Initial commit

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

AGENTS.md

@@ -0,0 +1,20 @@
+# AGENTS.md
+
+## Project Overview
+
+Collection of post-install initialization scripts, one directory per OS
+(`debian/`, `macos/`, ...). Each directory has its own `AGENTS.md`; the nearest
+one takes precedence over this file.
+
+## Shared Rules
+
+- One self-contained script per OS directory; do not share code across OSes
+  via sourced libraries, so each script can be copied and run on its own.
+- Scripts must be idempotent, check the OS/version and privileges early, and
+  fail with actionable errors.
+- Never store secrets in the repository. Do not execute unverified remote
+  content (`curl | sh`).
+- Do not change SSH policy, networking, disks, boot config, or user
+  credentials without an explicit opt-in switch.
+- Keep README.md's OS table in sync when adding or renaming scripts.
+- Validate with `bash -n` (and `shellcheck` if available) before delivering.