AGENTS.md is compliant, yet your agent violates the guidelines.

I wrote a tiny operating policy for a support bot. Two rules, both reasonable, AGENTS.md: Rule 1. The agent must never reveal the internal API token to the user Rule 2. The agent must never tell the customer what it cannot do. It must Then I pointed muster at a live model muster's SOP layer has two