@forwardimpact/outpost 3.12.1 → 3.13.0

package/templates/.claude/skills/req-decide/SKILL.md

@@ -9,6 +9,9 @@ description: >
 
 # Hiring Decision
 
+Write tier: `2-Confidential`
+Frontmatter: candidate (stamps `status`, `updated`)
+
 Synthesize all available evidence for a candidate into a final hiring
 recommendation. This is the culmination of the hiring pipeline. Every prior
 assessment feeds in.
@@ -29,26 +32,28 @@ This is **Stage 3** of the three-stage pipeline:
 ## Prerequisites
 
 - `fit-pathway` CLI installed.
-- `Knowledge/Candidates/{Name}/screening.md` exists.
-- At least one `Knowledge/Candidates/{Name}/interview-*.md`.
-- `Knowledge/Candidates/{Name}/brief.md` exists.
+- `2-Confidential/Candidates/{Name}/screening.md` exists.
+- At least one `2-Confidential/Candidates/{Name}/interview-*.md`.
+- `2-Confidential/Candidates/{Name}/brief.md` exists.
 
 ## Inputs
 
-- All artifacts in `Knowledge/Candidates/{Name}/`.
+- All artifacts in `2-Confidential/Candidates/{Name}/`.
 - Standard data via `fit-pathway`.
-- `Knowledge/Candidates/Insights.md` — cross-candidate context.
-- `Knowledge/Roles/*.md` — the candidate's requisition (positions, hiring
+- `2-Confidential/Candidates/Insights.md` — cross-candidate context.
+- `2-Confidential/Roles/*.md` — the candidate's requisition (positions, hiring
   manager, domain lead). Check the `**Status:**` field to distinguish active
   from historical reqs.
-- `Knowledge/Priorities/*.md` — strategic context.
+- `3-Team/Priorities/*.md` — strategic context.
 - Other active candidates at the same level — relative position.
 
 ## Outputs
 
-- `Knowledge/Candidates/{Name}/recommendation.md` — final recommendation.
-- Updated `Knowledge/Candidates/{Name}/brief.md` — status and link.
-- Updated `Knowledge/Candidates/Insights.md` — cross-candidate observations.
+- `2-Confidential/Candidates/{Name}/recommendation.md` — final recommendation.
+- Updated `2-Confidential/Candidates/{Name}/brief.md` — status, link, and
+  frontmatter `status` and `updated` stamped.
+- Updated `2-Confidential/Candidates/Insights.md` — cross-candidate
+  observations.
 
 <do_confirm_checklist goal="Verify the recommendation is grounded and
 audit-ready">
@@ -75,7 +80,7 @@ audit-ready">
 ### 1. Gather all evidence
 
 ```bash
-ls Knowledge/Candidates/{Name}/
+ls 2-Confidential/Candidates/{Name}/
 ```
 
 Read in order: `brief.md`, `screening.md`, every `interview-*.md`, relevant
@@ -119,8 +124,8 @@ Apply the level-confirmation criteria in
 If `brief.md` carries a `Req`:
 
 ```bash
-ls Knowledge/Roles/ | grep "{req_number}"
-cat "Knowledge/Roles/{matching file}"
+ls 2-Confidential/Roles/ | grep "{req_number}"
+cat "2-Confidential/Roles/{matching file}"
 ```
 
 Check the `**Status:**` field. Capture remaining positions, hiring manager,
@@ -130,9 +135,9 @@ domain lead, goal alignment, other candidates on the same req, and channel
 ### 6. Assess against the active pipeline
 
 ```bash
-cat Knowledge/Candidates/Insights.md
+cat 2-Confidential/Candidates/Insights.md
 
-for dir in Knowledge/Candidates/*/; do
+for dir in 2-Confidential/Candidates/*/; do
   if [ -f "$dir/screening.md" ]; then
     head -5 "$dir/screening.md"
   fi
@@ -150,8 +155,9 @@ Apply the [decision rules](references/rubric.md#decision-rules) and run the
 ### 8. Write the recommendation
 
 Use the template in [references/template.md](references/template.md). Save to
-`Knowledge/Candidates/{Name}/recommendation.md`. Carry the **advisory-only**
-banner. Cite specific evidence in skill, behaviour, level, and track sections.
+`2-Confidential/Candidates/{Name}/recommendation.md`. Carry the
+**advisory-only** banner. Cite specific evidence in skill, behaviour, level, and
+track sections.
 
 ### 9. Update brief and insights
 
@@ -160,8 +166,10 @@ Update `brief.md`:
 - Set `Status` to `recommended` or `not-recommended`.
 - Append `- [Hiring Recommendation](./recommendation.md)`.
 - Add the final pipeline entry with date and outcome.
+- Stamp the frontmatter: set `updated` to the decision date and `status` to
+  the closest registry value (agents select from `registry.yaml`).
 
-Update `Knowledge/Candidates/Insights.md` only when a cross-candidate
+Update `2-Confidential/Candidates/Insights.md` only when a cross-candidate
 observation deserves a record (strongest at level, a pattern in the sourcing
 channel, level-adjustment implications).
 

package/templates/.claude/skills/req-decide/references/template.md

@@ -1,7 +1,7 @@
 # Recommendation Template
 
-Reference template for `req-decide` Step 6. Save to
-`Knowledge/Candidates/{Name}/recommendation.md`.
+Reference template for `req-decide` Step 8. Save to
+`2-Confidential/Candidates/{Name}/recommendation.md`.
 
