docs(spec): move agent KB to git and fold in migration, metrics, upkeep

The KB leaves the ~/sync/org Syncthing share for its own git repo on cjennings.net (new decision D8). A systemd timer auto-syncs Craig's edits, agents pull before query and commit+push after write, machines replicate by clone (the work machine doesn't), and agent writes land under an agents/ subdirectory. Syncthing's no-history, no-gate, conflict-fork costs were the design's weakest accepted risks, and the phone constraint dissolved: mobile stays on on-demand doc drops to the ~/sync/phone share.

The amendment also folds in inclusion criteria plus a guided per-project memory sweep (Phase 1.5), a Success metrics section with a 30-day checkpoint, the seed node redefined as the KB's own documentation, and monthly hygiene automation (Phase 4). Phases renumbered 0-4. Implementation stays held pending the go-ahead.

1 files changed, 21 insertions, 11 deletions

diff --git a/todo.org b/todo.org
index 1271a8b..d049c5b 100644
--- a/todo.org
+++ b/todo.org
@@ -109,28 +109,38 @@ Spec-response pass processed the 2026-06-10 Codex review with D7 = keep as a pre
 *** 2026-06-10 Wed @ 17:29:37 -0500 Work-root denylist confirmed — ~/projects/work only
 Craig confirmed (2026-06-10, in chat): the denylist is just =~/projects/work=. Archangel is not work-scoped. The spec's one caveat clears — status now ready. Phase 1 is unblocked, but implementation still awaits Craig's explicit go.
 
+*** 2026-06-10 Wed @ 17:57:08 -0500 Spec amended — D8 git transport + migration/metrics/docs/maintenance folds
+Craig's five design questions answered and folded into the spec, and D8 ratified (Shape A): the KB moves out of the =~/sync/org= Syncthing share into its own git repo on cjennings.net, with an =agents/= subdirectory for agent writes, a systemd auto-sync timer for Craig's edits, opt-in-by-clone replication (work machine doesn't clone), and the phone staying on the on-demand =~/sync/phone= pattern. Folded in: inclusion criteria + a Phase 1.5 guided memory sweep, a Success metrics section with a 30-day checkpoint, the seed node redefined as the KB's own documentation, and Phase 4 maintenance automation. Phases renumbered 0-4; tasks below updated. Implementation still held.
+
+*** TODO Agent KB Phase 0 — transport migration to git :feature:
+Clean the 63 sync-conflict files, move roam out of the =~/sync/org= share to the new path (proposed =~/org/roam=), git init + cjennings.net remote + clones on personal machines (not work), systemd auto-sync timer, =roam-dir= update (handoff to the .emacs.d project), link sweep for the old path (the protocols.org task-list pointer among others) + a transition symlink. Verify: Syncthing no longer tracks it; an edit round-trips between machines via the timer. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 0 / D8).
+
 *** TODO Agent KB Phase 1 — pointer rule :feature:
-Write =claude-rules/knowledge-base.md=: KB path, canonical query commands (conflict-file exclusion baked in), the D4 write schema, the classification denylist + write routing, the refusal contract, and the D5/D6 boundary. The existing Makefile RULES glob installs it — no Makefile change. Denylist confirmed 2026-06-10 (=~/projects/work= only); unblocked, awaiting Craig's go to implement. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 1).
+Write =claude-rules/knowledge-base.md=: the KB path (post-migration), canonical query commands, the D4 write schema with the =agents/= subdirectory, the pull-before-query / commit+push-after-write discipline, the inclusion criteria (what goes in / stays out), the classification denylist + write routing, the refusal contract, and the D5/D6 boundary. The existing Makefile RULES glob installs it — no Makefile change. Denylist confirmed 2026-06-10 (=~/projects/work= only). Follows Phase 0. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 1).
+
+*** TODO Agent KB Phase 1.5 — guided memory migration sweep :feature:
+One-time per project: read the project's harness-memory dir, classify each fact against the inclusion criteria (KB-worthy / stays local / stale-delete), propose the batch for Craig's approval, write approved facts as =agents/= nodes. =reference=-type and durable =feedback=-type memories are the natural candidates; most =project=-type entries stay local. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 1.5).
 
