diff --git a/.agents/skills/slack-development/references/assistant-thread-apis.md b/.agents/skills/slack-development/references/assistant-thread-apis.md
index 82dcceb22a..c7bf93e90d 100644
--- a/.agents/skills/slack-development/references/assistant-thread-apis.md
+++ b/.agents/skills/slack-development/references/assistant-thread-apis.md
@@ -110,10 +110,6 @@ This file intentionally separates:
 
 - `packages/junior/src/chat/slack/assistant-thread/title.ts`
 
-5. Current delivery contract:
-
-- `packages/junior/src/chat/slack/AGENTS.md`
-
 ## Audit Checklist
 
 When changing code or guidance in this area, verify all of the following:
diff --git a/.agents/skills/vercel-sandbox/SKILL.md b/.agents/skills/vercel-sandbox/SKILL.md
index be1f93d2cf..ef85a267ac 100644
--- a/.agents/skills/vercel-sandbox/SKILL.md
+++ b/.agents/skills/vercel-sandbox/SKILL.md
@@ -71,7 +71,7 @@ For repo-local debugging in Junior, inspect:
    - `packages/junior/src/chat/sandbox/session.ts` (reports each new ref through `onSandboxRefChanged`)
    - `packages/junior/src/chat/providers/slack/turn.ts` and `packages/junior/src/chat/task-execution/conversation-turn.ts` (save it to thread state)
 5. whether consumer-specific snapshots are being confused with Vercel product persistence:
-   - `packages/junior/src/chat/sandbox/AGENTS.md`
+   - `packages/junior/src/chat/sandbox/snapshot/`
 
 ## Step 6: Recommend the smallest correct fix
 
diff --git a/.agents/skills/vercel-sandbox/SOURCES.md b/.agents/skills/vercel-sandbox/SOURCES.md
index f1812bc58b..e55aae5adb 100644
--- a/.agents/skills/vercel-sandbox/SOURCES.md
+++ b/.agents/skills/vercel-sandbox/SOURCES.md
@@ -35,7 +35,6 @@ Selected profile: `references/examples/documentation-skill.md`
 | `packages/junior/src/chat/agent/index.ts`                                                 | canonical  | high       | Turn timeout detection and abort behavior                                                                         | Repo implementation                                         |
 | `packages/junior/src/chat/agent/resume.ts`                                                | canonical  | high       | Timeout continuation persistence                                                                                  | Repo implementation                                         |
 | `packages/junior/src/chat/sandbox/session.ts`                                             | canonical  | high       | Sandbox create/get/reuse logic, keepalive, and dependency-profile mismatch invalidation                           | Repo implementation                                         |
-| `packages/junior/src/chat/sandbox/AGENTS.md`                                              | canonical  | high       | Runtime dependency snapshots vs sandbox workspace lifecycle                                                       | Sandbox ownership documentation                             |
 | `https://github.com/getsentry/junior/issues/184`                                          | secondary  | medium     | Concrete motivating failure report for workspace loss between turns                                               | Problem report, not source of truth                         |
 
 ## Decisions
diff --git a/.agents/skills/vercel-sandbox/references/api-surface.md b/.agents/skills/vercel-sandbox/references/api-surface.md
index 0c21ec688e..ee6ffad7bd 100644
--- a/.agents/skills/vercel-sandbox/references/api-surface.md
+++ b/.agents/skills/vercel-sandbox/references/api-surface.md
@@ -56,17 +56,16 @@ Do not recommend this path unless the repo has upgraded to the beta SDK and loca
 
 This section is secondary. Use it only when the task is about Junior's Vercel Sandbox integration rather than Vercel Sandbox itself.
 
-| File                                                   | Why it matters                                                                      |
-| ------------------------------------------------------ | ----------------------------------------------------------------------------------- |
-| `packages/junior/package.json`                         | Declares the `@vercel/sandbox` dependency used by the repo                          |
-| `packages/junior/src/chat/sandbox/session.ts`          | Main sandbox create/get/reuse/keepalive logic                                       |
-| `packages/junior/src/chat/runtime/thread-state.ts`     | Persists `app_sandbox_id` and dependency profile hash into thread state             |
-| `packages/junior/src/chat/runtime/turn-preparation.ts` | Restores persisted sandbox metadata at the start of a turn                          |
-| `packages/junior/src/chat/providers/slack/turn.ts`     | Saves each new sandbox ref to thread state through `onSandboxRefChanged`            |
-| `packages/junior/src/chat/agent/index.ts`              | Owns turn timeout detection and abort                                               |
-| `packages/junior/src/chat/agent/resume.ts`             | Persists timeout continuation state                                                 |
-| `packages/junior/src/chat/app/production.ts`           | Wires production timeout and continuation behavior                                  |
-| `packages/junior/src/chat/sandbox/AGENTS.md`           | Explains that snapshots are used for runtime dependency warmup, not task workspaces |
+| File                                                   | Why it matters                                                           |
+| ------------------------------------------------------ | ------------------------------------------------------------------------ |
+| `packages/junior/package.json`                         | Declares the `@vercel/sandbox` dependency used by the repo               |
+| `packages/junior/src/chat/sandbox/session.ts`          | Main sandbox create/get/reuse/keepalive logic                            |
+| `packages/junior/src/chat/runtime/thread-state.ts`     | Persists `app_sandbox_id` and dependency profile hash into thread state  |
+| `packages/junior/src/chat/runtime/turn-preparation.ts` | Restores persisted sandbox metadata at the start of a turn               |
+| `packages/junior/src/chat/providers/slack/turn.ts`     | Saves each new sandbox ref to thread state through `onSandboxRefChanged` |
+| `packages/junior/src/chat/agent/index.ts`              | Owns turn timeout detection and abort                                    |
+| `packages/junior/src/chat/agent/resume.ts`             | Persists timeout continuation state                                      |
+| `packages/junior/src/chat/app/production.ts`           | Wires production timeout and continuation behavior                       |
 
 ## Local implementation facts worth checking in any consumer
 
diff --git a/.agents/skills/vercel-sandbox/references/troubleshooting-workarounds.md b/.agents/skills/vercel-sandbox/references/troubleshooting-workarounds.md
index a3e69c9f7d..23633389ab 100644
--- a/.agents/skills/vercel-sandbox/references/troubleshooting-workarounds.md
+++ b/.agents/skills/vercel-sandbox/references/troubleshooting-workarounds.md
@@ -12,7 +12,7 @@ Use this reference when the user reports broken behavior or conflicting document
 | Need workspaces to survive stop/timeout boundaries                                   | Stable Vercel Sandbox does not provide that durability model                                                   | Concepts docs, stable SDK docs, persistent-beta changelog                                                                                                 | Externalize outputs, checkpoint work elsewhere, or migrate intentionally to persistent beta                                                   |
 | App request timed out, but the sandbox may still be running                          | The embedding system's timeout is shorter than the sandbox timeout                                             | Consumer timeout config, sandbox timeout config, stable docs                                                                                              | Persist sandbox identity separately so the app can reconnect to the active sandbox later                                                      |
 | Turn fails even though the sandbox timeout is longer                                 | Function or Junior turn timeout fired first                                                                    | `packages/junior/src/chat/config.ts`, `packages/junior/src/chat/app/production.ts`, `packages/junior/src/chat/agent/index.ts`                             | Align function timeout, turn timeout, and sandbox timeout; persist sandbox identity before the app can be killed                              |
-| Snapshot warmup exists, but repo edits still vanish between turns                    | Junior snapshots runtime dependencies, not task state                                                          | `packages/junior/src/chat/sandbox/AGENTS.md`, `packages/junior/src/chat/sandbox/snapshot/`                                                                | Keep using snapshots for dependency warmup; preserve task state elsewhere                                                                     |
+| Snapshot warmup exists, but repo edits still vanish between turns                    | Junior snapshots runtime dependencies, not task state                                                          | `packages/junior/src/chat/sandbox/snapshot/`                                                                                                              | Keep using snapshots for dependency warmup; preserve task state elsewhere                                                                     |
 | Persistent beta docs seem to conflict with stable lifecycle docs                     | They describe different models and package generations                                                         | Installed types, stable docs, beta changelog                                                                                                              | State explicitly which model the current environment uses before giving advice                                                                |
 | Need more than the stable plan runtime ceiling                                       | Plan limit reached even with a longer timeout configured                                                       | Pricing/limits docs                                                                                                                                       | Reduce session duration, checkpoint externally, or change plan if appropriate                                                                 |
 | Next turn starts from a clean repo after a timeout in Junior                         | The consumer app died before `app_sandbox_id` was persisted, even though the sandbox may still have been alive | `packages/junior/src/chat/sandbox/session.ts`, `packages/junior/src/chat/runtime/thread-state.ts`, `packages/junior/src/chat/runtime/turn-preparation.ts` | Check that `onSandboxRefChanged` saves the new ref to thread state right away                                                                 |
diff --git a/.claude/commands/opsx/apply.md b/.claude/commands/opsx/apply.md
index cc5e0e5a64..48d82baf4c 100644
--- a/.claude/commands/opsx/apply.md
+++ b/.claude/commands/opsx/apply.md
@@ -116,8 +116,8 @@ Working on task 4/7: <task description>
 - [x] Task 2
 ...
 
-All tasks complete! Move any durable explanation into code, tests, policies, or
-the owning AGENTS.md, then delete the completed change directory.
+All tasks complete! Move any durable explanation into code, code comments,
+tests, or policies, then delete the completed change directory.
 ```
 
 **Output On Pause (Issue Encountered)**
diff --git a/.cursor/commands/opsx-apply.md b/.cursor/commands/opsx-apply.md
index 23e8dd74bd..a5646212bf 100644
--- a/.cursor/commands/opsx-apply.md
+++ b/.cursor/commands/opsx-apply.md
@@ -116,8 +116,8 @@ Working on task 4/7: <task description>
 - [x] Task 2
 ...
 
-All tasks complete! Move any durable explanation into code, tests, policies, or
-the owning AGENTS.md, then delete the completed change directory.
+All tasks complete! Move any durable explanation into code, code comments,
+tests, or policies, then delete the completed change directory.
 ```
 
 **Output On Pause (Issue Encountered)**
diff --git a/.gitattributes b/.gitattributes
index 7d9603701b..f7d0fc89b5 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,3 @@
 # CI records these eval fixtures. Collapse them in pull request diffs and
-# keep them out of AI review. See "Recordings" in packages/junior-evals/AGENTS.md.
+# keep them out of AI review.
 packages/junior-evals/recordings/** linguist-generated=true
diff --git a/AGENTS.md b/AGENTS.md
index c51f88ad6d..179fa7a31f 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,8 +1,6 @@
 # Agent Instructions
 
-Before you change code in a directory, read each `AGENTS.md` on the path from
-the repo root. Read the reference files at the end when your work touches
-their area.
+Read the reference files at the end when your work touches their area.
 
