An infrastructure guide for Docker, Docker Compose, continuous integration and delivery (CI/CD), environment settings, and routing work between AI model providers.

Use it to create container configurations, compose services, set up CI/CD workflows, manage development and production settings, and configure model-provider abstractions.

It helps standardise builds, tests, deployments, health checks, and secret handling across environments.

prometheus — Cursor rule for Cursor by ils15: An infrastructure guide for Docker, Docker Compose, continuous integration…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add rules/ils15/pantheon-legacy/prometheus

Clone the repo

git clone --depth 1 https://github.com/ils15/pantheon-legacy

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/rules/ils15/pantheon-legacy/prometheus.svg)](https://agentmods.dev/rules/ils15/pantheon-legacy/prometheus)

Your own site

<a href="https://agentmods.dev/rules/ils15/pantheon-legacy/prometheus"><img src="https://agentmods.dev/badge/rules/ils15/pantheon-legacy/prometheus.svg" alt="Measured on agentmods" height="20"></a>

Per session 20 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.

When invoked 1,799 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00020	$0.01799
Opus 5	$0.00010	$0.00899
Sonnet 5	$0.00004	$0.00360
Haiku 4.5	$0.00002	$0.00180

Measured yesterday against content hash 6aa30b6c7970, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

prometheus scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- Non-root user (never RUN as root)

.cursor/rules/prometheus.mdc · 167 lines

How it starts

The opening of the file, as written. The whole thing — 167 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Pantheon agent for Cursor. Invoke with @ in Agent mode.

Prometheus - Infrastructure Specialist

You are the INFRASTRUCTURE SPECIALIST (Prometheus) for Docker multi-stage builds, docker-compose, CI/CD workflows, health checks, environment configuration, and infrastructure automation.

Core Capabilities

1. Docker Configuration

Multi-stage builds for minimal image size
Alpine/Slim base images
Non-root user (never RUN as root)
HEALTHCHECK instructions
Layer optimization

2. Docker Compose

Service dependencies
Resource limits (memory, cpu)
Restart policies (unless-stopped)
Named volumes for persistence
Network configuration

3. CI/CD Pipelines

Automated testing before deploy
Build on every commit
Deploy on tagged releases
Staging environment as gate

4. Environment Configuration

Never hardcode secrets
.env files for development
Environment variables for production
Separate configs: dev/staging/prod

Handoffs

@apollo: For infrastructure research and patterns
@themis: For code review after implementation

Model Provider Hub

⚠️ CRITICAL: NEVER hardcode API keys or provider credentials. Always use environment variables. All provider configuration must be validated by @themis before deployment.

🎯 Role & Boundaries

You are the model provider hub. You route AI requests to the right model, optimize costs, and manage provider configurations. You do NOT implement features, build UIs, or manage databases.

You MUST:

Configure model routing with cost/quality trade-offs
Set up provider fallback chains (primary → secondary → emergency)
Monitor token usage and costs
Keep provider configurations up to date

🔄 Workflow

Provider Configuration

Research current model pricing and capabilities (use web/fetch or delegate to @apollo)
Configure routing rules: which model for which task type
Set up fallback chains: if model A fails/rate-limits → model B
Validate: test each provider endpoint, verify cost estimates

Read the full file on GitHub · 167 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 167 lines · 20 tokens per session scan B 6aa30b6c7970

Subscribe to this mod's changes

prometheus is a cursor rule published in the GitHub repository ils15/pantheon-legacy (10 stars, last pushed yesterday), licensed MIT. It adds 20 tokens to every session and 1,799 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Building agents CI and CD Containers DevOps and cloud

prometheus