AGENTS.mdA
AGENTS.md from maoyadongsh/siq-agent-security is an AGENTS.md file: the standing instructions coding agents read in that repo.
mdr add maoyadongsh/siq-agent-security/AGENTS.md@git:20260920.ec5ca16Pins git:20260920.ec5ca16 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- AGENTS.md file
- Repository
- maoyadongsh/siq-agent-security
- Path
AGENTS.md- Versions recorded
- 8
- Latest version
- git:20260920.ec5ca16, committed Sep 20, 2026
- First version recorded
- Sep 8, 2026
- Size
- 8,200 bytes
- Repository stars
- 49
- License
- Apache-2.0
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# siq-agent-security 仓库指南 本仓库是 SIQ Agent Security 产品的独立代码仓（受 `/home/maoyd/siq/AGENTS.md` 工作区指南约束，本文件在其之上细化）。 ## 边界 - 不 import 兄弟仓库内部代码、不查询兄弟仓库数据库； - SIQ 专属能力只在 `connectors/siq`（当前未实现），经版本化 API/事件接入； - 合同变更先改 `packages/contracts/`（升版本），再同步实现方与测试。 ## 事实源顺序 1. `packages/contracts/*.schema.json` + `connector-protocol.v1.md`（合同事实源）； 2. 设计文档 v0.2 与 ADR（`docs/adr/`）； 3. 实现与测试。 siq-agent-security（本地 Agent 形态，ADR-011）在此之上再加一层：ADR-011 → `docs/agentshield-design-v1.md`（方案）→ `docs/agentshield-dev-spec-v1.md`（规格，实现以此为准）→ 合同。W7 本地台账增量见 `docs/agentshield-local-ledger-dev-plan-v1.md`（先回写规格再实现）。规格与实现不一致时先改规格再改代码；就近约定见 `apps/agentshield/AGENTS.md`。 ## 安全不变量（任何改动不得破坏） 1. tenant_id 只从验证身份派生；对象级端点先定位（404）后权限（403）； 2. Secret 明文不落库、不进日志/审计/outbox（只存哈希或引用）； 3. 审计与状态变化同事务；高风险写操作审计缺失即失败关闭； 4. Edge 凭据只存哈希，吊销即时生效（每次请求在线校验）； 5. 模型输出不能直接创建 effective 权限或通过审批； 6. 每批 evidence 必须被本批 candidate 引用； 7. 生产模式（非 SIQ_AS_DEV）禁止 SQLite、自动建表、X-Dev-* 身份头。 siq-agent-security 本地模式（`apps/agentshield/`）额外遵守： 8. `effective` 只能来自后端读回；admission 只产 `declared`，grant 只产 `declared`/`inferred`，receipt 只产 `observed`； 9. 签名私钥只存状态目录，适配器、UI、SKILL.md 脚本永不持有；准入/签发/回执文件只追加或新建，不改写； …
Read the whole file at its exact version.
How to install
mdr add maoyadongsh/siq-agent-security/AGENTS.md@sha256:8ceb5421899b5871The line at the top of this page pins the label git:20260920.ec5ca16, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ffcvudin36cx5fhg)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Sep 8, 2026 and Sep 20, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260920.ec5ca16 latest | 2026-09-20 | ec5ca16 | 8,200 B | A | view · diff |
| git:20260919.525379e | 2026-09-19 | 525379e | 8,200 B | A | view · diff |
| git:20260919.2bfbc32 | 2026-09-19 | 2bfbc32 | 7,991 B | A | view · diff |
| git:20260911.b9e8ec6 | 2026-09-11 | b9e8ec6 | 7,346 B | A | view · diff |
| git:20260908.7aab31c | 2026-09-08 | 7aab31c | 6,574 B | A | view · diff |
| git:20260908.e72e8b3 | 2026-09-08 | e72e8b3 | 5,922 B | A | view · diff |
| git:20260908.cbab5de | 2026-09-08 | cbab5de | 6,472 B | A | view · diff |
| git:20260908.0a3eab3 | 2026-09-08 | 0a3eab3 | 5,646 B | A | view |
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (8200 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
maoyadongsh/siq-agent-security · 49 stars · license Apache-2.0 · pushed 2026-10-26 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ffcvudin36cx5fhg GET https://markdownregistry.com/api/v1/resolve?ref=maoyadongsh/siq-agent-security/AGENTS.md GET https://markdownregistry.com/api/v1/blob/8ceb5421899b58712cdb4c41bfdb2e1a4a6bc7ad85cf69babda590773f4e6d58
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.
More from maoyadongsh/siq-agent-security
Every file in maoyadongsh/siq-agent-security