The files your AI agent reads first, built from what has gone wrong before.
Say what your project uses. Get a short context file for each part of it (payments, hosting, sign-in, your own rules) with the lessons we and others learned the hard way already in it.
Advice for AI agents is mostly folklore. Each rule here is marked with its evidence, and a reported case links to where it was reported.
Hard-won
13
Reported
11
General guidance
30
For example
Stripe: give an agent a restricted key, never the secret key
Reported by Rez Havaei, Rex Liu and Maximilian Li, General Analysis, "Claude Jailbroken to Mint Unlimited Stripe Coupons", generalanalysis.com/blog/imessage-stripe-exploit; Stripe, "API keys", docs.stripe.com/keys · distilled by Leon Mallett (captivated.online) with Claude Code · reviewed 2026-10-24
Research finds that asking a model to review its answer, or whether it is sure, can turn right answers wrong, and that correction works when something external can be checked.
A study of 162 personas found none made models reliably more accurate on factual questions. A role shapes tone and focus; accuracy comes from what you hand over, not what you call the model.
Models used information at the start and end of long inputs far better than in the middle: at worst, below having no documents. Put material first, the question last, and cut what is not needed.