Short, concrete lessons from testing instruction-file security and compatibility, repository migrations, public audits, and the measurement behind Repo Agent Kit.
A pre-trust review for AGENTS.md, CLAUDE.md, and related repository instructions covering hidden Unicode, remote execution, secrets, permissions, and pull-request scanning.
Read field noteWhat a reproducible September 2026 snapshot reveals about root AGENTS.md adoption, file shape, testing guidance, scope rules, and completion criteria.
Read field noteA practical measurement pattern for separating Google URL Inspection visits from genuine developer traffic without deleting the raw audit trail.
Read field noteA compatibility-first way to keep repository instructions aligned across Codex, Claude Code, Cursor, Copilot, Gemini CLI, and Devin Desktop.
Read field noteWhy a safe instruction-file conversion preserves hierarchy, commands, constraints, and tool-specific bridge behavior instead of merely renaming a file.
Read field note