Imported from ANIMANxd/sylenix-guard (
AGENTS.md). Install upstream withnpx skills add ANIMANxd/sylenix-guard. Copyright stays with the author.
AGENTS.md — Sylenix Guard (POC phase)
Sylenix Guard is a stdio gateway that sits between an AI agent host and one MCP server. This repository is in its 72-hour proof-of-concept phase and contains Sylenix Guard only.
Where things are
POC_SPIKE.md: scope, plan and decision gates. It governs what you may build right now.docs/SPEC_FULL.md: the long-term product spec. Read its section 2 (axioms) and section 3 (threat model) for intent. Do not implement anything from it thatPOC_SPIKE.mdputs out of scope.cmd/sylenix-guard/main.go: the whole proxy. One file, standard library only.demo/: real-agent harness, demo MCP server, protocol tests.scripts/: helper scripts.
Commands
make check # gofmt, go vet, protocol tests; must stay green
make build # builds bin/sylenix-guard
make harness-scripted # wiring check only; never quote its numbers
Rules
- Keep the proxy in
cmd/sylenix-guard/main.go. No new packages, no third-party dependencies. - Do not add features beyond
POC_SPIKE.mdsection 2. If something seems needed, say so instead of building it. - Never weaken or delete a test, or loosen a block, to make something pass. Fix the cause.
- The guard must never log argument values, secrets or tool output. The harness may record them in per-run transcripts because they are test data.
- Unknown means most restrictive: unmapped tools, unparseable frames, anything the guard cannot classify.
- Do not claim a behavior the code does not have. Update the limitations in
POC_SPIKE.mdsection 7 instead. - Never reference other Sylenix Labs products in this repository.
