Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/lsampaioweb/ai-instructions/spring-boot-configgit clone --depth 1 https://github.com/lsampaioweb/ai-instructionsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/lsampaioweb/ai-instructions/spring-boot-config)<a href="https://agentmods.dev/instructions/lsampaioweb/ai-instructions/spring-boot-config"><img src="https://agentmods.dev/badge/instructions/lsampaioweb/ai-instructions/spring-boot-config.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00764 | $0.00764 |
| Opus 5 | $0.00382 | $0.00382 |
| Sonnet 5 | $0.00153 | $0.00153 |
| Haiku 4.5 | $0.00076 | $0.00076 |
Grade A, and why
ai-instructions spring-boot-config.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 46 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spring Boot Config Engine
Naming Conventions
- Use dot-separated lowercase property keys with a consistent root namespace prefix (e.g.,
app.pagination.default-size,app.security.jwt.expiry).
Rules
- Set
spring.application.namefor service identity used by logging and tracing context. - Keep
application.ymlas the base configuration file for each runnable module. - Keep values shared by all environments in
application.ymlonly. - Add
application-development.ymlandapplication-production.ymlfor distinct runtime environments. - Keep profile files limited to keys whose effective values differ from
application.yml. - Use
productionas the default active profile inapplication.yml, unless the user explicitly requests another default. - Set
spring.threads.virtual.enabled: trueinapplication.ymlfor Java 25 modules. - Set
logging.config: "classpath:log/logback-spring.xml"inapplication.yml. - Set
spring.devtools.restart.enabled: trueinapplication.ymlwhenspring-boot-devtoolsis declared. - Configure
spring.datasource.hikari.*with explicit pool sizing inapplication.ymlfor JDBC modules. - Set
server.port: 8080inapplication-development.yml. - Set
server.port: 9443inapplication-production.yml. - Set
server.error.include-stacktrace: "always"inapplication-development.yml. - Set
server.error.include-stacktrace: "never"as the safe base default inapplication.yml. - Do not repeat
server.error.include-stacktraceinapplication-production.yml. - Set
springdoc.swagger-ui.enabled: trueinapplication-development.yml. - Set
springdoc.swagger-ui.enabled: falseas the safe base default inapplication.yml. - Do not repeat
springdoc.swagger-ui.enabledinapplication-production.yml. - Keep one configuration-properties registration strategy per runnable module: either component-scanned properties classes or explicit
@EnableConfigurationProperties, but not both. - When using
@EnableConfigurationProperties, register each@ConfigurationPropertiesclass in the owning@Configurationclass, not the main class. - Prefer class-level configuration properties over scattered value injection.
- Annotate
@ConfigurationPropertiesclasses with@Validatedand use Bean Validation constraints (e.g.,@NotNull,@NotBlank,@Min) on required fields. - Use environment variable placeholders without defaults for sensitive attributes (for example, credentials, usernames, passwords, tokens, private keys, and connection secrets).
- Use environment variable placeholders without defaults in
application.ymlfor runtime infrastructure selectors such as datasource URLs, broker URLs, and telemetry exporter endpoints. - Use fail-fast configuration behavior for sensitive attributes so application startup fails when required sensitive environment values are missing.
- Allow default values only for non-sensitive attributes.
- Keep local-development-only fallback values in
application-development.yml, not inapplication.yml. - Use clear, stable property keys with domain prefixes for custom application properties.
- Keep each custom property namespace owned by a specific feature, integration, or infrastructure component.
- Keep shared configuration in the module-root
config/package only for cross-feature infrastructure properties; keep feature-specific configuration properties in feature-packageconfig/subdirectories. - Add a JavaDoc comment to every new
@ConfigurationPropertiesfield stating its purpose and the environment in which its value differs from the base default.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 46 lines · 764 tokens per session scan A 8acc04d0b877
ai-instructions spring-boot-config.instructions.md is an instructions file published in the GitHub repository lsampaioweb/ai-instructions (1 stars, last pushed 13d ago), licensed MIT. It adds 764 tokens to every session, about $0.0038 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other instructions, from other repositories
awsmux AGENTS.md
Instructions for 0hardik1/awsmux, covering agents.md, what awsmux is, build, test, verify, layout and the safety model — invariants you must not weaken.
plan-forge naming.instructions.md
Azure naming conventions — Microsoft CAF abbreviations, constraints, uniqueness, tagging.
agent-skills fortrabbit.instructions.md
Instructions for fortrabbit/agent-skills, covering fortrabbit — github copilot instructions, what fortrabbit is, configuration lookup, available operations and mcp server (optional).
cron-mcp CLAUDE.md
Claude Code instructions for Shreyas-Profile/cron-mcp, covering deploying cron-mcp to hetzner + regiq.in, server (shared with the rest of the globalion mcp fleet), deploy a new version, first-time subdomain wiring (cron.regiq.in) and env vars.
Railway-mcp CLAUDE.md
Claude Code instructions for Travis-Gilbert/Railway-mcp, covering railway mcp server, quick reference, file map, architecture and key patterns.
equinix-fabric-mcp CLAUDE.md
Claude Code instructions for sliuuu/equinix-fabric-mcp, covering claude.md — equinix-fabric-mcp, canonical files, auth, add equinixclientid and equinixclientsecret and running.