AGENTS.md@infra/terraformA

AGENTS.md@infra/terraform from different-ai/openwork is an AGENTS.md file: the standing instructions coding agents read in that repo.

Install it, pinned
mdr add different-ai/openwork/infra/terraform/AGENTS.md@git:20261019.9ff6f60

Pins git:20261019.9ff6f60 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
AGENTS.md file
Repository
different-ai/openwork
Path
infra/terraform/AGENTS.md
Versions recorded
3
Latest version
git:20261019.9ff6f60, committed Oct 19, 2026
First version recorded
Oct 16, 2026
Size
2,735 bytes
Repository stars
24,407
License
a license file GitHub does not identify

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Terraform modules

Follow [MODULE_CONTRACT.md](MODULE_CONTRACT.md). Keep three native modules and
one shared contract; document platform exceptions instead of hiding them.

## Changes

- Test `init`, `validate`, and `test` on both Terraform and OpenTofu (>= 1.11).
  Use no tool-specific language or test features.
- Keep separate lock files per registry only in executable examples/roots.
  Select the matching lock and verify `init -lockfile=readonly` with each tool.
- Run one migration step before rollout. Application replicas never migrate.
  Failed or unknown outcomes block promotion; inspect before a deliberate retry.
- Keep secrets out of state where supported; document unsupported paths.
  Never rotate authentication/encryption keys by surprise. Guard existing
  deployments with explicit value preservation before conversion.
- The managed AWS installer consumes the shared AWS module with explicit
  legacy-secret compatibility mode. Never rotate existing keys or demote its
  strict current SecretVersion. Preserve native address moves/forget blocks and
  skip_destroy for core revisions; never add wildcard deregistration rights.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add different-ai/openwork/infra/terraform/AGENTS.md@sha256:f7e7164f68666b56

The line at the top of this page pins the label git:20261019.9ff6f60, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_pl7oy6lhgnsarn3j.svg)](https://markdownregistry.com/a/art_pl7oy6lhgnsarn3j)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Oct 16, 2026 and Oct 19, 2026, about one every day.

versioncommittedcommitsizeaudit
git:20261019.9ff6f60 latest2026-10-19 9ff6f60 2,735 BA view · diff
git:20261017.61f53052026-10-17 61f5305 2,663 BA view · diff
git:20261016.8b586b12026-10-16 8b586b1 2,270 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (2735 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

different-ai/openwork · 24,407 stars · license a license file GitHub does not identify · pushed 2026-11-05 · branch dev

API

GET https://markdownregistry.com/api/v1/artifacts/art_pl7oy6lhgnsarn3j
GET https://markdownregistry.com/api/v1/resolve?ref=different-ai/openwork/infra/terraform/AGENTS.md
GET https://markdownregistry.com/api/v1/blob/f7e7164f68666b566f7229bb255f45ec37a12fa3e1e3cd28bd5bff7de05a4401

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.

More from different-ai/openwork

AGENTS.md@.github AGENTS.md file
different-ai/openwork · .github/AGENTS.md
git:20261028.06f44d2 · audit A · 24,407 stars
add-a-feature SKILL.md skill
different-ai/openwork · .opencode/skills/add-a-feature/SKILL.md · Decide whether work needs a feature flag (any change to product behavior users can see does), then declare it, roll it…
git:20261029.71802c2 · audit A · 24,407 stars
browser-automation SKILL.md skill
different-ai/openwork · .opencode/skills/browser-automation/SKILL.md · Local OpenWork Electron browser automation with CDP. Use when driving a local Electron dev app, browser_list…
git:20261015.ef455ca · audit B · 24,407 stars
create-plugin SKILL.md skill
different-ai/openwork · .opencode/skills/create-plugin/SKILL.md · Create an OpenCode plugin for OpenWork. Scaffolds the plugin file with the correct API shape, tool definitions, and…
git:20260602.20013d2 · audit A · 24,407 stars
daytona-seeded-cloud-demo SKILL.md skill
different-ai/openwork · .opencode/skills/daytona-seeded-cloud-demo/SKILL.md · Daytona seeded cloud demo, demo credentials, Acme Robotics seed. Use when the user asks to spin up, keep running, seed…
git:20260827.92f4f3f · audit B · 24,407 stars
daytona-windows-cert SKILL.md skill
different-ai/openwork · .opencode/skills/daytona-windows-cert/SKILL.md · test on Windows, enterprise CA, corporate certificate, GPO cert, TLS fetch failed, Windows sandbox, daytona windows…
git:20261015.ef455ca · audit A · 24,407 stars
daytona SKILL.md skill
different-ai/openwork · .opencode/skills/daytona/SKILL.md · Daytona CLI setup, sandbox debugging, keep a sandbox alive, secrets volume, snapshot refresh. Use when Daytona itself…
git:20261001.1cc7242 · audit A · 24,407 stars
diagnose-a-red-run SKILL.md skill
different-ai/openwork · .opencode/skills/diagnose-a-red-run/SKILL.md · Test is red, typecheck failed, CI job failed, flaky, timed out, was this already broken. Use to classify any failing…
git:20261004.134a7c7 · audit A · 24,407 stars
drive-desktop-cdp SKILL.md skill
different-ai/openwork · .opencode/skills/drive-desktop-cdp/SKILL.md · Drive the running OpenWork app over CDP from the shell, headless by default (nothing opens on screen). Evaluate JS…
git:20261015.ef455ca · audit B · 24,407 stars
dry-run-a-risky-change SKILL.md skill
different-ai/openwork · .opencode/skills/dry-run-a-risky-change/SKILL.md · Billing, plans, seats, permissions, access rules, auth, flag removals or data migrations that could lock real…
git:20261027.7fb680f · audit A · 24,407 stars
fake-model-faults SKILL.md skill
different-ai/openwork · .opencode/skills/fake-model-faults/SKILL.md · Make the desktop's model provider fail on demand (connection refused, DNS not found, socket reset, 429, 5xx, 401, 402…
git:20261002.739dae1 · audit B · 24,407 stars
fix-design-notes SKILL.md skill
different-ai/openwork · .opencode/skills/fix-design-notes/SKILL.md · Design notes on a PR, "Design review (advisory)" in the evidence check, "worth fixing", layout.split-row, OW-LIST, a…
git:20261027.d4b32a6 · audit A · 24,407 stars

Every file in different-ai/openwork

Browse by kind, by grade A, or by owner.