diff --git a/AGENTS.md b/AGENTS.md
index 0f05dc6..e3a3ad7 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -2,12 +2,11 @@
 
 This document provides workspace-level instructions for AI agents working anywhere under `/home/aw/code/cds`.
 
-## Commit Approval
+## Git and Commit Rules
 
-Always let the user review the proposed commit scope and commit message first, and wait for the user's explicit approval before creating any local git commit in this workspace.
-
-## Repository Safety
+### General Workspace Rules
 
+- Always let the user review the proposed commit scope and commit message first, and wait for explicit approval before creating any local git commit in this workspace.
 - Never commit or push to the nested `galaxy-complete` repo under `/home/aw/code/cds/galaxy-complete` without the user's explicit approval.
 - Never assume work in `/home/aw/code/cds` should be pushed to `rnd.cdsi.us.com`.
 
@@ -47,6 +46,19 @@ Always let the user review the proposed commit scope and commit message first, a
 - If only one of `-c` or `-e` is provided, auto-fill the paired value from this mapping.
 - If both `-c` and `-e` are provided but conflict with mapping, stop and ask for confirmation before execution.
 
+### ATVM Cypress Git Drafting
+
+When the user explicitly asks to "create a git" or otherwise requests git/commit help for the ATVM Cypress machine/vm:
+
+1. Never automatically run git commands. Always draft the commands only.
+2. Assume the user is referring to the Cypress ATVM checkout at `/root/cdc-e2e-cyp-12.17.4`.
+3. Write the drafted commands to `/tmp/commit.txt` so the user can copy and paste them without extra formatting.
+4. When generating git commands that need SSH, use the user's one-off method exactly as:
+   `GIT_SSH_COMMAND='ssh -i ~/.ssh/id_ed25519_anthony -o IdentitiesOnly=yes'`
+5. Prefer complete copy-pasteable command sequences that are ready to run from `/root/cdc-e2e-cyp-12.17.4`.
+
+If the user does not specify the ATVM Cypress machine/vm, follow the general workspace rules above and any other git guidance already in this file.
+
 ## Machine-Based Default Paths
 
 - Before looking for screenshots or files, check the machine identity first, for example with `hostname`.