Documentation Sitemap

Compaction refresh lease broker

Internal broker protocol — kernel identity, ancestry and generation invariants, framed requests, responses, and persisted cycle bindings.
Broker operations — protected paths, startup, constrained recovery, fail-closed posture, distinct-principal deployment, and residual risk.
Constrained recovery skill — source-resident thin wrapper, receipt scope, C4 replay boundary, and T-C middle-drop disclosure.
Lease-broker security notes — identity, whole-class authorization, threat boundaries, and coordinator review requirements.
Whole mutator-class gate — default-deny policy, revoke-first/promote-last state machine, TTL, runtime adapters, and T-B/T-C assurance boundary.
Compaction revocation lifecycle — Claude/Pi observer matrix, same-PID generation rollover, failure fencing, and the named bounded residual stale window.

Installer state machine and recovery — canonical P0–P9 phases, side-effect-free checks, durable journal states, rollback/remediation, and the Debian greenfield CI gate.
Upgrade safety and recovery — framework ownership, durable operator snapshots, verify net, and projection regeneration.

Skill registration user guide — register, unregister, list statuses, automatic install/update reconciliation, and Claude reload behavior.
Skill bridge developer guide — path-validation, ownership, clobber-protection, install/update wiring, tests, and Pi/Codex scope notes.

Fleet configuration entry point — desired-versus-observed decision tree and complete operator link map.
Desired, derived, and observed state — roster authority, generation, ownership, and drift.
Identity, class, and runtime — stable name, display alias, class, runtime, provider, and model separation.
Role authority and leases — validator/merge-gate separation and bounded lease authority.
Generated launch chain — strict data parsing, precedence, and quarantine.
Roster v2 structural contract — schema, supported values, required fields, defaults, and constraints.
Fleet CLI reference — local desired-state commands, JSON/exit behavior, and gateway-catalog separation.
Lifecycle transitions — create/apply/reboot/migration/rollback boundaries.
Status and drift — desired/managed/observed state and current/future classifications.
Safe agent CRUD — expected generation, dry-run, and partial-failure recovery.
Local lifecycle operations — persisted versus one-shot actions.
Configurable interaction instance and validator instance — generic identities and protected limits.
Reconcile and recover — plan/apply lock and recovery behavior.
Environment quarantine — private evidence and value-free diagnostics.
Systemd/tmux troubleshooting — socket, holder, unmanaged-session, and lock decisions.
Backup/restore boundary and upgrade-assets hold.
v1-to-v2 migration preview and executable artifact dispositions.
FCM M5 closure evidence and approved deferrals.

Channel protocol architecture — shared lifecycle, message, stable-route, authorization, and response-target contracts.
Discord administrator configuration — secrets, allowlists, bindings, role policy, and thread permissions.
Discord user workflow — in-channel messages, mention-created threads, and runtime-transparent continuity.
Channel plugin authoring — requirements for future Matrix, Slack, and other official adapters.
Discord package guide — package behavior, configuration shape, and development commands.

Canonical requirements — ratified P0–P3 requirements and acceptance criteria.
Workstream index — artifact map, lane partition, and delivery order.
Mission manifest — scope, authority, invariants, and gate model.
Task decomposition — dependency-ordered implementation slices and ownership boundaries.
KBN-101 database role split — rc.16 direct-Drizzle storage-wrapper hold: legacy N-1/uncertified/non-operative pending -02/-03/-06/-08; exact README/user-guide wrapper forms fail before masking and source-consistency rejects runner-delegation copy; held bootstrap → TLS/roles → run → verify → readiness; plus prior attestation, pgvector owner, classifier, TLS, activation, and certification prerequisite.
Federated tier data migration — active KBN-101-07 operator route: runner-produced target attestation, dedicated non-DDL importer, and paired credential-/attestation-file references only.
Frozen shared contract — schema, API, Coordinator, health, recovery, and migration contracts.
KBN-101 exact-head security review — retained prior REQUEST CHANGES evidence for da742ca; rc.16 awaits independent exact-head re-review after closing the current generic storage-wrapper authority HIGH finding.
Initial independent review — KCR-001–016 findings that blocked the first draft.
Final independent re-review — closure evidence and GO verdict.
Ultron final gate — final requirements, authority, schema, migration, recovery, and evidence review.

RFC-001 — MACP: a Mosaic-native, Matrix-native comms layer — Synapse + Mosaic appservice backbone, MACP v1 protocol, presence/escalation, federation, strangler migration off the Hermes MCP bridge.
RFC-002 — Install, configuration & topology for the Matrix/MACP comms system — open-source install topology modes, ACME cert provisioning, pluggable secret backend, and config precedence.