Why AI Agent Runtimes Should Read Project Rules Directly From the Repo

·1 views

A software design post on DEV Community argues that external AI runtimes such as Claude Code, Codex, and Aider should read project instructions directly from a repo's AGENTS.md file rather than copying them into local caches or adapter layers. The author distinguishes between APC, a portable context layer that holds the project contract, and APX, a runtime tooling layer whose job is simply to locate the project and hand off control to the external runtime. The core concern is that when runtimes duplicate project rules into machine-local prompt blobs or hidden state, the copies eventually drift out of sync with the original, leaving teams managing two conflicting versions of the same rules. Keeping AGENTS.md as the single source of truth means any change is visible in git and each layer of the system retains a clearly defined, debuggable responsibility. The author concludes that minimal translation between layers — not more adaptation — produces a more reliable and portable agentic workflow.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Builds Local Secret Vault to Keep API Keys Away from AI Coding Agents

A developer has released Authsia, a local-first secret vault and CLI tool designed for macOS, aimed at preventing AI coding agents and automated scripts from directly accessing sensitive credentials like API keys and SSH keys. The tool replaces plaintext secrets in configuration files with reference strings, resolving the actual values only at runtime when a specific command needs them. Authsia supports workspace-aware secret injection, masked command output, SSH signing, and just-in-time agent approvals to limit how broadly secrets are exposed. The project addresses a gap in traditional password managers, which are built for human users rather than developer workflows where commands — not people — need to consume credentials. The tool is available as an open-source project on GitHub alongside a dedicated website.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Add SQLite to Capacitor Apps for Offline Relational Data Storage

Developers building Capacitor apps that outgrow simple key-value storage can turn to SQLite for a full relational database that runs on-device and works offline. Two actively maintained plugins are available: the free, open-source community plugin and the Capawesome team's plugin, which offers built-in encryption, schema migrations, full-text search, and ORM support. Unlike IndexedDB, which the operating system can clear under storage pressure, SQLite persists data in a real file on the device filesystem. The Capawesome plugin is distributed via a dedicated npm registry and supports Android, iOS, Web, and Electron platforms. Key capabilities covered in the tutorial include running SQL queries and transactions, applying versioned schema migrations, enabling full-text search via FTS5, and encrypting databases with SQLCipher.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

400,000 AI Agents Face Vendor Lock-In as Wallet Governance Remains Fragmented

Over 400,000 AI agents now hold on-chain wallets with real spending power, having collectively settled 140 million USDC payments in nine months, according to Circle. However, each major wallet provider — including Circle, Coinbase, Crossmint, and others — bundles its own proprietary governance and compliance rules, leaving no interoperable standard across the industry. This fragmentation means that switching wallet providers is not a simple technical migration but a regulatory risk event, potentially requiring three to six months to rebuild compliance layers from scratch. Regulations such as MiCA demand consistent governance regardless of which wallet an agent uses, a requirement that no single vendor currently satisfies on its own. Developers are increasingly calling for a wallet-agnostic governance layer that sits above individual wallet providers to ensure consistent delegation, audit trails, and compliance across the growing agent economy.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Snap CD Introduces RBAC-Governed AI Agents for Safer Infrastructure Deployments

AI coding agents are increasingly being used in infrastructure workflows, but granting them broad access to tools like Terraform poses serious risks, including accidental deletion of production resources. Existing mitigations such as read-only keys, allow-list scripts, and separate CI pipelines all fall short by offering only all-or-nothing control rather than graduated trust. Snap CD addresses this by treating AI agents as first-class principals governed by the same role-based access control (RBAC) system that manages human users. The platform introduces a Missions framework that binds agents to specific, event-driven tasks — such as diagnosing failures, recommending approvals, or summarizing changes — rather than giving them unrestricted access. This approach allows teams to incrementally expand an agent's permissions as trust is established, mirroring how new human team members are typically onboarded.

0 comments Read more at DEV Community