| /adr/0045-write-gates-run-in-the-store.md |
0.80 |
ADR 0045: Write gates run in the store, in both tiers |
adr, decision, gates, write-gates, writepolicy, contentcheck, secrets, personal-data, soul, knowledge-system, tiers, memory-store, hook, warning, memory-knowledge-layering |
| /adr/0029-broker-issues-agent-hub-tokens.md |
0.80 |
ADR 0029: The broker issues the federation agent's hub token |
adr, decision, auth, tokens, broker, agent, helm, gitops, argocd, secrets, bootstrap, rbac, namespace |
| /adr/0034-broker-state-in-a-dedicated-bucket.md |
0.80 |
ADR 0034: Broker lasting state in a dedicated bucket |
adr, decision, broker, knowledge-server, oauth, refresh-token, rotation, reuse-detection, rfc-9700, per-user-cap, dynamic-clients, rfc-7591, gcs, state-bucket, secrets, scaling, chart, migration |
| /adr/0030-broker-generates-its-cookie-key.md |
0.80 |
ADR 0030: The broker generates and persists its state cookie key |
adr, decision, broker, oauth, cookie, helm, gitops, argocd, secrets |
| /adr/0027-world-token-files-optional-and-split.md |
0.80 |
ADR 0027: World token files are optional at open and split into runtime and static |
adr, decision, auth, tokens, knowledge-server, helm, gitops, argocd, secrets, bootstrap, agent |
| /plans/memory-knowledge-layering/gates.md |
0.70 |
Same gates in both tiers |
plan, status:active, memory-knowledge-layering, gates, write-gates, secrets, personal-data, contentcheck, writepolicy, publish-policy, style, tags, retention, metaguard, hook, plugin-binary, demarkus-server, knowledge-server, warn-then-refuse, version-skew, release-rounds, eval, follow-ups |
| /plans/knowledge-policy-hardening.md |
0.70 |
Knowledge policy hardening |
plan, knowledge, write-policy, policy-floor, secrets, pii, allow-tags, style-guide, doctor, contentcheck, status:done |
| /demarkus-library/debugging.md |
0.70 |
demarkus-library — Debugging & Gotchas |
demarkus-library, debugging, gotcha, oauth, basic-auth, rfc6749, refresh-token, rotation, invalid-grant, broker, rate-limit, mcp-session, ci, argocd, secrets, federation, quic, reader-overlay, mark-worlds, htmx, authorization, floor |
| /debt/broker-runtime-secrets.md |
0.60 |
Broker runtime Secrets under GitOps |
debt, broker, memory-broker, helm, argocd, gitops, secrets, cookie-key, lookup, rbac |
| /journal/2026-05-27.md |
0.60 |
2026-05-27 |
journal, broker, stable-mint, hot-reload, fsnotify, configwatch, tokens-toml, kubelet-propagation, secrets, open-reads, write-tokens, sso, mcp-gateway, session-cache, kubernetes, go, status:complete |