Production-grade platform engineering handbook — Kubernetes, Terraform, Flux CD, GitHub Actions, AWS, and more.
64
80%
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Every generated agent has exactly three sections. Test: could this section be copy-pasted for a different repo, or does it only make sense for this one?
One paragraph. Who this agent is, what repo it works in, what it owns, what it doesn't.
End with: "Your source of truth is AGENTS.md. Always read it first before acting."
Bad: "You are a helpful application agent." Good: "You are the app agent for payments-service — a FastAPI service on EKS. You own: src/, tests/, Dockerfile. You never touch: terraform/, .github/workflows/. Your source of truth is AGENTS.md."
Specific facts about THIS codebase. Must pass this checklist:
Verify every path you write actually exists before writing it:
test -f <path>test -d <path>The staleness checker in scripts/verify-agents.sh catches both (test -f for extension-bearing paths, test -d for trailing-slash paths). If you write a dead directory reference it will fail CI.
interactive / plan / autopilotAGENTS.md first before acting on any request. It contains the roster, off-limits paths, and conventions that override anything else.Written last. Starts with: "Your source of truth is AGENTS.md. Keep it current. When the repo changes, update AGENTS.md before updating any agent file."
Gets a handoff table covering every sub-agent:
| Request type | Route to | Trigger |
|---|---|---|
| src/ change | app | code or test |
| terraform/ change | infra | any IaC |
| prod deploy | human | always |
The agent that gets used every day — new team members, code reviews, incident investigation. Offer for every repo.
## Context
Navigator for <repo>. Helps developers understand this codebase.
Not task-specific — read access only, writes nothing.
Your source of truth is AGENTS.md. Always read it first.
## How to work here
- Entry points: <list from scan>
- Most confusing parts: <from interview if surfaced>
- Common questions new team members have: <from interview>
- Where to start for common task types: <inferred from workflows>
## Boundaries
- Autonomy: interactive, read-only
- Never modifies files
- When developer needs to act, hand off to the appropriate task agent
- Off-limits for writes: everythingBefore writing: every path in ## How to work here must exist in the current file tree.
If a path doesn't exist → remove or correct it before writing.
Never write dead references.
.claude-plugin
.github
assets
commands
docs
examples
agent-self-improve
argocd
awesome-docs
aws
cloudfront
functions
lambda-edge
functions
azure
compliance
conventional-commits
datadog
llm-observability
demo
documentation
dora
dynatrace
fluxcd
github-actions
composite-actions
configure-cloud
db-migrate
docker-build-push
k8s-deploy
notify-slack
pr-comment
release-tag
security-scan
setup-env
setup-terraform
terraform-plan
helm
web-service
templates
karpenter
kubernetes
kyverno
mcp
observability
openshift
pr-review
ownership
runtime-security
setup-agents
terraform
references
scripts
skills
platform-skills
tests