Backlog.md AGENTS.md

Repository instructions for working on Backlog.md, a project-management tool for software teams. They require reading the project's manifesto first and following its product and coding principles.

In plain words
What is it for?
Following the repository's development rules, assigning tasks, describing interfaces, using commands, and checking whether an implementation can be simplified.
Why use it?
They keep implementation decisions aligned with the project's stated purpose and prevent accidental changes to important guiding documents. They also encourage simpler solutions after the work is understood.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/mrlesk/backlog.md/agents-md
Clone the repo
git clone --depth 1 https://github.com/MrLesk/Backlog.md

Made for: Codex, OpenCode.

Per session 1,637 This file is loaded in full into every session.
When invoked 1,637 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01637 $0.01637
Opus 5 $0.00818 $0.00818
Sonnet 5 $0.00327 $0.00327
Haiku 4.5 $0.00164 $0.00164

Measured today against content hash e85e312384c4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

Backlog.md AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 126 lines

How it starts

The opening of the file, as written. The whole thing — 126 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Read This First

At the beginning of each conversation, read MANIFESTO.md in the repository root before doing anything else. It is the project's constitution: who Backlog.md serves, its core loop, source of truth, surface hierarchy, interface posture, design principles, boundaries, and risks. All architecture and product decisions must align with it.

If a request appears to conflict with the manifesto, or would materially change a principle in it, surface the conflict and ask Alex rather than silently proceeding. Do not edit the manifesto as a side effect of implementation; changes to it require an explicit product decision.

When you're working on a task, you should assign it yourself: -a @{your-name}

In addition to the rules above, please consider the following: At the end of every task implementation, try to take a moment to see if you can simplify it. When you are done implementing, you know much more about a task than when you started. At this point you can better judge retrospectively what can be the simplest architecture to solve the problem. If you can simplify the code, do it.

Simplicity-first implementation rules

  • Prefer a single implementation for similar concerns. Reuse or refactor to a shared helper instead of duplicating.
  • Keep APIs minimal. Favor load + upsert over load/save/update, and do not add unused methods.
  • Avoid extra layers (services, normalizers, versioning) unless there is an immediate, proven need.
  • Keep behavior consistent across similar stores (defaults, parse errors, locking). Divergence requires a clear reason.
  • Don't add new exported helpers just to compute a path; derive from existing paths or add one shared helper only when reused.

UI descriptions

Do not add subtitles, helper text, or descriptive copy beneath headings, labels, cards, or settings by default. Prefer one concise, self-explanatory heading or label. Only add supporting copy when the user explicitly asks for it or when it is necessary to prevent misunderstanding or error, and never use it to restate the heading.

Read the full file on GitHub · 126 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +18 tokens per session e85e312384c4
  2. 3d ago First seen · 126 lines · 1,619 tokens per session scan A fe4e19cd5ce3

Subscribe to this mod's changes

Backlog.md AGENTS.md is an instructions file published in the GitHub repository MrLesk/Backlog.md (6,602 stars, last pushed yesterday), licensed MIT. It adds 1,637 tokens to every session, about $0.0082 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.