actors CLAUDE.md

Repository instructions for Rivet's agentOS monorepo, a codebase containing several related services and libraries. They define required product names, service URLs, terminology, and compatibility rules for published runner protocols.

In plain words
What is it for?
Use them when editing agentOS services, API references, sandbox-mounting documentation, or versioned runner schemas and compatibility code.
Why use it?
They prevent incorrect names, links, terminology, or breaking changes to protocol versions that existing users may depend on.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/rivet-dev/actors/claude-md
Clone the repo
git clone --depth 1 https://github.com/rivet-dev/actors
Per session 10,527 This file is loaded in full into every session.
When invoked 10,527 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.10527 $0.10527
Opus 5 $0.05264 $0.05264
Sonnet 5 $0.02105 $0.02105
Haiku 4.5 $0.01053 $0.01053

Measured 2d ago against content hash 195f26bd4d50, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

actors CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 398 lines

How it starts

The opening of the file, as written. The whole thing — 398 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Design constraints, invariants, and reference commands for the Rivet monorepo. For implementation details, wiring, and procedural gotchas, follow the links under Reference Docs.

Terminology

Always spell the product name agentOS, never AgentOS; do not alter type identifiers such as AgentOSActorConfig.

ALWAYS use rivet.dev - NEVER use rivet.gg

  • API endpoint: https://api.rivet.dev
  • Cloud API endpoint: https://cloud-api.rivet.dev
  • Dashboard: https://dashboard.rivet.dev
  • Documentation: https://rivet.dev/docs

Use "sandbox mounting" when referring to the agentOS sandbox integration. Do not use "sandbox extension" or "sandbox escalation." The feature mounts a sandbox as a filesystem inside the VM.

ALWAYS use github.com/rivet-dev/rivet - NEVER use rivet-dev/rivetkit or rivet-gg/*

Never modify an existing published *.bare runner protocol version unless explicitly asked to do so.

  • Add a new versioned schema instead, then migrate versioned.rs and related compatibility code to bridge old versions forward.
  • When bumping the protocol version, update PROTOCOL_MK2_VERSION in engine/packages/runner-protocol/src/lib.rs and PROTOCOL_VERSION in rivetkit-typescript/packages/engine-runner/src/mod.ts together. Both must match the latest schema version.

Always use versioned BARE (vbare) instead of raw serde_bare for any persisted or wire-format encoding unless explicitly told otherwise. Raw serde_bare::to_vec / from_slice has no version header, so any future schema change forces hand-rolled LegacyXxx fallback structs. vbare::OwnedVersionedData plus a versioned *.bare schema is the standard pattern. Acceptable raw-bare exceptions: ephemeral in-memory encodings that never cross a process boundary or hit disk, and wire formats whose protocol version is coordinated out-of-band (e.g. an HTTP path like /v{PROTOCOL_VERSION}/... or another channel that pins both peers to one schema per call).

Read the full file on GitHub · 398 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 398 lines · 10,527 tokens per session scan A 195f26bd4d50

Subscribe to this mod's changes

actors CLAUDE.md is an instructions file published in the GitHub repository rivet-dev/actors (6,099 stars, last pushed today), licensed Apache-2.0. It adds 10,527 tokens to every session, about $0.0526 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.