One canonical home per reusable rule. Agent OS stores public-safe operating knowledge. Projects own implementation, permissions, Goal approval and results; dotfiles or native provider homes own host-specific setup and private data.
Knowledge is at the root or one subject directory. There is no active
kb/, observations/, playbooks/, policies/ or principles/.
| Need | Canonical file |
|---|---|
| Authority, evidence and core principles | CORE.md |
| One Goal, Fast/Deep plan, delegation | GOALS.md |
| Cold/warm context and handoffs | CONTEXT.md |
| Knowledge promotion and evidence cleanup | KNOWLEDGE.md |
| Connector safety | SAFETY.md |
| Git workflow | GIT.md |
| GitLab runners | GITLAB.md |
| Validation economy | TESTING.md |
| Tool selection | TOOLS.md |
| Terraform change and drift | TERRAFORM.md |
| Repository foundation/runtime decisions | REPOSITORIES.md |
| Cloudflare demo deployment | CLOUDFLARE.md |
| Area | Topics |
|---|---|
| AWS | AgentCore, OIDC and durable control |
| Codex | Sessions and Goals, Native delegation, Worker control, Skills |
| ChatGPT | Collaboration, Projects, Automations |
| Tools | Recipes and Git-aware search, Browser evidence, Playwright/WSL, X/Grok research |
Create kiro/ and opencode/ only for genuinely reusable public-safe
instructions, not placeholder directories. Local installed versions, account
settings and provider-specific secrets belong in dotfiles/native configuration.
Start from the active project's AGENTS.md, approved Goal/Issue and current
HEAD; read one to three matching Agent OS topics. Reuse valid warm context.
A link, checkout or native adapter is not proof that a provider automatically
loaded instructions. A public Git merge is not proof of Office/Home installation.
Goal: <approved outcome>; Project: <owning repo>
Agent OS: <verified Git source>
Use the project rules and approvals first. Read only task-relevant topics.
Execute within authority and report exact, observable acceptance evidence.
Use CONTRIBUTING.md for safe knowledge changes.
Validate with scripts/validate.sh --self-test and scripts/validate.sh.
Superseded content remains in Git history, not active copies.
Issue #62 separately tracks the live Home cutover and provider-loading acceptance.