diff --git a/THREATHUNT_INTENT.md b/THREATHUNT_INTENT.md
new file mode 100644
index 0000000..ba57641
--- /dev/null
+++ b/THREATHUNT_INTENT.md
@@ -0,0 +1,10 @@
+## Analyst Assist Agents
+
+ThreatHunt includes analyst-assist agents that:
+- Help interpret imported artifact data
+- Suggest analytical pivots and filters
+- Highlight anomalies or points of interest
+- Assist in forming and testing hypotheses
+
+Agents do not perform analysis independently.
+They guide, explain, and assist the analyst.