Memory
SESSION HANDOFF — DocuClear state of play (rewritten Sep 3, 2026, ~19:48 BST, end of session 3; read FIRST when picking up; recall its links before planning). Evidence standard: a5e10e10. This is the canonical state. THE DAY IN ONE BREATH: the system is contractualised. GENESIS_CONTRACT ratified, root-pinned, and evidenced. docuclear_control is deployed greenfield-clean at control.docuclear.ai. docuclear-evidence exists and contains the three contracts + evidence artifact #1. The loop ran end to end on its own founding, caught a legacy-storage improvisation, rejected it, re-cut cleanly, then uncovered a Durable Object idempotency bug in blueprint seeding. This is not theory anymore. NAMING (1950f2b5): DocuClear = only user-facing name. GlassAgent Workspace = internal interaction layer. Cloudflare OS + WorkSphere QUARANTINED (never reuse). docuclear_factory = our internal fork/deployment of upstream vibesdk (unqualified vibesdk = upstream only). docuclear_control = control app. Repos: int_* internal, cust_* customer. Org = docuclear-ai (hyphen; prior dictation error corrected). Canonical contracts repo = docuclear-ai/int_contracts. Gatekeepers: sphere, ingestion, factory, github. Naming contract + registry gadget decided; naming lint will catch fossils (e.g. R2 `docuclear-os-blueprint-content-v2`). CANONICAL CONTRACTS (docuclear-ai/int_contracts, private): GENESIS_CONTRACT.md RATIFIED in commit 6f99d1cd (root pin SHA-256 2661B0882BDF7269464DE8FF4C09CC66222B16A58648E41F1B1C7E1499A4DAA4); DEPLOYER_CONTRACT.md draft pin C12572173D05CF78E7DD0C4C0550764E007752762E925414A7E36EA30F7BB628; NAMING_CONTRACT.md draft pin AF4DF3D81B9B5DFDDAD9D155484FFA445C3DE7A749AD867B3071B4996149C0C9. Draft-suffix copies deleted; canonical tree = exactly 3 files. Contracts + 2026-09-03-perplexity-run-record.md are UPLOADED into greenfield docuclear-evidence (screenshot-confirmed): /contracts/ + /runs/genesis/. Evidence artifact #1 is complete. GENESIS: agent-defined (definer agent drafts/decomposes/provisions) + human-ratified (Mike root authority) + contract-governed. Three strands: model probabilistic (never authority), deterministic gadgets/gatekeepers (authority only by contract), possibilistic human (inside conversation, root trust once). FOUNDATIONAL PRINCIPLE (fd14e2e3): EVERY FUNCTION BECOMES A WORKSPACE — probabilistic shell, deterministic gadgets, contract-at-birth. Profiles, not separate architecture classes. Authority grammar: gadget proposes / gatekeeper disposes / worker executes / Workflows orchestrate / auditor reviews. AUDIT WORKSPACE (34b0f4a0) reviews everything, verdicts feed deterministic gates, never executes directly. Factory decision 5e4408f5. Contract/evidence loop b7f41f56: four artifacts (contract/work item/run record/decision trace), three checks (contract↔code, requirement→diff, claim↔code). FACTORY: greenfield, internal-only. GitHub canonical now; Artifacts deployment tweaks deferred (not now). docuclear_control → gatekeeper-factory MCP portal → docuclear_factory; context gatekeeper = contracts store, reads hash-pinned + byte-identical vs GitHub. First-party deployer worker has full binding taxonomy/secrets_store_secrets/health/evidence; Workflows carry durable pipelines. Workflows CANNOT deploy to Workers-for-Platforms namespaces (verified Cloudflare docs); account-level only. Dynamic Workflows candidate later. Wizard FULLY RETIRED — no wizard deploys anywhere. Root deploys via opencode with evidence; factory adopts later. Existing legacy infrastructure untouched/quarantined, disposition deferred. CONTROL APP BOOTSTRAP (work item 3ccf5c84): repo docuclear-ai/int_control, cloudflare-os-starter baseline 