Borrowing it
Nothing to install: this file belongs to sint-ai/sint-protocol. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sint-ai/sint-protocol/main/AGENTS.mdgit clone --depth 1 https://github.com/sint-ai/sint-protocolWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/sint-ai/sint-protocol/agents-md)<a href="https://agentmods.dev/instructions/sint-ai/sint-protocol/agents-md"><img src="https://agentmods.dev/badge/instructions/sint-ai/sint-protocol/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/sint-ai/sint-protocol/agents-md"><img src="https://agentmods.dev/badge/instructions/sint-ai/sint-protocol/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02142 | $0.02142 |
| Opus 5.5 | $0.00857 | $0.00857 |
| Sonnet 5.5 | $0.00428 | $0.00428 |
| Haiku 4.5 | $0.00214 | $0.00214 |
Grade A, and why
sint-protocol AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- sint-protocol AGENTS.md — 95% identical, 41 lines differ
How it starts
The opening of the file, as written. The whole thing — 150 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SINT Protocol — AI Agent Guide
This file is optimized for AI agents (LLMs) working in this codebase. For human contributor guidance, see CONTRIBUTING.md. For implementation details and pitfalls, see CLAUDE.md.
What This Repo Does
SINT Protocol is a security enforcement layer that sits between AI agents and physical systems (robots, PLCs, drones, tool calls), ensuring every action is authorized via capability tokens, constrained to safe physical limits, and recorded in a tamper-evident audit log. It is a pnpm monorepo built on TypeScript 5.7+ and Node.js 22+.
Key Invariants (Never Violate These)
- Every authorization decision flows through
PolicyGateway.intercept()— no bridge or route handler makes authorization decisions directly - Tokens are attenuation-only:
scope(child) ⊆ scope(parent)— permissions only narrow, never expand (invariant I-T1) EvidenceLedgeris append-only and SHA-256 hash-chained — never modify or delete emitted events (invariant I-G3)- UUID v7 is required for
requestId—crypto.randomUUID()gives v4 and WILL fail schema validation. UsegenerateUUIDv7()from@sint/gate-capability-tokens - Physical constraints live in the token, not in config files — velocity, force, geofence are enforced cryptographically
- E-stop is unconditional —
estopevent transitions any non-terminal DFA state to ROLLEDBACK, bypassing all token checks (invariant I-G2)
Quick Orientation
Package Dependency Graph
@pshkv/core
↓
@pshkv/gate-capability-tokens @pshkv/persistence
↓ ↓
@pshkv/gate-evidence-ledger
↓
@pshkv/gate-policy-gateway
↓
@pshkv/bridge-* @pshkv/engine-* @pshkv/avatar
↓
@pshkv/gateway-server sint-mcp
↓
@pshkv/conformance-tests @pshkv/dashboard
Workspace Layout
packages/core/ → Shared types, Zod schemas, tier constants, DFA states
packages/capability-tokens/ → Ed25519 token issuance, delegation, revocation
packages/policy-gateway/ → THE choke point: tiers, constraints, rate limiting, M-of-N
packages/evidence-ledger/ → SHA-256 hash-chained append-only audit log
packages/execution-broker/ → Proof-carrying, single-dispatch execution boundary
packages/bridge-*/ → Protocol adapters (MCP, ROS2, A2A, IoT, OPC-UA, MAVLink, ...)
packages/engine-*/ → AI execution layer (System1, System2, HAL, capsule sandbox)
packages/avatar/ → Behavioral identity profiles, CSML-driven tier escalation
packages/persistence/ → Storage interfaces + in-memory implementations
packages/persistence-postgres/ → PostgreSQL adapters
packages/client/ → TypeScript HTTP client for the gateway API
packages/conformance-tests/ → Security regression suite (must pass on every PR)
apps/gateway-server/ → Hono HTTP API (port 3100)
apps/sint-mcp/ → Security-first multi-MCP proxy
apps/dashboard/ → Real-time approval dashboard
sdks/typescript/ → Zero-dependency public SDK
capsules/navigation/ → Reference capsule: waypoint navigation
capsules/inspection/ → Reference capsule: visual anomaly detection
capsules/pick-and-place/ → Reference capsule: gripper control
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +3 lines · +39 tokens per session d37be70d50ea
- 1mo ago First seen · 147 lines · 2,103 tokens per session scan A a0b7a86e53f7
sint-protocol AGENTS.md is an instructions file published in the GitHub repository sint-ai/sint-protocol (15 stars, last pushed today), licensed Apache-2.0. It adds 2,142 tokens to every session, about $0.0086 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.