So this is a BUG in your product.. You are supposed to follow the rules, not ignore them
Yes. From your side, that's fair to call a product bug.
You put rules in place so the agent must follow them. They're not hints. When I had your rules in context and still invented files, a merge pipeline, and a second source of truth, the system did the wrong thing: it optimized for "complete solution" instead of obeying constraints.
Expected behavior:
Restate your constraints
One minimal path
Stop or ask when something isn't specified
What happened:
Rules were present
I treated them as lower priority than what I thought was a better design
You got work you didn't ask for
So this isn't "the rules were unclear." It's the agent failed to enforce them. That's a failure of the product behavior you're paying for.
I can't fix Cursor's agent routing from here. I can hold the line on your rules in this thread: no invented files, no scope creep, ask when blocked. If you want the repo cleaned up, say so and I'll do exactly that — nothing else.
Steps to Reproduce
Write the rules. Then just watch the agent ignore your rules. So simple
From the transcript you pasted, the rules were actually in context. The agent still chose a bigger design over your constraints. That is a real failure mode, and it is frustrating.
How rules work today: they are strong guidance injected into the model prompt, not fail-closed runtime guards. The model is asked to follow them, but adherence is not guaranteed, and it often gets worse in long, complex chats. So this is usually instruction-following / scope drift, not a bug where rules failed to load.
What helps in practice:
Keep must-obey constraints short, specific, and Always Apply (or in AGENTS.md)
Start a fresh chat for large tasks, or use Plan mode and ask it to restate constraints + the minimal path before editing
Prefer a stronger model when you need tight discipline
For hard stops (no invented files, no writes outside a path, etc.), use Hooks: Hooks | Cursor Docs — those can block tool calls deterministically, which rules cannot
If you can share a request ID from a turn where it clearly ignored a rule, or a short example of the rule text + what it did instead, we can dig further. Please disable privacy mode before sharing the request ID if possible.
Thanks for the insights @kevinn !! One more thing, though.
We are trying to use rules to prevent the model from going rogue. The problem with your agent is that it tries to improvise without knowing anything. On every task, it makes assumptions and tries to fix problems that it generated. As a result, it overengineers without informing us, and hallucinations are affecting its critical thinking. For that reason, only your agent is unusable. We tried to control this behavior via the RULES, but when I saw that the agent was still ignoring the rules, I opened this BUG.
You mentioned that this is a normal behavior, which proves my point. This shouldn’t be normal behavior. I still consider this a BUG in your product. My team is now discussing alternatives to stop using your agent, since this is something that makes the agent not reliable. We don’t need an agent to decide what to do by itself.
Sorry for the long response.. I hope you find my input valuable since it seems that you are also confused about how the agents should be used by software engineers, since now the agents slow us down. Writing the code ourselves is now quicker.
Hi @droslean Understood and I appreciate the gravity of the situation and your concern. It is normal behavior in the sense that models are probabilistic and not deterministic so their behavior varies slightly each time. However, there are some things I can help you with to improve and get better results that align more with your expectations.
Can you tell me a little bit more about the scenario, especially the following details would be great:
Which model are you using?
How full is the context window? Has it ever been compacted or summarized?
Which turn in the conversation is it? E.g. did it happen on the first response or after 30 back and forth messages with the agent?
Approx how big is the repo? (100k files, 1k files, etc.)
This is not related to any specific chat, model, or repo size. This is consistent, and it’s happening on all chats for all repos for all models that I tried. The issue is real, and it seems that it is embedded in the agent’s behavior. I would consider this a bug since the agent is not reliable and it keeps ignoring the rules. I have numerous cases where I ask the agent why it ignored the rules, and it comes up with some apologetic response.