diff --git a/AGENTS.md b/AGENTS.md
index 2afd56e..2022b8e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -60,7 +60,9 @@ The base `deployment/juicefs.yml` accepts `juicefs_metadata` and
 singleton Postgres/WebDAV, their DNS aliases, and the 50 GiB backend disk.
 Instant-bosh DNS and credential adjustments live in
 `deployment/operations/misc/`; other directors should use their normal DNS and
-credential configuration. The director needs an `ubuntu-noble` stemcell and
+credential configuration. For director-side DNS prerequisites and the upstream runtime configuration, see
+[`deployment/runtime-configs/README.md`](deployment/runtime-configs/README.md).
+The director needs an `ubuntu-noble` stemcell and
 cloud-config with `z1`, the `default` network, and `default` VM type. The JuiceFS
 FUSE client runs directly on the VM under Monit so it can access host `/dev/fuse`.
 The singleton
diff --git a/deployment/runtime-configs/README.md b/deployment/runtime-configs/README.md
index f7db8b3..534eea8 100644
--- a/deployment/runtime-configs/README.md
+++ b/deployment/runtime-configs/README.md
@@ -36,7 +36,7 @@ for backend configuration, required variables, and deployment commands.
 ## BOSH DNS prerequisite
 
 Install BOSH DNS through the upstream
-[`bosh-deployment/runtime-configs/dns.yml`](https://github.com/cloudfoundry/bosh-deployment/blob/master/runtime-configs/dns.yml).
+[`bosh-deployment/runtime-configs/dns.yml`](https://github.com/cloudfoundry/bosh-deployment/blob/main/runtime-configs/dns.yml).
 This is separate from the JuiceFS volume-driver runtime-config.
 
 For instant-bosh development environments, DNS is currently embedded only in CF.