3d211477, cloudflare-os submodule pin 6478a144 (UPSTREAM.md committed). gh auth working over HTTPS (gh auth login + gh auth setup-git; no PAT/SSH). Six live workers after greenfield re-cut commit 3f4c02a7: docuclear-control router v667d21bf → https://control.docuclear.ai (Access-protected); workshop vc9689245; context v944f4cc1; scheduler va8b5341e; gatekeeper vba2fa2b5; error reporter vdc031121. Initial commit 94da575 ADOPTED legacy KV/R2 (caught by connector; violated greenfield). Mike ruled; re-cut 3f4c02a7: fresh KV docuclear-cc-v2, docuclear-blueprints-v2, docuclear-avatars-v2; fresh R2 docuclear-os-blueprint-content-v2. Default branding visual confirmation = fresh state. Model chat works: GLM 5.2 via Workers AI. Go/AI Gateway custom provider wiring remains optional/open; if used, smoke-test provider route in gateway logs. BLUEPRINTS — LATEST (highest priority build follow-up): source/build/install mechanism verified file:line. Bundled .gadget+.json pairs in cloudflare-os/packages/workshop-backend/format-blueprints/ → build script generates format-blueprints.ts → first authenticated /api request invokes ensureFormatBlueprintsInstalled() → metadata KV + archives R2 + format promotion. User saw none after browser login. Investigation commit 91c2ae6 wrongly called it expected behaviour; user observation contradicted it. Root-cause/fix commit 7397a07 VERIFIED: AdminSettings DO `installedFormatBlueprints` stamp persists across deploys; first adopted-resource deploy set stamp; fresh v2 resource deploy saw same manifest/version and skipped install at src/admin-settings.ts:101. Promotion ran unconditionally, .adminConfig had formats but metadata absent v2 KV; listFormatOffers filters null metadata. Tactical manual seed wrote v2 KV: 3 metadata + .featured; v2 R2: format.document/1, format.spreadsheet/1, format.slides/1. Agent says verified present. REQUIRED PERMANENT FIX: install idempotency key must include TARGET resource identity (manifest + KV namespace ID + R2 bucket ID) OR deployer gets explicit post-provision seed step. Add DEPLOYER_CONTRACT post-deploy assertion: exactly 3 format metadata records + .featured in target KV AND exactly 3 matching archives in target R2. FINAL USER CHECK STILL NEEDED: reload Workspace and list blueprints; observe offers before status VERIFIED. Update run record, commit, then draft/amend DEPLOYER_CONTRACT after Mike approves permanent pattern. DESIGN/PRODUCT: skills governance stance after Klarus CTO friction: 'we don't ban skills — we govern them.' Skills/context packs = versioned, reviewed, evidence-trailed; end users/agents propose, loop disposes. Context packs format proven by Mike's Total.js work: per-domain SKILL.md + queryable single-line JSON. Actual totaljs-v5-docs.json parsed: 1,850 items, 927KB bodies, 28 libs, full load 17ms, filter 0.2ms (verified). Total.js runtime index.js.map insight: 'map is not side effect, it IS contract.' Flow reference: fix what agent reads; missing assert.md pre-code test-plan artifact noted for future evidence-standard revision. Ringer validates verification/cheap-worker routing, but not adopt software. Innovation pipeline f0552ce8: publish under GlassAgent (developer credibility) not DocuClear. Positioning pathway 9bbe51e2: Mike's exec article series (art 1/2 published LinkedIn; art 3 WIP; art 4 missing) is demand-side framework — 4 work characteristics (sense making/deciding/owning/doing) × 3 reasoning types = exact platform map. Article 4 reveals the product: work changes into the workspace. Klarus: framework story is for Frank/CEO layer, not Alper/CTO fashion-vocabulary defense; status unknown. GRAPH/KEY IDS: handoff efe7781f; factory decision 