log-guardian/AGENTS.md
WayfinderAK 6f7549d439
All checks were successful
build-image / docker (push) Successful in 53s
Implement phase 1 foundations
2026-07-03 20:14:06 -08:00

34 lines
1.4 KiB
Markdown

# AGENTS.md
This repository is for a private log monitoring, alerting, and controlled remediation service built around Loki.
## Hard rules
- Server-side code must be Go.
- The web UI is served by Go; do not add a server-side JavaScript runtime.
- Never log alert destination secrets, API keys, tokens, AI prompts containing private logs, or full raw log payloads unless explicitly configured for a local-only debug session.
- Do not add external cloud/AI/data integrations without explicit user approval.
- Automatic remediation must be opt-in per rule and should default to dry-run.
- AI analysis is advisory by default; AI-generated actions must not execute unless a rule explicitly allows that action and passes guardrails.
- Preserve local data ownership: runtime configuration is stored in mounted local files unless a later phase explicitly changes storage.
## Required artifacts per phase
- `project-docs/status/phase-N-summary.md`
- `project-docs/status/phase-N-test-results.md`
- `project-docs/status/phase-N-open-issues.md`
## Required validation before advancing
Run the checks required by the phase, including as applicable:
- formatting/lint
- unit tests
- Docker build
- Loki query validation
- alert delivery validation
- remediation dry-run evidence
- security/privacy review for logs, prompts, secrets, and action permissions
If any required check fails, the phase is not complete.