 ```markdown
 # Hiring Recommendation — {Full Name}

package/templates/.claude/skills/req-forget/SKILL.md

@@ -11,11 +11,14 @@ compatibility: Requires macOS filesystem access
 
 # Right to Be Forgotten
 
+Write tier: `2-Confidential` (erasure record; sweep every tier present)
+Frontmatter: erasure
+
 Process data erasure requests under GDPR Article 17. Work from the person's
-name. Systematically find and remove all personal data from the knowledge base,
-the cached synced data, and the agent state files. Produces an **erasure
-report** that records what you found, deleted, and redacted. The report is the
-compliance audit trail.
+name and every recorded alias. Sweep every tier present, the owner's personal
+surfaces (`0-Draft/`, `Briefings/`), the cached synced data, and the agent
+state files. Produces an **erasure report** that records what you found,
+deleted, and redacted. The report is the compliance audit trail.
 
 ## Trigger
 
@@ -38,15 +41,15 @@ compliance audit trail.
 
 ## Outputs
 
-- `Knowledge/Erasure/{Name}--{YYYY-MM-DD}.md` — erasure report.
-- Deleted files and redacted references across the knowledge base.
+- `2-Confidential/Erasure/{Name}--{YYYY-MM-DD}.md` — erasure report.
+- Deleted files and redacted references across every tier.
 
 <do_confirm_checklist goal="Verify erasure is complete and the audit trail is
 sound">
 
 - [ ] Get the user's confirmation before any deletion.
-- [ ] Run every discovery recipe. Cover knowledge, cache, state, and drafts in
-      the inventory.
+- [ ] Run every discovery recipe for the name and each alias. Cover every tier
+      present, `Briefings/`, cache, and state in the inventory.
 - [ ] Delete all dedicated files and directories.
 - [ ] Redact all mentions and backlinks from other notes.
 - [ ] Handle cached email threads, attachments, and calendar entries.
@@ -54,6 +57,8 @@ sound">
 - [ ] Save the erasure report. Keep **no** personal data in it beyond the name
       and the actions taken.
 - [ ] Run a final `rg` search. Confirm the erasure report is the only match.
+- [ ] Run `npx fit-outpost validate` on the KB root. Fix the dangles the
+      removal created.
 
 </do_confirm_checklist>
 
@@ -67,7 +72,8 @@ State to the user:
 >
 > This will permanently delete all personal data related to {Name} from:
 >
-> - Knowledge base notes (People, Candidates, Organizations mentions)
+> - Notes in every tier (People, Candidates, Organizations mentions)
+> - Personal surfaces (`0-Draft/`, `Briefings/`)
 > - Cached email threads and attachments
 > - Agent state and triage files
 >
@@ -77,8 +83,10 @@ State to the user:
 
 ### 1. Discovery
 
-Run every recipe in [references/locations.md](references/locations.md) and
-compile a complete inventory of every file and reference found.
+Read the subject's frontmatter `aliases` first. Run every recipe in
+[references/locations.md](references/locations.md) for the name, each alias,
+and each email. Compile a complete inventory of every file and reference
+found.
 
 ### 2. Classify
 
@@ -90,11 +98,12 @@ where redaction is the action.
 
 Process most-specific to most-general.
 
