# AGENTS.md

## Scope
Applies within `apps/bot`.

## Responsibilities
- Telegram admin bot runtime
- allowlist checks
- alert delivery
- low-friction admin commands

## Rules
- Pairing approval must never happen inside the bot runtime itself.
- The bot may initiate pending pairing, but only the server-side CLI completes it.
- Every command that changes state must produce an audit log entry.