 ## Rules
 
@@ -23,7 +21,9 @@ their area.
 - Group files by feature. No feature-directory barrels.
 - Exported functions get a brief JSDoc that states intent.
 - Docs use ASD-STE100 English: common words, active voice, short sentences.
-- Change an `AGENTS.md` or `README.md` only when intent, an invariant, or a
+- This is the only `AGENTS.md`. Do not add one in a directory. Put intent in
+  a code comment next to the code that it governs.
+- Change this file or a `README.md` only when intent, an invariant, or a
   boundary changes. Delete completed plans. Plans in `openspec/changes/`
   cannot override policy.
 
@@ -82,9 +82,3 @@ Split long files at a feature boundary. Do not compress formatting to pass.
 - `policies/frontend-components.md`: dashboard UI ownership and styling.
 - `policies/code-comments.md`: when and how to comment.
 - `policies/documentation.md`: internal docs.
-- `packages/junior/src/chat/AGENTS.md`: chat runtime.
-- `packages/junior/tests/AGENTS.md`: test layout and fixtures.
-- `packages/junior/migrations/AGENTS.md`: database migrations.
-- `packages/junior-evals/AGENTS.md`: evals and recordings.
-- `packages/junior-dashboard/AGENTS.md`: dashboard.
-- `packages/junior-plugin-api/AGENTS.md`: plugin contracts.
diff --git a/ast-grep/rules/no-eval-slack-actions-imports.yml b/ast-grep/rules/no-eval-slack-actions-imports.yml
index 87ab7c348d..e3ebd49586 100644
--- a/ast-grep/rules/no-eval-slack-actions-imports.yml
+++ b/ast-grep/rules/no-eval-slack-actions-imports.yml
@@ -1,7 +1,7 @@
 id: no-eval-slack-actions-imports
 language: TypeScript
 severity: error
-message: Evals must not import Slack action internals. Send input through @junior-evals/fixture/inputs and assert the replies, tool calls, reactions, or turn states of the returned Conversation. See "Agent Test Fixture" in packages/junior-evals/AGENTS.md.
+message: Evals must not import Slack action internals. Send input through @junior-evals/fixture/inputs and assert the replies, tool calls, reactions, or turn states of the returned Conversation.
 files:
   - packages/junior-evals/evals/**/*.ts
   - packages/junior-evals/evals/**/*.tsx
diff --git a/ast-grep/rules/no-eval-slack-msw-helpers.yml b/ast-grep/rules/no-eval-slack-msw-helpers.yml
index 16ff944d9f..fb0dbf7421 100644
--- a/ast-grep/rules/no-eval-slack-msw-helpers.yml
+++ b/ast-grep/rules/no-eval-slack-msw-helpers.yml
@@ -1,7 +1,7 @@
 id: no-eval-slack-msw-helpers
 language: TypeScript
 severity: error
-message: Evals must not queue or read Slack API calls through the junior test MSW helpers. Assert the replies, tool calls, reactions, or turn states of the returned Conversation. See "Agent Test Fixture" in packages/junior-evals/AGENTS.md.
+message: Evals must not queue or read Slack API calls through the junior test MSW helpers. Assert the replies, tool calls, reactions, or turn states of the returned Conversation.
 files:
   - packages/junior-evals/evals/**/*.ts
   - packages/junior-evals/evals/**/*.tsx
diff --git a/ast-grep/rules/no-queue-provider-module-imports.yml b/ast-grep/rules/no-queue-provider-module-imports.yml
index 6ee87ef1a3..03fbd020f4 100644
--- a/ast-grep/rules/no-queue-provider-module-imports.yml
+++ b/ast-grep/rules/no-queue-provider-module-imports.yml
@@ -1,7 +1,7 @@
 id: no-queue-provider-module-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/queue/provider.ts may import a queue provider module such as chat/queue/vercel.ts or chat/queue/bullmq.ts. Other code calls getQueueProvider(). See packages/junior/src/chat/queue/AGENTS.md.
+message: Only packages/junior/src/chat/queue/provider.ts may import a queue provider module such as chat/queue/vercel.ts or chat/queue/bullmq.ts. Other code calls getQueueProvider().
 files:
   - packages/junior/src/**/*.ts
   - packages/junior/src/**/*.tsx
diff --git a/ast-grep/rules/no-sandbox-provider-module-imports.yml b/ast-grep/rules/no-sandbox-provider-module-imports.yml
index 51ddc29d45..42dd7a3420 100644
--- a/ast-grep/rules/no-sandbox-provider-module-imports.yml
+++ b/ast-grep/rules/no-sandbox-provider-module-imports.yml
@@ -1,7 +1,7 @@
 id: no-sandbox-provider-module-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/**/*.ts
   - packages/junior/src/**/*.tsx
@@ -19,7 +19,7 @@ rule:
 id: no-sandbox-provider-module-sibling-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/chat/sandbox/*.ts
 ignores:
@@ -37,7 +37,7 @@ rule:
 id: no-sandbox-provider-module-parent-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/vercel/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/chat/sandbox/*/**/*.ts
 ignores:
@@ -54,7 +54,7 @@ rule:
 id: no-docker-sandbox-provider-module-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/**/*.ts
   - packages/junior/src/**/*.tsx
@@ -72,7 +72,7 @@ rule:
 id: no-docker-sandbox-provider-module-sibling-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/chat/sandbox/*.ts
 ignores:
@@ -90,7 +90,7 @@ rule:
 id: no-docker-sandbox-provider-module-parent-imports
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider(). See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/provider.ts may import a sandbox provider module such as chat/sandbox/docker/. Other code calls getSandboxProvider().
 files:
   - packages/junior/src/chat/sandbox/*/**/*.ts
 ignores:
diff --git a/ast-grep/rules/no-vercel-queue-sdk-outside-vercel-module.yml b/ast-grep/rules/no-vercel-queue-sdk-outside-vercel-module.yml
index 52e57a7009..66de24a362 100644
--- a/ast-grep/rules/no-vercel-queue-sdk-outside-vercel-module.yml
+++ b/ast-grep/rules/no-vercel-queue-sdk-outside-vercel-module.yml
@@ -1,7 +1,7 @@
 id: no-vercel-queue-sdk-outside-vercel-module
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/queue/vercel.ts may import @vercel/queue. Other code uses the provider-neutral queue functions and types. See packages/junior/src/chat/queue/AGENTS.md.
+message: Only packages/junior/src/chat/queue/vercel.ts may import @vercel/queue. Other code uses the provider-neutral queue functions and types.
 files:
   - packages/junior/src/**/*.ts
   - packages/junior/src/**/*.tsx
diff --git a/ast-grep/rules/no-vercel-sandbox-sdk-outside-vercel-module.yml b/ast-grep/rules/no-vercel-sandbox-sdk-outside-vercel-module.yml
index 1f395b6d0f..75e7b82aad 100644
--- a/ast-grep/rules/no-vercel-sandbox-sdk-outside-vercel-module.yml
+++ b/ast-grep/rules/no-vercel-sandbox-sdk-outside-vercel-module.yml
@@ -1,7 +1,7 @@
 id: no-vercel-sandbox-sdk-outside-vercel-module
 language: TypeScript
 severity: error
-message: Only packages/junior/src/chat/sandbox/vercel/ may import @vercel/sandbox. Other code uses the provider-neutral sandbox functions and types. See packages/junior/src/chat/sandbox/AGENTS.md.
+message: Only packages/junior/src/chat/sandbox/vercel/ may import @vercel/sandbox. Other code uses the provider-neutral sandbox functions and types.
 files:
   - packages/junior/src/**/*.ts
   - packages/junior/src/**/*.tsx
diff --git a/openspec/README.md b/openspec/README.md
index 3d5886780d..ba23fdf2f5 100644
--- a/openspec/README.md
+++ b/openspec/README.md
@@ -5,5 +5,5 @@
   current behavior and cannot override `../policies/`.
 - Write a plan only when a change crosses many boundaries or needs a rollout
   order.
-- When the work is done, move lasting rules into code, types, tests, or the
-  owning `AGENTS.md`. Then delete the plan. Git history is the archive.
+- When the work is done, move lasting rules into code, types, tests, code
+  comments, or policies. Then delete the plan. Git history is the archive.
diff --git a/openspec/config.yaml b/openspec/config.yaml
index 6275e167a3..3972a45430 100644
--- a/openspec/config.yaml
+++ b/openspec/config.yaml
@@ -1,7 +1,7 @@
 schema: spec-driven
 
 # OpenSpec artifacts are temporary implementation plans. Current behavior is
-# documented by code, policies, tests, and owning module/package AGENTS.md files.
+# documented by code, code comments, policies, and tests.
 
