AGENTS.md guide
How to write AGENTS.md so coding agents respect repo boundaries, tests, and review norms.
GuideWebsites, apps, and software built with AI—you own the code.
Short answer
PunkSolid treats agents as draft engines: specs, human review gates, and automated checks run before launch. On migrations we sign URL inventories and redirect maps, carry tracking parity, and treat PageSpeed score ranges separately from Core Web Vitals in Search Console. Clients still receive full code ownership at handoff.
PunkSolid methodology is how we keep agentic coding productive without pretending agents are approvers. The same patterns show up on client deliveries and on the PunkSolid ai-network sites in this repository: specs first, human gates on anything that affects trust or compliance, automated checks that block sloppy merges, and migration discipline when URLs and tracking cannot break.
We break work into specs, implementation tasks, and verification steps. Agents draft components, content, and refactors in Cursor; they do not silently ship to production.
Human review gates cover claims, tone, accessibility, brand fit, and regulated copy on patient-facing or financial pages. On migrations, editors and stakeholders sign URL inventories and redirect maps before cutover—no DNS switch until those lists are approved. Launch timing and rollback decisions stay with people who own traffic and compliance risk.
Optional 1:1 Cursor coaching helps your maintainers after handoff; code ownership is the default outcome—full repository access whether or not you book more work with us.
On client codebases we document organization rules and quality bars up front so page five thousand matches page one—the same discipline described on healthcare WordPress rebuilds before bulk generation.
Inside this repository, the ai-network package enforces a quality gate agents and humans must respect before pages can
graduate from draft to reviewed:
src/validate/quality.ts defines minimum body words per page kind, answer length on commercial pages, FAQ counts, and service
steps/deliverables/engagement blocks.pnpm validate and pnpm ai-network:preflight run validation, tests, and registry parity so broken frontmatter or topic
ownership cannot merge unnoticed.Those checks mirror what we recommend client repos adopt: types, lint, link scans, and human-readable specs—not “trust the agent diff.”
Approved migration facts: eight healthcare provider websites, each 1,000–6,000 pages, rebuilt from WordPress + Elementor, ACF, and WP All Import into code built in Cursor.
Teams relied on ACF for structured fields and WP All Import for bulk creates and updates. Each site received custom in-codebase replacements: structured content fields instead of ACF, and bulk page import paths instead of WP All Import. Editors maintain thousands of pages in Cursor with the same guardrails used during the rebuild.
That pattern generalizes on website migration and WordPress to Astro or Next.js engagements whenever a CSV or admin import used to be the editorial bottleneck.
A faster site that loses calls, leads, or consent records is not an improvement. Methodology on migrations insists on:
Post-launch we watch Search Console for crawl and indexing regressions during the first review window. Cutover docs include rollback notes and who can revert DNS or reverse-proxy rules.
Read the website migration SEO checklist for verification steps we embed in delivery.
Performance work has a budget: ship templates that respect real content weight—scripts for consent, testing, call tracking, and forms included—not empty lab fixtures.
On the eight healthcare sites, mobile PageSpeed scores were roughly 65–75 before and 92–98 after; desktop PageSpeed scores roughly 80–95 before and 92–98 after. Those numbers are PageSpeed scores from Lighthouse lab runs (0–100), not Core Web Vitals. Field Core Web Vitals were not passing before launch; in Search Console they passed on mobile and desktop about four days after launch—a separate signal from lab scores.
We keep that distinction in stakeholder reports so a high lab score is not mistaken for a CWV pass. Traffic and leads held steady or grew on those projects; confidential figures stay off this page.
Beyond the ai-network gate, client repos should run linting, type checks, link scans, and smoke tests on critical templates and forms. Visual regression on hero and checkout templates is valuable when marketing runs frequent experiments.
Functional smoke tests cover checkout or HIPAA-aware forms when present. Agents may generate tests, but humans choose which paths are release blockers.
Metadata, canonicals, hreflang when present, structured data, and sitemap coverage are compared pre- and post-launch. Internal links are scanned so orphan routes do not multiply after import.
When mirrors or multi-site networks exist—as in this monorepo—canonical ownership and absolute owner links stay explicit so preview hosts do not compete with production URLs.
When you want production work scoped with these gates, start on services or the contact form with CMS, page count, and integrations that cannot break.
How to write AGENTS.md so coding agents respect repo boundaries, tests, and review norms.
GuideProject rules and skills that steer IDE agents—scope, tone, and test discipline.
GuideWrite the spec before the agent runs—acceptance checks, scope, and review gates for agentic delivery.
GuideNo. Agents propose diffs; people approve architecture, claims, accessibility, forms, and cutover timing. Editorial and compliance copy on regulated sites always gets a human pass before publish.
This monorepo runs `pnpm ai-network:preflight` before release: content validation, tests, registry parity, and quality gaps from `src/validate/quality.ts` (word minimums, FAQ, steps on services, and related rules). Link scans follow site builds.
On approved healthcare rebuilds, structured content fields and bulk import paths were rebuilt inside the codebase—custom equivalents for ACF and WP All Import—so thousands of pages edit in Cursor instead of the WordPress admin. See the healthcare case study for scale and tracking parity.
We label 0–100 lab results as PageSpeed scores, not Core Web Vitals. On eight healthcare provider sites, mobile PageSpeed scores moved from about 65–75 to 92–98 and desktop from about 80–95 to 92–98; Core Web Vitals passed in Search Console about four days after launch.
Send the site, the stack, and the deadline. We reply with questions, risks, and a proposed first step.