conformal AGENTS.md

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add instructions/marcomuser/conformal/agents-md

Clone the repo

git clone --depth 1 https://github.com/marcomuser/conformal

Made for: Codex, OpenCode.

Per session 669 This file is loaded in full into every session.

When invoked 669 The same file — it is already loaded in full.

Security scan A 0 findings. Scan, not verified.

Origin unknown No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00669	$0.00669
Opus 5	$0.00334	$0.00334
Sonnet 5	$0.00134	$0.00134
Haiku 4.5	$0.00067	$0.00067

Measured today against content hash 2aa266584503, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

conformal AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 59 lines

How it starts

The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Conformal — AGENTS.md

Agent-focused notes for safe, fast contributions. Format reference: agents.md.

Setup

npm i
npm run typecheck
npm run test

Examples:

cd examples/react && npm i && npm run dev
cd examples/svelte && npm i && npm run dev

Public API

conformal: getPath, setPath, decode, parseFormData, serialize, coerceString, coerceNumber, coerceBigint, coerceBoolean, coerceDate, coerceFile, coerceArray; types: PathsFromObject, Submission
conformal/valibot: coerceString, coerceNumber, coerceBoolean, coerceDate, coerceBigint, coerceFile, coerceArray (experimental)
conformal/zod: string, number, boolean, date, bigint, enum, file, url, email, object, array (deprecated)

Exports live in src/index.ts, src/valibot/index.ts, and src/zod/index.ts.

Non‑negotiable invariants

parseFormData is synchronous; throw TypeError("Schema validation must be synchronous") if schema returns a Promise.
setPath/getPath are immutable and prototype‑safe (block __proto__, constructor.prototype); support nested arrays/objects and sparse indices.
Submission always includes input; separate fieldErrors (dot/bracket paths, numeric indices in brackets) from formErrors.
serialize: number/bigint → .toString(), boolean → "on"/"" (configurable), Date → ISO via .toISOString().
Types InputValue<T> and PathsFromObject<T> must remain correct for nested structures and browser types.

Code style

TypeScript strict mode (see tsconfig.json flags).
ESM-only, isomorphic runtime (no Node-only APIs).
Prettier formatting: npm run format:write.
Keep runtime deps minimal; valibot is an optional peer dependency.

Build & test

# Fast local CI
npm run format:check && npm run typecheck && npm run test

# Focus tests
npx vitest run -t "<name>"      # by test name
npx vitest run test/parse.test.ts

Quick playbooks

Read the full file on GitHub · 59 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today First seen · 59 lines · 669 tokens per session scan A 2aa266584503

Subscribe to this mod's changes

conformal AGENTS.md is an instructions file published in the GitHub repository marcomuser/conformal (39 stars, last pushed 10mo ago), licensed MIT. It adds 669 tokens to every session, about $0.0033 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.

Backend and APIs formdata schema submission typescript

vscode design-philosophy.instructions.md

VS Code design philosophy — the shared Values→Principles→Moves vocabulary for reasoning about UI in design terms rather than raw pixels. Use when creating, editing, or reviewing any visual surface (CSS, DOM, theming, icons, motion). Name the value/principle before reaching for a token.

microsoft/vscode · 577 tokens

Getting it into your agent

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

Conformal — AGENTS.md

Setup

Public API

Non‑negotiable invariants

Code style

Build & test

Quick playbooks

What this file has done since we first saw it

Other instructions, from other repositories

vscode design-philosophy.instructions.md

deepagents AGENTS.md

walkerOS CLAUDE.md

huly-mcp CLAUDE.md

movi-player AGENTS.md

sofagent GEMINI.md