A zero-hallucination autonomous DFIR agent for the SANS SIFT Workstation. 148 typed, audited, guard-railed MCP forensic tools with per-claim grounding verification, 4-axis confidence scoring, and an HMAC-signable chain of custody.
2 files for Codex, OpenCode and Claude Code: DeepSIFT AGENTS.md, DeepSIFT CLAUDE.md — 8,884 tokens loaded in every session.
AGENTS.md A 1,192 tok CLAUDE.md A 7,692 tok These files are ahammadshawki8/DeepSIFT's own configuration — they tell Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.