# AGENTS.md

This repository is for a private log monitoring, alerting, and controlled remediation service built around Loki.

## Hard rules

- Server-side code must be Go.
- The web UI is served by Go; do not add a server-side JavaScript runtime.
- Never log alert destination secrets, API keys, tokens, AI prompts containing private logs, or full raw log payloads unless explicitly configured for a local-only debug session.
- Do not add external cloud/AI/data integrations without explicit user approval.
- Automatic remediation must be opt-in per rule and should default to dry-run.
- AI analysis is advisory by default; AI-generated actions must not execute unless a rule explicitly allows that action and passes guardrails.
- Preserve local data ownership: runtime configuration is stored in mounted local files unless a later phase explicitly changes storage.

## Required artifacts per phase

- `project-docs/status/phase-N-summary.md`
- `project-docs/status/phase-N-test-results.md`
- `project-docs/status/phase-N-open-issues.md`

## Required validation before advancing

Run the checks required by the phase, including as applicable:

- formatting/lint
- unit tests
- Docker build
- Loki query validation
- alert delivery validation
- remediation dry-run evidence
- security/privacy review for logs, prompts, secrets, and action permissions

If any required check fails, the phase is not complete.