 *** TODO Agent KB Phase 2 — seed node + index verification :feature:
-Craig supplies or approves one durable fact; write exactly one =:agent:= node under =~/sync/org/roam/= per the schema; Craig runs =org-roam-db-sync= and confirms it indexes and displays. Rollback on schema failure: delete the one timestamped file. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 2).
+The seed node doubles as the KB's user-facing documentation: a "How the agent knowledge base works" node (what agents write, the =:agent:= tag, the inventory command, what Craig can prune). Write it per the schema under =agents/=; Craig confirms it indexes and displays (autosync is on, no manual sync step). Rollback on schema failure: delete or revert the one node. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 2).
 
-*** TODO Agent KB Phase 3 — promotion cadence :feature:solo:
-Add the "anything worth promoting to the KB?" check to the wrap-up workflow (canonical claude-templates + mirror) and document the capture/promote cadence in =knowledge-base.md=. Verifiable via workflow-integrity + lint. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 3).
+*** TODO Agent KB Phase 3 — promotion cadence + usage instrumentation :feature:solo:
+Add the "anything worth promoting to the KB?" check to the wrap-up workflow (canonical claude-templates + mirror) and document the capture/promote cadence in =knowledge-base.md=. Wrap-up also records one line in the session summary — "KB: promoted N / consulted yes-no" — the input to the spec's 30-day Success-metrics checkpoint. Verifiable via workflow-integrity + lint. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 3).
 
 *** TODO Agent KB — manual testing and validation :test:
-What we're verifying: the v1 acceptance surface that needs Craig's eyes or a live cross-project session. Run after Phases 1-2 land.
-- Seed node appears in org-roam after =org-roam-db-sync= and in the =rg '#\+filetags:.*:agent:'= inventory.
-- In the work project, a durable-storage request produces no write under =~/sync/org/roam/= and the refusal report names the fact.
+What we're verifying: the v1 acceptance surface that needs Craig's eyes or a live cross-project session. Run after Phases 0-2 land.
+- Seed node appears in org-roam (autosync) and in the =rg '#\+filetags:.*:agent:'= inventory.
+- In the work project, a durable-storage request produces no write in the KB and the refusal report names the fact.
 - In an unknown project (outside =~/code/=, =~/projects/=, =~/.emacs.d=), the agent refuses or asks rather than guessing.
-Expected: all three behave per the spec's refusal contract; any miss promotes to a bug task. (Agent-runnable checks — make install link, rg finds a known note, conflict-file exclusion — are verified inside Phases 1-2.)
+- After Phase 0: an edit made on one machine appears on another within the auto-sync timer interval, no new sync-conflict files appear, and the work machine has no KB clone.
+Expected: all four behave per the spec; any miss promotes to a bug task. (Agent-runnable checks — make install link, rg finds a known note, conflict-file exclusion — are verified inside Phases 0-2.)
 
-*** TODO [#D] Agent KB hygiene reports for =:agent:= nodes :feature:
-vNext from [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] and its review: report orphaned, stale, or otherwise review-worthy =:agent:= nodes so Craig can curate agent-authored KB content cheaply after writes have accumulated. Further conditional vNext lives in the spec's scope tiers: a =/promote= command if the wrap-up prompt proves insufficient, an =:agent:inbox:= staging tag if free writes prove too noisy.
+*** TODO [#D] Agent KB Phase 4 — monthly hygiene automation :feature:
+Promoted from vNext to Phase 4 in the 2026-06-10 amendment: a monthly agent-run hygiene pass — =:agent:= inventory, orphan/duplicate detection, node-count trend — reported to the rulesets inbox with deletions proposed for approval (auto-cleanup only for =:agent:=-tagged nodes). Further conditional vNext lives in the spec's scope tiers: a =/promote= command if the wrap-up prompt proves insufficient, an =:agent:inbox:= staging tag if free writes prove too noisy. Spec: [[file:docs/agent-knowledge-base-spec.org][agent-knowledge-base-spec.org]] (Phase 4).
 
 ** TODO [#C] Build =create-documentation= skill for high-quality project/product docs :feature:
 :PROPERTIES:
-:LAST_REVIEWED: 2026-06-02
+:LAST_REVIEWED: 2026-06-10
 :END:
 
 Create a Claude skill named =create-documentation= that can plan, write,