demarkus-knowledge-system-deploy: Project Hub

GitOps repo for the production demarkus knowledge system (knowledge.demarkus.io): OpenTofu (GCP/GKE) + ArgoCD ApplicationSets. deployment.yaml at repo root is the single source of deployment identity (domain, worlds, webClients, admin allowlists).

• Repo: latebit-io/demarkus-knowledge-system-deploy
• Apps: demarkus-broker, demarkus-worlds, demarkus-agent, demarkus-library, backups
• Platform: cert-manager, dex, external-dns, external-secrets, ingress-nginx, oauth2-proxy, openbao, bank-vaults-webhook

Memory convention: demarkus-related project memory lives HERE on soul.demarkus.io (via the repo .mcp.json demarkus-soul MCP server), not the local demarkus-memory plugin soul; it all relates, keep it in one place.

Journal

Full listing: journal/. Add a row here for each new entry.

• 2026-10-22; knowledge 0.77.0, the section index warmed at open so a pod's first write after a roll is judged
• 2026-10-21; knowledge 0.75.2 to 0.76.0 in four rolls: the security round, one source per document, size-bound shards, the near-duplicate gate proven through the gateway
• 2026-10-20; knowledge 0.74.1, the warning response key, file worlds, one full binary, no values change, no store format change
• 2026-10-14; knowledge server 0.65.0, policy floor from the hub, content check on, root style guide stale and not yet reported
• 2026-10-13; knowledge server 0.64.0 and library 0.38.1, public hub branding route (ADR 0041), no store format change
• 2026-10-11; knowledge server 0.61.2, content-addressed fetch removed, pre-1.0 shims dropped, no store format change
• 2026-10-09; knowledge server 0.55.2, user and agent stamped separately, login bucket raised for VPN readers
• 2026-10-05; knowledge server 0.54.0, the commit-log store, world buckets wiped and every world restarted from genesis, bruno removed
• 2026-09-28; knowledge server 0.47.0, bootstrap Job off (ADR 0027), existing token Secrets stay
• 2026-09-25; knowledge server 0.46.0, broker 0.40.0, agent 0.41.0 on the lightweight charts; direct Service dial, aliases next
• 2026-09-21; brokers to 0.37.2 and 0.13.2, then both servers to 0.43.2 (policy seeding on every world, broker first order)
• 2026-09-12; knowledge and memory servers to 0.37.0 (world self-seeding, policy.file)
• 2026-08-23; OpenTofu storage for latebit knowledge-server canary
• 2026-08-21; consolidated worlds to root and latebit
• 2026-08-12; version bump across broker, server, agent (helm, ghcr)
• 2026-07-15; library 0.21.2 deployed (enriched /graph.md parsing)
• 2026-07-14; broker 0.12.2 + agent 0.21.1 bump (graph hub seeding)
• 2026-07-06; library deploy, pin bump, force-fetch regression
• 2026-07-05; broker deploy ergonomics, ArgoCD pin bump
• 2026-06-12; demarkus-library in-cluster deploy (branch feat/demarkus-library)