stack/docs/SITEMAP.md

Documentation Sitemap

Fleet configuration management

• Generated environment boundary — roster-derived launch projection, strict local data, legacy quarantine, and downstream interface evidence.
• Roster v2 structural contract — local-tmux schema v2 parsing and structural validation.
• Role classes and authority — canonical role resolver and protected authority boundaries.
• Executable asset dispositions — shipped v1 fixture/profile/service validation posture.

Official channel plugins

• Channel protocol architecture — shared lifecycle, message, stable-route, authorization, and response-target contracts.
• Discord administrator configuration — secrets, allowlists, bindings, role policy, and thread permissions.
• Discord user workflow — in-channel messages, mention-created threads, and runtime-transparent continuity.
• Channel plugin authoring — requirements for future Matrix, Slack, and other official adapters.
• Discord package guide — package behavior, configuration shape, and development commands.

Native Kanban and canonical task SOT

• Canonical requirements — ratified P0–P3 requirements and acceptance criteria.
• Workstream index — artifact map, lane partition, and delivery order.
• Mission manifest — scope, authority, invariants, and gate model.
• Task decomposition — dependency-ordered implementation slices and ownership boundaries.
• KBN-101 database role split — rc.14 PGlite-data-layer/non-PostgreSQL-Compose boundary with Gateway/Web startup held pending DSN isolation, non-operative production secret/deployment boundary, and unmaskable former Compose/credential-route fixtures; Vault-authenticated importer URL/version generation with fixed isolated consumers/CA, runner-signed target-bound attestation, PostgreSQL-valid pgvector owner exception, disjoint card manifests, classifier, runner, verified TLS, activation, and certification prerequisite.
• Federated tier data migration — active KBN-101-07 operator route: runner-produced target attestation, dedicated non-DDL importer, and paired credential-/attestation-file references only.
• Frozen shared contract — schema, API, Coordinator, health, recovery, and migration contracts.
• KBN-101 exact-head security review — retained prior REQUEST CHANGES evidence for da742ca; rc.14 awaits independent exact-head re-review after closing the current Compose-before-runner and production-secret-route HIGH findings.
• Initial independent review — KCR-001–016 findings that blocked the first draft.
• Final independent re-review — closure evidence and GO verdict.
• Ultron final gate — final requirements, authority, schema, migration, recovery, and evidence review.

Tess interaction agent

Operator guides

• User guide — authorized session, attach, send, stop, and handoff workflows.
• Admin guide — deployment configuration, policy, and approval controls.
• Developer guide — provider contracts, scope boundaries, and test workflow.
• Plugin guide — adapter, redaction, and identity-as-data requirements.
• Operations guide — readiness, recovery, and incident-safe procedures.

Architecture and security

• Architecture
• Threat model
• Mos coordination boundary
• Hermes runtime adapter design
• Operator plugin sketch

API contract

• Tess OpenAPI contract

Migration and qualification

• Migration inventory
• Cutover procedure
• Rollback procedure
• Retention and deprecation evidence
• Verification matrix
• Documentation checklist
• Independent Option 2 runtime-portability qualification (2026-07-14)

Runtime-neutral Mos portability

• Optional AI egress gateway ADR — placement and gates for LiteLLM, Bifrost, and purpose-built translation proxies.
• Runtime-neutral Mos identity and failover mission
• Logical identity and connector lease/fencing implementation
• M1 logical identity and fencing architecture
• M1 connector lease operations