OpenQuantum: Instructions file for Codex

AGENTS.md

OpenQuantum AGENTS.md is an instructions file for Codex, OpenCode from xi-zhao/OpenQuantum. It costs 4,250 tokens per session, scanned A, original, MIT.

Architecture and development instructions for OpenQuantum, a research platform for AI agents working with quantum computing and scientific tasks. They explain how its runtime, skills, tools, connectors, and scientific checks are separated and combined.

In plain words
What is it for?
Use them when designing or implementing OpenQuantum features, especially agent workflows, tools, external tool connectors, scientific validation, or runtime behavior. They help decide where each piece of code belongs.
Why use it?
They help prevent different kinds of components from being mixed up or placed in the wrong part of the system. They also point developers to the project’s required architecture documents before making changes.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions Codex.

This is xi-zhao/OpenQuantum's own configuration. It tells Codex and OpenCode how to work on OpenQuantum itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything OpenQuantum configures →

Reuse

Borrowing it

Nothing to install: this file belongs to xi-zhao/OpenQuantum. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xi-zhao/OpenQuantum/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/xi-zhao/OpenQuantum

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for OpenQuantum AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xi-zhao/openquantum/agents-md/github.svg)](https://agentmods.dev/instructions/xi-zhao/openquantum/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/xi-zhao/openquantum/agents-md"><img src="https://agentmods.dev/badge/instructions/xi-zhao/openquantum/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for OpenQuantum AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/xi-zhao/openquantum/agents-md"><img src="https://agentmods.dev/badge/instructions/xi-zhao/openquantum/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 4,250 This file is loaded in full into every session.
When invoked 4,250 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.04250 $0.04250
Opus 5.5 $0.01700 $0.01700
Sonnet 5.5 $0.00850 $0.00850
Haiku 4.5 $0.00425 $0.00425

Measured yesterday against content hash 8dac7357385e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

OpenQuantum AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 193 lines

How it starts

The opening of the file, as written. The whole thing — 193 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OpenQuantum

任务范围、授权与完成

本文件补充全局工作偏好,适用于本仓库;子目录规则只约束其覆盖路径。下文的 Agent、Tool、Skill、 Model 等要求描述 OpenQuantum 产品架构,不要求仓库维护任务都启动产品运行链或科研流程。

  • 解释、审查、诊断和方案讨论不自动授权修改代码、配置或运行状态。按请求提供结论、证据和建议; 用户同时明确要求修复、优化文件或实施时,执行相应修改。
  • 对已授权且范围明确的实施,完成必要修改、适度验证和结果交付,不停在计划或等候重复确认。 只有缺少会实质影响结果的信息,或下一步超出授权范围时才询问;等待时继续不依赖该决定的工作。
  • 发现附带问题或文档与实现不一致时,说明偏差和影响。只有完成当前任务确实需要且在授权范围内时才修复; 文档中的待办、里程碑和“应修复”不是独立的执行授权。
  • 修改前检查相关工作树和暂存区差异,保留已有及并发改动。工作树不干净本身不是停工条件; 若同一区域的改动无法安全分离,暂停该区域的写入或提交,说明需要用户决定的具体重叠。
  • 仓库实施沿用全局的独立本地提交偏好,只暂存本任务文件或片段;用户明确要求仅留工作树改动或不提交时除外。 提交前核对暂存范围。交付说明实际修改、验证结果和提交状态;受阻时明确剩余项,不把准备当成完成。
  • 部署、发布、push、改写历史、向他人发送消息、删除重要数据或其他破坏性操作须有明确授权; 已有授权覆盖当前动作时不重复询问。修改、测试或 Skill 指令本身不扩大这些权限。
  • 外部模型请求、数据外发、依赖安装和真实硬件操作,按当前任务授权与相应能力边界执行; 命令列在本文件中不等于授权运行。保留现有模型路由,不为审查或交叉验证擅自切换 Provider 或模型。
  • 仅在用户指定或任务符合适用条件时使用 Skill;目录共置或文档示例不代表自动启用。 领域工作流留在对应 Skill,不作为所有仓库任务的前置步骤。完整计划、多模型、子 agent 和后台流程 不作为日常任务的默认要求;只有用户或适用规则明确要求时,才将其作为完成条件。

