Add customer privacy contributor instructions

AGENTS.md

@@ -0,0 +1,25 @@
+# Contributor and agent instructions
+
+## Customer privacy before publication
+
+Before creating or updating public content, contributors and agents must anonymize
+private customer context in PR titles, bodies, comments and reviews; branch names
+and commit messages; and committed code, tests, fixtures and documentation. Never
+copy private customer data from support threads, incidents, logs or connected
+sources into this repository.
+
+Remove customer names; organization, repository, domain, tenant and account
+identifiers; identifying keys, paths and log excerpts; and private customer job,
+support or incident links. Credentials, known tokens and secrets are private. Use
+neutral wording, synthetic data and minimal reproducible examples.
+
+Check screenshot and recording pixels, captions and filenames before publication.
+Use synthetic reproductions or keep identifying evidence private. Never publish
+first and scrub later.
+
+Preserve this repository's public identity, dependencies and intentionally public
+attributions, including public authors and third-party software. Do not add a real
+customer-name blacklist.
+
+If you find an inadvertent disclosure, stop propagating it and flag it privately
+for authorized cleanup. Do not delete content or rewrite history without approval.