orka: Instructions file for Codex

AGENTS.md

orka AGENTS.md is an instructions file for Codex, OpenCode from orka-agents/orka. It costs 2,393 tokens per session, scanned A, original, MIT.

Project instructions for Orka, a Kubernetes-native platform that runs container and AI-agent tasks as Kubernetes Jobs and Pods. They cover security, generated files, scope, and release rules.

In plain words
What is it for?
Use them when changing Orka's task execution, Kubernetes integration, generated sources, secrets, transaction-token handling, or branch and release workflow.
Why use it?
They reduce the risk of leaking credentials, editing generated code, mishandling transaction tokens, or making unrequested platform changes.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md; mentions Codex; $skill-name invocation.

This is orka-agents/orka's own configuration. It tells Codex and OpenCode how to work on orka itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything orka configures →

Reuse

Borrowing it

Nothing to install: this file belongs to orka-agents/orka. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/orka-agents/orka/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/orka-agents/orka

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for orka AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/orka-agents/orka/agents-md/github.svg)](https://agentmods.dev/instructions/orka-agents/orka/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/orka-agents/orka/agents-md"><img src="https://agentmods.dev/badge/instructions/orka-agents/orka/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for orka AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/orka-agents/orka/agents-md"><img src="https://agentmods.dev/badge/instructions/orka-agents/orka/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 2,393 This file is loaded in full into every session.
When invoked 2,393 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.02393 $0.02393
Opus 5.5 $0.00957 $0.00957
Sonnet 5.5 $0.00479 $0.00479
Haiku 4.5 $0.00239 $0.00239

Measured 6d ago against content hash 22380ddd5875, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

orka AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 103 lines

How it starts

The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Orka is a Kubernetes-native task execution platform that manages Jobs and Pods for container tasks and AI agent tasks.

Non-negotiables

  • Never commit, log, or print credentials — API keys, tokens, or secrets of any kind. Use Kubernetes Secrets or env vars.
  • No binaries in the repository — put build artifacts in bin/ (gitignored) or CI release pipelines.
  • Scope discipline — implement exactly what was asked, nothing more. Report incidental, out-of-scope findings rather than fixing them, unless necessary for the requested outcome.
  • Never push to main. Push to the current branch after a change when it is not main.
  • Transaction-token integration is fail-closed — never store raw TxTokens in Task specs/status/logs. Use owner-referenced Secrets for child tokens, safe metadata/digests for audit, subset checks for child scopes, and fail-closed TTS exchanges for outbound scopes.
  • Never edit generated files (below), and never delete // +kubebuilder:scaffold:* comments.

Review before landing

For non-trivial code changes, run $autoreview (.agents/skills/autoreview/SKILL.md) before final/commit/ship and keep going until there are no accepted/actionable findings, unless the change is trivial/docs-only, equivalent manual review already happened, or the human opts out.

  • Treat review output as advisory: verify every finding against the real code path before changing code.
  • If review-triggered fixes change code, rerun focused tests and rerun $autoreview.
  • Format before review when formatting can move line locations; focused tests and review may run in parallel only after formatting is stable.

PR Closeout

After creating or updating an agent-authored PR, use $pr-closeout (.agents/skills/pr-closeout/SKILL.md) by default, like $autoreview is used before landing. Resolve merge conflicts, fix failing CI, address or push back on unresolved review threads, reply on GitHub and resolve addressed comments, push the non-main PR branch, and repeat until current CI is green and no unresolved actionable review threads remain. Skip only when the human opts out, the PR is intentionally draft/WIP, or the remaining blocker is external/human-only. Do not merge or enable auto-merge unless explicitly asked.

Read the full file on GitHub · 103 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · -3 tokens per session 22380ddd5875
  2. 10d ago Changed · -72 tokens per session e07de040ee1e
  3. 14d ago Changed · +1 lines · +81 tokens per session b67f1a96b4c4
  4. 26d ago Changed · +57 tokens per session beeca514bf64
  5. 1mo ago Changed · -221 tokens per session eba23d0c0ceb
  6. 1mo ago Changed · +1 lines · +41 tokens per session b16af6c5de74
  7. 1mo ago Changed · +37 tokens per session 85df8c8b1544
  8. 1mo ago Changed · +34 tokens per session 2c846d9296a1
  9. 1mo ago Changed · +44 tokens per session 79617916253f
  10. 1mo ago First seen · 101 lines · 2,395 tokens per session scan A 7766c223f497

Subscribe to this mod's changes

orka AGENTS.md is an instructions file published in the GitHub repository orka-agents/orka (36 stars, last pushed yesterday), licensed MIT. It adds 2,393 tokens to every session, about $0.0096 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories