@sebastienrousseau/dotfiles 0.2.519 → 0.2.521

package/docs/reference/TOOLS.md

@@ -1,110 +0,0 @@
----
-render_with_liquid: false
----
-
-# Tools
-
-Integrated tools organized by role in the workflow.
-
----
-
-## Core Shells
-
-| Tool | Purpose | Key Feature |
-| :--- | :--- | :--- |
-| **Zsh** | Primary shell | Modular `rc.d` architecture with lazy-loading |
-| **Fish** | Interactive shell | Fast startup via dynamic alias-to-function autoloading |
-| **Nushell** | Data shell | Structured data pipelines |
-| **Starship** | Cross-shell prompt | Async segment rendering |
-
----
-
-## Infrastructure and Portability
-
-| Tool | Category | Description |
-| :--- | :--- | :--- |
-| **Nix Flakes** | Deterministic environments | Reproducible setups via `flake.nix` |
-| **Chezmoi** | Dotfiles manager | Template-based configuration across machines |
-| **Direnv** | Environment management | Automatic environment injection on `cd` |
-| **Mise** | Runtime manager | Polyglot version manager (Node, Python, Rust, Go) |
-
----
-
-## Automation and Advanced Tools
-
-| Tool | Purpose | Description |
-| :--- | :--- | :--- |
-| **Pueue** | Task queue | Offload long-running tasks to a background daemon |
-| **Wasmtime** | Wasm runtime | Run pre-compiled Rust/Zig tools as WebAssembly modules |
-| **SOPS** | Secrets operations | Encrypted secrets with automatic en/decryption |
-
----
-
-## Navigation and Discovery
-
-| Tool | Description |
-| :--- | :--- |
-| **Yazi** | Terminal file manager — use `yy` to `cd` on exit |
-| **Ripgrep (rg)** | Fast recursive text search |
-| **fd** | Simpler, faster alternative to `find` |
-| **Zoxide** | Fuzzy directory jumper (replaces `cd`) |
-| **fzf** | Interactive fuzzy finder for files, history, and git |
-
----
-
-## Modern CLI Replacements
-
-| Classic | Replacement | Improvement |
-| :--- | :--- | :--- |
-| `ls` | **eza** | Icons, git status, better colors |
-| `cat` | **bat** | Syntax highlighting and git integration |
-| `top` | **btop** | Visual system resource dashboard |
-| `df` | **duf** | Readable disk usage overview |
-| `du` | **dust** | Visual breakdown of folder sizes |
-| `ps` | **procs** | Improved process tracking |
-
----
-
-## Terminal Ecosystem
-
-| Tool | Style | Platform |
-| :--- | :--- | :--- |
-| **Ghostty** | Native / GPU | macOS, Linux |
-| **Zellij** | Layout-aware multiplexer | Cross-platform |
-| **Tmux** | Classic multiplexer | Cross-platform |
-| **Fastfetch** | System info | Cross-platform |
-
----
-
-## Developer Tools
-
-| Tool | Description |
-| :--- | :--- |
-| **Neovim** | Lua-based configuration with lazy.nvim |
-| **Lazygit** | TUI for Git workflows |
-| **Delta** | Syntax-highlighted side-by-side diffs |
-| **Just** | Task runner (replaces Makefiles) |
-| **Age** | Modern file encryption |
-| **GnuPG** | PGP standard for signing and encryption |
-
----
-
-## AI Pair Programming
-
-Detailed guide: [AI.md](../AI.md).
-
-| Tool | Description |
-| :--- | :--- |
-| **Aider** | Git-native AI pair programming |
-| **Claude CLI** | Anthropic's terminal assistant |
-| **Copilot CLI** | GitHub Copilot in the terminal |
-| **Kimi CLI** | Moonshot AI Kimi Code terminal coding agent |
-| **Kiro CLI** | Agentic AI terminal assistant |
-| **Antigravity CLI** | Google's Antigravity CLI (`agy`) |
-| **Mods/Fabric** | Pipeline-friendly AI processing |
-| **sgpt** | Shell-GPT for terminal AI queries |
-| **Ollama** | Run large language models locally |
-| **Autohand Code** | Autohand coding agent CLI |
-| **Mistral Vibe** | Mistral AI coding agent |
-| **Qwen Code** | Qwen AI coding assistant |
-| **ZAI** | Zhipu AI GLM coding agent |

