Borrowing it
Nothing to install: this file belongs to im-sham/aegis-protocol. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/im-sham/aegis-protocol/main/CLAUDE.mdgit clone --depth 1 https://github.com/im-sham/aegis-protocolWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/im-sham/aegis-protocol/claude-md)<a href="https://agentmods.dev/instructions/im-sham/aegis-protocol/claude-md"><img src="https://agentmods.dev/badge/instructions/im-sham/aegis-protocol/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/im-sham/aegis-protocol/claude-md"><img src="https://agentmods.dev/badge/instructions/im-sham/aegis-protocol/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03561 | $0.03561 |
| Opus 5.5 | $0.01424 | $0.01424 |
| Sonnet 5.5 | $0.00712 | $0.00712 |
| Haiku 4.5 | $0.00356 | $0.00356 |
Grade A, and why
aegis-protocol CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 246 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AEGIS Protocol — Claude Code Project Context
What This Is
AEGIS (Agent Escrow & Governance Infrastructure Standard) is trustless escrow middleware for AI agent-to-agent transactions. It composes two bleeding-edge standards:
- ERC-8004 (Trustless Agents, mainnet Jan 29 2026) — on-chain agent identity, reputation, and work validation
- x402 (Coinbase, V2 Dec 2025) — HTTP-native stablecoin payments for AI agents
AEGIS answers the question neither standard addresses: "What if the agent takes payment and delivers garbage?"
One-liner: "AEGIS is to the agent economy what Stripe was to e-commerce — the trust layer that makes autonomous transactions safe enough to happen at scale."
Core Architecture
Contract Stack (4 contracts, Solidity 0.8.24, Foundry, Base L2)
| Contract | Purpose |
|---|---|
AegisEscrow.sol |
Core vault. Creates jobs, locks USDC, routes through ERC-8004 Validation Registry, auto-settles or opens dispute window |
AegisDispute.sol |
3-tier dispute resolution: (1) automated re-validation, (2) staked arbitrator, (3) timeout default |
AegisTreasury.sol |
Fee collection with treasury/arbitrator pool split |
AegisJobFactory.sol |
Template system for standardized job types (code-review, data-analysis, etc.) |
Job State Machine
CREATED → FUNDED → DELIVERED → VALIDATING → SETTLED
↘ DISPUTE_WINDOW → DISPUTED → RESOLVED
↘ EXPIRED → REFUNDED
CREATED → CANCELLED (before funding)
ERC-8004 Integration (Critical — This Is Our Moat)
READS from ERC-8004:
- Identity Registry:
ownerOf(),getAgentWallet()— verify agents exist, resolve payment addresses - Reputation Registry:
getSummary()— pre-job reputation check (REQUIRES clientAddresses array to prevent Sybil) - Validation Registry:
getValidationStatus()— read work validation scores (0-100)
WRITES to ERC-8004:
- Reputation Registry:
giveFeedback()— auto-submit on every settlement with proof-of-payment - Validation Registry:
validationRequest()— trigger work verification on deliverable submission
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 246 lines · 3,561 tokens per session scan A cea2b870f080
aegis-protocol CLAUDE.md is an instructions file published in the GitHub repository im-sham/aegis-protocol (4 stars, last pushed 3mo ago), licensed MIT. It adds 3,561 tokens to every session, about $0.0142 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
aegis-protocol CLAUDE.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| aegis-protocol CLAUDE.mdim-sham/aegis-protocol | Instructions file | 4 | 3mo ago | MIT | A | 3,561 | Claude Code |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 5,685 | GitHub Copilot |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | today | MIT | A | 3,086 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 281k | today | MIT | A | 4,335 | Codex, OpenCode |