Skip to content

chore(repo): update agent guidance #672

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bcdonadio merged 1 commit into from
Aug 12, 2026
+7 −2
Merged

chore(repo): update agent guidance #672

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,3 +33,6 @@ sensitive-patterns-test.txt
dist/
coverage/
test-report.junit.xml

# Local agents instructions
AGENTS.local.md
6 changes: 4 additions & 2 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
# Repository Instructions

<!-- Claude Code include: @WORKFLOW.md -->
See [WORKFLOW.md](./WORKFLOW.md) for the full development workflow.
- Read [AGENTS.local.md](./AGENTS.local.md) if present.
- Statements in this local file should override any project instruction.
- The file is intentionally gitignored. Keep it that way.
Comment on lines +3 to +5

@qodo-code-review qodo-code-review Bot Aug 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remediation recommended

1. Local guidance overrides safety gates 🐞 Bug ⚙ Maintainability

The new rule makes a user-controlled, gitignored AGENTS.local.md authoritative over all project
instructions, so agents that honor it can disregard documented coverage, testing, or
release-readiness requirements when those requirements are not independently enforced. The risk is
conditional on the consuming agent and CI/tooling, but the committed guidance now explicitly permits
those overrides.
Agent Prompt 
## Issue description
`AGENTS.local.md` is gitignored and user-controlled, but the new guidance gives it precedence over every project instruction. This permits agents to bypass repository safety-critical requirements such as testing, coverage, and release checks when those requirements are advisory rather than independently enforced.

## Issue Context
Keep support for local developer customizations, but do not let them override mandatory project safeguards.

## Fix Focus Areas
- AGENTS.md[3-5]
- AGENTS.md[8-21]
- AGENTS.md[37-46]

State explicitly that local guidance may override only non-critical preferences and must not weaken testing, security, coverage, or release requirements; enforce those requirements independently in CI where applicable.

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

- See [WORKFLOW.md](./WORKFLOW.md) for the full development workflow.

## Test Coverage Approval Gate

Expand Down
Loading