The point about agents finding tools through AGENTS.md and skills rather than a portal matches my week. We added an AGENTS.md to every repo and rewrote our setup tutorial as a skill an agent can follow, and that took an afternoon.

The guardrail half was harder, and it failed in a way the article doesn't cover: silently. We require every commit in a PR to be signed. It was written down and enforced by a required check. A contributor's PR still sat for six days, because on a fork the check waited for a maintainer to approve the run and told the author nothing. Nobody was blocked by policy; they were blocked by a guardrail that didn't speak.

We changed the check to comment on the PR with the exact commits, the reason and the two commands that fix it. A guardrail that fails without telling anyone is as bad as a golden path nobody can find.