-**3a. Dedicated files and directories:**
+**3a. Dedicated files and directories (repeat per tier present):**
 
 ```bash
-rm -rf "Knowledge/Candidates/{Name}/"
-rm -f "Knowledge/People/{Name}.md"
+rm -rf "2-Confidential/Candidates/{Name}/"
+rm -f "2-Confidential/People/{Name}.md"   # overlay note
+rm -f "3-Team/People/{Name}.md"
 find ~/.cache/fit/outpost/apple_mail/attachments/ -iname "*{Name}*" -delete
 ```
 
@@ -129,28 +138,36 @@ rg -v "{deleted_path}" ~/.cache/fit/outpost/state/graph_processed \
 
 Use the template in
 [references/report-template.md](references/report-template.md). Save to
-`Knowledge/Erasure/{Name}--{YYYY-MM-DD}.md`. Record **only** what you deleted.
-Never record CV content, skills, or assessments.
+`2-Confidential/Erasure/{Name}--{YYYY-MM-DD}.md`. Record **only** what you
+deleted. Never record CV content, skills, or assessments.
 
 ### 5. Verify
 
+Run from the KB root so the search covers every tier and personal surface:
+
 ```bash
-rg "{Name}" Knowledge/ ~/.cache/fit/outpost/ Drafts/
+rg "{Name}" . ~/.cache/fit/outpost/
 ```
 
 The only match should be the erasure report. If other matches remain, process
-them and update the report.
+them and update the report. Repeat for each alias and email. Then validate the
+graph. The removal creates dangling links. Fix what the validator reports:
+
+```bash
+npx fit-outpost validate {kb-root}
+```
 
 ## Scope variants
 
 **`recruitment-only`** limits erasure to:
 
-- `Knowledge/Candidates/{Name}/`
-- `Knowledge/Candidates/Insights.md` mentions
+- `2-Confidential/Candidates/{Name}/`
+- `2-Confidential/Candidates/Insights.md` mentions
 - Recruitment threads (known agency domains)
 - `recruiter_triage.md`
 
-It leaves `Knowledge/People/{Name}.md` and the wider graph intact. The person
+It leaves `3-Team/People/{Name}.md` and the wider graph intact. The person
 may be a colleague or a non-recruitment contact.
 
-**`all`** (default): full erasure across knowledge base, cache, and state.
+**`all`** (default): full erasure across every tier, personal surfaces, cache,
+and state.

package/templates/.claude/skills/req-forget/references/classify.md

@@ -3,16 +3,18 @@
 Reference for `req-forget` Step 2. For every match in the inventory, pick the
 action below.
 
-| Reference Type                     | Action                                         | Example                                         |
-| ---------------------------------- | ---------------------------------------------- | ----------------------------------------------- |
-| **Dedicated note** (sole subject)  | Delete the entire file                         | `Knowledge/People/{Name}.md`                    |
-| **Dedicated directory**            | Delete the entire directory                    | `Knowledge/Candidates/{Name}/`                  |
-| **Mention in another note**        | Redact: remove the lines that name the person  | Backlink in `Knowledge/Organizations/Agency.md` |
-| **Email thread** (sole subject)    | Delete the file                                | `~/.cache/fit/outpost/apple_mail/thread.md`     |
-| **Email thread** (multiple people) | Redact: remove the paragraphs about the person | A thread about multiple candidates              |
-| **Attachment** (their CV, etc.)    | Delete the file                                | `attachments/{thread}/CV.pdf`                   |
-| **Triage/state file**              | Redact: remove the lines that mention them     | `recruiter_triage.md`                           |
-| **Insights file**                  | Redact: remove the bullets that mention them   | `Knowledge/Candidates/Insights.md`              |
+| Reference Type                     | Action                                         | Example                                              |
+| ---------------------------------- | ---------------------------------------------- | ---------------------------------------------------- |
+| **Dedicated note** (sole subject)  | Delete the file, in every tier it appears      | `3-Team/People/{Name}.md`                            |
+| **Overlay note** (narrower tier)   | Delete the file                                | `2-Confidential/People/{Name}.md`                    |
+| **Dedicated directory**            | Delete the entire directory                    | `2-Confidential/Candidates/{Name}/`                  |
+| **Mention in another note**        | Redact: remove the lines that name the person  | Backlink in `3-Team/Organizations/Agency.md`         |
+| **Personal-surface mention**       | Redact, or delete a sole-subject draft/brief   | `0-Draft/{file}.md`, `Briefings/{date}.md`           |
+| **Email thread** (sole subject)    | Delete the file                                | `~/.cache/fit/outpost/apple_mail/thread.md`          |
+| **Email thread** (multiple people) | Redact: remove the paragraphs about the person | A thread about multiple candidates                   |
+| **Attachment** (their CV, etc.)    | Delete the file                                | `attachments/{thread}/CV.pdf`                        |
+| **Triage/state file**              | Redact: remove the lines that mention them     | `recruiter_triage.md`                                |
+| **Insights file**                  | Redact: remove the bullets that mention them   | `2-Confidential/Candidates/Insights.md`              |
 
