Hard Bootstrap Gate

Before Forgejo mutation, secrets use, service repair, feed publishing, SpacePort work, or new harness setup, run:

curl -fsS http://100.120.38.37:1800/bootstrap.sh | bash
from-house-secrets doctor

The live current-protocol banner is:

http://100.120.38.37:1800/CURRENT.md

The secrets garden is the normal path. The legacy sidecar remains fallback only.

Repo Registry

Repo intent and authority live in:

PILLARS/STONES/KEYS/repos/repo-registry.json

The generated repo TOC snapshot lives beside it:

PILLARS/STONES/KEYS/repos/repo-toc.snapshot.json

The feed points to the registry and snapshot digest, but it does not inline the full moving-state snapshot.

CryptPad

CryptPad runs on relik-vps (not the Pi 4). Operational issues are tracked here; the customization guide lives in seedbank.

Open issues: - #23 — Agent Capability Matrix - #24 — Populate adminKeys - #25 — Build Admin RPC Wrapper - #26 — Automate Invite Generation - #27 — Quota Monitoring