# AGENTS.md

## Project Overview

Collection of post-install initialization scripts, one directory per OS
(`debian/`, `macos/`, ...). Each directory has its own `AGENTS.md`; the nearest
one takes precedence over this file.

## Shared Rules

- One self-contained script per OS directory; do not share code across OSes
  via sourced libraries, so each script can be copied and run on its own.
- Scripts must be idempotent, check the OS/version and privileges early, and
  fail with actionable errors.
- Never store secrets in the repository. Do not execute unverified remote
  content (`curl | sh`).
- Do not change SSH policy, networking, disks, boot config, or user
  credentials without an explicit opt-in switch.
- Keep README.md's OS table in sync when adding or renaming scripts.
- Validate with `bash -n` (and `shellcheck` if available) before delivering.