From e78ef6cd904e77578be9022a1e291be34d1d1919 Mon Sep 17 00:00:00 2001 From: Mansour Behabadi Date: Tue, 8 Sep 2026 17:19:48 +1000 Subject: [PATCH] docs: add threat-model guidance to AGENTS.md --- AGENTS.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 AGENTS.md diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..4e61cb0 --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,11 @@ +# Agent instructions + +## Threat model + +- Use [THREAT_MODEL.md](THREAT_MODEL.md) when reviewing code, and check relevant claims + against the current code and deployment configuration. If the document has + not landed yet, note that gap and review using the available evidence. +- Keep the threat model up to date with changes to code, deployment, and + infrastructure. Once it exists, update affected sections in the same PR + whenever a change alters the documented architecture, trust boundaries, + data flows, permissions, or security assumptions.