log-guardian/AGENTS.md

AGENTS.md

This repository is for a private log monitoring, alerting, and controlled remediation service built around Loki.

Hard rules

• Server-side code must be Go.
• The web UI is served by Go; do not add a server-side JavaScript runtime.
• Never log alert destination secrets, API keys, tokens, AI prompts containing private logs, or full raw log payloads unless explicitly configured for a local-only debug session.
• Do not add external cloud/AI/data integrations without explicit user approval.
• Automatic remediation must be opt-in per rule and should default to dry-run.
• AI analysis is advisory by default; AI-generated actions must not execute unless a rule explicitly allows that action and passes guardrails.
• Preserve local data ownership: runtime configuration is stored in mounted local files unless a later phase explicitly changes storage.

Required artifacts per phase

• project-docs/status/phase-N-summary.md
• project-docs/status/phase-N-test-results.md
• project-docs/status/phase-N-open-issues.md

Required validation before advancing

Run the checks required by the phase, including as applicable:

• formatting/lint
• unit tests
• Docker build
• Loki query validation
• alert delivery validation
• remediation dry-run evidence
• security/privacy review for logs, prompts, secrets, and action permissions

If any required check fails, the phase is not complete.