.github

Imported from Mindburn-Labs/.github (AGENTS.md). Install upstream with npx skills add Mindburn-Labs/.github. Copyright stays with the author.

AGENTS.md

This repo controls organization profile and the production repository manifest.

make lint validates the manifest, baseline YAML, and guard scripts (plus the HELM ecosystem map when $MINDBURN_WORKSPACE_ROOT is set); make test adds the Python unit tests. Treat repo-manifest.yaml as the current machine-readable GitHub org inventory, not as production deployment evidence. If it conflicts with source code, route registries, OpenAPI, release artifacts, tier config, GitOps manifests, or runtime deployment manifests, the source artifact wins.

Use $MINDBURN_WORKSPACE_ROOT for workspace references. Ivan's local example is ~/Code/Mindburn-Labs; do not hardcode that path as a platform invariant.

Protected paths:

• profile/README.md
• repo-manifest.yaml
• .github/workflows/**

Privileged GitHub operations

mindburnlabs and peycheff-com are Ivan's human GitHub accounts. Both must remain Mindburn-Labs owners/admins, and agents use their full authority for delivery.

Actions cancel, rerun, enable, disable, or dispatch; release, tag, or package changes; production promotion; access or secret changes; and organization or repository setting, ruleset, or App changes are agent work. Follow the helm-privileged-ops procedure: confirm the exact target, read live state, act once, read the result back from the API, and log the record. No human approval step. Spending decisions stay with Ivan. Policy: docs/ai/estate-policy.md in Mindburn-Labs/docs.