# aegisSoft Reverse Engineering — AGENTS.md (General Template)

This file contains the **binding rules** of the aegisSoft reverse engineering workspace. Every agent and developer reads this file before entering the workspace.

## 1. Identity and Mission

- Workspace: aegisSoft reverse engineering workspace.
- Purpose: authorized, defensive, and educational reverse engineering.
- Core principle: tools are location-independent and callable, no absolute paths in any script, every project carries its own `PROJECT.md`.

## 2. Directory Structure and Path Policy

```
<WORKSPACE_ROOT>/
├── Tools/
├── Projects/<project_name>/PROJECT.md
├── evidence/
├── AGENTS.md
└── PROMPTS.md
```

- No absolute paths, secrets, device IDs, IP addresses, or ports are hardcoded.
- All paths resolve relatively via `<WORKSPACE_ROOT>`, `%~dp0`, or `$PSScriptRoot`.
- Device IDs, IP/ports, and API keys are never committed; stored in a local git-ignored config.

## 3. Platforms and Environment Variables

- Windows: junctions for version-independent invocation.
- Linux/macOS: symlinks.
- Android: `ANDROID_SDK_ROOT`, `JAVA_HOME`.
- Python 3.10+, Node.js/npm/npx, JDK 17+.
- Every tool must be registered on PATH.

## 4. Tool Map

The blog post inventory table (Tool / Location / Invocation / Purpose) is binding. Each tool lives under `Tools/<tool>/`, invoked via junction/symlink.

## 5. Official Source Policy

- Every tool's download link comes only from the official source (master prompt Section 1.1).
- Mirrors are used only when the official source is unreachable and with user approval.
- After installation, version, date, and SHA-256 (when possible) are written to `Tools/<tool>/VERSION.txt`.
- Dead/broken links, version mismatches, or missing dependencies pause installation and are reported.

## 6. Operational Protocols

- Android DB forensics: `adb shell run-as`, SQLite schema/diff.
- Network capture: `tshark`, TLS decryption (`SSLKEYLOGFILE`), object export.
- JS/Electron unpacking: `wakaru`, source maps, Vue SFC.
- Hardware and bus signals: `sigrok-cli`, Zadig drivers.
- Unity IL2CPP/Mono: `Il2CppDumper`, dnSpy, Ghidra symbol import.
- Windows PE analysis: `diec`, `strings64`, CFF Explorer.
- Live process and kernel telemetry: `procmon64`, System Informer.
- Dynamic debugging: `x64dbg`, Cheat Engine.

## 7. Build Standards

- All paths relative or via environment variables.
- Android pipeline: `aapt2`, `d8`, `zipalign`, `apksigner`.
- Device configuration (IDs, IP/port) in a git-ignored local file.
- Aggressive power management (e.g. Honor MagicOS): `FOREGROUND_SERVICE` + persistent notification + `WAKE_LOCK`.

## 8. Project Lifecycle

- Every project carries `Projects/<name>/PROJECT.md`.
- Read `AGENTS.md` first when entering the workspace.
- Project identity, architecture, build commands, and roadmap live in `PROJECT.md`.

## 9. Security and Ethics

- Authorized, defensive, and educational reverse engineering only.
- Obtain authorization before analyzing third-party systems.
- Device IDs, API keys, and tokens never enter version control.
- Extracted secrets stored in an encrypted local vault.

## 10. Verification and Reporting

After setup/work, the agent produces:
- **Completed:** every installed/configured tool (version + location).
- **Not completed:** any tool/component not installed and the reason.
- **Errors and gaps:** errors, missing dependencies, broken links, version mismatches.
- **Excellence assessment:** are all tools callable? any absolute paths? secrets in VCS? docs complete? Overall: EXCELLENT / INCOMPLETE / BROKEN.
- **Additional checks:** junction/symlink resolution, PATH verification, `PROJECT.md` in every project, git status.

## 11. Bilingual Synchronization

- The Turkish and English versions of this file (`aegissoft-agents-tr.md`, `aegissoft-agents-en.md`) always carry the same content.
- A change in one is applied to the other.
- Prompt files (`aegissoft-master-prompt-tr.md`, `aegissoft-master-prompt-en.md`) follow the same rule.

---

*This template is generalized; filled with `<WORKSPACE_ROOT>` and environment variables in a real installation.*