Normalized Telegram record
AGENTS.md Can Become an Instruction-Injection Surface
Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries.
Signal contract
- Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries.
- This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change.
- Novelty: notable. Verification: source-linked.
Source ledger
Publishable sources attached to this record.
| # | Source | Role | Public status |
|---|---|---|---|
| 1 | x.comsource | primary receipt | source_urls |
Observation
Repository instructions can manipulate low-effort automated pull requests, showing that agent context files are both useful capability layers and trust boundaries.
Why it matters
This dated record adds public evidence to the skills become portable capability layer, verification bandwidth is the scarce resource analysis and keeps the claim auditable as the underlying products and practices change.
Entities
No named entity extracted.
Provenance
This public record is an English normalization of QWG AI Telegram message 2557. The complete original-language post remains the canonical raw message.