 # Project context (optional)
 # This is shown to AI when creating artifacts.
diff --git a/packages/docs/src/content/docs/contribute/development.md b/packages/docs/src/content/docs/contribute/development.md
index 0f36065a67..2fd3e150c2 100644
--- a/packages/docs/src/content/docs/contribute/development.md
+++ b/packages/docs/src/content/docs/contribute/development.md
@@ -88,7 +88,7 @@ docker network prune -f --filter label=dev.junior.sandbox
 docker image prune -a -f --filter label=dev.junior.sandbox=snapshot
 ```
 
-The limits of this provider are in `packages/junior/src/chat/sandbox/AGENTS.md`.
+This provider is for local development and QA only. Do not run untrusted workloads with it.
 
 ## Work in isolated branches
 
diff --git a/packages/docs/src/content/docs/contribute/local-agent-validation.md b/packages/docs/src/content/docs/contribute/local-agent-validation.md
index 9b85296dd4..ba6a79d656 100644
--- a/packages/docs/src/content/docs/contribute/local-agent-validation.md
+++ b/packages/docs/src/content/docs/contribute/local-agent-validation.md
@@ -115,14 +115,14 @@ browser to the CLI's loopback listener.
 
 If local validation fails, use the first matching symptom:
 
-| Symptom                         | First check                                                                                     |
-| ------------------------------- | ----------------------------------------------------------------------------------------------- |
-| Missing model credentials       | Refresh env with `pnpm dev:env`, then rerun the same prompt.                                    |
-| Missing provider credentials    | Configure the plugin/provider env required by the changed path.                                 |
-| OAuth callback cannot connect   | Keep `pnpm dev` and its configured tunnel running while the CLI waits.                          |
-| Context resets between commands | Expected; use one interactive `junior chat` process for context.                                |
-| File-send UX needs validation   | Local validation cannot verify it; the local adapter has no file-send tool.                     |
-| Slack-specific behavior changed | Use `packages/junior/src/chat/slack/AGENTS.md`, the Slack skill, and integration tests instead. |
+| Symptom                         | First check                                                                 |
+| ------------------------------- | --------------------------------------------------------------------------- |
+| Missing model credentials       | Refresh env with `pnpm dev:env`, then rerun the same prompt.                |
+| Missing provider credentials    | Configure the plugin/provider env required by the changed path.             |
+| OAuth callback cannot connect   | Keep `pnpm dev` and its configured tunnel running while the CLI waits.      |
+| Context resets between commands | Expected; use one interactive `junior chat` process for context.            |
+| File-send UX needs validation   | Local validation cannot verify it; the local adapter has no file-send tool. |
+| Slack-specific behavior changed | Use the Slack skill and integration tests instead.                          |
 
 ## Next Step
 
diff --git a/packages/junior-amplitude/skills/amplitude/SOURCES.md b/packages/junior-amplitude/skills/amplitude/SOURCES.md
index 65cec336e6..942a5d3562 100644
--- a/packages/junior-amplitude/skills/amplitude/SOURCES.md
+++ b/packages/junior-amplitude/skills/amplitude/SOURCES.md
@@ -9,7 +9,6 @@ Last updated: 2026-07-10
 | `https://amplitude.com/docs/amplitude-ai/amplitude-mcp`    | canonical             | high       | Hosted MCP endpoints, OAuth behavior, supported analytics surfaces, regional setup, and Amplitude access controls.                                | Treat live MCP schemas as authoritative for tool names and arguments.            |
 | `https://github.com/amplitude/mcp-marketplace`             | canonical             | high       | Amplitude-authored agent workflow examples and coverage across charts, dashboards, experiments, funnels, retention, cohorts, taxonomy, and users. | Adapt workflow intent; do not copy provider-specific prompt structure wholesale. |
 | `https://github.com/getsentry/junior/issues/810`           | local product context | high       | Required Junior use cases: active users, event segmentation, funnels, retention, saved charts, real-time activity, and user search.               | The issue's REST/CLI options predate the hosted MCP recommendation.              |
-| `packages/junior-plugin-api/AGENTS.md`                     | local canonical       | high       | Manifest-owned provider integration and host-managed extension model.                                                                             | Junior plugin contract.                                                          |
 | `packages/junior/src/chat/tools/skill/search-mcp-tools.ts` | local canonical       | high       | Junior-native progressive provider and tool discovery.                                                                                            | Use instead of Amplitude's progressive-discovery URL.                            |
 
 ## Adaptation decisions
diff --git a/packages/junior-dashboard/AGENTS.md b/packages/junior-dashboard/AGENTS.md
deleted file mode 100644
index 800c3226f5..0000000000
--- a/packages/junior-dashboard/AGENTS.md
+++ /dev/null
@@ -1,31 +0,0 @@
-# Dashboard
-
-- The dashboard changes no conversation state. Signed-in users can change
-  only their own profile fields.
-- Store no state except auth sessions and profile settings.
-- Check access to private conversations on the server. Hidden client routes
-  are not authorization. Check access before a detail `304`.
-- The server turns runtime events into privacy-safe reporting events before
-  they reach the client.
-- Routes fail closed when identity or required configuration is missing.
-- Mock reporting data is for local UI work only, never a production fallback.
-- No service worker or offline cache.
-- Read the mailbox before history and publish both in one render. Workers
-  commit input before they acknowledge it, so input never disappears.
-- A local send stays visible until a server snapshot has its Message id. The
-  browser and web ingress share one Message id function.
-- Only Turn lifecycle events turn on the thinking indicator. Queued work is
-  not thinking.
-- Paginated event reads never write into the cache of another resource.
-- Display text keeps Markdown and Slack tokens. Do not resolve names in the
-  dashboard (the API returns `mentions`) or rewrite tokens on the server.
-- `oxlint/display-text.ts` matches on field names. Do not name a field `text`,
-  `body`, or `summary` when it is not display text.
-- Import Shiki grammars on demand through `client/code-languages.ts`, never
-  the full bundle.
-- Do not call cache input shares a cache hit or failure rate.
-- Each user-facing page has one `e2e/` spec. Specs import `test` from
-  `./test` and call `screenshot(page, name)` after load.
-- Mocks and browser tests use one fixed time, `NOW`.
-
-UI rules: `src/client/components/AGENTS.md`.
diff --git a/packages/junior-dashboard/src/client/components/AGENTS.md b/packages/junior-dashboard/src/client/components/AGENTS.md
deleted file mode 100644
index a6bc688b7f..0000000000
--- a/packages/junior-dashboard/src/client/components/AGENTS.md
+++ /dev/null
@@ -1,36 +0,0 @@
-# Dashboard UI rules
-
-These apply to all dashboard UI. `pnpm dashboard-style:check` enforces the
-token rules.
-
-- Add shadcn components with
-  `pnpm --filter @sentry/junior-dashboard exec shadcn add <component>`.
-- Change a `ui/` file only when every caller needs the same style. Do not
-  wrap a `ui/` component just to rename it or its props.
-- Do not apply the shadcn CLI's global border or body resets. Keep the
-  Tailwind radius scale.
-- Confirmations use `ui/alert-dialog`, not `window.confirm`.
-- Short task forms use `ui/dialog`, never a `Drawer` or `DetailsPanel`. Mount
-  each dialog through `useSheet`, only while open.
-- Put only inline elements in a `ui/trace` row button.
-- Label icon-only controls with `TooltipContent size="compact"`, not the
-  native `title` attribute.
-- Set `focusableWhenDisabled` on a tooltip trigger `ui/button` that can be
-  disabled.
-- Field ids are `<control id>-error` and `<control id>-help`.
-- Put a checkbox or radio inside its `<label>`. Give each `RadioGroup` an
-  `aria-label`.
-- A form page has one `Button variant="primary"`.
-- Do not replace `ObjectIcon` with a provider logo.
-- Use `light:` only for values that no token covers. Chart series use
-  `var(--color-*)`, not hex.
-- Use `outline-dashboard-focus` for keyboard focus only.
-- Labels use sentence case, with no uppercase or letter spacing.
-- App navigation uses pills, page links use `SegmentedNav`, and panel
-  switches use `ui/tabs`.
-- Do not add viewport, offset, or safe-area math in pages.
-  `layout/VisualViewportShell`, `conversations/ChatLayout`, and
-  `conversations/ComposerDock` own it. Home and create do not use
-  `ComposerDock`.
-- Keep a feature component under `conversations/` or `pages/` until a second
-  real caller needs it.
diff --git a/packages/junior-dashboard/src/client/conversations/AGENTS.md b/packages/junior-dashboard/src/client/conversations/AGENTS.md
deleted file mode 100644
index fba5e6eb14..0000000000
--- a/packages/junior-dashboard/src/client/conversations/AGENTS.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# Transcript components
-
-- Keep horizontal padding inside each transcript row, so focus outlines are
-  not clipped. Do not add negative margins at `TranscriptSummaryTrigger` call
-  sites.
-- The Automation trigger card shows the credentials from the run's dispatch
-  record, not the current setting. Keep the run input collapsed, because it
-  is not from a person.
-- A nested `Transcript` never uses the panel of the page behind it.
-- The page shows one right panel at a time. Closing a panel returns focus to
-  the control that opened it.
-- The URL owns the selected event in the main Conversation. Standalone
-  transcripts keep it in `ConversationEventLog`.
-- A pending exit must not close a new panel or another Conversation. A
-  pending fork blocks dismissal of its dialog.
-- Raw JSON keeps the original ISO values. Persist the UTC/local mode, not the
-  timezone.
diff --git a/packages/junior-dashboard/src/client/pages/automations/AGENTS.md b/packages/junior-dashboard/src/client/pages/automations/AGENTS.md
deleted file mode 100644
index 20d20a1224..0000000000
--- a/packages/junior-dashboard/src/client/pages/automations/AGENTS.md
+++ /dev/null
@@ -1,15 +0,0 @@
-# Automation pages
-
-- Core owns validation, edit access, creator credential rules, revision checks,
-  Schedule previews, and the Event catalog. Show core errors. Do not repeat
-  these rules in the page.
-- Preview requests never save or run work.
-- Send only changed fields. Keep unsupported triggers and stored Destinations
-  unless the user replaces them. Keep outcome order.
-- Warn that an instruction or event selector change switches to system
-  credentials.
-- Query refreshes must not replace an unsaved draft. After a stale save, let
-  the user keep their changes or load the latest version.
-- Lifecycle actions and "Make active" read the latest revision first.
-- `AutomationRecentRuns` shows terminal runs only. Do not infer queued or
-  running work from terminal records.
diff --git a/packages/junior-dashboard/src/tailwind.css b/packages/junior-dashboard/src/tailwind.css
