines ยท 2,690 tokens per session scan A 1fd55955ce65

Subscribe to this mod's changes

home-ops AGENTS.md is an instructions file published in the GitHub repository gavinmcfall/home-ops (37 stars, last pushed today), licensed MIT. It adds 2,690 tokens to every session, about $0.0135 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.