View Markdown

Examples

These are concrete, copy-pasteable Agentfiles in the v0.1 model: a Dockerfile-shaped recipe with four new keywords (IDENTITY, CAPABILITY, SOP, POLICY) over standard Dockerfile keywords. Each builds with either docker build -f Agentfile . (via the BuildKit frontend) or arc build . — both emit identical OCI artifacts with ai.agentrc.* labels that the platform reads to grant, narrow, or reject each request. See the specification for the full keyword reference.

Files

Minimal Agentfile — the smallest useful agent.
Secure workspace Agentfile — a locked-down agent with tight POLICY requests.
Code reviewer Agentfile — tools, a skill, and an MCP server projected under /mnt.
Vault agent Agentfile — needs a database credential, but credential resolution is deferred (platform-defined).
Hooked Agentfile — lifecycle hooks whose endpoints auto-derive network egress, recorded with .source attribution.
Delegator Agentfile — spawns sub-agents via POLICY agent.sub_agents*; the platform grants, caps, or rejects the fan-out.

Minimal

# syntax=agentrc.agentfile/v0.1
FROM python:3.11-slim
IDENTITY name=hello version=0.1 author=acme
IDENTITY description="Minimal agentrc agent"
CAPABILITY text
SOP You are a minimal example agent. Read a file when asked; do nothing else.
CMD python ./agent.py

# Tool (local, embedded) — projected under /mnt/tools/
COPY --chmod=755 ./tools/file_read /mnt/tools/file_read

# Model + operational requests (platform grants, narrows, or rejects)
POLICY model.name         claude-sonnet-4
POLICY agent.tool_timeout 30s

# Network egress request
POLICY network dns:api.example.com:443

HEALTHCHECK --interval=60s --timeout=15s CMD /mnt/tools/file_read --agentrc-schema

This compiles to labels such as ai.agentrc.identity.name=hello, ai.agentrc.capability.text=true, ai.agentrc.tool.file_read=local, ai.agentrc.model.name=claude-sonnet-4, and ai.agentrc.network.dns.api.example.com=443. The SOP is embedded as a readable file at /mnt/SOP and recorded as a pointer plus digest (ai.agentrc.sop=/mnt/SOP), never inlined into a label. The platform reads those labels — not the Agentfile — when it decides what to honour.

The workflow companion is deferred

Workflow orchestration is parked for a future draft. The agent-to-agent (A2A) protocol — discovery, delegation, and the cross-agent governance algebra — is out of scope for this version. Capability exposure via IDENTITY / CAPABILITY / labels is in scope; the workflow companion is not part of the Agentfile core.