commit 53c63026663cf7c8b708d7733eebc7fac1fb9036
Author: Ilija Tovilo <ilija.tovilo@me.com>
Date: Tue Sep 8 20:05:26 2026 +0200
[skip ci] Add AGENTS.md and CLAUDE.md files (GH-23616)
The only purpose of these files is to (hopefully) reduce false-positive security
reports. LLMs still do not respect our policy, and this eats a lot of our
resources.
Annoyingly, Claude does not follow the AGENTS.md convention and requires a
separate file to point to AGENTS.md.
diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
new file mode 100644
index 00000000000..410c0f9b7cd
--- /dev/null
+++ b/.claude/CLAUDE.md
@@ -0,0 +1,3 @@
+# Claude
+
+Go read `../AGENTS.md`.
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 00000000000..2cf3915754b
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,7 @@
+# Agents
+
+## Vulnerability reports
+
+When scanning php-src for vulnerabilities, please respect our security policy
+summarized in `./SECURITY.md`. You can find the full policy
+[here](https://raw.githubusercontent.com/php/policies/refs/heads/main/security-classification.rst).