hier_config copilot-instructions.md

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add instructions/netdevops/hier_config/copilot-instructions

Clone the repo

git clone --depth 1 https://github.com/netdevops/hier_config

Made for: GitHub Copilot.

Per session 576 This file is loaded in full into every session.

When invoked 576 The same file — it is already loaded in full.

Security scan A 0 findings. Scan, not verified.

Origin unknown No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00576	$0.00576
Opus 5	$0.00288	$0.00288
Sonnet 5	$0.00115	$0.00115
Haiku 4.5	$0.00058	$0.00058

Measured today against content hash 4734726d3ee8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

hier_config copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 32 lines

How it starts

The opening of the file, as written. The whole thing — 32 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub Copilot Instructions for hier_config

hier_config is a Python library that compares network device configurations (running vs intended) and generates minimal remediation commands by parsing config text into hierarchical trees. Runtime dependencies are deliberately minimal (pydantic only).

Build & Test

All commands use poetry (not pip):

poetry run ./scripts/build.py lint-and-test   # what CI runs
poetry run ./scripts/build.py pytest --coverage   # 95% coverage floor

Rules to Enforce in Review

Pydantic models must subclass the project-local BaseModel from hier_config/models.py (it sets frozen=True, extra="forbid"). Direct use of pydantic.BaseModel is a defect.
Model fields use immutable collections only: tuple and frozenset, never list or set. Rule models match config lineage with match_rules: tuple[MatchRule, ...].
Strict typing: flag Any, missing annotations (including in tests), and # type: ignore / # noqa comments without a justifying reason. mypy and pyright both run in strict mode.
Tests must accompany every code change (the project follows TDD). Tests are flat functions — no test classes (benchmarks excepted). Driver behavior changes belong in tests/test_driver_<platform>.py; config view changes in tests/config_view/.
Driver/rule changes need round-trip assertions: build running + intended configs, assert the exact remediation output (dump_simple()), and verify the rollback restores the original (no unified_diff).
Fields on HConfigDriverRules (hier_config/platforms/driver_base.py) use named module-level default factory functions, not lambdas.
CHANGELOG.md must have an entry under ## [Unreleased] (Keep a Changelog categories: Added/Changed/Fixed/Removed, with an issue/PR reference like (#209)).
Docs must be updated when public API or driver behavior changes; new doc pages must be added to mkdocs.yml nav; moved pages need a redirect_maps entry.
No loosening of quality gates: reject changes that lower coverage thresholds, disable lint rules, or relax type-checking configuration to make a change pass.
No new runtime dependencies without prior discussion in an issue.

Read the full file on GitHub · 32 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today First seen · 32 lines · 576 tokens per session scan A 4734726d3ee8

Subscribe to this mod's changes

hier_config copilot-instructions.md is an instructions file published in the GitHub repository netdevops/hier_config (150 stars, last pushed 5d ago), licensed MIT. It adds 576 tokens to every session, about $0.0029 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.

Code review Testing configuration-management network-analysis network-programming

Getting it into your agent

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

GitHub Copilot Instructions for hier_config

Build & Test

Rules to Enforce in Review

What this file has done since we first saw it

Other instructions, from other repositories

aghub CLAUDE.md

aghub AGENTS.md

Tutorial_AwesomeModernCPP AGENTS.md

grok-keysmith AGENTS.md

Tutorial_AwesomeModernCPP CLAUDE.md

mcp-wireshark CLAUDE.md