AGENTS.md carries the owner's rules for every agent: commit identity, secret handling, surgical edits, and writing style. PLAN.md is the owner's worklog and is off limits to agents.