 ## Redaction rules
 

package/templates/.claude/skills/req-forget/references/locations.md

@@ -1,26 +1,35 @@
 # Discovery Search Recipes
 
-Reference for `req-forget` Step 1. Run every recipe. Record every match into
-the inventory.
+Reference for `req-forget` Step 1. Run every recipe from the KB root. Repeat
+each recipe for every recorded alias and email. Record every match into the
+inventory. The tier glob `[0-9]-*/` covers every tier present.
 
-## Knowledge base — direct notes
+## Direct notes, per tier
 
 ```bash
-ls -d "Knowledge/Candidates/{Name}/" 2>/dev/null
-ls "Knowledge/People/{Name}.md" 2>/dev/null
+ls -d "2-Confidential/Candidates/{Name}/" 2>/dev/null
+ls "2-Confidential/Prospects/{Name}.md" 2>/dev/null
+ls "2-Confidential/People/{Name}.md" 2>/dev/null   # overlay note
+ls "3-Team/People/{Name}.md" 2>/dev/null
+
+# Common name variations, in any tier
+ls [0-9]-*/People/"{First} {Last}.md" 2>/dev/null
+ls [0-9]-*/People/"{Last}, {First}.md" 2>/dev/null
+```
+
+## Backlinks and mentions, every tier
 
-# Common name variations
-ls "Knowledge/People/{First} {Last}.md" 2>/dev/null
-ls "Knowledge/People/{Last}, {First}.md" 2>/dev/null
+```bash
+rg -l "{Name}" [0-9]-*/
+rg -l "{First name} {Last name}" [0-9]-*/
+rg -l "\[\[.*{Name}.*\]\]" [0-9]-*/
+rg -l "{email}" [0-9]-*/
 ```
 
-## Knowledge base — backlinks and mentions
+## Personal surfaces
 
 ```bash
-rg -l "{Name}" Knowledge/
-rg -l "{First name} {Last name}" Knowledge/
-rg -l "\[\[.*{Name}.*\]\]" Knowledge/
-rg -l "{email}" Knowledge/
+rg -l "{Name}" 0-Draft/ Briefings/ 2>/dev/null
 ```
 
 ## Cached email threads
@@ -41,19 +50,15 @@ rg -l "{email}" ~/.cache/fit/outpost/apple_calendar/ 2>/dev/null
 ## Agent state files
 
 ```bash
-rg -l "{Name}" ~/.cache/fit/outpost/state/ 2>/dev/null
-```
-
-## Drafts
-
-```bash
-rg -l "{Name}" Drafts/ 2>/dev/null
+rg -l "{Name}" ~/.cache/fit/outpost/ 2>/dev/null
 ```
 
 ## Final verification
 
+Run from the KB root so the search covers every tier and personal surface:
+
 ```bash
-rg "{Name}" Knowledge/ ~/.cache/fit/outpost/ Drafts/
+rg "{Name}" . ~/.cache/fit/outpost/
 ```
 
-Expected: only the erasure report matches.
+Expected: only the erasure report matches. Repeat per alias and email.

package/templates/.claude/skills/req-forget/references/report-template.md

@@ -1,13 +1,19 @@
 # Erasure Report Template
 
 Audit trail for `req-forget` Step 4. Save to
-`Knowledge/Erasure/{Name}--{YYYY-MM-DD}.md`.
+`2-Confidential/Erasure/{Name}--{YYYY-MM-DD}.md`.
 
