diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..e128536
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,11 @@
+## Customer privacy before publication
+
+Every contributor and agent must anonymize private customer context before creating or updating public PR titles, bodies, comments and reviews; branch names and commit messages; or committed code, tests, fixtures and documentation. Never copy private customer data from support threads, incident investigations, logs or connected sources into this repository.
+
+Remove customer names; organization, repository, domain, tenant and account identifiers; identifying keys, paths and log excerpts; and private customer job, support or incident links. Credentials, known tokens and secrets are private. Use neutral wording, synthetic data and minimal reproducible examples.
+
+Check screenshot and recording pixels, captions and filenames before publishing. Use synthetic reproductions or keep identifying evidence private. Publishing first and scrubbing later is unacceptable.
+
+Preserve this repository's public identity, dependencies and intentionally public attributions, including public authors and third-party software. Do not add a real customer-name blacklist.
+
+If you find an existing inadvertent disclosure, stop propagating it and flag it privately for authorized cleanup. Do not delete content or rewrite history without approval.