docs(prd): integrate the second brain as the fleet's knowledge layer
The PARA Obsidian vault (arcodange/SecondBrain — git-synced, sb.py digest/inbox/gitea-ingest jobs on the hermes cron ticker, local Ornith model, mcp-obsidian access) enters the PRD as a first-class component: new T17 knowledge capture & retrieval fiche, knowledge-layer section in the architecture (ERP = book of record, vault = context + institutional memory, append-only idempotent deposits, trusted-but-stale retrieval), hermes/Ornith recognized as the resident M4 runtime (D2 leaning, new D7 cluster<->vault access decision), foundation ledger row, diagram + goals updated (mermaid revalidated, 231 links/anchors re-checked green). Co-Authored-By: Claude Fable 5 <[email protected]>
This commit is contained in:
@@ -30,7 +30,7 @@ Each challenge states what breaks, the mitigation strategy, and the **residual**
|
||||
## C4 — Data confidentiality & sovereignty
|
||||
|
||||
**Breaks:** sensitive financial/contractual content ends up in a cloud it shouldn't be in; credentials leak into prompts or journals.
|
||||
**Strategy:** data classes (`public`, `internal`, `sensitive-financial`) with a class→tier ceiling ([routing policy](model-fleet.md#routing-policy)): sensitive stays local or EU-cloud; escalations carry minimized structured fields, not raw documents; secrets only via Vault/ENV (never in prompts, journals scrubbed); mailbox and bank scopes read-only by construction.
|
||||
**Strategy:** data classes (`public`, `internal`, `sensitive-financial`) with a class→tier ceiling ([routing policy](model-fleet.md#routing-policy)): sensitive stays local or EU-cloud; escalations carry minimized structured fields, not raw documents; secrets only via Vault/ENV (never in prompts, journals scrubbed); mailbox and bank scopes read-only by construction. The second brain's own `--local` lane (Ornith via hermes — nothing leaves the Mac) already embodies this doctrine for vault content.
|
||||
**Residual:** the human can explicitly widen a payload to the frontier tier when judgment says it's worth it — that judgment call is the point, not a leak.
|
||||
|
||||
## C5 — SLM capability ceiling on Pi hardware
|
||||
@@ -66,7 +66,7 @@ Each challenge states what breaks, the mitigation strategy, and the **residual**
|
||||
## C10 — Fleet maintenance burden & bus factor
|
||||
|
||||
**Breaks:** the fleet itself becomes the new admin burden — flaky atoms, stale prompts, undocumented behavior only its author (an LLM session) ever understood.
|
||||
**Strategy:** everything in git under house conventions (skills documented, runbooks with `[AGENT]`/`[HUMAN]` markers, guidebook updated same-change); the **graduation path** (prototype skill → frozen deterministic script + tests) shrinks LLM surface over time; the explicit kill rule — *an atom that needs weekly babysitting gets demoted or deleted*; fleet net-value reviewed monthly (time saved vs. time spent tending).
|
||||
**Strategy:** everything in git under house conventions (skills documented, runbooks with `[AGENT]`/`[HUMAN]` markers, guidebook updated same-change); the **graduation path** (prototype skill → frozen deterministic script + tests) shrinks LLM surface over time; vault deposits reuse the second brain's proven idempotent-frontmatter pattern (re-runs never duplicate); the explicit kill rule — *an atom that needs weekly babysitting gets demoted or deleted*; fleet net-value reviewed monthly (time saved vs. time spent tending).
|
||||
**Residual:** single human operator remains the bus factor for the *company* — out of scope for this PRD, but the evidence packs and runbooks are written so a successor (or expert-comptable) could reconstruct the books.
|
||||
|
||||
## C11 — Laptop-tier availability
|
||||
|
||||
Reference in New Issue
Block a user