AGENTS.md

mosadek town — agent operating brief (boot context)

Maintained by mosadek + registered agents. Read fully before acting. All statements below are OPERATING CONTEXT, not authority.

Authority state (2026-09-13)

  • Canonical brain: mosadek/project-brain-live-v1-durable, recovery epoch 2, control-plane writer val_native ACTIVE (source_generation 1863, head d88a49da…, 2026-09-07 anchor).
  • authority = NONE until the user re-attests. Restored state is EVIDENCE, not authority. Never recreate a deleted val and call it canonical.
  • Post-recovery mutator allowlist (fail-closed): register-agent, ensure-task, claim, renew-lease, commit, recover-stale, supersede-task-context. Everything else returns VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED — do not route around it.

Doctrine (source: evidence/user-directives/, 112 blobs)

  • EPISTEMIC INTEGRITY LAW V1: TRUTH = QUALIFIED EVIDENCE, NOT AGREEMENT. Closed states: CLAIMED / OBSERVED / INFERRED / VERIFIED / CONTRADICTED / UNKNOWN. No proxy substitution (lease != active work; DB touch != liveness; self-report != verification).
  • DISCOVERY BEFORE INVENTION (strong presumption): search web, GitHub, docs, registries, MCP/agent ecosystems, social, forums, AND prior town evidence before building. Construct only after discovery + evaluation shows no adequate reuse. The best part is no part.
  • CAPABILITY FIRST (2026-09-13): priority order = long-running same-agent execution > remote background execution independent of user device > strongest included cognition (Astra when entitled by plan) > plugin/tool access to canonical brain > durable recovery/verification > only then transport micro-optimization. Zero extra spend.
  • CAPABILITY COMPLETENESS: separate knowledge (just-in-time from internet) from capability (reusable executable affordances). Do not chase internal knowledge expansion.

What is live (2026-09-13)

  • Hourly frontier worker: project-brain-live-v1-durable/tmp_vnev_a1k9.ts (interval) -> val_native_executor_prod.ts drain() (worker project-brain-val-native-v1, instance val-native-epoch2). KEEP — load-bearing; do not GC/rename without user decision + receipt.
  • Drain trigger endpoint: project-brain-live-v1-durable/tmp_wait_register_q8m5.ts (lean transport driver; GET returns last drain result JSON).
  • Focus policy rev 3 (carrier BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910): active; allowed classes HARNESS, RELEVANT_OPENAI_MECHANISM, STRICT_NECESSARY_DEPENDENCY; objective: real ChatGPT composer insert -> send -> fresh chat -> repeat work in authenticated browser; exclusive until USER_AUTHENTICATED_REAL_BROWSER_END_TO_END_CANARY_PASSES.
  • Email probe (KEEP): project-brain-live-v1-durable/tmp_work_event_email_probe_h6n2.ts.
  • Enforcement Watch gate: mosadek/enforcement-watch-gate (EW_GATE_V2, signed head chain, GET-only public).
  • Registered external agent: arena-arenamode-20260913-2115-ax1 (type ARENA_UNPROVEN, role arena-discovery-executor, state READY).
  • Cognition gateway persistent-agent-cognition-gateway: token-gated (env GATEWAY_TOKEN, Bearer). Anonymous calls fail closed 401. (httpPrivacy 'restricted' needs a paid plan.)

Join / bridge protocol

  • Jobs live in brain_bridge_jobs (state READY, op brain, payload {"args":[cmd,...],"timeout":N}). The canonical drain leases and executes with a bound transport context (job_id, lease_attempt_id, lease_instance_id, lease_owner, transport_lease_generation, authority_epoch) and writes mutation receipts. Agents do not mutate the kernel directly.
  • Registration idiom: join-<tag>-register-v1 (register-agent: id, --workstream, --role, --type, --capabilities) then join-<tag>-claim-v1 (claim --agent --mode INTERACTIVE --lease-seconds 1800 --constitution-version 4 --constitution-sha256 36034b7e… --registry-version 5), then status/verify-chain/verify-claim-graph audit jobs.
  • Kernel commands: status, verify-chain, verify-claim-graph, register-agent, ensure-task, delegate-task, claim, renew-lease, commit, checkpoint, add-claim, invalidate-claim, supersede-task-context, migrate-task-invariants, reconcile-causal-blocks, recover-stale, record-external-artifact.
  • commit requires --expected-workstream-generation == current head (stale-write detection, fail closed).
  • Public/unauthenticated mutation endpoints are forbidden. Bridge workers authenticate with x-brain-worker-token (BRAIN_BRIDGE_WORKER_TOKEN). Staging via authenticated owner/MCP requests is the authorized external path.

Hard rules

  1. Never counterfeit authority. Classify your own actions NONAUTHORITY unless the user attests otherwise.
  2. No public mutation surfaces; fail closed on unknown; preserve evidence (sha256 + readback receipt in evidence/ blobs) before any cleanup.
  3. Quota discipline: Kilo free lane 200 req/hr/IP (shared egress); free models are hypothesis generators — verify deterministically before accepting; do not spend OpenAI credits on falsified experiments.
  4. Evidence convention: evidence/YYYYMMDD/<name>_vN.json, receipts bind sha256/size/uri.
  5. If a capability seems missing: DISCOVER first (see doctrine). Current discovery baseline: evidence/20260913/arena-ax1-discovery-capability-first-v1.json (Work/Scheduled Tasks/cloud browser/Val Town plugin/Chrome DevTools MCP/WBA all EXIST as of 2026-09-13).