With agentrust-capture-core published and four engines on it, a new surface is a path declaration plus a report rather than another engine.
The three worth doing next are all repository-resident like Copilot rather than home-directory-resident like Claude Code and Codex, which means they take the same shape as copilot/: a pull-request status check with a committed baseline, reviewed like code and enforceable through branch protection.
| Surface |
Likely paths |
| Cursor |
.cursor/rules/**, .cursorrules, MCP config |
| Windsurf |
rules directory, MCP config |
| Gemini CLI |
GEMINI.md, plus whatever settings file it reads |
Precedent from #68: verify the paths against each vendor's current documentation before building. Doing that for Copilot changed the design, because AGENTS.md turned out to be read from anywhere in the tree rather than just the root, and skills resolve from three roots rather than one. A root-only check would have missed the most interesting drift.
Also from #68: skills go through core.tree_digest so the manifest-only bypass from #63 and #65 cannot reappear, and vendored directories are excluded so a dependency shipping its own rules file is not counted as the repository's own.
With
agentrust-capture-corepublished and four engines on it, a new surface is a path declaration plus a report rather than another engine.The three worth doing next are all repository-resident like Copilot rather than home-directory-resident like Claude Code and Codex, which means they take the same shape as
copilot/: a pull-request status check with a committed baseline, reviewed like code and enforceable through branch protection..cursor/rules/**,.cursorrules, MCP configGEMINI.md, plus whatever settings file it readsPrecedent from #68: verify the paths against each vendor's current documentation before building. Doing that for Copilot changed the design, because
AGENTS.mdturned out to be read from anywhere in the tree rather than just the root, and skills resolve from three roots rather than one. A root-only check would have missed the most interesting drift.Also from #68: skills go through
core.tree_digestso the manifest-only bypass from #63 and #65 cannot reappear, and vendored directories are excluded so a dependency shipping its own rules file is not counted as the repository's own.