new advisories

docs/modules/ui/AGENTS.md

@@ -3,6 +3,12 @@
 ## Mission
 The Console presents operator dashboards for scans, policies, VEX evidence, runtime posture, and admin workflows.
 
+## Advisory Handling
+- New/updated advisories require immediate doc + sprint updates (no approval): high-level + detailed docs; inline only short snippets; runnable/long code to `docs/benchmarks/**` or `tests/**` (deterministic/offline) with links.
+- Add tasks + Execution Log entries in relevant `SPRINT_*.md` with doc paths/owners; add risks if schema/feed/transparency caps apply.
+- Check archived advisories for overlaps; mark supersedes/extends.
+- Defaults: hybrid reachability, deterministic/frozen feeds; act first, report after.
+
 ## Key docs
 - [Module README](./README.md)
 - [Architecture](./architecture.md)