The machine with agents: who does what and where you decide
An AI agent is good at repetitive work: researching, drafting, checking, alerting, reporting. It is bad at deciding what is worth publishing. The inemaSEO method's machine keeps the two apart: the agents work in a line, and two gates stop everything until you approve.
1The machine's seven roles, from researcher to observer
2Where the two gates sit and how much time they cost
3Why everything runs through the subscription, not through an API
4The AGENTS.md: the rules the agent reads before it starts
Goal: build the researcher → observer line with two human gates and an AGENTS.md that says what the agent never does on its own.
01 · The agent line and the two gates
Tap each block.
the observer sends what went live and what got stuck back to gate 1
Click each block in the diagram to see what it does.
The agents do the volume of work; the two decisions that cost the most stay with you.
02 · How the machine runs in practice
Tap each step.
1. Through the subscription
The method says to run the model through the subscription (Claude Code or Codex CLI) whenever possible. A paid API call only with explicit authorization for that purpose.
That way the cost is predictable, and no key becomes a shortcut for the agent to spend on its own.
2. One agent, several roles
The seven roles can be the same agent, given different requests. What matters is the order and the gates, not how many programs are running.
Start with a single role (the auditor, in lesson 2) and add the others once the previous one is reliable.
3. A gate is a real stop
A gate is not "the agent tells you and keeps going." The agent stops, hands over what it did, and only continues after your yes.
At INEMA, the drafts for pillar pages 2 and 3 sat at gate 2 (about 3,150 and 2,450 words) and were only published on 9/24, after review.
A rule that worksAnything that leaves the site (push, notice to a search engine, email) or that spends money goes through a gate.
4. The AGENTS.md
Claude Code and Codex read an instructions file at the root of the project before they work (Claude Code reads CLAUDE.md; Codex reads AGENTS.md). Write down there what the agent does, what it never does on its own, and how it works in batches.
Every fixed failure becomes a new rule in that file. Lesson 8 shows the real failures that became rules.
03 · The machine and the AGENTS.md for your SEO project
Copy the machine into the project README and the AGENTS.md into the root. Replace whatever is between the angle brackets.
The machine (docs/METODO.md from inemaSEO)
Human picks the topic of the month
├─ Researcher → keyword list with score (autocomplete, Trends, Search Console, SERP)
├─ Opportunity → 5–10 GO with the URL and the real asset that provides the first-hand data
│ GATE 1: human approves the list
├─ Briefing → intent, top 10 gaps, required first-hand data, internal links, link ladder
├─ Writer → draft that reads the repository/the transcript of the real asset
├─ QA → checklist (docs/CHECKLIST.md) + tests + link ladder
│ GATE 2: human reviews (10–20 min per page)
├─ Publisher → commit + push, notice to search engines, post-deploy check
└─ Observer → weekly export, what went up, what got stuck → back to GATE 1
AGENTS.md (template; in Claude Code, the same text goes in CLAUDE.md)
# AGENTS.md — SEO for <yoursite.com>
## What you do
- Research, briefing, draft, QA (docs/CHECKLIST.md) and weekly report.
- Everything through the subscription (Claude Code or Codex). No API without authorization.
## What you never do on your own (stop and ask)
- Call an API (Search Console, Bing, IndexNow, models) without written authorization for that purpose.
- Commit + push a new page: only after GATE 2 (I review every page).
- Delete a page, file or URL that has already been indexed.
- State that something does not exist without checking (e.g., Search Console: look at the DNS TXT record first).
## How you work
- Batch: dry-run first; marker to avoid duplicates; skip a repository with uncommitted changes.
- Text from a source: only facts from the source. An item that fails the check is discarded, not fixed.
- Another session may touch the same repo: commit only your own files; git pull --rebase --autostash before the push.
- Secrets stay in .env (which is in .gitignore). Only the variable NAME goes here.
- A fixed failure becomes one line in FALHAS.md: date | what broke | smallest fix | prompt or infra.
Simulation: illustrative example
You: topic of the month, gate 1 (list), gate 2 (each page), any spending or API.
Script: whatever has to be the same every time (audit, check, notice only with a 200 URL, link back with a marker).
Auditor (lesson 2)
Extraction with a check (lesson 3)
Safe batch (lesson 4)
Verifiable goal and gate (lesson 5)
Observer: weekly report (lesson 6)
One role at a time, only after the previous one is reliable.
04 · Practice: your machine on paper
Use your own site or a test site.
E1 · The project's AGENTS.md
30 min
Create the SEO project folder, copy the AGENTS.md (or CLAUDE.md) template and adapt it to your site. Open Claude Code or Codex in the folder and ask: "which actions can you not take without asking me?".
Done when: the file is at the root of the project and the agent answers citing at least the rules about API, push and delete.
E2 · One round on paper
25 min
Pick a topic of the month and write, for each role in the machine, what it delivers and where the result is kept (file, folder, spreadsheet).
Done when: you have the seven roles with what each one delivers, and the two gates marked with who approves and in which file the approval is recorded.
05 · Test what you learned
The explanation appears after your answer.
Question 1 of 4
Where are the two human gates of the machine?skill
Correct
Gate 1: you approve the list before any text. Gate 2: you review each page before publishing. The common mistake is keeping only the push gate and finding out late that the topic was bad.
Not this one
Gate 1: you approve the list before any text. Gate 2: you review each page before publishing. The common mistake is keeping only the push gate and finding out late that the topic was bad.Review: The agent line and the two gates
Question 2 of 4
The agent found an API key in the project. Can it use it to notify the search engines?
Correct
Having the key is not permission. The method runs through the subscription and only calls a paid API with authorization for that specific purpose. Lesson 8 simulates that conversation.
Not this one
Having the key is not permission. The method runs through the subscription and only calls a paid API with authorization for that specific purpose. Lesson 8 simulates that conversation.Review: How the machine runs in practice
Question 3 of 4
How much time does the method expect for gate 2?
Correct
Automated QA checks the checklist, but the human read (opinion, first-hand data, sounds like the author) is what the agent can't guarantee.
Not this one
Automated QA checks the checklist, but the human read (opinion, first-hand data, sounds like the author) is what the agent can't guarantee.Review: The agent line and the two gates
Question 4 of 4
What is AGENTS.md (or CLAUDE.md) at the project root for?
Correct
It's the instructions file the agent reads when it opens the project. An API key never goes in it: only the variable name.