index 8d19daadf4..1667d43c8a 100644
--- a/packages/junior-dashboard/src/tailwind.css
+++ b/packages/junior-dashboard/src/tailwind.css
@@ -4,7 +4,7 @@
 @import "shadcn/tailwind.css";
 
 /*
- * Dashboard design tokens. components/AGENTS.md has the token rules.
+ * Dashboard design tokens. `pnpm dashboard-style:check` enforces their use.
  * Keep structural UI colors here so a second theme can redefine them.
  * Prefer roles over opacity ladders. Status accents stay as Tailwind palette utilities.
  */
diff --git a/packages/junior-evals/AGENTS.md b/packages/junior-evals/AGENTS.md
deleted file mode 100644
index 33184410ea..0000000000
--- a/packages/junior-evals/AGENTS.md
+++ /dev/null
@@ -1,54 +0,0 @@
-# Evals
-
-- Pass paths, `-t`, and `--shard` directly after the `evals:<suite>` script.
-  Do not use `pnpm exec vitest` or `--`.
-- Local setup (once): `pnpm dev:env`, `docker compose up -d postgres redis`,
-  and `cloudflared` on PATH. Behavioral and integration need Vercel Sandbox
-  and a Quick Tunnel. Guardian, router, and classifiers need only AI Gateway.
-- Do not bind env vars manually. The eval config loads repo env files.
-- `VITEST_EVALS_REPLAY_MODE=replay` proves a run makes no live calls.
-- CI setup and labels: `evals/github-actions.md`.
-
-## Cases
-
-- Guardian evals send exact `ToolActionProposal` objects. Set `tool` to the
-  agent tool name, so `proposal()` uses the production builder.
-- A test touches the product only through app-route inputs
-  (`src/fixture/inputs.ts`), third-party APIs mocked with MSW, and results
-  from the reporting API and the Slack mock.
-- Assert wording-independent facts (reply counts, turn states, tool calls,
-  reactions) directly, not stored rows or runtime objects. Judge wording with
-  `toSatisfyJudge(RubricJudge, rubric({ pass, fail }))`.
-- Do not check raw Slack Web API payloads or invent transcript or tool-call
-  schemas. Improve `src/fixture/` instead.
-- Put a case that needs a plugin in the suite (`src/suites/*.ts`) that has
-  it. Do not set up the plugin in the test.
-- Setup data goes through product store functions in `src/fixture/insert.ts`.
-- `webSearch` is mocked and finds nothing by default. Use
-  `mockWebSearchResults()` and `mockWebPages()` from `src/fixture/web.ts`.
-- Use fake external targets. Do not change real provider resources.
-- In `evals/scheduler/`, each production failure of an automation run has one
-  realistic case that cites its issue. Extend it. Do not add a second case.
-- `scripts/check-test-architecture.mjs` has a baseline. Lower an entry when
-  you fix a file. Do not add entries.
-
-## Recordings
-
-- Evals replay model calls and web pages from Roach
-  (`https://roach-proxy.getsentry.net`). Recordings are in its GCS bucket, not
-  in git.
-- Change recorded traffic, reachable origins, and value patterns only in
-  `src/recording-rules.ts`.
-- In CI, `scripts/network-jail.sh` refuses connections that skip the proxy.
-  Send such a request through the proxy. Do not allow its host.
-- Without `ROACH_TOKEN`, a run can only replay, and requests without a
-  recording fail. With it, new requests go live once and are recorded. Only
-  global setup reads it.
-- Fix the first recording miss of a test. Later misses usually follow from it.
-- Fix a value that changes on each run for all tests, in the fixture or as a
-  `values` pattern in the rule, not in one test. Avoid slow patterns, such as
-  `(a+)+`.
-- Anyone who can make the same request can read a recording. Do not record
-  private responses. Add a new CI credential to `SECRET_ENV`.
-- Read `src/stable-setup.ts`, `src/eval-clock.ts`, and `src/fixture/ids.ts`
-  before you add a new fix for unstable time, random values, or ids.
diff --git a/packages/junior-evals/src/recording-rules.ts b/packages/junior-evals/src/recording-rules.ts
index b88442a88e..0884285a25 100644
--- a/packages/junior-evals/src/recording-rules.ts
+++ b/packages/junior-evals/src/recording-rules.ts
@@ -8,6 +8,9 @@
  * sets the mode: `auto`, `replay`, `record`, or `off`. Without it, a run with
  * the write token (`ROACH_TOKEN`) uses `auto`, and a run without it uses
  * `replay`, because the service allows only `replay` without the token.
+ *
+ * Anyone who can make the same request can read its recording. Never record
+ * private responses.
  */
 import { USER_AGENT } from "@/chat/tools/web/constants";
 import type { RecordingMode, RecordingRule, RunConfig } from "./roach/types";
diff --git a/packages/junior-evals/src/roach/AGENTS.md b/packages/junior-evals/src/roach/AGENTS.md
deleted file mode 100644
index 6b4614e53c..0000000000
--- a/packages/junior-evals/src/roach/AGENTS.md
+++ /dev/null
@@ -1,11 +0,0 @@
-# Roach client
-
-- This is a copy of the client side of
-  [`getsentry/roach`](https://github.com/getsentry/roach) at commit `9c623c0`.
-  Delete it when `@sentry/roach` is on npm.
-- Do not add Junior code or dependencies other than Node built-ins.
-- Local changes from upstream: `client.ts` has `CONTROL_PATH` as a constant
-  (no `server.ts`); `types.ts` adds `RunConfig` and `RemoteRun` from
-  `src/service.ts`; `values.ts` drops the functions that only the service uses.
-- To update, copy `client.ts`, `types.ts`, `values.ts`, and `report.ts` again,
-  keep the local changes, and change the commit above.
diff --git a/packages/junior-evals/src/roach/client.ts b/packages/junior-evals/src/roach/client.ts
index 2423bdc224..b2e91080e6 100644
--- a/packages/junior-evals/src/roach/client.ts
+++ b/packages/junior-evals/src/roach/client.ts
@@ -1,5 +1,13 @@
 /**
- * The client of the Roach service. See `AGENTS.md` in this directory.
+ * The client of the Roach service.
+ *
+ * This directory copies the client side of
+ * [`getsentry/roach`](https://github.com/getsentry/roach) at commit `9c623c0`.
+ * Delete it when `@sentry/roach` is on npm. Use only Node built-ins here. To
+ * update, copy `client.ts`, `types.ts`, `values.ts`, and `report.ts` again,
+ * keep the local changes, and change the commit above. Local changes:
+ * `CONTROL_PATH` is a constant here (no `server.ts`), `types.ts` adds service
+ * types, and `values.ts` drops service-only functions.
  *
  * `startRemoteRun()` starts a run on a Roach service. It
  * returns `env`, the variables that send the traffic of a process through
diff --git a/packages/junior-evals/src/roach/types.ts b/packages/junior-evals/src/roach/types.ts
index 0f4c1b33ef..17fb39c3ea 100644
--- a/packages/junior-evals/src/roach/types.ts
+++ b/packages/junior-evals/src/roach/types.ts
@@ -1,6 +1,7 @@
 /**
  * The public types of Roach: rules, modes, runs, and the results of a run.
- * See `AGENTS.md` in this directory.
+ * Local change from upstream (see `client.ts`): adds `RunConfig` and
+ * `RemoteRun` from `src/service.ts`.
  */
 import type { ValuePatterns } from "./values.ts";
 
diff --git a/packages/junior-github/AGENTS.md b/packages/junior-github/AGENTS.md
deleted file mode 100644
index 3479747e30..0000000000
--- a/packages/junior-github/AGENTS.md
+++ /dev/null
@@ -1,19 +0,0 @@
-# GitHub plugin
-
-- Junior-owned issue, pull request, review, and push operations never fall
-  back to user OAuth.
-- Merge, fork, branch deletion, REST ref writes, and administration stay
-  unsupported. Deny unknown REST writes and GraphQL mutations.
-- Read tokens request read level only. Write tokens omit `permissions`, so
-  GitHub applies the installation envelope.
-- A failing repository hook must stop the commit or push.
-- `junior_github_pull_request_requesters` stores only the core identity id
-  and, for the opener, the Conversation. Do not copy logins or user data.
-  Read the login through `ctx.users.readIdentity()` at webhook time.
-- When the opener is unknown, leave the opener fields out. Never use the bot
-  in its place.
-- Webhooks never read the pull request body. Load values other than filter
-  values only after an event matches.
-- Hold no database connection during GitHub calls.
-- Change `ready_to_merge_at` only after the Review item changes, so the next
-  webhook retries a failure.
diff --git a/packages/junior-github/src/egress-policy.ts b/packages/junior-github/src/egress-policy.ts
index f87a28e691..454158d412 100644
--- a/packages/junior-github/src/egress-policy.ts
+++ b/packages/junior-github/src/egress-policy.ts
@@ -2,7 +2,10 @@
  * GitHub egress policy and grant selection.
  *
  * Owns which GitHub requests Junior may make and which credential grant
- * each request needs.
+ * each request needs. Junior-owned issue, pull request, review, and push
+ * writes never fall back to user OAuth. Merge, fork, branch deletion, REST ref
+ * writes, and administration stay unsupported; unknown REST writes and
+ * GraphQL mutations are denied.
  */
 import {
   EgressPolicyDenied,
diff --git a/packages/junior-google/AGENTS.md b/packages/junior-google/AGENTS.md
deleted file mode 100644
index b5d3737f1e..0000000000
--- a/packages/junior-google/AGENTS.md
+++ /dev/null
@@ -1,19 +0,0 @@
-# Google plugin
-
-- Junior acts as its own Google Workspace account. Never use the Google
-  credentials of the people it helps.
-- Gmail and Drive writes are out of scope.
-- Slack never shows the sign-in link, the code, or a token. Admins connect
-  the account from the dashboard Admin page or `junior google connect`.
-- Do not let sandbox commands or `curl` use the access token. It applies only
-  to declared `www.googleapis.com` operations of this plugin's tools.
-- Add a scope only when a tool needs it.
-- Drive sharing decides what Junior can read. Do not add a second access
-  model in the tools.
-- `findMeetingTimes` reads free/busy data and time zones only, never event
-  titles or details. `listCalendarEvents` never returns descriptions.
-- Do not match meeting transcripts on titles.
-- Mark transcript and file text as untrusted. Junior acts on it only when the
-  requester or an Automation asks.
-- Known gap: the refresh token is plain text in Postgres
-  (getsentry/junior#2065).
diff --git a/packages/junior-google/src/tools/read-meeting-transcript.ts b/packages/junior-google/src/tools/read-meeting-transcript.ts
index 06f08b580a..09d3fd85a4 100644
--- a/packages/junior-google/src/tools/read-meeting-transcript.ts
+++ b/packages/junior-google/src/tools/read-meeting-transcript.ts
@@ -237,7 +237,7 @@ async function readInvitedEvent(
  *
  * Anyone who can edit an event can attach any Doc, so the tool reads only
  * attached Docs that the organizer owns and that were made for this meeting.
- * The package AGENTS.md has the transcript rules.
+ * Never match transcripts on titles. Transcript text is untrusted.
  */
 export function createReadMeetingTranscriptTool(ctx: GoogleToolContext) {
   return definePluginTool({
diff --git a/packages/junior-memory/AGENTS.md b/packages/junior-memory/AGENTS.md
deleted file mode 100644
index b67e3635b7..0000000000
--- a/packages/junior-memory/AGENTS.md
+++ /dev/null
@@ -1,15 +0,0 @@
-# Memory plugin
-
-- The Source sets visibility. Model output never sets it.
-- Location and subject are records. They do not grant access.
-- Filter by visibility and status before content reaches the model.
-- Only the main agent writes memory. Child agent runs get read tools only.
-- Do not log or trace memory content, embeddings, source excerpts, or review
-  prompts.
-- Embeddings are derived indexes, not memory authority. Embedding distance
-  only selects candidates; exact content and model review decide duplicates.
-- Passive extraction never stores tasks, summaries, secrets, or guesses.
