Borrowing it
Nothing to install: this file belongs to notatestuser/ds4-control. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/notatestuser/ds4-control/main/AGENTS.mdgit clone --depth 1 https://github.com/notatestuser/ds4-controlWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/notatestuser/ds4-control/agents-md)<a href="https://agentmods.dev/instructions/notatestuser/ds4-control/agents-md"><img src="https://agentmods.dev/badge/instructions/notatestuser/ds4-control/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/notatestuser/ds4-control/agents-md"><img src="https://agentmods.dev/badge/instructions/notatestuser/ds4-control/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02907 | $0.02907 |
| Opus 5.5 | $0.01163 | $0.01163 |
| Sonnet 5.5 | $0.00581 | $0.00581 |
| Haiku 4.5 | $0.00291 | $0.00291 |
Grade C, and why
ds4-control AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- headroom:rtk-instructions --> How it starts
The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DS4 Control agent notes
Purpose
A macOS menu-bar control pane for DeepSeek V4 running locally on Apple Silicon via
antirez/ds4. It launches, supervises, and monitors a local
ds4-server child process; lets you pick V4 Pro (0813), V4.1 Flash 1017, or V4 Flash (0731);
downloads GGUF weights; shows live unified-memory / GPU / CPU / power widgets; provides a built-in
chat; and can open a coding agent (pi or claude) in Terminal pointed at the local server.
It does no embedded inference — all inference is delegated to ds4-server. This app only
supervises that process and surfaces system metrics + a chat/agent front end.
DeepSeek V4 release maintenance
The app pins the official Flash 0731, V4.1 Flash 1017, and Pro 0813 GGUF generations. Pro 0813's Hub LFS
metadata reports exactly 464,627,334,560 bytes — the same byte size as the preview file but a
different content hash — and this value is baked into Quant.ggufBytes. V4.1 Flash's exact totals,
part sizes, and SHA-256 digests live in Quant (ggufBytes, downloadParts, sha256); its
resident main-weight byte counts subtract the 202,758,032,400 B of disk-only Engram tables that
ds4 munmaps at load.
external/ds4 is the upstream antirez/ds4 submodule, pinned to
commit a1012463383a09c6d11f8164218e0ee45e267acf. THINK_MAX is applied on top via
patches/ds4-think-max.patch (scripts/apply-ds4-patches.sh) because upstream still emits the
official 0731/0813 high prefix for reasoning_effort: max (antirez/ds4#635); it still applies
at this pin and remains 0731/Pro-only (V4.1 uses numeric reasoning effort and is unaffected). The
Metal context-allocation formula, shared graph workspace, per-session graph allocations, and
persistent backend-scratch bounds are rechecked against this revision before retaining the
0731/Pro Feasibility path and memory tiers.
V4.1 has its own estimator (ds41_graph_bytes / ds41_memory_admit_for_host), mirrored as
ds41GraphBytes + v41FixedWiredMB in Feasibility.swift, with ds41NonRoutedBytes and the two
ds41Q*PrefillHeadroomBytes constants derived from the quant recipe and verified against
external/ds4 source. The V4.1 graph header uses sizeof(struct ds41_graph) == 51,192, the exact
non-routed tensor spans total 10,060,841,408 B, and admission enforces ds4's host 7/8 budget
alongside the live wired limit. 1017 Q2 is one GGUF; MXFP4 has nine standard GGUF shards, pinned
to Hub revision 9dcee51692e6540f697141fc98b097e3c96492a3. The native assembler parses and
rewrites their headers, metadata, and tensor offsets; never concatenate standard shards. A
shard can be reclaimed only after its tensors and assembly checkpoint are durable. Resumable
incremental assembly peaks around 562 GiB plus a 1 GiB margin and produces a 467 GiB file; no
Python is needed. If a future ds4 bump changes any allocator or shape assumption, re-verify
Feasibility.swift and the feasibility/variant/downloader/assembler tests before release.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed · +19 lines · +479 tokens per session 8011bc3818da
- 1mo ago First seen · 139 lines · 2,428 tokens per session scan C 1f71e5b6fc20
ds4-control AGENTS.md is an instructions file published in the GitHub repository notatestuser/ds4-control (827 stars, last pushed 11d ago), licensed MIT. It adds 2,907 tokens to every session, about $0.0116 per session on Opus 5.5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-17.
ds4-control AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| ds4-control AGENTS.mdnotatestuser/ds4-control | Instructions file | 827 | 11d ago | MIT | C | 2,907 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |