Add a CI job that checks the AGENTS.md claims against the tree with dokimi

.github/dokimi/repo.yaml

@@ -0,0 +1,7 @@
+# Agent guidance files that dokimi (https://github.com/intel/dokimi) checks in CI,
+# see .github/workflows/agent-guidance.yml.
+schema: repo_manifest.v1
+id: dpnp
+source: {url: https://github.com/IntelPython/dpnp}
+guidance:
+  globs: ["**/AGENTS.md"]

.github/workflows/agent-guidance.yml

@@ -0,0 +1,31 @@
+name: Check agent guidance (dokimi)
+
+# Checks the commands, paths and targets named in every AGENTS.md against the tree, with
+# no model and no secrets. `repo validate` fails the job on a broken manifest; the `repo scan`
+# report goes to the job summary and does not fail it.
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+  workflow_dispatch:
+
+permissions: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  dokimi:
+    name: dokimi
+
+    permissions:
+      contents: read # needed to clone the repo
+
+    # Bump both SHAs together: `uses:` runs the workflow, `dokimi-ref` installs the same dokimi
+    uses: intel/dokimi/.github/workflows/repo-eval.yml@0883b7e92337c5e860a0c340fba8c1d76421851a # v0.2.0
+    with:
+      dokimi-ref: 0883b7e92337c5e860a0c340fba8c1d76421851a
+      manifest: .github/dokimi/repo.yaml

AGENTS.md

@@ -54,6 +54,7 @@ Append to the end of the matching `### Added` / `Changed` / `Deprecated` / `Remo
 | oneMath build, open-source LLVM SYCL build | `check-onemath.yaml`, `os-llvm-sycl-build.yml` | no |
 | Sphinx docs (`make spelling`, `make html`) | `build-sphinx.yml` | no |
 | Coverage (Coveralls), zizmor | `generate_coverage.yaml`, `zizmor.yml` | no |
+| Agent guidance check, dokimi (`repo scan` report in the job summary) | `agent-guidance.yml`, manifest `.github/dokimi/repo.yaml` | no |
 
 GitHub-hosted runners have no GPU, so tests there run on a CPU device: a green run says nothing about GPUs or devices without fp64.