holon AGENTS.md

Repository guidelines for Holon, an early-stage headless runtime for long-lived, event-driven agents. They describe the project structure and prioritise clear runtime behaviour and explicit trust boundaries.

In plain words
What is it for?
Working on the Rust runtime, queues and task flow, agent templates, tests, benchmarks, documentation, and the separate GitHub bot service.
Why use it?
They help contributors avoid premature framework complexity and keep the runtime’s message, task, and output models understandable.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/holon-run/holon/agents-md
Clone the repo
git clone --depth 1 https://github.com/holon-run/holon

Made for: Codex, OpenCode.

Per session 935 This file is loaded in full into every session.
When invoked 935 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00935 $0.00935
Opus 5 $0.00467 $0.00467
Sonnet 5 $0.00187 $0.00187
Haiku 4.5 $0.00093 $0.00093

Measured 3d ago against content hash ddf86903c2d4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

holon AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 109 lines

How it starts

The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Guidelines

Holon is an early-stage headless runtime project. Keep the codebase small, explicit, and easy to reason about.

Project Structure & Module Organization

  • src/: Rust runtime implementation and executable entrypoints.
  • tests/: Rust integration tests and shared test support.
  • builtin_templates/: runtime-managed agent templates.
  • benchmark/ and benchmarks/: benchmark harness, fixtures, suites, and task manifests.
  • docs/: current runtime contracts, architecture notes, and design records.
  • holonbot/: Node-based GitHub App/bot retained as a separate service asset.
  • skills/: repository skills that remain useful outside the old Go runtime.
  • README.md: public-facing project definition.

Do not introduce large framework scaffolding before the runtime model is clear.

Product Intent

Holon is meant to be:

  • headless
  • event-driven
  • long-lived
  • explicit about trust boundaries
  • explicit about user-facing versus internal output

When design choices conflict, prefer runtime clarity over convenience.

Development Priorities

Prioritize work in this order:

  1. Runtime model and message envelope.
  2. Queue, wake, sleep, and task lifecycle.
  3. Event ingress and trust classification.
  4. Structured user-facing output.
  5. Integrations and adapters.

Do not start with UI work unless the task explicitly requires it.

Coding Style & Naming Conventions

  • Prefer simple, direct modules over indirection-heavy abstractions.
  • Make state transitions explicit in code and types.
  • Name modules after runtime responsibilities, not implementation accidents.
  • Keep comments short and only where state or lifecycle behavior is non-obvious.
  • Avoid hidden background behavior. If something wakes, retries, sleeps, or enqueues work, make that visible in names and logs.

Architecture Guardrails

  • Treat origin, trust, and priority as first-class runtime concepts.
  • Keep brief or user-facing delivery separate from internal execution traces.
  • Do not mix operator input and external channel input without preserving provenance.
  • Prefer append-only event/state logs when possible over opaque mutable state.
  • Avoid coupling the core runtime to any single model vendor or UI surface.

Read the full file on GitHub · 109 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 109 lines · 935 tokens per session scan A ddf86903c2d4

Subscribe to this mod's changes

holon AGENTS.md is an instructions file published in the GitHub repository holon-run/holon (134 stars, last pushed 3d ago), licensed Apache-2.0. It adds 935 tokens to every session, about $0.0047 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.