zero AGENTS.md

Contribution and repository instructions for Zero, including pull-request rules, implementation conventions, required validation, and common review blockers.

In plain words
What is it for?
Planning Zero changes, checking contribution requirements, preparing pull requests, recording verification, and avoiding unrelated edits or unsupported architecture changes.
Why use it?
They help keep changes focused, properly approved, tested, and documented before a pull request is opened.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/gitlawb/zero/agents-md
Clone the repo
git clone --depth 1 https://github.com/Gitlawb/zero

Made for: Codex, OpenCode.

Per session 2,164 This file is loaded in full into every session.
When invoked 2,164 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02164 $0.02164
Opus 5 $0.01082 $0.01082
Sonnet 5 $0.00433 $0.00433
Haiku 4.5 $0.00216 $0.00216

Measured yesterday against content hash 18fe2e20a18d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

zero AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 153 lines

How it starts

The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Guidelines for Zero

These instructions apply to all work in this repository. For the user-facing guide to extending Zero with specialists, hooks, plugins, MCP, and skills, see docs/EXTENDING.md.

1. Contribution and Pull Request Rules

  • Before opening any pull request, all contributors—including maintainers, community contributors, and coding agents—must read and follow CONTRIBUTING.md.
  • Community pull requests require an existing parent issue with the issue-approved label. Team members may open pull requests through the internal development process described in CONTRIBUTING.md.
  • Keep each change focused on the approved or assigned scope. Do not include unrelated fixes, refactors, formatting churn, generated output, or existing local changes in the same commit or pull request.
  • Discuss new implementation languages, runtimes, major dependency changes, and broad architectural rewrites with maintainers before implementation.
  • Pull request descriptions must explain what changed and why, link the parent issue when required, and list the tests or verification performed. Include screenshots or a short recording for user-visible UI changes when practical.

2. Repository and Implementation Conventions

  • Use the Go version declared in go.mod. Do not hardcode a different local toolchain version in scripts or documentation.
  • Use the repository build and release commands (make and go run ./cmd/zero-release ...) instead of inventing parallel build flows.
  • Keep tests beside their source files (foo_test.go next to foo.go). Add a regression test for behavior changes and run affected concurrent code under the race detector.
  • Never edit files under third_party/; they are vendored.
  • Prefer one cross-platform function with small conditional checks over duplicated platform-specific helpers when the behavior can remain unified.
  • Do not commit generated benchmark reports from internal/perfbench/reports/*.json; reports are configuration-specific evidence, not repository state.
  • Preserve the user's working tree. Do not overwrite, delete, stage, or commit unrelated tracked or untracked files.

Read the full file on GitHub · 153 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 153 lines · 2,164 tokens per session scan A 18fe2e20a18d

Subscribe to this mod's changes

zero AGENTS.md is an instructions file published in the GitHub repository Gitlawb/zero (1,641 stars, last pushed 2d ago), licensed MIT. It adds 2,164 tokens to every session, about $0.0108 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.