I don’t understand why people are confused about the use of a launch flag, for this and for anything.
It’s a simple distributed systems problem. Separate the deployment of a new software feature (to umpteen hosts) from the triggering of that software with a lightweight switch.
If someone think that reading AGENTS.md is always benign, because they can’t imagine how it could be a problem…users are very creative.