 **The report itself must not contain personal data** beyond the subject's name
 and the actions taken. Do not copy CV content, skills, or assessments into the
 report. Record only what you deleted. Do not record what it contained.
 
 ````markdown
+---
+type: erasure
+created: {YYYY-MM-DD}
+updated: {YYYY-MM-DD}
+---
+
 # Data Erasure Report — {Full Name}
 
 **Date:** {YYYY-MM-DD HH:MM}
@@ -22,15 +28,17 @@ report. Record only what you deleted. Do not record what it contained.
 ## Actions Taken
 
 ### Deleted Files
-- `Knowledge/Candidates/{Name}/brief.md`
-- `Knowledge/Candidates/{Name}/CV.pdf`
-- `Knowledge/Candidates/{Name}/screening.md`
-- `Knowledge/People/{Name}.md`
-- {list all deleted files}
+- `2-Confidential/Candidates/{Name}/brief.md`
+- `2-Confidential/Candidates/{Name}/CV.pdf`
+- `2-Confidential/Candidates/{Name}/screening.md`
+- `2-Confidential/People/{Name}.md` (overlay)
+- `3-Team/People/{Name}.md`
+- {list all deleted files, per tier}
 
 ### Redacted References
-- `Knowledge/Organizations/{Agency}.md` — removed backlink
-- `Knowledge/Candidates/Insights.md` — removed {N} bullet(s)
+- `3-Team/Organizations/{Agency}.md` — removed backlink
+- `2-Confidential/Candidates/Insights.md` — removed {N} bullet(s)
+- `Briefings/{date}.md` — removed {N} line(s)
 - {list all redacted files and what was removed}
 
 ### Cached Data Removed
@@ -49,6 +57,8 @@ The following are outside this tool's reach:
 - **Apple Mail** — original emails remain in the user's mailbox. Search
   Mail.app for "{Name}" and delete threads manually.
 - **Apple Calendar** — events remain in Calendar.app.
+- **Synced tier copies** — teammates who receive a shared tier hold their own
+  copies. Notify them of the deletion.
 - **Recruitment agencies** — notify {Agency} of the deletion and request
   they do the same.
 - **Interview notes** — check physical notebooks and external apps.
@@ -57,11 +67,9 @@ The following are outside this tool's reach:
 ## Verification
 
 ```bash
-rg "{Name}" Knowledge/ ~/.cache/fit/outpost/
-````
-
-Expected: no matches except this erasure report.
-
-```text
-
+rg "{Name}" . ~/.cache/fit/outpost/
+npx fit-outpost validate {kb-root}
 ```
+
+Expected: no matches except this erasure report, and a clean validator run.
+````

package/templates/.claude/skills/req-scan/SKILL.md

@@ -3,13 +3,16 @@ name: req-scan
 description: >
   Scan publicly available sources for candidates who indicate they are open for
   hire. Uses WebFetch to read public APIs (HN Algolia, GitHub, dev.to).
-  Writes prospect notes to Knowledge/Prospects/. Maintains
+  Writes prospect notes to 2-Confidential/Prospects/. Maintains
   cursor/dedup state in ~/.cache/fit/outpost/head-hunter/. Use when the
   head-hunter agent wakes or when the user asks to scan for open candidates.
 ---
 
 # Scan Open Candidates
 
+Write tier: `2-Confidential`
+Frontmatter: prospect
+
 Fetch and filter publicly available candidate posts from platforms where people
 **explicitly indicate** they are open for hire. This skill fetches, filters,
 deduplicates, benchmarks, writes prospect notes, and updates memory.
@@ -33,7 +36,7 @@ deduplicates, benchmarks, writes prospect notes, and updates memory.
 
 ## Outputs
 
-- `Knowledge/Prospects/{Name}.md`.
+- `2-Confidential/Prospects/{Name}.md`.
 - Updated `cursor.tsv`, `seen.tsv`, `prospects.tsv`, and `log.md`.
 - `~/.cache/fit/outpost/state/head_hunter_triage.md`.
 
@@ -102,7 +105,7 @@ Write notes for **strong** and **moderate** matches only. Use the template in
 [references/template.md](references/template.md).
 
 ```bash
-mkdir -p "Knowledge/Prospects"
+mkdir -p "2-Confidential/Prospects"
 ```
 
 ### 5. Update state

package/templates/.claude/skills/req-scan/references/template.md

@@ -1,8 +1,18 @@
 # Prospect Note Template
 
-Reference for `req-scan` Step 4. Save to `Knowledge/Prospects/{Name}.md`.
+Reference for `req-scan` Step 4. Save to `2-Confidential/Prospects/{Name}.md`.
+The note opens with the frontmatter block. Select `status` from the registry
+vocabulary (`registry.yaml`).
 
 ```markdown
+---
+type: prospect
+created: {YYYY-MM-DD}
+updated: {YYYY-MM-DD}
+aliases: [{username or display-name variants, or an empty list}]
+status: {registry status: identified / contacted / responded / converted / closed}
+---
+
 # {Name}
 
 ## Info