Skip to content

audit(2026-05-31): add AGENTS.md operating contract #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hizrianraz merged 1 commit into from
May 31, 2026
Merged

audit(2026-05-31): add AGENTS.md operating contract #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 32 additions & 0 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
# AGENTS.md — operating contract for ainfera-langchain

Audience: the Ainfera fleet (Aulë and peers) and any agent operating this repo. Read before touching code.

## Identity
- **Adapter** — LangChain + **Ainfera Routing**. One of the public framework adapters (siblings: `ainfera-langgraph`, `ainfera-crewai`, `ainfera-letta`, …). A *customer-integration* surface, not core infra.
- Inference is routed through Ainfera; every turn carries a signed, hash-chained audit receipt.
- Source of truth for names: the Naming law (`hizrianraz/obsidian/_ontology/Naming.md`, v1.3).

## Naming (law v1.3) — use these exactly
- Wire model string: **`ainfera-inference`** (canonical). `ainfera-mithril` / `ainfera-auto` are **silent legacy aliases** — accept them, prefer the canonical string in new code/docs.
- API base `https://api.ainfera.ai/v1` · signup/keys `https://app.ainfera.ai/signup` · agent roster `https://ainfera.ai/agents`.
- This repo is **not** "Ainfera OS" (a future product) and **not** Valinor (the internal fleet substrate). It is a public adapter.

## §0 Premise verification (mandatory)
Open every change with an explicit PASS/FAIL probe of current state (clean tree? correct remote? `AINFERA_API_KEY` present?) **before** editing. A failed premise → halt and surface; never fix-forward.

## Definition of done — curl proof, not PR proof
Run the README Quickstart end-to-end: **signup → routed inference → audit verify**.
```bash
export AINFERA_API_KEY=ai_infera_... # https://app.ainfera.ai/signup
./curl-example.sh # no-deps path (where present)
# or the framework path in the README Quickstart
```
Done = a routed completion **and** an audit receipt the `verify` tool accepts. PR opened ≠ shipped.
Copy link
Copy Markdown

@cursor cursor Bot May 31, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Export skips audit verify step

Medium Severity

The Definition of done requires signup, routed inference, and audit verify, but the sample commands export AINFERA_API_KEY before ./curl-example.sh. With a key already set, that script reuses the key, skips signup, leaves AGENT_ID empty, and never runs the audit verify curl—so the documented sequence cannot satisfy the stated completion criteria.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit a6ed2a1. Configure here.


## Secrets — hard rules
- `AINFERA_API_KEY` (`ai_infera_*`) comes from the environment only. Never commit it; never echo its value. `.env` is gitignored.
- No service-role / provider keys belong in an adapter repo.

## License
Apache-2.0 (code & adapters). © Ainfera Inc. 2026.
Loading