AGENTS.md@core/mcpA
AGENTS.md@core/mcp from wentf9/xops-cli is an AGENTS.md file: the standing instructions coding agents read in that repo.
mdr add wentf9/xops-cli/core/mcp/AGENTS.md@git:20261014.1948b49Pins git:20261014.1948b49 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- AGENTS.md file
- Repository
- wentf9/xops-cli
- Path
core/mcp/AGENTS.md- Versions recorded
- 1
- Latest version
- git:20261014.1948b49, committed Oct 14, 2026
- Size
- 1,552 bytes
- Repository stars
- 21
- License
- MIT
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# core/mcp/ — MCP 契约、授权与执行（高风险） 必读 `core/README.md` 的 MCP 概览、`core/mcp/state/README.md`、`docs/development/mcp-http-transfer-design.md`。 - `ports/` 定义宿主 `StateSource`、`ExecutionGate`、`Backend`、`Audit` 等契约；`sshexec/` 实现依赖这些契约的 SSH/SFTP 适配；`runtime/` 负责 MCP 工具/协议与调用编排。 - `guardrail/` 的审批、路径策略与风险分析不得绕过。审计事件属于操作语义的一部分。 - 每次操作应保留 snapshot/binding/permit 关系，不将显示级 NodeInfo 当成可执行授权，不以计划摘要代替许可。 - `state/Coordinator` 的 `BeginUpdate -> BeginPersistence -> ConfirmCommit/ConfirmRollback -> Publish` 为敏感序列；未知提交结果不得重试事务或宣称激活成功。 - 传输任务包含独立 journal/lease/authorization 与阶段转移；不能直接重试未知提交状态；跨阶段容量交接需保留原 permit/binding/operation ID 一致性。 - HTTP 与 stdio 语义不同；修改 token、origin、host admission、streaming、审批回调、文件路径绑定时必须测试拒绝路径、并发取消、恢复与错误处理。 - `core/mcp/runtime/*` 或 `core/mcp/ports/*` 修改同时检查 `internal/mcphost` 与 `internal/clicontract` 的回归和 schema fixture；需显式批准时才能刷新协议基线。 - 常用验证：`go test ./core/mcp/... ./internal/mcphost ./internal/clicontract`；并发/状态修改再执行受影响包的 `-race` 测试和 core 隔离检查。
Read the whole file at its exact version.
How to install
mdr add wentf9/xops-cli/core/mcp/AGENTS.md@sha256:2afd8dd9a797bd66The line at the top of this page pins the label git:20261014.1948b49, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kapdq6mhuumhxf6q)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 14, 2026.
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (1552 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
wentf9/xops-cli · 21 stars · license MIT · pushed 2026-11-02 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_kapdq6mhuumhxf6q GET https://markdownregistry.com/api/v1/resolve?ref=wentf9/xops-cli/core/mcp/AGENTS.md GET https://markdownregistry.com/api/v1/blob/2afd8dd9a797bd669e27e96e82d4807eca4546d5189023dbc3f8e07d2d48339f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.