diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..46482dc
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,21 @@
+# AGENTS.md — repository conventions
+
+## Language: English only
+
+All content in this repository — README, this file, commit messages, run
+logs, and evidence metadata — MUST be written in English. This is an
+English-only repository.
+
+## Purpose
+
+Git-backed quarantine store for the malware remediator (see README.md).
+The repository is written primarily by the remediation tool: quarantine
+commits (one per malware family), run logs, and per-file evidence
+metadata; plus occasional operator maintenance commits.
+
+## Safety
+
+The repository holds LIVE but INERT malware samples. Never execute or
+open quarantined files in a runnable environment. Consume the history
+with `git clone --no-checkout` or a bare clone so the malware blobs are
+never materialized as live files on disk. See README.md.
diff --git a/README.md b/README.md
index 17a5498..af7a6af 100644
--- a/README.md
+++ b/README.md
@@ -1,15 +1,16 @@
-# Karantén-git-repó — FIGYELEM, INERT MALWARE-MINTA
+# Quarantine git-store — WARNING: LIVE BUT INERT MALWARE SAMPLES
 
-Ez a repó az `imrcli` remediátor karanténjának git-backed tárolója
-(ADR-0008 — git-backed granulált remediáció és recovery,
-`docs/adr/ADR-0008-git-backed-granularis-remediacio-es-recovery.md` az
-`illusion/hids` repóban).
+This repository is the git-backed quarantine store of the malware
+remediator. It follows a git-backed granular remediation and recovery
+model: each quarantine commit corresponds to a single malware family and
+is individually revertable.
 
-**A tartalom ÉLŐ, de INERT malware-minta.** A fájlokat NE futtasd, NE
-nyisd meg futtatható vagy interpretálható környezetben (böngésző, PHP/
-Python-interpreter, shell) — a tárolás kizárólag bizonyíték- és
-recovery-célt szolgál. Egy karantén-commit szelektív visszaállítása:
-`git revert <sha>`.
+**The contents are LIVE but INERT malware samples.** Do NOT execute or
+open the files in any runnable or interpretable environment (browser,
+PHP/Python interpreter, shell). Storage serves evidence and recovery
+purposes only.
 
-A hozzáférés a releváns Mértanmű-üzemeltetői körre korlátozott — a
-repó NEM publikus.
+Selective restore of a single quarantine commit: `git revert <sha>`.
+
+Access is restricted to the authorized operator group — this repository
+is NOT public.