5e4408f5; foundational principle/root pin fd14e2e3; auditor 34b0f4a0; contract loop b7f41f56; naming 1950f2b5; control work item 3ccf5c84; contract artifact 5c0dd885; mission/vision 4df88ef0; callsign coordination 0b8f273e; Nimbus docs a91b09ef; Ringer ee0c53a2; Total.js skill artifact 978b7cce; innovation pipeline f0552ce8; positioning 9bbe51e2. OPEN DECISIONS: DEPLOYER DP-1 context-gatekeeper↔GitHub sync; DP-2 factory API inventory → portal appendix; DP-3 keep_bindings semantics; DP-4 Dynamic Workflows post-MVP; DP-5 gadget-env binding file:line; DP-6 namespace workflow spike. NAMING ND-1 customer slug rules; ND-2 signed JSON registry export; ND-3 vocab registry future. Legacy queue: acf97a13 hash-pin/copy/snapshot, wizard MCP worker inventory (legacy only), acceptance; df12ec96 evidence-push verify; xberg fidelity corpus; Artifacts VERIFY; test-alpha 500; OpenClaw audit; service-bindings report. IMMEDIATE NEXT: (1) Mike reloads control workspace and confirms 3 blueprint offers after 7397a07 manual seed. (2) If visible, tell docucleardev to implement/plan permanent target-resource-aware seeding + deterministic acceptance test (no more manual magic); if not, continue runtime trace. (3) append/commit run record; (4) decide DEPLOYER_CONTRACT amendment. Then create contract-first work items: deployer worker, docuclear_factory fork, controller workspace, gatekeeper-factory/GitHub, audit workspace, name registry. WORKING AGREEMENTS: agent reports are claims until connector/source verification; code search on new private repo may show empty due indexing lag; GitHub same-branch writes must serialize or use push_files (parallel writes race); delivered files are historical once committed, GitHub canonical wins. Mike dictates — resolve transcript artifacts before declaring facts. Conflicts reported, never improvised around. Dogfood directive stands: build inside the system being built. [Update Sep 4, 2026]: [RECONCILIATION, Sep 4, 2026, ~01:05 BST — post-gap updates captured, see 6c219794 (incident/gap), e9982d86 (factory), 4b8031cf (control session)]: (1) Perplexity model downgrade broke Sphere writes ~20:30 Sep 3 onward; work continued unrecorded. (2) FACTORY: fresh vibesdk clone-deploy abandoned (hardcoded worker names/bindings collided with the wizard instance; cheap-model 'nuke everything / one-instance-per-account' advice rejected and later disproven). Muse Spark 1.3 research run (file:line): many scripts per account OK, but ONE platform account + ONE dispatch namespace via env singletons, and the Think deploy path hardcodes app bindings (custom wrangler bindings silently dropped). RULED: adopt the clean wizard-deployed vibesdk instance as docuclear_factory; mechanics later. (3) INT_CONTROL: estate 6→8 workers — two MCP portal gatekeepers live (internal vetted tier + external byo tier, OAuth, no secrets; BASE_URL redirect fix e62a5c63/b2150ef7) and the ambient sphere gatekeeper live end-to-end (v7908a22d; 12 reads + 11 queued actions; sphere.capture only auto-approvable; forget manual-only; admin surfaces never agent-reachable; SPHERE_TOKEN in Secrets Store). Parked vendor bug: GET /tags count=0 → second-brain-cloudflare. Blueprints remain CLOSED. IMMEDIATE NEXT now: factory adoption mechanics (how session), Phase-2 sphere items (capture auto-approval rule, getAgentCatalog, write caching/simulation), then the queued contract-first work items (deployer worker, controller workspace, gatekeeper-factory/GitHub, audit workspace, name registry).
Tags: docuclear, session-handoff, start-here, state-of-play, dogfood, architecture, mvp, project:docuclear, kind:episodic, status:canonical, volatility:state — Source: mcp — 2026-09-03 06:06:05 UTC