SP11 Task 19 rulings — the persona caption inside the zoomed crop, every branding slot a PNG
SP04 Task 9 rulings — Anthropic thinking never rides with a forced tool or a temperature
Tool call audit, 180-day retention purge and internal audit read
The insert's transaction is the repository's save (REQUIRES_NEW), begun and committed inside the writer's catch, so no audit failure reaches a tool call. Rows a...
Tool visibility by rights, apps, PHI, risk ceiling, taint, capability and charter
The capability gate caches the router's answer per member (SP04 filter 10 narrows candidates by the member's access policies), keeps a failure to get one for 30...
Pure resolver — suppress/lock, additive, specific, restrictive, goals
SP03-T41 ruling — the settings dialogs' charter wiring, a dash for an empty count
SP03-T8 ruling — the least specific hider is named; resolver results are read-only
SP11-T9 fix round 1 ruling — no guest system account for a member or an AI
SP11-T17 build rulings — a hand-back stands, a guest that will not let go is logged
SP05-T8 rulings — the org's IANA zone for the outreach gate, policy client hardening
Charter policy, approvals, outreach gate and external recipients
The charter policy compiles SP03's resolved approvals and limits (fail closed when unreachable, refused or without a resolved block); approvals are created and ...
SP11-T9 build rulings — resume noticed per request, live AI idleness, no system account
The agent runs the AI workstation profile when cloud-init asks for it
The agent loads kamo_hc_ai only for KAMO_HC_PROFILE=AI_WORKSTATION: the AI's paths on 9810 behind the agent bearer, the MCP bridge on 9811, the AI's activity re...
SP11-T16 rulings — AGENT_REFUSED for a guest's other refusals, exact hold seconds, guest-parity bookmark pattern
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.