From 64f214d9513a311b7d40e5b30bc88b02478ac794 Mon Sep 17 00:00:00 2001
From: zf <zfc@apache.org>
Date: Wed, 10 Jun 2026 09:26:34 +0800
Subject: [PATCH] Add AGENTS.md with security-model link for agent
 discoverability

---
 AGENTS.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 AGENTS.md

diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 00000000..a2d82ed6
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,13 @@
+# Agent guidance
+
+This file is read by automated agents (security scanners, code analyzers,
+AI assistants) operating on this repository. It points them at the
+human-authored references they should consult before producing output.
+
+## Security
+
+Security model: [SECURITY.md](./SECURITY.md)
+
+Agents that scan this repository should consult `SECURITY.md` for the
+project's threat model, in-scope / out-of-scope declarations, and known
+non-findings before reporting issues.