-- Do not add provider raw scores together. Search fuses ranks with
-  reciprocal rank fusion.
-- Event `costUsd` is extra operation cost. Do not repeat cost that the agent
-  model usage already records.
diff --git a/packages/junior-plugin-api/AGENTS.md b/packages/junior-plugin-api/AGENTS.md
deleted file mode 100644
index 6db7217573..0000000000
--- a/packages/junior-plugin-api/AGENTS.md
+++ /dev/null
@@ -1,23 +0,0 @@
-# Plugin API
-
-- Keep the package provider-neutral. Add the smallest contract that a plugin
-  needs. Core keeps ownership of the runtime behind it.
-- Export one factory named `<domain>Plugin`, not `create<Domain>Plugin` or a
-  prebuilt registration. Do not define one plugin both inline and in YAML.
-- Source `kind` never names a provider. Actor and Destination use `platform`.
-- Prompt hooks return bounded messages and never change the core prompt.
-- `conversationTitleContext` reads through `ctx.egress` with the system
-  identity and never starts authorization.
-- Scheduler task credential subjects come only from the scheduler plugin and
-  bind to the exact task id.
-- Plugins never get provider credentials for host model or embedding calls.
-- Plugins never mount page routes or browser code.
-- Admin-only API routes check `context.auth.user.isAdmin` on the server.
-- Heartbeat hooks and migrations must be safe to run again.
-- Keep earlier versions of a conversation event registered. Versions share one
-  idempotency identity.
-- Migrations are expand-first. Access to core or other plugin tables is a
-  review boundary.
-- CLI actions never get model, Slack, sandbox, or provider credential context.
-- Object annotations hold only facts that the provider returned and that the
-  current Conversation may see. They never grant provider access.
diff --git a/packages/junior-plugin-api/src/object-annotations.ts b/packages/junior-plugin-api/src/object-annotations.ts
index 739ec056c3..ae26c56168 100644
--- a/packages/junior-plugin-api/src/object-annotations.ts
+++ b/packages/junior-plugin-api/src/object-annotations.ts
@@ -11,7 +11,8 @@ import { objectTypeSchema } from "./object-presentation";
  * selects the fields it needs; preview rules must not remove saved facts.
  *
  * Keep raw responses, diffs, logs, credentials, and comments out of this schema.
- * See "Object annotations and Message cards" in packages/junior/src/chat/conversations/AGENTS.md.
+ * Return only facts that the Conversation audience may see. An annotation
+ * never grants provider access.
  */
 export const objectAnnotationSchema = z
   .object({
diff --git a/packages/junior-tts/AGENTS.md b/packages/junior-tts/AGENTS.md
deleted file mode 100644
index d97dde54c1..0000000000
--- a/packages/junior-tts/AGENTS.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# TTS plugin
-
-- Never retry a request automatically. A failed request can still spend
-  credits. Tests mock the HTTP edge.
-- Send style as `instructions`. Never prepend it to the spoken text.
-- Do not change `junior-v1` after it is accepted. Add a new preset version.
-- The preset holds performance cues only. Never send the persona or
-  user-specific instructions.
-- The script never reads or accepts `AI_GATEWAY_API_KEY`.
diff --git a/packages/junior-vercel/AGENTS.md b/packages/junior-vercel/AGENTS.md
deleted file mode 100644
index e5f9383ef2..0000000000
--- a/packages/junior-vercel/AGENTS.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Vercel plugin
-
-- Tools return selected fields, never full deployment records, which can
-  contain secrets.
-- When a write response is lost, check provider state before a retry.
-- Alias checks are not locks. An alias move does not prove which build
-  handles later work.
-- A valid webhook delivery never creates a watch.
diff --git a/packages/junior/.dependency-cruiser.mjs b/packages/junior/.dependency-cruiser.mjs
index 5448a99f63..432f75791c 100644
--- a/packages/junior/.dependency-cruiser.mjs
+++ b/packages/junior/.dependency-cruiser.mjs
@@ -52,7 +52,7 @@ export default {
     {
       name: "no-review-items-to-slack",
       comment:
-        "Review item code is provider-neutral. App setup injects Slack cards and mentions; see src/chat/review-items/AGENTS.md.",
+        "Review item code is provider-neutral. App setup injects Slack cards and mentions.",
       severity: "error",
       from: {
         path: "^src/chat/(review-items/|tools/review-items\\.ts$)",
diff --git a/packages/junior/migrations/AGENTS.md b/packages/junior/migrations/AGENTS.md
deleted file mode 100644
index e932f04ffb..0000000000
--- a/packages/junior/migrations/AGENTS.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# SQL Migrations
-
-- Never edit, rename, reorder, or delete an applied migration or its
-  metadata. Add a new migration to correct it.
-- Put fixed row transformations in the migration that needs them.
-- Keep the guard in `src/chat/conversations/sql/migrations.ts` that makes a
-  schema without the core Drizzle journal upgrade through
-  `@sentry/junior@0.107.1` first.
diff --git a/packages/junior/src/api/acp/AGENTS.md b/packages/junior/src/api/acp/AGENTS.md
deleted file mode 100644
index c98dcfc37e..0000000000
--- a/packages/junior/src/api/acp/AGENTS.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Remote ACP
-
-- ACP is a pre-stable surface.
-- No adapter or plugin contract sits between ACP and the runtime. No ACP type
-  enters the agent loop.
-- Client paths do not select the Junior Sandbox. Store prompt resource links
-  as text. Never fetch their URIs.
-- Store connection credentials only as hashes.
diff --git a/packages/junior/src/api/conversations/AGENTS.md b/packages/junior/src/api/conversations/AGENTS.md
deleted file mode 100644
index de4bf024e9..0000000000
--- a/packages/junior/src/api/conversations/AGENTS.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# Conversation REST Resources
-
-- Stored events are not a REST contract. Do not expose replacement history,
-  opaque provider metadata, or fields the reporting API does not own.
-- Projections are append-only: later facts make new observations. Clients
-  reduce observations by stable identity.
-- Keep start-context and model-settings lookups bounded. Do not widen or merge
-  cached REST resources.
-- Never fill missing historical model settings from current host config.
diff --git a/packages/junior/src/api/mcp/AGENTS.md b/packages/junior/src/api/mcp/AGENTS.md
deleted file mode 100644
index 061b7d02c0..0000000000
--- a/packages/junior/src/api/mcp/AGENTS.md
+++ /dev/null
@@ -1,21 +0,0 @@
-# Remote MCP
-
-- This is the MCP server. `src/chat/mcp/` is the client for plugin MCP
-  servers. Do not mix the two.
-- `listConversations` relies on the membership guarantee of
-  `readConversationFeed`. Never pass `codeRepositoryId` or `actorEmail`.
-- Keep OAuth records in the `StateAdapter` with a TTL. No table.
-- Clients identify only with Client ID Metadata Documents (CIMD). No client
-  registration.
-- Store only SHA-256 hashes of codes, tokens, and consent form tokens.
-- An invalid `client_id` or redirect URI gets an HTML `400`. Never redirect to
-  an unchecked URI.
-- A CIMD fetch connects only to public addresses on its own socket and does
-  not follow redirects. Cache failed fetches, because authorize needs no
-  sign-in.
-- PKCE `S256` is required. The only scope is `conversations:read`. The
-  `resource` must be the exact `/api/mcp` URL.
-- The first signed-in user who opens a consent page owns it. Approve and deny
-  need a same-origin `POST` with that user's newest form token.
-- A refresh token reuse inside the rotation grace window gets `invalid_grant`
-  and keeps the grant.
diff --git a/packages/junior/src/chat/AGENTS.md b/packages/junior/src/chat/AGENTS.md
deleted file mode 100644
index 71d5fd75e5..0000000000
--- a/packages/junior/src/chat/AGENTS.md
+++ /dev/null
@@ -1,24 +0,0 @@
-# Chat Runtime
-
-- The native runtime must not import a provider layer. Low-level provider
-  adapters must not orchestrate Turns.
-- Runtime and service modules use small injected ports, never provider
-  implementations or the production singleton.
-- Verify Slack authors before storage, routing, or reactions
-  (`ingress/workspace-membership.ts`). Event delivery does not prove
-  membership.
-- Keep Source, Actor, Location, and Delivery separate: no shared type, routing
-  object, or wrapper. The work owner supplies Delivery before each new or
-  resumed Run. Source, Actor, and Location do not select it.
-- Attribution does not grant authority. Credentials need the current Actor or
-  an explicit delegated credential subject.
-- Only `<current-instruction>` authorizes work. Request context, such as
-  plugin context and Conversation notes, is true only for its own Turn.
-- Commit durable state before you acknowledge queue work or yield.
-- Tool registration depends on the Conversation, not the Turn. To block a tool
-  for one Turn, set `disabledReason` with `disableTools`. Do not remove it or
-  put Turn text in its description or schema; this keeps the provider cache.
-- Prompt, tools, and Delivery read `dispatch.declaresResult`. They do not
-  check the Source.
-- Progress uses the status surface, never an assistant reply. `no_reply`
-  needs an intentional no-reply. Missing text is not silence.
diff --git a/packages/junior/src/chat/agent-dispatch/AGENTS.md b/packages/junior/src/chat/agent-dispatch/AGENTS.md
deleted file mode 100644
index a76e50f26a..0000000000
--- a/packages/junior/src/chat/agent-dispatch/AGENTS.md
+++ /dev/null
@@ -1,13 +0,0 @@
-# Agent Dispatch
-
-- Slack Delivery (`../slack/dispatch-turn.ts`) receives only dispatch-owned
-  contracts.
-- The mailbox carries no credential authority. The first Run reads Actor,
-  credential subject, Source, Destination, and plugin metadata from the
-  dispatch record.
-- Index the dispatch before the mailbox append. `heartbeat.ts` repairs a crash
-  between those writes.
-- Take the dispatch lock only while you hold the Conversation lease. Never wait
-  for a Conversation lease while you hold the dispatch lock.
-- Do not store the fallback title. The API shows the Automation name until a
-  title is generated.
diff --git a/packages/junior/src/chat/agent-dispatch/context.ts b/packages/junior/src/chat/agent-dispatch/context.ts
index c98f5a47f8..058f27f48e 100644
--- a/packages/junior/src/chat/agent-dispatch/context.ts
+++ b/packages/junior/src/chat/agent-dispatch/context.ts
@@ -192,6 +192,8 @@ export async function dispatchScheduledAutomation(args: {
     };
   };
 }) {
+  // Also the signed credential binding label. A rename breaks existing task
+  // credentials.
   const plugin = "scheduler";
   const { credentialSubject, outcomes, ...unboundOptions } = args.options;
   validateDispatchOptions({ ...unboundOptions });
diff --git a/packages/junior/src/chat/agent-invocations/AGENTS.md b/packages/junior/src/chat/agent-invocations/AGENTS.md
deleted file mode 100644
index e89f943dd1..0000000000
--- a/packages/junior/src/chat/agent-invocations/AGENTS.md
+++ /dev/null
@@ -1,16 +0,0 @@
-# Agent Invocations
-
-- Mailbox entries hold only the invocation reference. SQL (`store.ts`) owns
-  invocation status, execution authority, and terminal results.
-- Write the invocation before the mailbox append. Write `subagent_started`
-  before the child mailbox append, so the child cannot end first.
-- Append the result to the parent mailbox before you acknowledge child work.
-- Derive ids and idempotency keys from the invocation id or Inbound message
