Home / flieber-inc / devcake · GitHub

AGENTS.mdA

AGENTS.md from flieber-inc/devcake is an AGENTS.md file: the standing instructions coding agents read in that repo.

Install it, pinned
mdr add flieber-inc/devcake/AGENTS.md@git:20260908.bd9eb0c

Pins git:20260908.bd9eb0c in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
AGENTS.md file
Repository
flieber-inc/devcake
Path
AGENTS.md
Versions recorded
8
Latest version
git:20260908.bd9eb0c, committed Sep 8, 2026
First version recorded
Aug 19, 2026
Size
16,128 bytes
Repository stars
29
License
GPL-3.0

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Agent notes — DevCake

Instructions for coding agents (Claude, Cursor, Grok, Codex, etc.) working in this repo.
These rules are **mandatory** unless the user explicitly overrides them for a task.

For setting up or operating a deployment, read the agent-neutral
[`skills/devcake-ops/SKILL.md`](skills/devcake-ops/SKILL.md). It explains the
product, configuration, diagnostics, and recovery workflow for an operator's helper.

## Security / product claims

The **product security contract** is [`docs/14-security.md`](docs/14-security.md).
Do not write docs, README, or PR copy that claims a stronger posture (multi-tenant
sandbox, secrets never leave the host under injection, hard-gated branch
protection) than that file. Do not treat staffing a different Dev Type for
REVIEW as a security control — the security-relevant second identity is the
**reviewer token** (app-only); REVIEW is always a pipeline stage. Design choices
(dedicated host, adult-operator prompt trust, warnings vs gates) are intentional.

## Admin SPA design system (mandatory)

Any change under `admin/spa/` that affects look, feel, copy, or interaction
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add flieber-inc/devcake/AGENTS.md@sha256:bbd0710a4ec9fe21

The line at the top of this page pins the label git:20260908.bd9eb0c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_a2zuvsupeotxmqud.svg)](https://markdownregistry.com/a/art_a2zuvsupeotxmqud)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 8 versions of this file, between Aug 19, 2026 and Sep 8, 2026, about one every 3 days.

versioncommittedcommitsizeaudit
git:20260908.bd9eb0c latest2026-09-08 bd9eb0c 16,128 BA view · diff
git:20260908.eaf98112026-09-08 eaf9811 16,078 BA view · diff
git:20260907.d713ad32026-09-07 d713ad3 15,985 BA view · diff
git:20260906.31eba992026-09-06 31eba99 15,729 BA view · diff
git:20260831.71b4b5b2026-08-31 71b4b5b 15,500 BA view · diff
git:20260830.9e7fec72026-08-30 9e7fec7 15,483 BA view · diff
git:20260830.d64c95c2026-08-30 d64c95c 15,511 BA view · diff
git:20260819.c06a73b2026-08-19 c06a73b 15,422 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (16128 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

flieber-inc/devcake · 29 stars · license GPL-3.0 · pushed 2026-10-25 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_a2zuvsupeotxmqud
GET https://markdownregistry.com/api/v1/resolve?ref=flieber-inc/devcake/AGENTS.md
GET https://markdownregistry.com/api/v1/blob/bbd0710a4ec9fe21af2ae443a8c6d05a7c408dd6c57f77193398b276af86509a

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.

More from flieber-inc/devcake

DESIGN.md@admin/spa DESIGN.md file
flieber-inc/devcake · admin/spa/DESIGN.md
git:20260905.cbdeb21 · audit B · 29 stars
dependency-reasoning SKILL.md skill
flieber-inc/devcake · app/devcake/skills/dependency-reasoning/SKILL.md · Conservative dependency edges between work items — declare that A blocks B only when B clearly consumes A’s output or…
git:20260720.fa58fb9 · audit A · 29 stars
pr-hygiene SKILL.md skill
flieber-inc/devcake · app/devcake/skills/pr-hygiene/SKILL.md · Commit and pull-request discipline — one intent per PR, honest scoped commits, reviewable descriptions, no force-push…
git:20260720.fa58fb9 · audit A · 29 stars
systematic-debugging SKILL.md skill
flieber-inc/devcake · app/devcake/skills/systematic-debugging/SKILL.md · Four-phase root-cause debugging — investigate, pattern-match, hypothesize, then fix. Use when facing a bug, test…
git:20260720.fa58fb9 · audit A · 29 stars
test-driven-development SKILL.md skill
flieber-inc/devcake · app/devcake/skills/test-driven-development/SKILL.md · Strict red-green-refactor discipline at public seams — write a failing test, watch it fail, write minimal code to pass…
git:20260720.fa58fb9 · audit A · 29 stars
verification-before-completion SKILL.md skill
flieber-inc/devcake · app/devcake/skills/verification-before-completion/SKILL.md · Evidence before success claims — identify the proof command, run it fresh, read exit codes and output, then claim only…
git:20260720.fa58fb9 · audit A · 29 stars
devcake-ops SKILL.md skill
flieber-inc/devcake · skills/devcake-ops/SKILL.md · Set up, inspect, configure, troubleshoot, and upgrade a self-hosted DevCake deployment for its operator. Use for…
git:20260917.5af9dcf · audit B · 29 stars

Every file in flieber-inc/devcake

Other files named AGENTS.md

AGENTS.md AGENTS.md file
morluto/rea · AGENTS.md
git:20261102.920d634 · audit A · 433,876 stars
AGENTS.md AGENTS.md file
obra/superpowers · AGENTS.md
git:20261020.b739a8a · audit A · 314,583 stars
AGENTS.md AGENTS.md file
affaan-m/ecc · AGENTS.md
git:20261030.f29e332 · audit A · 299,696 stars
AGENTS.md AGENTS.md file
firecrawl/firecrawl · AGENTS.md
git:20261008.5a75dca · audit A · 199,595 stars
AGENTS.md AGENTS.md file
dietrichgebert/ponytail · AGENTS.md
git:20261008.2a1fe84 · audit A · 185,249 stars
AGENTS.md AGENTS.md file
graphify-labs/graphify · AGENTS.md
git:20260926.98d73fe · audit A · 144,492 stars
AGENTS.md AGENTS.md file
garrytan/gstack · AGENTS.md
git:20261107.ef99eb5 · audit A · 140,694 stars
AGENTS.md AGENTS.md file
juliusbrussee/caveman · AGENTS.md
git:20261106.e45976c · audit A · 118,366 stars

Browse by kind, by grade A, or by owner.