34 lines
1.4 KiB
Markdown
34 lines
1.4 KiB
Markdown
# AGENTS.md
|
|
|
|
This repository is for a private log monitoring, alerting, and controlled remediation service built around Loki.
|
|
|
|
## Hard rules
|
|
|
|
- Server-side code must be Go.
|
|
- The web UI is served by Go; do not add a server-side JavaScript runtime.
|
|
- Never log alert destination secrets, API keys, tokens, AI prompts containing private logs, or full raw log payloads unless explicitly configured for a local-only debug session.
|
|
- Do not add external cloud/AI/data integrations without explicit user approval.
|
|
- Automatic remediation must be opt-in per rule and should default to dry-run.
|
|
- AI analysis is advisory by default; AI-generated actions must not execute unless a rule explicitly allows that action and passes guardrails.
|
|
- Preserve local data ownership: runtime configuration is stored in mounted local files unless a later phase explicitly changes storage.
|
|
|
|
## Required artifacts per phase
|
|
|
|
- `project-docs/status/phase-N-summary.md`
|
|
- `project-docs/status/phase-N-test-results.md`
|
|
- `project-docs/status/phase-N-open-issues.md`
|
|
|
|
## Required validation before advancing
|
|
|
|
Run the checks required by the phase, including as applicable:
|
|
|
|
- formatting/lint
|
|
- unit tests
|
|
- Docker build
|
|
- Loki query validation
|
|
- alert delivery validation
|
|
- remediation dry-run evidence
|
|
- security/privacy review for logs, prompts, secrets, and action permissions
|
|
|
|
If any required check fails, the phase is not complete.
|