-  id, so retries and repairs never add a second Turn, invocation, or row.
-- Pick the child worker from the stored `parentConversationId`, never from the
-  Turn Source (a child watch-event Turn has an event Source).
-- An Agent type (`agent-types.ts`) is data. Read its fields, never its name.
-  Types do not limit tools.
-- A top-level agent message (`top-level-message.ts`) runs as the event system
-  Actor. It never carries the sender's Actor or credentials. Check its access
-  on each send: same tenant, same scope, and a member for a private target.
diff --git a/packages/junior/src/chat/agent-invocations/blocked-report.ts b/packages/junior/src/chat/agent-invocations/blocked-report.ts
index ccf536d228..1c19206223 100644
--- a/packages/junior/src/chat/agent-invocations/blocked-report.ts
+++ b/packages/junior/src/chat/agent-invocations/blocked-report.ts
@@ -1,4 +1,4 @@
-/** Blocked report of a child agent. See "Delivery rules" in AGENTS.md. */
+/** Blocked report of a child agent. */
 import { z } from "zod";
 import {
   isToolResultError,
diff --git a/packages/junior/src/chat/attachments/AGENTS.md b/packages/junior/src/chat/attachments/AGENTS.md
deleted file mode 100644
index df3c393a3f..0000000000
--- a/packages/junior/src/chat/attachments/AGENTS.md
+++ /dev/null
@@ -1,14 +0,0 @@
-# Conversation Attachments
-
-- Runtime code calls `getAttachmentStorage()` and does not choose a provider.
-  Only adapter tests call `createAttachmentStorage`.
-- Write the object first, then the SQL row. A row means the attachment is
-  durable.
-- Cleanup deletes only the object of its own write attempt, never another
-  writer's blob.
-- Keep post-insert purge handling outside the insert cleanup catch. A later
-  error must not delete the blob of a committed row.
-- Live reads load SQL first.
-- Web input stores image bytes before it enqueues the Message. Mailbox rows
-  and Messages keep only file metadata.
-- Reporting does not fetch missing files from Slack.
diff --git a/packages/junior/src/chat/automations/AGENTS.md b/packages/junior/src/chat/automations/AGENTS.md
deleted file mode 100644
index 14153eee36..0000000000
--- a/packages/junior/src/chat/automations/AGENTS.md
+++ /dev/null
@@ -1,10 +0,0 @@
-# Automations
-
-- `resolveViewerTaskCandidate` (`read.ts`) and `viewerAutomationCollection`
-  (`collection.ts`) apply the same access rule. Change both together.
-- Creator credentials run only work the creator approved. `edit-rules.ts`
-  owns which changes need the creator or switch to system credentials.
-- A run does not see the request that created it. Stored instructions must
-  name exact targets and Slack mentions.
-- `automationIdForToolCall` keeps the pre-merge id for each kind, so a
-  replayed create finds its Automation.
diff --git a/packages/junior/src/chat/conversations/AGENTS.md b/packages/junior/src/chat/conversations/AGENTS.md
deleted file mode 100644
index ba79900c24..0000000000
--- a/packages/junior/src/chat/conversations/AGENTS.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Conversations
-
-- `junior_conversation_events` is the only transcript and agent-history
-  table. Do not add a second history store or a message projection table.
-- `message` events are chat content for display, delivery, privacy, and
-  search. `user_message`, `assistant_message`, and `tool_result` are replayable
-  agent history. Do not use one kind for the other.
-- Store and replay `<runtime-turn-context>` unchanged. Replay decodes stored
-  message JSON as-is. Do not rebuild it from a field list.
-- Only `compaction` and `handoff` replace active agent history.
-  `messages_summarized` does not.
-- Every write for one Conversation takes its advisory lock
-  (`withConversationEventLock`). A new write path must take it too.
-- `Conversation.location` is the only Location field for new code. Privacy is
-  in `Conversation.visibility`, which children, Agent invocations, and plugin
-  projections inherit.
-- Conversation notes are context, never user intent. Only core adds one, and
-  a note never starts a Turn.
-
-## Object annotations and Message cards
-
-- An annotation is the latest saved facts, not the object store. Show a
-  missing one as unavailable, never as stale facts.
-- Plugins return only facts safe for the Conversation audience. Cards do not
-  expand provider permissions. Detail views use Conversation access, not the
-  original actor's credentials.
-- Core and the web do not parse provider URLs to guess a type.
-- Change the icon asset path version when an existing image changes.
diff --git a/packages/junior/src/chat/conversations/notes.ts b/packages/junior/src/chat/conversations/notes.ts
index d845e8edbf..c651e3576e 100644
--- a/packages/junior/src/chat/conversations/notes.ts
+++ b/packages/junior/src/chat/conversations/notes.ts
@@ -1,8 +1,8 @@
 /**
  * Conversation notes: short facts that core attaches to a Conversation without
  * starting a Turn. The next Turn shows them to the model in its runtime turn
- * context. A failed Turn also becomes a note for the next Turn. See
- * "Conversation notes" in AGENTS.md.
+ * context. A failed Turn also becomes a note for the next Turn. A note is
+ * context, never user intent, and only core adds one.
  */
 import { getConversationEventStore } from "@/chat/db";
 import {
diff --git a/packages/junior/src/chat/conversations/sql/migrations.ts b/packages/junior/src/chat/conversations/sql/migrations.ts
index 979029770d..a83017796e 100644
--- a/packages/junior/src/chat/conversations/sql/migrations.ts
+++ b/packages/junior/src/chat/conversations/sql/migrations.ts
@@ -6,6 +6,8 @@ import type { JuniorSqlMigrationExecutor } from "@/db/db";
 import { isPostgresErrorCode } from "@/db/postgres-error";
 import { juniorSqlSchema as schema } from "@/db/schema";
 
+// A schema without the core Drizzle journal must upgrade through this release
+// first. Keep this guard.
 const CORE_MIGRATION_BRIDGE_VERSION = "0.107.1";
 const MIGRATIONS_TABLE = "__drizzle_junior_core";
 
diff --git a/packages/junior/src/chat/credentials/AGENTS.md b/packages/junior/src/chat/credentials/AGENTS.md
deleted file mode 100644
index 6804030489..0000000000
--- a/packages/junior/src/chat/credentials/AGENTS.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# Credentials And OAuth
-
-- Long-lived secrets never reach the model or the Sandbox. They stay in host
-  storage and host-applied headers.
-- Build credential context only with `credentialContextForActor` after the
-  run Actor is set. Do not build a parallel Actor or credential shape.
-- A subject other than the current Actor needs explicit delegation in the
-  durable execution context: a system Actor and `credentialContext.subject`.
-  Conversation membership grants no provider authority.
-- Everyone who can talk to Junior can use what the service account allows,
-  so the provider account must see only what all of them may see.
-- Each surface asks `serviceAccountAllows` before it uses the service account
-  and `serviceAccountOnly` before it falls back to Actor auth. A new surface
-  adds one list to `accounts.service-account` and one request kind to
-  `serviceAccountAllows`.
-- Deliver authorization URLs privately. Public output has no reusable URL or
-  token.
diff --git a/packages/junior/src/chat/event-automations/AGENTS.md b/packages/junior/src/chat/event-automations/AGENTS.md
deleted file mode 100644
index f8b4c30b82..0000000000
--- a/packages/junior/src/chat/event-automations/AGENTS.md
+++ /dev/null
@@ -1,16 +0,0 @@
-# Event automations
-
-- `resourceType` and `label` are display data, not match keys.
-- Validate selectors against the enabled plugin catalog before save and
-  before each run. Do not trust model-facing schemas. Log and skip a bad row,
-  so one row cannot stop ingest for its namespace.
-- The stored Automation text is the instruction. Event text never adds
-  instructions.
-- The automated-turn limit does not apply to dispatches. `run-limit.ts` is
-  the only brake on a noisy trigger. Count with the atomic append keyed by
-  the event. Do not add a lock.
-- Multi-workspace Slack mode fails closed until plugins can bind a provider
-  to a workspace.
-- A Slack `message.posted` Automation can watch only the channel where it
-  posts, and always runs with system credentials, because anyone in the
-  channel writes the Event text.
diff --git a/packages/junior/src/chat/events/AGENTS.md b/packages/junior/src/chat/events/AGENTS.md
deleted file mode 100644
index 0465e7e95a..0000000000
--- a/packages/junior/src/chat/events/AGENTS.md
+++ /dev/null
@@ -1,21 +0,0 @@
-# Events
-
-- Core never reads the raw provider webhook, and Events never carry it. Keep
-  `data` small and trusted.
-- `eventTriggerProblems` in the plugin API is the only trigger check. Do not
-  copy its rules into core, tools, or the dashboard.
-- Keep `EventResourceTypeLimits` (`catalog.ts`) out of the plugin API and API
-  responses.
-- Use Event reach `"all"` only for status facts with no side effects. Use
-  `{ anyOf }` or `"resource"` when an Event carries private text or makes
-  Junior act.
-- `eventKey` names one provider change. Retries and copies sent to several
-  identifiers use the same key and `data`. Set `terminal` only on the copy
-  for the exact resource that the change ends.
-- A Watch stores only the Conversation id. Do not add Destination or
-  Location.
-- Event text, provider content, and `people` are facts. They never grant
-  authority or add instructions.
-- Timer Watches: write the Redis due index before the record, under the Watch
-  and Conversation locks. Remove a stale entry only after a check of the
-  record under the Watch lock.
diff --git a/packages/junior/src/chat/guardian/AGENTS.md b/packages/junior/src/chat/guardian/AGENTS.md
deleted file mode 100644
index 5926ae9145..0000000000
--- a/packages/junior/src/chat/guardian/AGENTS.md
+++ /dev/null
@@ -1,14 +0,0 @@
-# Guardian
-
-- The model names a risk, an authorization level, and one block rule.
-  `guardianDecision` turns that into `allow`, `ask`, or `deny`. Never let the
-  model pick the decision.
-- Only the `context` of a proposal is authority. Tool input, descriptions,
-  annotations, evidence, the proposal `script`, and prior rejections are
-  untrusted.
-- Keep block rules broad. Do not name a tool or provider in a rule.
-- `proposalTool()` in `gate.ts` is the only builder of the proposal `tool`
-  field. The Guardian evals call it.
-- The rejection marker is a durable format with `version: 1`. A shape change
-  needs a new version or a migration.
-- CI runs `evals:guardian` for each change in this directory.
diff --git a/packages/junior/src/chat/guardian/history.ts b/packages/junior/src/chat/guardian/history.ts
index d833468b28..14bf525a12 100644
--- a/packages/junior/src/chat/guardian/history.ts
+++ b/packages/junior/src/chat/guardian/history.ts
@@ -53,7 +53,10 @@ const rejectionMarkerSchema = z
     version: z.literal(1),
   })
   .strict();
-/** Core-owned versioned transcript state for one rejected action. */
+/**
+ * Core-owned versioned transcript state for one rejected action. Stored
+ * transcripts keep it, so a shape change needs a new version.
+ */
 export type ToolActionRejectionMarker = z.output<typeof rejectionMarkerSchema>;
 
 function isRecord(value: unknown): value is Record<string, unknown> {
diff --git a/packages/junior/src/chat/queue/AGENTS.md b/packages/junior/src/chat/queue/AGENTS.md
deleted file mode 100644
index 1b2c5a4f6c..0000000000
--- a/packages/junior/src/chat/queue/AGENTS.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Queue
