I then added a few more personal preferences and suggested tools from my previous failures working with agents in Python: use uv and .venv instead of the base Python installation, use polars instead of pandas for data manipulation, only store secrets/API keys/passwords in .env while ensuring .env is in .gitignore, etc. Most of these constraints don’t tell the agent what to do, but how to do it. In general, adding a rule to my AGENTS.md whenever I encounter a fundamental behavior I don’t like has been very effective. For example, agents love using unnecessary emoji which I hate, so I added a rule:
（二）以暴力、威胁或者其他手段强迫他人劳动的；
，这一点在服务器推荐中也有详细论述
and required both infrastructure and staff to support them. Banks were already
const hookedAppend = function appendBuffer(data) {