diff --git a/AGENTS.md b/AGENTS.md
index 0b08e57..64bd290 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -54,6 +54,17 @@ Organization documentation rules are checked by `python scripts/check_style.py`,
   `report`.
 - Renaming a document means updating its references in the same change.
 
+<!-- repository-files:begin -->
+- A public repository (one with a `LICENSE`) needs `CONTRIBUTING.md`,
+  `SECURITY.md`, `CODE_OF_CONDUCT.md` and issue / PR templates; a
+  private one needs `SECURITY.md`.
+- A public `SECURITY.md` describes disclosure, not where credentials
+  live or how they rotate; a private one describes the opposite. The
+  two are not merged.
+- Template filenames use underscores — `pull_request_template.md`,
+  `issue_template.md`. GitHub does not recognise the hyphenated form.
+<!-- repository-files:end -->
+
 ## Do not
 
 - Do not backfill today's information into a historical observation; keep the