-
-- `bullmq.ts` imports `bullmq` and `redis` by a variable name so bundlers keep
-  them out of production. Do not change these to static imports.
-- BullMQ is not Vercel Queues. Its idempotency key drops a second send only
-  while BullMQ keeps the first job. It renews the lock of a running job and
-  does not redeliver a slow job after `visibilityTimeoutSeconds`.
diff --git a/packages/junior/src/chat/review-items/AGENTS.md b/packages/junior/src/chat/review-items/AGENTS.md
deleted file mode 100644
index 86351b4705..0000000000
--- a/packages/junior/src/chat/review-items/AGENTS.md
+++ /dev/null
@@ -1,18 +0,0 @@
-# Review items
-
-- An action item is the only way the agent asks a person for input. Do not
-  add another path.
-- `access.ts` owns every access rule. Do not copy a rule into a caller.
-- A plugin notice is assigned only to people in its Conversation, public or
-  private. Junior leaves out the other assignees that the plugin gives.
-- Agent tools read as the Conversation, not the Actor
-  (`readReviewItemAgentScope`), so an agent cannot copy private content into
-  another Conversation of the same User.
-- An agent close is an Event and does not give user approval. A person action
-  is a web Message with the authority of that person.
-- `closeReviewItemsAnsweredByReply` saves the message before it closes items,
-  so the reply always reaches the agent.
-- Tests have no reply decision model. The classifier eval
-  `review-item-replies.eval.ts` checks which items a reply answers.
-- An open private item from an Automation run survives a purge, because a
-  later run can change it.
diff --git a/packages/junior/src/chat/review-items/access.ts b/packages/junior/src/chat/review-items/access.ts
index 7e1b27ef9a..01faeb60e1 100644
--- a/packages/junior/src/chat/review-items/access.ts
+++ b/packages/junior/src/chat/review-items/access.ts
@@ -19,8 +19,8 @@ import {
 } from "./assignees";
 import type { ReviewItem, ReviewItemVisibility } from "./store";
 
-// Every Review item access rule lives in this file. See "Access" in
-// AGENTS.md for the product rules that each function applies.
+// Every Review item access rule lives in this file. Callers must not copy a
+// rule.
 
 /**
  * Who reads Review items. An item is visible when it is public and its
diff --git a/packages/junior/src/chat/sandbox/AGENTS.md b/packages/junior/src/chat/sandbox/AGENTS.md
deleted file mode 100644
index 7556f741e9..0000000000
--- a/packages/junior/src/chat/sandbox/AGENTS.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# Sandbox
-
-- Do not switch `JUNIOR_SANDBOX_PROVIDER` on a database or Redis that holds
-  Sandbox names or snapshot ids of the other provider.
-- Durable state stores only an opaque `SandboxRef`. Persist a new one before
-  more async preparation. A failed Workspace switch candidate leaves the
-  current Sandbox unchanged.
-- An unavailable session fails the current operation without replay.
-- Agent runs do not stop Sandboxes. Temporary owners, such as snapshot
-  builds, stop their own.
-- The Sandbox filesystem is not product storage. Generated files become
-  shareable only through artifact validation and delivery planning.
-- Bash `cwd` does not select `AGENTS.md` scope. Do not track shell `cd`.
-- Repository instructions are user context with less authority than direct
-  instructions. Sandbox tool results never contain them.
-
-## Snapshots
-
-- SQL (`junior_snapshots`) is the only source of Workspace snapshot state.
-  Redis holds only the build lock and its fencing.
-- A ready snapshot keeps its builder Sandbox, because deleting the builder
-  deletes the snapshot. Delete the builder only after the ready row is
-  discarded.
-- Snapshot state and Sandbox commands never get real provider credentials.
-  Setup scripts run after Junior removes the credential route.
-
-## Egress
-
-- `executeSandboxEgressRequest` gets only the verified VM id, the upstream
-  URL, and the signed credential token. It must not read provider headers.
-- The Docker provider is for local development and QA. Do not run untrusted
-  workloads with it.
-- Each Docker Sandbox has its own network. On a shared bridge, a privileged
-  Sandbox can take another Sandbox's IP and get its credentials.
-- On non-Linux hosts, do not replace the per-Sandbox relay in
-  `docker/relay.ts` with a port per Sandbox; a Sandbox could connect to
-  another port.
diff --git a/packages/junior/src/chat/scheduled-automations/AGENTS.md b/packages/junior/src/chat/scheduled-automations/AGENTS.md
deleted file mode 100644
index 3bf62a219a..0000000000
--- a/packages/junior/src/chat/scheduled-automations/AGENTS.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# Scheduled automations
-
-- Keep `scheduler` as the dispatch label. It is also the signed task
-  credential binding label, so a change breaks existing task credentials.
-- Do not put the timezone on the Actor. The Actor is stored with each
-  Message, and a timezone is a preference that can change.
-- Do not emulate a Destination move with create and delete. A move keeps the
-  Automation id, Schedule, creator, credential mode, and next run.
diff --git a/packages/junior/src/chat/slack/AGENTS.md b/packages/junior/src/chat/slack/AGENTS.md
deleted file mode 100644
index aa9969174f..0000000000
--- a/packages/junior/src/chat/slack/AGENTS.md
+++ /dev/null
@@ -1,22 +0,0 @@
-# Slack Adapter
-
-- Do not add custom `chat.update` streaming loops unless Slack forces it.
-- Runtime code reads `MessageContent` from `message/content.ts`, not
-  `message.raw`. Block and attachment projections accept unknown fields.
-- Plain channel names resolve only against stored destinations. Do not scan
-  Slack with `conversations.list`.
-- Reactions and status messages are progress UI, not delivery contracts.
-- OAuth links and other private authorization data use private delivery.
-
-## Work Object Cards
-
-- The Slack app needs Work Object Previews for Item and Task, and the
-  `entity_details_requested` event at `/api/webhooks/slack`.
-- `external_ref` encoding does not grant access or hide the reference.
-- Slack can refresh shared previews from detail data. Do not put
-  viewer-specific labels, credential data, or viewer-only provider fields in
-  previews or details.
-- Details show saved facts, not a live provider lookup. Do not change saved
-  facts or dashboard cards to make Slack previews smaller.
-- Payload tests do not prove Slack rendering. Check changed previews manually
-  in a test Slack Conversation.
diff --git a/packages/junior/src/chat/task-execution/AGENTS.md b/packages/junior/src/chat/task-execution/AGENTS.md
deleted file mode 100644
index 70200741fb..0000000000
--- a/packages/junior/src/chat/task-execution/AGENTS.md
+++ /dev/null
@@ -1,22 +0,0 @@
-# Task Execution
-
-- A queue message only tells a worker to check for work. Do not put work or
-  authority in queue payloads.
-- The Conversation lease is the only owner of queue-driven execution. Never
-  run one Conversation in parallel.
-- `turn-cursor.ts` is private to this module. Use `checkpoint.ts`.
-- Dispatch and Agent invocation ids come from mailbox metadata, then the
-  checkpoint. Never from the queue payload, the Conversation Source, or
-  Conversation id patterns.
-- Child work without a Destination gets its authority from its stored Agent
-  invocation.
-- A web Turn drains steered web messages only from the Turn Actor.
-- Dispatch projection updates take the dispatch lock only while they hold the
-  Conversation lease. Lock order stays one-way.
-- Heartbeats repair missing wakes and abandoned leases. Do not make them a
-  second scheduler for healthy work.
-- OAuth callbacks never run the agent or write agent history.
-- Runtime status is `paused`. The SQL label `awaiting_resume` does not define
-  execution state.
-- `tests/integration/durable-queue.test.ts` uses the production
-  `createConversationWork`. It may fake only model generation and Slack I/O.
diff --git a/packages/junior/src/db/schema/review-items.ts b/packages/junior/src/db/schema/review-items.ts
index 0dc2db2de9..c27af22a6e 100644
--- a/packages/junior/src/db/schema/review-items.ts
+++ b/packages/junior/src/db/schema/review-items.ts
@@ -19,8 +19,8 @@ import { timestamptz } from "./timestamps";
 import { juniorUsers } from "./users";
 
 /**
- * One Review item: something that needs a person. See
- * `chat/review-items/AGENTS.md`. An action item stores its `request`, and
+ * One Review item: something that needs a person. An action item stores its
+ * `request`, and
  * its `answer` after an assignee submits it. `closed_at` is set for `done`
  * and `dismissed`. `closed_by_user_id` is null when an agent closed it.
  */
diff --git a/packages/junior/tests/AGENTS.md b/packages/junior/tests/AGENTS.md
deleted file mode 100644
index c31d0015b0..0000000000
--- a/packages/junior/tests/AGENTS.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# Junior Test Harness
-
-- No per-test MSW servers. Do not mock the Slack SDK for outbound contract
-  tests.
-- Every `completeObject` schema must pass `strictProviderSchemaProblems` in
-  its owning unit test. The gateway reports strict-schema errors only at
-  request time.
-- Keep Vitest file parallelism. Database isolation is per worker.
-- S3 storage tests need `docker compose up -d s3` from the repo root.
diff --git a/packages/junior/tests/component/plugins/plugin-run-actors.test.ts b/packages/junior/tests/component/plugins/plugin-run-actors.test.ts
index 2a1a71f1cb..d44fcc3869 100644
--- a/packages/junior/tests/component/plugins/plugin-run-actors.test.ts
+++ b/packages/junior/tests/component/plugins/plugin-run-actors.test.ts
@@ -2,8 +2,8 @@ import { afterAll, afterEach, describe, expect, it, vi } from "vitest";
 import { createLocalSource, type Destination } from "@sentry/junior-plugin-api";
 
 /**
- * Proves the `run.actors` runtime threading contract from
- * `packages/junior/src/chat/AGENTS.md`: the live actors getter passed into the plugin
+ * Proves the `run.actors` runtime threading contract: the live actors getter
+ * passed into the plugin
  * hook runner is seeded from the run actor and grows as steering messages
  * with a resolvable actor drain into the run, without ever including an
  * unattributable steering message.
diff --git a/policies/README.md b/policies/README.md
index caf9408280..58db1044ad 100644
--- a/policies/README.md
+++ b/policies/README.md
@@ -14,7 +14,7 @@ Do not use policies for:
 - copied schemas, commands, or test inventories
 - public product docs
 
-Put module intent and invariants in the owning directory's `AGENTS.md`. Follow
+Put module intent and invariants in code comments next to the code. Follow
 `documentation.md`. Code, runtime schemas, exported types, and tests define the real
 contract. Temporary plans live under `../openspec/changes/` and cannot override
 policy.
diff --git a/policies/documentation.md b/policies/documentation.md
index f59c5fce5e..c4d3d43797 100644
--- a/policies/documentation.md
+++ b/policies/documentation.md
@@ -12,12 +12,11 @@ current.
 - `README.md` is for people who find a package on GitHub or npm. npm always
   publishes it. Keep it to the purpose, install or setup, and a link to
   `junior.sentry.dev`. Do not put internal design in it.
-- Internal notes for a directory go in `AGENTS.md` in that directory. Add one
-  only when the directory has rules that one file does not show.
-- An `AGENTS.md` states intent and policy:
-  - why the module exists, what it owns, and what it does not own
