nulnul-harness: Instructions file for Codex

AGENTS.md

nulnul-harness AGENTS.md is an instructions file for Codex, OpenCode from SeoNaRu/nulnul-harness. It costs 953 tokens per session, scanned A, original, MIT.

A project guide for nulnul-harness, a Codex plugin that assembles the smallest useful set of project-local agent capabilities and improves them from measured results. It also defines the plugin as the product boundary and explains how to inspect existing agent tools.

In plain words
What is it for?
Inspecting repositories, detecting the host environment, reviewing installed skills, plugins, and agents, and building or maintaining the nulnul-harness plugin.
Why use it?
It helps agents set up or assess the harness without asking questions that repository inspection can answer, and prevents claiming support that has not been verified.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions Codex.

This is SeoNaRu/nulnul-harness's own configuration. It tells Codex and OpenCode how to work on nulnul-harness itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything nulnul-harness configures →

Reuse

Borrowing it

Nothing to install: this file belongs to SeoNaRu/nulnul-harness. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/SeoNaRu/nulnul-harness/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/SeoNaRu/nulnul-harness

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for nulnul-harness AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/seonaru/nulnul-harness/agents-md/github.svg)](https://agentmods.dev/instructions/seonaru/nulnul-harness/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/seonaru/nulnul-harness/agents-md"><img src="https://agentmods.dev/badge/instructions/seonaru/nulnul-harness/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for nulnul-harness AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/seonaru/nulnul-harness/agents-md"><img src="https://agentmods.dev/badge/instructions/seonaru/nulnul-harness/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 953 This file is loaded in full into every session.
When invoked 953 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00953 $0.00953
Opus 5.5 $0.00381 $0.00381
Sonnet 5.5 $0.00191 $0.00191
Haiku 4.5 $0.00095 $0.00095

Measured 1mo ago against content hash b7f95128a0db, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

nulnul-harness AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 49 lines

How it starts

The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.

nulnul harness working agreement

This repository builds plugins/nulnul-harness/, a Codex plugin that selects the strongest justified project-local capability system for the requested outcome, verifies the user's work, removes non-contributing setup, and evolves from measured outcomes without requiring users to operate a harness. Simplicity breaks ties between materially equivalent outcome paths; agent, skill, plugin, context, and infrastructure counts are never primary goals.

  • Treat plugins/nulnul-harness/ as the only shipped product boundary.
  • Keep the plugin skills-only until a real workflow proves that an MCP server, hook, app, or external service is necessary.
  • Inspect a target repository before asking questions. Ask only for product decisions or constraints that cannot be discovered safely. A request to set the harness up on a repository that already has work is never one of those questions.
  • Continue the user's original task after setup; setup alone is not task completion.
  • Select the non-overlapping capability set expected to produce the strongest verified task outcome. Among materially equivalent paths, choose the one with lower context, coordination, runtime, maintenance, and permission cost; activate only what the current task needs.
  • Use direct or single-agent execution when it is outcome-competitive. Add as many bounded roles as materially improve specialization, context isolation, parallel work, or independent verification; agent count has no target and one owner keeps final synthesis.
  • Never register global tools, use credentials, deploy, or publish without explicit user approval.
  • Give every state file one writing process, keep unknown distinct from verified and failed, persist cursors on empty cycles, and prove each validity check against a negative control.
  • Update the harness documents, exact evidence counts, and locale-parity claims in the same change as the code or release evidence they describe.

Read only when the work needs it

Read the full file on GitHub · 49 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · -3 lines · -1,049 tokens per session b7f95128a0db
  2. 1mo ago Changed · +2 lines · +115 tokens per session df209f5c7dc2
  3. 1mo ago Changed · +2 lines · +180 tokens per session 659325bc726f
  4. 1mo ago Changed · +1 lines · +152 tokens per session 77e6ac1f41b4
  5. 1mo ago First seen · 47 lines · 1,555 tokens per session scan A 0dc1d06abb46

Subscribe to this mod's changes

nulnul-harness AGENTS.md is an instructions file published in the GitHub repository SeoNaRu/nulnul-harness (34 stars, last pushed 1mo ago), licensed MIT. It adds 953 tokens to every session, about $0.0038 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories