@delorenj/pjangler 1.1.5 → 1.2.2

package/templates/commonproject/template/.mise/scripts/hindsight-setup.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+# Provision this dev's Hindsight credentials for this project's bank.
+#
+# Strategy (chosen 2026-06-12): ONE shared CAF-scoped API key lives in the
+# DeLoSecrets 1Password vault. This task resolves it via `op` and writes
+# HINDSIGHT_API_URL + HINDSIGHT_API_KEY into the gitignored .env, which mise
+# already loads — so every agent hook that shells out to `hindsight` picks the
+# key up automatically (env vars outrank ~/.hindsight/config).
+#
+# Idempotent: updates the two HINDSIGHT_ lines in place, leaves the rest of
+# .env untouched. Never prints the secret.
+#
+# Override the 1Password reference if the item path differs:
+#   HINDSIGHT_OP_KEY_REF="op://DeLoSecrets/<item>/<field>" mise run hindsight-setup
+set -euo pipefail
+
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ENV_FILE="${REPO_ROOT}/.env"
+API_URL="${HINDSIGHT_API_URL:-https://api.hs.delo.sh}"
+OP_KEY_REF="${HINDSIGHT_OP_KEY_REF:-op://DeLoSecrets/hindsight-PROJECT/credential}"
+
+note() { printf '  %s\n' "$*"; }
+
+echo "Hindsight setup for this project"
+note "API URL : ${API_URL}"
+note "op ref  : ${OP_KEY_REF}"
+
+if ! command -v op >/dev/null 2>&1; then
+  echo "ERROR: 1Password CLI (op) not found." >&2
+  note "Install it, then re-run, OR set the key manually:" >&2
+  note "  hindsight configure --api-url ${API_URL} --api-key <key>" >&2
+  exit 1
+fi
+
+# Resolve the secret (op handles its own auth / biometric unlock).
+if ! API_KEY="$(op read "${OP_KEY_REF}" 2>/dev/null)" || [[ -z "${API_KEY}" ]]; then
+  echo "ERROR: could not read ${OP_KEY_REF} from 1Password." >&2
+  note "Sign in (\`op signin\`) or fix HINDSIGHT_OP_KEY_REF, then re-run." >&2
+  exit 1
+fi
+
+touch "${ENV_FILE}"
+
+# upsert KEY=VALUE in .env without echoing the value to the terminal.
+upsert() {
+  local key="$1" val="$2" tmp
+  tmp="$(mktemp)"
+  grep -v -E "^${key}=" "${ENV_FILE}" > "${tmp}" 2>/dev/null || true
+  printf '%s=%s\n' "${key}" "${val}" >> "${tmp}"
+  # keep file perms tight — it now holds a secret
+  cat "${tmp}" > "${ENV_FILE}"
+  rm -f "${tmp}"
+}
+
+chmod 600 "${ENV_FILE}" 2>/dev/null || true
+upsert "HINDSIGHT_API_URL" "${API_URL}"
+upsert "HINDSIGHT_API_KEY" "${API_KEY}"
+chmod 600 "${ENV_FILE}" 2>/dev/null || true
+
+echo "✓ Wrote HINDSIGHT_API_URL + HINDSIGHT_API_KEY to .env (gitignored)."
+note "New shells in this repo will load them via mise. Verify now with:"
+note "  HINDSIGHT_API_KEY=\"\$(op read ${OP_KEY_REF})\" hindsight health"

package/templates/commonproject/template/.mise/scripts/link-project-skills-to-clis.sh

@@ -0,0 +1,110 @@
+#!/bin/bash
+# Fan the project's enabled skill set out to every agent CLI that does NOT read
+# .agents/ natively, as per-skill symlinks.
+#
+#   SSOT:    .agents/skills/   (committed inherited skills + on-enter ./skills/* links)
+#   Targets: a table of per-CLI skill dirs, each with a SCOPE:
+#     global -> a shared per-user dir (e.g. ~/.codex/skills): link ours in, never
+#               clobber foreign entries, removed on leave (unlink-*-from-clis.sh).
+#     local  -> a project-scoped mirror dir (e.g. ./.kimi-code/skills) that is fully
+#               ours: stale real copies / foreign symlinks are replaced, and
+#               disabled/deferred skills are pruned. Persists across leave.
+#
+# Per-dev controls — .agents/local.json (see .agents/local.example.json):
+#   skills.disabled[]       never link these
+#   skills.defer_to_global  if true, skip any skill that ALSO exists in your global
+#                           SSOT (~/.agents/skills) so your global copy wins and you
+#                           get zero duplicates. Teammates omit it → inherit all.
+#
+# Add a CLI: append one "dir|scope" line to SKILL_TARGETS. That's the whole change.
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+project_root="$(cd "${script_dir}/../.." && pwd)"
+agents_skills="${project_root}/.agents/skills"
+
+SKILL_TARGETS=(
+  "${CODEX_HOME:-$HOME/.codex}/skills|global"
+  "${project_root}/.kimi-code/skills|local"
+)
+
+local_config="${project_root}/.agents/hooks/lib/local-config.sh"
+if [ -f "$local_config" ]; then
+  # shellcheck source=/dev/null
+  source "$local_config"
+else
+  skill_disabled() { return 1; }
+  skills_defer_to_global() { return 1; }
+  skill_is_global() { return 1; }
+fi
+
+if [ ! -d "$agents_skills" ]; then
+  echo "No .agents/skills/ found. Nothing to fan out."
+  exit 0
+fi
+
+defer=0
+skills_defer_to_global && defer=1
+
+# Should this skill be skipped (disabled, or deferred to the dev's global system)?
+is_skipped() {
+  local name="$1"
+  skill_disabled "$name" && return 0
+  [ "$defer" = "1" ] && skill_is_global "$name" && return 0
+  return 1
+}
+
+# readlink with any trailing slash stripped (older links were stored with one).
+_readlink_norm() {
+  local l; l="$(readlink "$1" 2>/dev/null || echo "")"
+  printf '%s' "${l%/}"
+}
+
+link_into() {
+  local dir="$1" scope="$2" linked=0 skipped=0 pruned=0
+  mkdir -p "$dir"
+  for skill_path in "$agents_skills"/*; do
+    [ -d "$skill_path" ] || continue
+    local name target
+    name="$(basename "$skill_path")"
+    [[ "$name" == ".system" ]] && continue
+    target="${dir}/${name}"
+
+    if is_skipped "$name"; then
+      # Yield the slot: remove a link WE previously made (so the dev's global copy
+      # can claim it), and prune stale entries from our fully-managed mirror.
+      if [ -L "$target" ] && [ "$(_readlink_norm "$target")" = "$skill_path" ]; then
+        rm -f "$target"
+        pruned=$((pruned + 1))
+      elif [ "$scope" = "local" ] && { [ -L "$target" ] || [ -e "$target" ]; }; then
+        rm -rf "$target"
+        pruned=$((pruned + 1))
+      fi
+      skipped=$((skipped + 1))
+      continue
+    fi
+
+    if [ -L "$target" ] && [ "$(_readlink_norm "$target")" = "$skill_path" ]; then
+      linked=$((linked + 1))
+      continue
+    fi
+
+    if [ -e "$target" ] || [ -L "$target" ]; then
+      if [ "$scope" = "local" ]; then
+        rm -rf "$target"            # our mirror: replace stale copy / foreign link
+      else
+        skipped=$((skipped + 1))    # shared dir: leave foreign entries untouched
+        continue
+      fi
+    fi
+
+    ln -s "$skill_path" "$target"
+    linked=$((linked + 1))
+  done
+  echo "  ${dir} (${scope}): ${linked} linked, ${skipped} skipped, ${pruned} pruned"
+}
+
+echo "Fanning .agents/skills -> agent CLIs (defer_to_global=${defer})"
+for entry in "${SKILL_TARGETS[@]}"; do
+  link_into "${entry%%|*}" "${entry##*|}"
+done

package/templates/commonproject/template/.mise/scripts/unlink-project-skills-from-clis.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+# Remove this project's skill symlinks from shared (global-scope) per-CLI dirs on
+# leave, so other projects / your global setup aren't polluted. Project-scoped
+# (local-scope) mirrors like ./.kimi-code/skills are left in place — they belong
+# to the repo and cost nothing to keep.
+#
+# Mirrors the SKILL_TARGETS table in link-project-skills-to-clis.sh.
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+project_root="$(cd "${script_dir}/../.." && pwd)"
+agents_skills="${project_root}/.agents/skills"
+
+SKILL_TARGETS=(
+  "${CODEX_HOME:-$HOME/.codex}/skills|global"
+  "${project_root}/.kimi-code/skills|local"
+)
+
+[ -d "$agents_skills" ] || exit 0
+
+_readlink_norm() {
+  local l; l="$(readlink "$1" 2>/dev/null || echo "")"
+  printf '%s' "${l%/}"
+}
+
+for entry in "${SKILL_TARGETS[@]}"; do
+  dir="${entry%%|*}"
+  scope="${entry##*|}"
+  [ "$scope" = "global" ] || continue
+  [ -d "$dir" ] || continue
+
+  unlinked=0
+  for skill_path in "$agents_skills"/*; do
+    [ -e "$skill_path" ] || continue
+    name="$(basename "$skill_path")"
+    [[ "$name" == ".system" ]] && continue
+    target="${dir}/${name}"
+    if [ -L "$target" ] && [ "$(_readlink_norm "$target")" = "$skill_path" ]; then
+      rm "$target"
+      unlinked=$((unlinked + 1))
+    fi
+  done
+  [ "$unlinked" -gt 0 ] && echo "Unlinked ${unlinked} project skill(s) from ${dir}"
+done
+exit 0

package/templates/commonproject/template/mise.toml.jinja

@@ -15,12 +15,54 @@ _.file = [".env"]
 enter = [
   "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh",
   "op inject -i .env.op > .env",
+  "codegraph sync",
+  "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-project-skills-to-clis.sh",
+  "{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py --install --quiet",
+]
+leave = [
+  "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/unlink-project-skills-from-clis.sh",
+  "{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py --uninstall --quiet",
 ]
 
 [[watch_files]]
 patterns = ["AGENTS.md"]
 task = "link-agentfiles"
 
+# Re-fan-out the agent hooks whenever the single source of truth changes.
+[[watch_files]]
+patterns = [".agents/hooks/hooks.master.json"]
+task = "hooks-sync"
+
 [tasks.link-agentfiles]
 description = "Symlink all agent files to AGENTS.md"
 run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh"
+
+# --- Project-scoped agent hooks + skill fan-out (see .agents/hooks/README.md) ---
+
+[tasks.hooks-sync]
+description = "Fan out .agents/hooks/hooks.master.json to each agent CLI (claude committed; codex/kimi injected; hermes adapter)"
+run = "{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py --install"
+
+[tasks.hooks-check]
+description = "Drift gate: verify generated hook configs match hooks.master.json (CI-safe, read-only)"
+run = "{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py --check"
+
+[tasks.hooks-uninstall]
+description = "Remove per-user agent-hook injections (codex/kimi/hermes)"
+run = "{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py --uninstall"
+
+[tasks.link-project-skills-to-clis]
+description = "Fan .agents/skills out to each agent CLI; honors local.json defer_to_global + disabled"
+run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-project-skills-to-clis.sh"
+
+[tasks.unlink-project-skills-from-clis]
+description = "Remove project skill symlinks from shared per-CLI dirs"
+run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/unlink-project-skills-from-clis.sh"
+
+[tasks.skills-relink]
+description = "Re-fan the project skill set to all CLIs"
+run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-project-skills-to-clis.sh"
+
+[tasks.hindsight-setup]
+description = "Provision this dev's shared project Hindsight key from 1Password into .env (op inject)"
+run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/hindsight-setup.sh"

package/templates/hermes-agent/.codegraph/daemon.pid

@@ -0,0 +1,6 @@
+{
+  "pid": 868618,
+  "version": "0.9.9",
+  "socketPath": "/home/delorenj/code/hermes-agent-template/.codegraph/daemon.sock",
+  "startedAt": 1782538939056
+}

package/templates/hermes-agent/.omo/run-continuation/ses_0e5b28303ffeXxL53hZjKggXDW.json

@@ -0,0 +1,10 @@
+{
+  "sessionID": "ses_0e5b28303ffeXxL53hZjKggXDW",
+  "updatedAt": "2026-06-30T21:06:55.034Z",
+  "sources": {
+    "background-task": {
+      "state": "idle",
+      "updatedAt": "2026-06-30T21:06:55.034Z"
+    }
+  }
+}

package/templates/hermes-agent/README.md

@@ -18,13 +18,16 @@ runs second (for each agent role you want) to drop agents into it.
 
 ## Roles
 
-The template provisions several roles. The `pm` role handles project management
-and triage. The `scrum-master` role runs a provider-agnostic ticket sentinel
-(Linear, Plane, or Trello) with an autonomous adversarial review (act, do not
-wait).
+The template provisions a single Hermes role per invocation. The `pm` role
+handles project management and triage, and also runs the continuous ticket
+sentinel out-of-band: a provider-agnostic board-reconciliation pass (Linear,
+Plane, or Trello) with an autonomous adversarial review (act, do not wait). The
+sentinel runs as the PM's **heartbeat** — a fused systemd timer tick that does
+the reconciliation pass and then a gated runtime checkpoint. (There is no
+separate `scrum-master` role; its duties folded into the PM heartbeat.)
 
-To work on or extend the Scrum Master, start with the [Scrum Master handoff
-guide](docs/scrum-master/README.md).
+To work on or extend the heartbeat sentinel, start with the [sentinel handoff
+guide](docs/sentinel/README.md).
 
 ## Quickstart
 
@@ -39,13 +42,13 @@ The template will:
 
 1. Seed `~/.config/hermes-agent-template/config.toml` from the shipped example (see [Configuration](#configuration))
 2. Ensure `~/.hermes/fleet.env` exists (single source of truth for shared Hermes binary/repo/registry)
-3. Create the Hermes profile `<repo>-pm` via `hermes profile create --inherit-config`
+3. Create the hermes profile `<repo>-pm` via `hermes profile create --clone`
 4. Create a new private GitHub repo `<owner>/agent-hm-<repo>-pm` for the runtime
-5. Populate it with the runtime scaffold (delta config, profile.yaml, SOUL.md, memories, consumer.py)
-6. Add it as a git submodule at `agents/hermes/pm/runtime/` and symlink the named profile to it
+5. Populate it with the runtime scaffold (config.yaml, SOUL.md, memories, consumer.py)
+6. Add it as a git submodule at `agents/hermes/pm/runtime/` (== HERMES_HOME)
 7. Prompt for a BotFather token, store it in `runtime/.env`
 8. Create a Plane project in your configured workspace
-9. Install systemd `--user` units: gateway, consumer, hourly checkpoint timer
+9. Install systemd `--user` units: gateway, consumer, heartbeat timer (reconcile + checkpoint)
 10. Append the agent to `~/.hermes/agents-registry.yaml`
 
 ## Configuration
@@ -85,12 +88,11 @@ your-project/
 │   ├── hermes                              ← launcher
 │   ├── .scripts/                           ← provisioning scripts (idempotent re-run)
 │   └── runtime/                            ← git submodule → agent-hm-<repo>-pm
-│       (symlink target for ~/.hermes/profiles/<repo>-pm)
+│       (HERMES_HOME for this agent)
 └── ...
 
 github.com/delorenj/agent-hm-<repo>-pm/     ← new private repo, this agent's state
-├── profile.yaml                            ← config.inherit_from: default
-├── config.yaml                             ← local overrides only
+├── config.yaml                             ← cloned from global ~/.hermes
 ├── SOUL.md                                 ← evolves over time
 ├── memories/{MEMORY,USER}.md
 ├── sessions/sessions.db                    ← LFS-tracked
@@ -100,7 +102,7 @@ github.com/delorenj/agent-hm-<repo>-pm/     ← new private repo, this agent's s
 
 ~/.hermes/agents-registry.yaml              ← fleet roster
 ~/.hermes/fleet.env                          ← shared Hermes binary/repo pointer
-~/.config/systemd/user/                     ← gateway, consumer, checkpoint timer
+~/.config/systemd/user/                     ← gateway, consumer, heartbeat timer
 ```
 
 ## Fleet single source-of-truth

package/templates/hermes-agent/copier.yml

@@ -11,12 +11,10 @@
 # What it does:
 #   1. Renders agents/hermes/<role>/{role.yaml, SOUL.md, hermes, .scripts/}
 #   2. Creates a per-agent runtime repo gh:delorenj/agent-hm-<repo>-<role>
-#   3. Submodules it at agents/hermes/<role>/runtime/
-#   4. Creates ~/.hermes/profiles/<repo>-<role> as a symlink to runtime/
-#      with profile.yaml opting config.yaml into inherited default config
-#   5. Creates a Plane project in 33god workspace
+#   3. Submodules it at agents/hermes/<role>/runtime/  (this is HERMES_HOME)
+#   4. Creates a Plane project in 33god workspace
 #   6. Prompts for a BotFather Telegram token, stores in runtime/.env
-#   7. Installs a Bloodbank consumer + hourly checkpoint timer
+#   7. Installs a Bloodbank consumer + heartbeat timer (reconcile + checkpoint)
 #   8. Appends to ~/.hermes/agents-registry.yaml
 #
 # Environment-specific defaults (Hermes binary path, runtime repo owner, Plane
@@ -50,7 +48,6 @@ role:
   default: pm
   choices:
     "Project Manager (pm)": pm
-    "Scrum Master — continuous ticket sentinel (scrum-master)": scrum-master
     "Developer (dev)": dev
     "Reviewer (review)": review
     "Ops (ops)": ops
@@ -66,25 +63,19 @@ ticket_provider:
     "Plane": plane
     "Trello": trello
 
-with_scrum_master:
-  type: bool
-  help: "Also provision a paired Scrum Master (continuous ticket sentinel) for this repo?"
-  default: false
-  when: "{{ role == 'pm' }}"
-
 agent_purpose:
   type: str
   help: "One-line description of what this agent does in this repo"
-  default: "{% if role == 'scrum-master' %}Continuous ticket sentinel and delegated review{% else %}Project management and triage{% endif %}"
+  default: "Project management, triage, and continuous board reconciliation"
 
 model_provider:
   type: str
-  help: "Inference provider override (empty = inherit shared default profile config)"
+  help: "Inference provider (empty = inherit from global ~/.hermes config)"
   default: ""
 
 model_name:
   type: str
-  help: "Model name override (empty = inherit shared default profile config)"
+  help: "Model name (empty = inherit from global ~/.hermes config)"
   default: ""
 
 soul_tone:
@@ -104,11 +95,6 @@ agent_id:
   default: "{{ target_repo }}-{{ role }}"
   when: false
 
-profile_name:
-  type: str
-  default: "{{ agent_id }}"
-  when: false
-
 display_name:
   type: str
   # Short roles (pm, dev, ops, qa, ci) get uppercased; longer ones get title-cased.
@@ -145,7 +131,7 @@ plane_workspace:
 # All scripts are idempotent — safe to re-run if a step fails.
 
 _tasks:
-  - "chmod +x .scripts/*.sh hermes 2>/dev/null || true"
+  - "chmod +x .scripts/*.sh .scripts/sentinel/bin/*.sh hermes 2>/dev/null || true"
   - "./.scripts/00-banner.sh"
   - "./.scripts/01-config.sh"
   - "./.scripts/05-fleet-env.sh"
@@ -155,12 +141,8 @@ _tasks:
   - "./.scripts/42-ticket-provider.sh"
   - "./.scripts/60-bloodbank.sh"
   - "./.scripts/70-systemd.sh"
-  - command: "./.scripts/75-scrum-master.sh"
-    when: "{{ role == 'scrum-master' }}"
   - "./.scripts/80-registry.sh"
   - "./.scripts/99-summary.sh"
-  - command: "./.scripts/90-chain-scrum-master.sh"
-    when: "{{ role == 'pm' and with_scrum_master }}"
 
 _skip_if_exists:
   - hermes

package/templates/hermes-agent/docs/architecture.md

@@ -26,12 +26,11 @@
                   ┌────────────────────────────────────────┐
                   │  gh:delorenj/agent-hm-<project>-<role> │ ← NEW repo per agent
                   │  ───────────────────────────────────── │   private
-                  │     ├── profile.yaml                   │
-                  │     ├── config.yaml  (local overrides) │
+                  │     ├── config.yaml                    │
                   │     ├── SOUL.md (evolving)             │
                   │     ├── memories/                      │   auto-checkpointed
-                  │     ├── sessions/sessions.db  (LFS)    │   hourly + on
-                  │     ├── decisions/                     │   session end
+                  │     ├── sessions/sessions.db  (LFS)    │   by the heartbeat
+                  │     ├── decisions/                     │   + on session end
                   │     └── bloodbank-consumer.py          │
                   └────────────────────────────────────────┘
 ```
@@ -52,12 +51,6 @@ A third file ties the fleet together: `~/.hermes/fleet.env`.
 It is the single source-of-truth pointer for the shared Hermes executable/repo
 that every generated launcher uses.
 