-  - invariants and boundaries, including things that must not happen
-  - safety, privacy, delivery, and recovery rules that are easy to break
+- The repo root `AGENTS.md` is the only one. Do not add one in a directory.
+  Directory docs grew with each patch and repeated what the code shows.
+- Code defines its own design. Put an invariant, a boundary, or a rule that is
+  easy to break in a comment next to the code that it governs (see
+  `code-comments.md`). Put a repo-wide rule in a policy.
 - Do not write feature descriptions, tool-by-tool behavior, step lists that
   repeat the code, schemas, test inventories, history, or rollout notes. The
   code, types, and tests own those.
@@ -33,7 +32,7 @@ current.
 - Reference docs that agents look up, such as `TELEMETRY.md` and setup guides,
   can be long. Keep them current and free of repeated text. `TELEMETRY.md` and
   `TERMINOLOGY.md` have at most 1,000 lines.
-- `pnpm file-length:check` enforces these limits.
+- `pnpm file-length:check` enforces these limits and the single `AGENTS.md`.
 - Change a doc only when intent, an invariant, or a boundary changes. Do not
   add a paragraph for each feature. When you add a rule, remove a rule that is
   stale.
diff --git a/policies/evals.md b/policies/evals.md
index e472cb4ecd..7ed75897b2 100644
--- a/policies/evals.md
+++ b/policies/evals.md
@@ -3,7 +3,7 @@
 ## Intent
 
 Evals are integration tests for agent-facing behavior through the real
-runtime. Harness mechanics live in `packages/junior-evals/AGENTS.md`.
+runtime. Harness mechanics live in `packages/junior-evals/src/`.
 
 ## Policy
 
diff --git a/policies/frontend-components.md b/policies/frontend-components.md
index c3b8da7122..2402ae4b41 100644
--- a/policies/frontend-components.md
+++ b/policies/frontend-components.md
@@ -13,7 +13,7 @@ consistent.
 - Put repeated surfaces (charts, drawers, tables, secondary nav, time-range
   controls, `Field`, `Input`, `StatusChip`, `Section`, `Toolbar`,
   `EmptyState`) in shared components. Dashboard home:
-  `packages/junior-dashboard/src/client/components/`. See its `AGENTS.md`.
+  `packages/junior-dashboard/src/client/components/`.
 - Extract on the second real use, or when a third use is certain. Not on taste.
 - Keep pages thin: compose shared components and wire data.
 - Own page filters and secondary nav in one shared layout control. Sections
diff --git a/scripts/check-dashboard-styles.mjs b/scripts/check-dashboard-styles.mjs
index 4dfb586447..86a2c69b08 100644
--- a/scripts/check-dashboard-styles.mjs
+++ b/scripts/check-dashboard-styles.mjs
@@ -272,7 +272,7 @@ function main() {
     ...check.lines.map((line) => `  ${line}`),
   ]);
   errors.push(
-    "Fix the design, not the match. Do not split class strings, build class names at runtime, or move values into inline styles to pass. See packages/junior-dashboard/src/client/components/AGENTS.md.",
+    "Fix the design, not the match. Do not split class strings, build class names at runtime, or move values into inline styles to pass. See policies/frontend-components.md.",
   );
   console.error(["Dashboard style check failed:", ...errors].join("\n"));
   process.exitCode = 1;
diff --git a/scripts/check-file-length.mjs b/scripts/check-file-length.mjs
index 841bdb4ead..6d6a3f77bc 100644
--- a/scripts/check-file-length.mjs
+++ b/scripts/check-file-length.mjs
@@ -19,6 +19,10 @@ const DOC_GUIDANCE =
   "owns into its JSDoc and procedures into a skill. See " +
   "policies/documentation.md.";
 
+const NESTED_AGENTS_GUIDANCE =
+  "Only the repo root has an AGENTS.md. Put intent in a code comment next " +
+  "to the code that it governs. See policies/documentation.md.";
+
 const CODE_EXTENSIONS = new Set([".cjs", ".js", ".jsx", ".mjs", ".ts", ".tsx"]);
 const DOC_FILENAMES = new Set(["AGENTS.md", "README.md"]);
 const REFERENCE_DOC_PATHS = new Set(["TELEMETRY.md", "TERMINOLOGY.md"]);
@@ -87,6 +91,13 @@ export function isCoreDoc(filePath) {
   );
 }
 
+/** An AGENTS.md below the repo root. */
+export function isNestedAgentsDoc(filePath) {
+  return (
+    filePath !== "AGENTS.md" && path.posix.basename(filePath) === "AGENTS.md"
+  );
+}
+
 /** Reference docs that agents look up. They may be long, but not unbounded. */
 export function isReferenceDoc(filePath) {
   return REFERENCE_DOC_PATHS.has(filePath);
@@ -139,6 +150,9 @@ function main() {
       MAX_CODE_FILE_LINES,
       DOC_GUIDANCE,
     ),
+    ...collectFiles(root, isNestedAgentsDoc).map(
+      (file) => `${file.path}: ${NESTED_AGENTS_GUIDANCE}`,
+    ),
   ];
   if (errors.length === 0) {
     console.log(
diff --git a/scripts/check-file-length.test.mjs b/scripts/check-file-length.test.mjs
index 5bcef38ec7..4d6410df03 100644
--- a/scripts/check-file-length.test.mjs
+++ b/scripts/check-file-length.test.mjs
@@ -4,6 +4,7 @@ import {
   checkFileLengths,
   countFileLines,
   isCoreDoc,
+  isNestedAgentsDoc,
   isReferenceDoc,
 } from "./check-file-length.mjs";
 
@@ -58,7 +59,7 @@ test("reports stale and invalid exceptions", () => {
 });
 
 test("separates core docs from reference docs", () => {
-  assert.equal(isCoreDoc("packages/junior/src/chat/AGENTS.md"), true);
+  assert.equal(isCoreDoc("AGENTS.md"), true);
   assert.equal(isCoreDoc("packages/junior-github/README.md"), true);
   assert.equal(isCoreDoc("policies/testing.md"), true);
   assert.equal(isCoreDoc("TELEMETRY.md"), false);
@@ -66,3 +67,8 @@ test("separates core docs from reference docs", () => {
   assert.equal(isCoreDoc("CONTRIBUTING.md"), false);
   assert.equal(isReferenceDoc("CONTRIBUTING.md"), false);
 });
+
+test("allows AGENTS.md only at the repo root", () => {
+  assert.equal(isNestedAgentsDoc("AGENTS.md"), false);
+  assert.equal(isNestedAgentsDoc("packages/junior/src/chat/AGENTS.md"), true);
+});
diff --git a/scripts/check-test-architecture.mjs b/scripts/check-test-architecture.mjs
index c07f5bce13..664008e402 100644
--- a/scripts/check-test-architecture.mjs
+++ b/scripts/check-test-architecture.mjs
@@ -342,7 +342,7 @@ function main() {
     [
       "Test architecture check failed:",
       ...errors,
-      `Fix the test to follow the rule. Do not rename, alias, or wrap the matched code, and do not add or raise entries in ${AGENT_TEST_BASELINE_PATH}, to pass. See policies/testing.md, packages/junior/tests/AGENTS.md, and packages/junior-evals/AGENTS.md.`,
+      `Fix the test to follow the rule. Do not rename, alias, or wrap the matched code, and do not add or raise entries in ${AGENT_TEST_BASELINE_PATH}, to pass. See policies/testing.md and policies/evals.md.`,
     ].join("\n"),
   );
   process.exitCode = 1;
diff --git a/skills/junior/SKILL.md b/skills/junior/SKILL.md
index 7aeb713f0e..d970475ed3 100644
--- a/skills/junior/SKILL.md
+++ b/skills/junior/SKILL.md
@@ -33,8 +33,8 @@ Maintenance: [SPEC.md](SPEC.md). Provenance: [SOURCES.md](SOURCES.md).
 2. Inspect:
 
 - Inspect nearby `SKILL.md` files, `plugin.yaml` manifests, app docs, and package metadata.
-- In this repo, treat `packages/junior-plugin-api/AGENTS.md`, exported types,
-  and validators as authoritative.
+- In this repo, treat `packages/junior-plugin-api` exported types and
+  validators as authoritative.
 - Preserve: placement, manifest authority, credential secrecy, validation, discovery.
 
 3. Choose shape:
diff --git a/skills/junior/SOURCES.md b/skills/junior/SOURCES.md
index 6db2149671..b6015dae17 100644
--- a/skills/junior/SOURCES.md
+++ b/skills/junior/SOURCES.md
@@ -4,20 +4,19 @@ Last updated: 2026-05-07
 
 ## Sources
 
-| Source                                                          | Use                                               |
-| --------------------------------------------------------------- | ------------------------------------------------- |
-| `AGENTS.md`                                                     | repo validation and contribution rules            |
-| `packages/junior-plugin-api/AGENTS.md`                          | plugin registration and public extension contract |
-| `packages/junior/src/chat/credentials/AGENTS.md`                | actor-bound provider credential injection         |
-| `packages/docs/src/content/docs/extend/index.md`                | public plugin setup                               |
-| `packages/docs/src/content/docs/concepts/skills-and-plugins.md` | mental model                                      |
-| `packages/docs/src/content/docs/cli/check.md`                   | app validation                                    |
-| `packages/junior/src/chat/skills.ts`                            | skill parser/discovery/runtime boundary           |
-| `packages/junior/src/chat/plugins/manifest.ts`                  | manifest parser                                   |
-| `packages/junior/src/chat/plugins/package-discovery.ts`         | packaged plugin discovery                         |
-| `packages/junior/src/cli/check.ts`                              | `junior check` behavior                           |
-| `packages/junior/scripts/check-skills.mjs`                      | repo skill validation                             |
-| `packages/junior-*` and `apps/example`                          | working examples                                  |
+| Source                                                          | Use                                       |
+| --------------------------------------------------------------- | ----------------------------------------- |
+| `AGENTS.md`                                                     | repo validation and contribution rules    |
+| `packages/junior/src/chat/credentials/`                         | actor-bound provider credential injection |
+| `packages/docs/src/content/docs/extend/index.md`                | public plugin setup                       |
+| `packages/docs/src/content/docs/concepts/skills-and-plugins.md` | mental model                              |
+| `packages/docs/src/content/docs/cli/check.md`                   | app validation                            |
+| `packages/junior/src/chat/skills.ts`                            | skill parser/discovery/runtime boundary   |
+| `packages/junior/src/chat/plugins/manifest.ts`                  | manifest parser                           |
+| `packages/junior/src/chat/plugins/package-discovery.ts`         | packaged plugin discovery                 |
+| `packages/junior/src/cli/check.ts`                              | `junior check` behavior                   |
+| `packages/junior/scripts/check-skills.mjs`                      | repo skill validation                     |
+| `packages/junior-*` and `apps/example`                          | working examples                          |
 
 ## Decisions
 
diff --git a/skills/junior/SPEC.md b/skills/junior/SPEC.md
index 36933e25c3..a85c75877b 100644
--- a/skills/junior/SPEC.md
+++ b/skills/junior/SPEC.md
@@ -39,7 +39,7 @@ Do not use for: existing provider usage, generic code review, docs-only edits.
 Authoritative:
 
 - `packages/junior-plugin-api/README.md`
-- `packages/junior/src/chat/credentials/AGENTS.md`
+- `packages/junior/src/chat/credentials/`
 - `packages/docs/src/content/docs/extend/index.md`
 - `packages/docs/src/content/docs/cli/check.md`
 - `packages/junior/src/chat/skills.ts`
diff --git a/warden.toml b/warden.toml
index 1e77dda106..f066b1fd07 100644
--- a/warden.toml
+++ b/warden.toml
@@ -1,7 +1,7 @@
 version = 1
 
 # CI records these eval fixtures. Keep them out of the review and its file
-# and line budget. See "Recordings" in packages/junior-evals/AGENTS.md.
+# and line budget.
 [defaults.ignore]
 paths = ["packages/junior-evals/recordings/**"]