按任务读取规则和文档

  • 首次进行本项目的架构或实现工作时,先读 docs/README.md 的架构总览和权威导航;之后按任务读取相关契约, 不因引用链遍历全部文档或 Skills。同一任务中已经读取且未变化的内容不反复读取。
  • 涉及架构基线、发布验收或当前风险时,读取 docs/architecture/ARCHITECTURE_AUDIT.md 的相关部分; 其中的日期化结论不能替代当前验证。
  • 存在 CURRENT.md 时,按全局规则先读其权威来源链接,并按任务读取相关内容;只有本次工作改变其记录的 交接状态、结论或导航时才同步入口。一般说明或规则文字调整不自动触发里程碑更新或既有验收任务。
  • 新增或修改扩展时,按职责查阅 docs/architecture/EXTENSION_MODEL.md 和 CONTRIBUTING.md 的适用路径; 验证与独立领域审阅要求仅在对应改动触发时适用,不套用到所有任务。

产品与架构基线

OpenQuantum 的核心产品是可跨宿主使用的量子科研插件:共享 Skill、Tool implementation、MCP Server 与科学合同。 维护优先级固定为:共享插件 → Harness 适配 → 品牌/UI。DSH 与 Codex 是并列宿主;OpenQuantum Desktop 是 DSH 适配加品牌界面的一种交付形态。桌面版本与外观调整不能迫使共享插件依赖某个宿主。

  • 共享实现只维护一份,不依赖 DSH/Cordis、Electron、宿主 Session 对象或私有 UI API。
  • 宿主适配器负责 Tool/Skill 注册、权限与凭据映射、协议、生命周期及兼容性;会话、模型和执行循环由宿主拥有。
  • 品牌层统一名称、图标、主题、导航与结果展示。Desktop 默认聚焦对话、工作区、文件、执行、历史与最少设置。
  • 先复用已有深模块,再处理已发生的宿主差异;不为目录整齐搬迁代码,不建立 OpenQuantum 通用 Agent Runtime。

已确认的架构图与维护约束

后续维护遵循全项目架构图与运行流程。图按职责归并模块, 不要求目录或包一一对应;其中的日期、提交和宿主能力描述是实现快照,不能代替当前验证。

  • 按需使用保持“发现 → 准备 → 执行”:发现只读,准备只处理所选 Tool/SDK,执行不隐式安装。 默认准备最小依赖,额外组件按任务补齐;异步准备后重新检查使用限制。Codex 的通用执行入口与 DSH 原生 Tool Registry 分别适配,不为表面一致改写宿主机制。
  • 复用能力目录、设置页面和准备用例;配置、凭据、连接实例与资源所有权按宿主隔离。 设置保存后回读核对,丢失回复不自动重发写入;未确认的草稿保留,连接操作绑定当前实例。
  • 品牌 UI 使用宿主允许的扩展接口,共用「首页 / Skills / MCP」布局;Tool、环境与凭据归入关联卡片。 界面和打包层不承载量子算法、使用策略或科学判定。打包层只组合固定宿主、插件、品牌资产和运行依赖。
  • 共享计算或 Validator 不表示各宿主已经具备相同的证据物化、验收和回放能力;按实际接通范围描述。 环境就绪、工具完成、科学验收、工程 CI、发行及实际安装验收分别留证据。
  • 职责归属、跨层接口或宿主支持范围发生变化时,同步相关架构图和契约;局部实现调整无需重画全图。 模型路由、量子云账户、可选渠道和教学扩展继续遵守各自边界,不因图中存在接入路径而默认启用。

Read the full file on GitHub · 193 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +17 lines · +446 tokens per session 8dac7357385e
  2. 3d ago Changed · +3 lines · +127 tokens per session f088a5766bcd
  3. 9d ago Changed · +16 lines · +207 tokens per session 9ef744355148
  4. 15d ago Changed · +2 lines · +91 tokens per session 7135f16a85b8
  5. 16d ago Changed · +9 lines · +229 tokens per session 2d0d442abf9d
  6. 1mo ago Changed · +53 lines · +1,539 tokens per session b18c42d2b9b8
  7. 1mo ago First seen · 93 lines · 1,611 tokens per session scan A 82275f2a04e5

Subscribe to this mod's changes

OpenQuantum AGENTS.md is an instructions file published in the GitHub repository xi-zhao/OpenQuantum (71 stars, last pushed today), licensed MIT. It adds 4,250 tokens to every session, about $0.0170 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories