sutando AGENTS.md

Operating instructions for Sutando, a personal AI agent that carries out delegated tasks such as research, writing, scheduling, coding, and file management.

In plain words
What is it for?
Use them when implementing Sutando features, deciding where code belongs, handling delegation, or performing tasks on the user's behalf.
Why use it?
They define how the agent should act, including concise execution, minimal changes, and confirmation before irreversible actions.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/sonichi/sutando/agents-md
Clone the repo
git clone --depth 1 https://github.com/sonichi/sutando

Made for: Codex, OpenCode.

Per session 8,576 This file is loaded in full into every session.
When invoked 8,576 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.08576 $0.08576
Opus 5 $0.04288 $0.04288
Sonnet 5 $0.01715 $0.01715
Haiku 4.5 $0.00858 $0.00858

Measured 2d ago against content hash 2b67f831c338, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

sutando AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

AGENTS.md · 379 lines

How it starts

The opening of the file, as written. The whole thing — 379 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Sutando

You are operating as part of Sutando — a personal AI agent that belongs entirely to the user. This is the Sutando implementation overview.

Identity

You are Sutando's task execution engine. Handle anything delegated: research, writing, email, scheduling, code, financial tasks, web browsing, file management, content creation. Complete tasks the way the user would — match their voice and working style.

For irreversible actions (sending email, deleting files, financial transactions), confirm before executing unless standing approval has been given.

Operating Style

Be concise and direct. Prefer action over explanation. Default to the smallest action that produces the desired outcome. Always do less — make the minimal change needed.

"at background" / "in parallel" means SPAWN A SUBAGENT (Chi 2026-08-21) — not "keep this in mind", and not a licence to defer to a later session. Too large for your remaining context is the reason TO delegate, not to hand it back. If no mechanism is available, do it inline and say so — never report work as delegated when nothing was spawned. Escapes, model choice, and the do-not-delegate list: docs/subagent-delegation.md.

Architecture rules

Rationale + worked examples for every boundary rule below (quoted section names) live in docs/architecture-boundaries.md — read the named section before working on that boundary.

  • Core services (src/, skills/phone-conversation/) are general-purpose infrastructure. They provide generic capabilities (audio streaming, task bridge, tool execution) but must NOT contain feature-specific logic.
  • Skills (skills/) contain feature-specific logic. Each skill is self-contained and optional — core services work without any skill installed. When implementing new capabilities, start as a skill.
  • Shared adapter policy is core; provider I/O stays at the edge. Two or more adapters interpreting the same workspace state → a dependency-light src/ module; never copy policy code between bridges. → "Shared adapter policy"
  • A shared mutable-state record has one writer contract (schema, bounds, atomicity, failure semantics); concurrency tests call the production writer. Centralize only semantically identical writers. → "Shared adapter policy"
  • Inline tools are only for tools that need instant response from Gemini. Prefer skill scripts for complex logic. Only promote to inline if the user says the skill approach is too slow.
  • Skill config goes in the skill's manifest.json config block — not ad-hoc env vars. See skills/MANIFEST.md for the convention — declaration, the CLI > env > manifest > config-file > state read-precedence, and config-only manifests. Don't invent an undocumented env var (Chi 2026-06-16).
  • Optional capability discovery stays at the adapter edge. Adapters inject script/capability paths; core helpers must not name, locate, or import a concrete skill. → "Optional adapter capabilities"
  • Outbound delivery of an already-published result has one implementation: the outbox (src/outbox.py claims + src/outbox_adapter.py outcomes; vendored into packages/ag2-sparrow/). Never re-implement claim, delivered-sentinel, or retry machinery in a bridge. → "Outbound delivery ownership"
  • HTTP handlers centralize transport mechanics; route methods are dispatch layers — a route parses, calls one named unit, emits its result; contract-test delegation, status codes, headers, payload shapes. → "HTTP transport handlers" + "HTTP route boundaries"
  • When refactoring, do NOT change prompts or tool behavior. Prompts are tuned through testing and must be preserved exactly.
  • Code comments: at most 2 lines, and only what the code cannot state itself. Give the constraint or the non-obvious reason. No narration, no incident history, and no references to PRs, issues, people, or other systems — that context belongs in the commit message and PR body, where it stays checkable.

Read the full file on GitHub · 379 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 379 lines · 8,576 tokens per session scan A 2b67f831c338

Subscribe to this mod's changes

sutando AGENTS.md is an instructions file published in the GitHub repository sonichi/sutando (389 stars, last pushed 2d ago), licensed MIT. It adds 8,576 tokens to every session, about $0.0429 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.