Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/kkollsga/codingest/claude-mdgit clone --depth 1 https://github.com/kkollsga/codingestWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03786 | $0.03786 |
| Opus 5 | $0.01893 | $0.01893 |
| Sonnet 5 | $0.00757 | $0.00757 |
| Haiku 4.5 | $0.00379 | $0.00379 |
Grade A, and why
codingest CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to codingest AGENTS.md — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 224 lines — stays where its author put it; the contents beside it link to each section on GitHub.
codingest — project instructions
Standalone extraction of KGLite's code_tree component: parse polyglot
codebases into queryable kglite knowledge
graphs. The graph engine and MCP server are imported from KGLite as cargo
libraries; this repo owns only the code-tree component. See README.md for the
workspace map and PARITY.md / BENCHMARKS.md for the regression record.
Authority: CLAUDE.md is the authority this repo's conventions are
regenerated from, with AGENTS.md as its generated adapter; for the skills the
authority is tracked .agents/skills/, and .claude/skills/ is a generated
adapter of it. Edit the authority and regenerate in the same action — never edit
an adapter. (This line is exempt from the CLAUDE.md↔AGENTS.md substitution —
it names the authority literally in every copy, per doctrine R7/R14.)
Working style
- Evidence over assertion. For a bug, reproduce it and confirm the root cause with evidence before fixing. For a behaviour-preserving refactor, probe the actual graph output first — don't trust your mental model.
- No bugs left behind. A defect you notice mid-task gets fixed (in scope) or
filed via
add-todo(out of scope) — never silently stepped over. The builder now lives only here, so builder bugs are ours to fix; if it traces to the sharedkgliteengine (kglite::api, Cypher, storage), route it to KGLite vianotify(KGLite is read-only here). - Offload, don't print. Write long output (stats JSON, bench tables, graph
dumps, big diffs) to
dev-docs/temp/(>1-day purge) ordev-docs/bench/out/and report the path. Keep responses under ~400 tokens. - Tooling discipline. Don't read a gate's status through a
tail/headpipe that can hide a failure — confirm the command actually reported success. After any builder/parser change, runcargo test(not just a hand-picked subset), and always the parity test if transformedcode_treesource moved. Three more shapes of the same trap, each of which failed in the reassuring direction (doctrineR2):git addwith one bad pathspec stages NOTHING. It is all-or-nothing: one typo'd or since-renamed path aborts the whole invocation, so the other files are not staged either — and the followinggit commitstill succeeds, on a commit missing the change. Read backgit diff --cached --name-only.grep -cexits 1 when the count is zero, sogrep -c … && nextbreaks the chain on exactly the empty result you needed to act on, and underset -eit kills the script. Capture it (n=$(… | grep -c … || true)) and test the number.- A backgrounded command's output must be read from its artifact. An echoed exit status, a "done" line, or the absence of visible errors is not the result — open the log the run wrote. This is how a failed background build reports green.
- Recipes never invoke bare
pythonand never verify via>/dev/null 2>&1; echo $?. A shell alias makes barepythonreport the alias's failure as the checker's verdict, and the null-masked$?hides which command failed — use the venv interpreter and read the target command's own status.
- Testing cadence: targeted per landing, the full battery once at the end.
A landing's gate is the suites chosen to catch what that change could break
— its touched surface plus that surface's direct consumers. This does not
weaken "run
cargo test, not just a hand-picked subset": the Rust battery is cheap and stays the per-phase gate. It applies to the heavymake gatesteps (release-gate scripts, bench smoke, wheel +tests/python) — those run once before a branch's first push and once over the union at the program's end, never per phase. Per-phase heavy runs buy nothing a completion-time run does not, and their cost is what makes agents quietly stop running them.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 224 lines · 3,786 tokens per session scan A 4b9b5feaad62
codingest CLAUDE.md is an instructions file published in the GitHub repository kkollsga/codingest (0 stars, last pushed yesterday), licensed MIT. It adds 3,786 tokens to every session, about $0.0189 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to codingest AGENTS.md, differing in 0 lines, and is treated as a copy.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
next.js AGENTS.md
Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.