-Each runtime is also exposed as a named Hermes profile:
-`~/.hermes/profiles/<repo>-<role>` symlinks to `agents/hermes/<role>/runtime/`.
-The runtime's `profile.yaml` opts only `config.yaml` into inheriting shared
-defaults from the fleet default profile; secrets, memories, sessions, skills,
-gateway state, and other runtime files stay local.
-
 ## Why git-tracked runtime
 
 The runtime is the agent's "subjective experience" — its memory of every
@@ -70,17 +63,22 @@ emitted. Putting it in git gives:
 - **Forkability**: experiment with a copy on a branch, merge if it works out.
 - **Cross-machine**: same agent state on big-chungus and on the laptop.
 
-## Checkpoint cadence
+## Heartbeat cadence (reconcile + checkpoint)
 
-A systemd `--user` timer runs `.scripts/checkpoint.sh` every hour. The script:
+A systemd `--user` timer runs `.scripts/heartbeat.sh` frequently (about once a
+minute). Each tick fuses two jobs into one:
 
-1. `cd` into the runtime submodule
-2. `git add -A`
-3. Commits only if dirty (exits clean otherwise)
-4. Pushes to `origin`
+1. **Board-reconciliation sentinel pass** — the PM's continuous ticket sentinel.
+   The runner's own cooldown/lock logic decides whether a full, LLM-backed
+   reconciliation pass is worth running (it rate-limits the expensive Hermes
+   call); see [the sentinel docs](sentinel/README.md).
+2. **Gated runtime checkpoint** — after the sentinel decision, the runner calls
+   `.scripts/checkpoint.sh`, gated to at most once an hour. The checkpoint:
+   `cd`s into the runtime submodule, `git add -A`, commits only if dirty (exits
+   clean otherwise), and pushes to `origin`.
 
-On session end, a hermes hook (TBD path) does the same thing immediately so
-nothing in-flight is lost between hourly ticks.
+On session end, a hermes hook (TBD path) checkpoints immediately so nothing
+in-flight is lost between heartbeat ticks.
 
 Sensitive state — `.env`, `auth.json`, OAuth tokens — never enters git.
 They're in `.gitignore` and live only on the host machine.

package/templates/hermes-agent/docs/fleet-control-plane/README.md

@@ -0,0 +1,35 @@
+---
+workflowType: fleet-control-plane-artifacts
+date: 2026-06-27
+status: draft-ready
+source: adapted-bmad
+---
+
+# Fleet Control Plane Implementation Artifacts
+
+This folder captures the implementation plan for tightening the Fleet without
+collapsing its repos into one codebase.
+
+The Fleet remains a set of independently useful parts:
+
+- `CommonProject` owns the base project scaffold.
+- `hermes-agent-template` owns agent-role provisioning.
+- `~/.hermes` owns live runtime state.
+- `~/.hermes/hermes-agent` owns the Hermes engine checkout and binary.
+- `pjangler` becomes the explicit Fleet control plane.
+- n8n becomes the visual orchestration layer, backed by local systemd fallback.
+
+## Artifacts
+
+- [prd.md](./prd.md) - Functional and non-functional requirements.
+- [architecture.md](./architecture.md) - Technical architecture and ADRs.
+- [epics-and-stories.md](./epics-and-stories.md) - Implementation backlog with acceptance criteria.
+- [implementation-readiness-report-2026-06-27.md](./implementation-readiness-report-2026-06-27.md) - Readiness assessment and launch gates.
+
+## Adapted BMAD Note
+
+The formal BMAD workflow expects a project-local `_bmad` runtime, PRD, and
+step-by-step user confirmations. This repo does not currently contain `_bmad`.
+These artifacts preserve the BMAD intent and structure while using the live
+architecture review and advanced elicitation decisions as input.
+