[crisryantan]

Adds an AGENTS.md whose first rule is that this repo is public: branch names, commit messages, PR text and assets are permanent, and closing a PR or renaming a branch does not take back what was already pushed. A one-line CLAUDE.md imports it so Claude Code loads it too.

Docs only.

🤖 Generated with Claude Code

[pr-security-agent]

🔒 Security Scan Complete

✅ No security issues detected

Scanned files against 45 rules. · Reviewed commit: 21da74e178

📜 Scan history (1 scan)

Commit	Time (UTC)	Status	Findings
21da74e	2026-10-08 14:55:11	✅ success	0

ℹ️ About PR Security Agent

This scan was performed by PR Security Agent, an automated security review tool for pull requests. See the User Guide for details on severity levels, feedback reactions, and scan configuration.

Reply @pr-security-agent help for the list of commands you can run on this PR.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-08T15:03:23.112008Z	21da74e	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[claude]

I reviewed this PR and didn't find any bugs. It's a docs-only change, but both AGENTS.md and CLAUDE.md are explicitly listed in .github/CODEOWNERS under @ ROKT/sdk-engineering, so a human from that team should still sign off.

What was reviewed: the new AGENTS.md confidentiality guidance (public-repo warning, partner/brand/internal-detail redaction rules) and the one-line CLAUDE.md that imports it via @ AGENTS.md — content and import syntax look correct and self-contained, no code or build files touched.

Extended reasoning...

The PR adds two new docs files (AGENTS.md with confidentiality guidance for this public repo, and a one-line CLAUDE.md importing it) with no code, config, or security-sensitive logic touched. Both changed paths are explicitly listed in .github/CODEOWNERS under @ ROKT/sdk-engineering, which per review policy means a CODEOWNER should review even though the change itself is simple and the bug hunter found nothing.

[mattbodle]

SDK Team PR Review

Docs-only and accurate. The CLAUDE.md import loads AGENTS.md, and neither file is included in the published package.