From 3f5e4130a962c4a130536f44728a4c26269d8c4a Mon Sep 17 00:00:00 2001 From: Vili Kohonen Date: Mon, 17 Aug 2026 13:23:56 +0300 Subject: [PATCH] docs: mirror the RunPod API key safety rule into AGENTS.md CLAUDE.md and AGENTS.md are byte-identical except that AGENTS.md is missing the 'CRITICAL Safety Rules' section warning that RUNPOD_API_KEY reaches every pod on the account. Agents that read AGENTS.md rather than CLAUDE.md never see it. Co-Authored-By: Claude Opus 5 --- AGENTS.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/AGENTS.md b/AGENTS.md index 0c7fca5..5b11054 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -1,5 +1,10 @@ # OpenWeights Architecture +## CRITICAL Safety Rules + +### RunPod API Key Scope +The RUNPOD_API_KEY in `.env.worker` has access to ALL RunPod pods across the ENTIRE account, not just the test organization's pods. **NEVER** call `runpod.get_pods()` and terminate all returned pods — this will kill other users' workloads. Always terminate pods by specific pod_id only, obtained from the worker database record for the target organization. + ## Overview OpenWeights is a Python SDK for running distributed compute jobs on managed RunPod GPU infrastructure. It provides a simple, OpenAI-like API with full flexibility for custom workloads including fine-tuning, inference, evaluations, and arbitrary Python scripts.