Borrowing it
Nothing to install: this file belongs to Hehejie1/NoteMeld. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Hehejie1/NoteMeld/main/AGENTS.mdgit clone --depth 1 https://github.com/Hehejie1/NoteMeldWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/hehejie1/notemeld/agents-md)<a href="https://agentmods.dev/instructions/hehejie1/notemeld/agents-md"><img src="https://agentmods.dev/badge/instructions/hehejie1/notemeld/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01067 | $0.01067 |
| Opus 5 | $0.00534 | $0.00534 |
| Sonnet 5 | $0.00213 | $0.00213 |
| Haiku 4.5 | $0.00107 | $0.00107 |
Grade A, and why
NoteMeld AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
本文件是 NoteMeld 项目中所有 AI Agent 和开发者的硬规则。任何新需求、方案、代码修改、Bug 修复、重构、接口变更、数据模型变更开始前,必须遵守。
必读文档
开始任何新需求前,必须先阅读:
docs/system/current-architecture.mddocs/system/product-rules.mddocs/system/data-model.mddocs/system/api-inventory.mddocs/system/known-pitfalls.md
只读 README、只看用户描述、只根据记忆或猜测写方案,均不合格。
必须搜索现状
动手前必须搜索相关代码和测试:
- 相关前端页面、组件、服务调用。
- 相关后端 router、service、model、utils。
- 相关 SQLite 表、文件结构、状态文件、sidecar 文件。
- 相关契约测试、回归测试、打包脚本和文档测试。
如果找不到现状,必须继续查或向用户提问,不能猜。
禁止事项
- 不能直接生成孤立 PRD。
- 不能在不了解现状的情况下写实现方案。
- 不能凭猜测改数据库字段、接口语义或核心业务规则。
- 不能绕过
docs/system/change-spec-template.md。 - 不能只做理想化重构方案,必须基于当前真实系统。
- 不能为了局部改动删除已有能力。
- 不能做无关重构。
- 不能删除用户未明确要求删除的能力。
- 不能回滚用户或其他 Agent 的改动,除非用户明确要求。
- 不能暴露 Provider API Key、Cookie、token、用户本地路径或敏感 payload。
- 不能破坏源码启动、CLI、桌面、MCP、迁移、Wiki、上传、打包发布任一既有入口。
Change Spec 规则
所有新需求必须先产出增量 Change Spec。模板见:
docs/system/change-spec-template.md
Change Spec 必须回答:
- 当前系统现状是什么。
- 本次目标是什么。
- 明确不做什么。
- 和产品规则、数据模型、API、历史坑点是否冲突。
- 影响哪些模块、接口、数据、UI、测试和文档。
- 最小可行改动是什么。
- 如何测试和验收。
- 风险和回滚是什么。
用户明确要求“直接修 Bug”时,也必须至少在回复或提交说明中覆盖根因、影响范围和回归测试。
Bug 修复规则
Bug 修复必须说明:
- 根因。
- 影响范围。
- 复现方式或证据。
- 修复点。
- 回归测试。
- 未覆盖风险。
不能只说“已修复”。没有验证证据,不得声称通过。
文档同步规则
修改以下内容时,必须同步更新 docs/system/:
- 系统架构、运行入口、部署方式。
- 产品硬规则或 UX 行为。
- SQLite 表、字段、文件结构、状态流转、缓存和统计口径。
- API 路径、请求参数、返回结构、错误语义或调用方。
- MCP 工具。
- Wiki rebuild、任务状态、桌面 sidecar、迁移、上传、打包发布等核心链路。
- 新发现的坑点和回归防线。
最小改动规则
- 优先复用现有模块、helper、router、service、测试模式。
- 只做满足需求的最小可行改动。
- 保持已有数据兼容。
- 保持已有 API 调用方兼容,必要时提供兼容层。
- 保持旧数据、历史状态和已有文件结构可读取。
- 涉及并发、取消、超时、文件写入时,必须考虑 race condition 和脏状态。
新需求前 Agent 必答问题
任何新需求开始前,Agent 必须回答:
- 这个需求影响哪些已有模块?
- 当前系统是否已有类似能力?
- 是否和产品规则冲突?
- 是否和数据模型字段语义冲突?
- 是否会重新引入 known-pitfalls 中的问题?
- 是否影响本地数据或线上服务?
- 最小可行改动是什么?
- 需要补哪些测试防止回归?
如果答不清楚,必须继续查代码、查文档、查测试,或者向用户提问,不能猜。
推荐验证命令
按改动范围选择验证:
python3 -m compileall backend/app
pytest backend/tests
cd frontend && pnpm test:contracts
cd frontend && pnpm build
scripts/run_core_regression.sh
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 125 lines · 1,067 tokens per session scan A ae8f39cadf73
NoteMeld AGENTS.md is an instructions file published in the GitHub repository Hehejie1/NoteMeld (5 stars, last pushed 1mo ago), licensed MIT. It adds 1,067 tokens to every session, about $0.0053 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.