Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/joe960913/jixu/agents-mdgit clone --depth 1 https://github.com/joe960913/JixuWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/joe960913/jixu/agents-md)<a href="https://agentmods.dev/instructions/joe960913/jixu/agents-md"><img src="https://agentmods.dev/badge/instructions/joe960913/jixu/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03473 | $0.03473 |
| Opus 5 | $0.01736 | $0.01736 |
| Sonnet 5 | $0.00695 | $0.00695 |
| Haiku 4.5 | $0.00347 | $0.00347 |
Grade A, and why
Jixu AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 347 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Jixu Repository Instructions
These instructions apply to every human or AI agent changing this repository.
1. Read order
Before proposing or making a change, read:
SPEC.md— normative product behavior and architecture;- this file — repository working rules;
- the relevant implementation and tests; and
- any directly relevant ADR or package documentation.
Do not infer architecture from filenames, examples, or provider SDKs when the specification already defines it.
2. Sources of truth
- The ordered durable Event log is the sole authority for a Thread.
- State is derived from Events.
- A Checkpoint is a disposable performance cache.
- A Signal is transient and non-authoritative.
- Provider conversation state, UI state, traces, and in-memory objects are not runtime authority.
SPEC.mdis the authority for public semantics and package boundaries at the current commit. It is a living specification, not an immutable artifact.
Never introduce a second Thread state machine, a second Event history, or a second component that can independently decide canonical Thread status.
3. Canonical concepts
Use the terminology in SPEC.md exactly:
Harnessowns exactly one immutable Agent and binds Stores and Drivers to the Kernel, but is not durable authority.Agentis immutable configuration and never hands work to another Agent.Threadis one durable, multi-turn history for that Agent.Kernelis I/O-free domain logic.Eventis an immutable durable fact.Signalis a transient observation.Stateis the deterministic Event projection.Reduceris pure.Effectrequests external work.Driverperforms an Effect.Toolacts.Skillsupplies instructional context.Checkpointaccelerates recovery but is not authority.Forkcreates a new Thread.Replayperforms no Effects.
Do not introduce session, conversation, run, workflow, job, or task
as a synonym or wrapper for Thread. Multi-Agent orchestration, handoff,
supervisors, swarms, Agent graphs, and Agent-as-Tool are outside the Jixu core
model. If an application needs a different Agent, it creates a different
Harness rather than adding Agent routing to one Harness.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 347 lines · 3,473 tokens per session scan A aa5341c98f22
Jixu AGENTS.md is an instructions file published in the GitHub repository joe960913/Jixu (118 stars, last pushed 7d ago), licensed MIT. It adds 3,473 tokens to every session, about $0.0174 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
DashClaw CLAUDE.md
Claude Code instructions for ucsandman/DashClaw, covering dashclaw (v2 governance runtime), commands, verify before you commit, gotchas (what you can't infer from the code) and governance boundary.
DashClaw AGENTS.md
AGENTS.md instructions for ucsandman/DashClaw, covering tooling note, design context, gitnexus — code intelligence, always do and never do.
DashClaw copilot-instructions.md
Copilot instructions for ucsandman/DashClaw, covering dashclaw — github copilot instructions, design context, users, brand personality and aesthetic direction.
DashClaw GEMINI.md
Gemini CLI instructions for ucsandman/DashClaw, covering dashclaw development context, project overview, core product primitives, guard and action records.
kdcube AGENTS.md
AGENTS.md instructions for kdcube/kdcube, covering agents.md — operating rules for coding agents, shared ground rules (both classes), a. platform contributors, git and shared-tree etiquette and code architecture.
CONTINUUM AGENTS.md
AGENTS.md instructions for Cyrax321/CONTINUUM, covering agents.md, before you touch anything, commit and push conventions, issues and pull requests and verification standard.