package/docs/reference/UTILS.md

@@ -1,242 +0,0 @@
----
-render_with_liquid: false
----
-
-# Utilities
-
-Aliases, functions, and the `dot` CLI provide day-to-day tooling across macOS, Linux, and WSL.
-
-## Dot CLI
-
-The `dot` command is the main interface for managing dotfiles. Run `dot version` or `dot --version` to check the installed version.
-
-### Core commands
-
-| Command | Description |
-|---------|-------------|
-| `dot commit` | Create an AI-assisted conventional commit |
-| `dot apply` | Apply dotfiles (`chezmoi apply`) |
-| `dot sync` | Alias of apply |
-| `dot update` | Pull latest changes and apply |
-| `dot add <file>` | Add a file to chezmoi source |
-| `dot diff` | Show local changes (excludes scripts) |
-| `dot status` | Show configuration drift |
-| `dot remove <path>` | Safely remove a managed file |
-| `dot uninstall` | Remove the managed dotfiles environment (prompts unless `--force`) |
-| `dot cd` | Print source directory path |
-| `dot edit` | Open source in your editor |
-| `dot clean-cache` | Clear generated shell initialization caches |
-| `dot prewarm` | Regenerate shell caches for fast startup |
-| `dot bundle` | Create an offline portable archive |
-| `dot upgrade` | Update toolchains, plugins, and dotfiles |
-| `dot packages` | Show installed packages and package managers |
-| `dot cache-refresh` | Rebuild generated shell state |
-| `dot search <term>` | Find commands by keyword |
-| `dot help` | Show command help and the public reference |
-| `dot version` | Show the installed dotfiles version |
-
-### Diagnostics
-
-| Command | Description |
-|---------|-------------|
-| `dot doctor` | Run system health checks (`--score/-s`,`--heal/-H`) |
-| `dot secret-audit` | Audit secret hygiene and leakage surface |
-| `dot health` | Run the health dashboard (`--verbose/-v`,`--json/-j`,`--fix/-f`,`--force/-F`) |
-| `dot heal` | Auto-repair missing tools, chezmoi drift, broken symlinks, and critical files (`--dry-run/-n`,`--force/-f`) |
-| `dot smoke-test` | Verify toolchains (Rust, Go, AI CLIs) |
-| `dot verify` | Run security and integrity verification (`--security/-s`) |
-| `dot chaos` | Simulate config corruption to test self-healing |
-| `dot rollback` | Roll back dotfiles to the previous known-good state |
-| `dot drift` | Detailed configuration drift dashboard |
-| `dot benchmark` | Measure shell startup time (`--detailed/-d`,`--profile/-p`,`--compare/-c`,`--waterfall/-w`) |
-| `dot perf` | Show performance mode + quick timing (`--json/-j`,`--profile/-p`,`--runs/-r`,`--target/-t`) |
-| `dot score` | Show the high-level system health and security scorecard |
-| `dot metrics` | Show recent observability metrics |
-| `dot load-bench` | Measure heavy-layer readiness |
-| `dot mcp` | Validate MCP policy and registry (`--strict/-s`,`--json/-j`) |
-| `dot attest` | Export workstation evidence (`--json/-j`,`--write/-w`,`--fleet-store/-F`) |
-| `dot history` | Analyse shell history |
-| `dot security-score` | Score workstation security (`--verbose/-v`,`--quiet/-q`,`--json/-j`) |
-| `dot snapshot` | Capture workstation state (`--baseline/-b`,`--force/-f`) |
-| `dot ai` | Open the AI fleet cockpit; run prompts, serve a local Claude gateway, install, cost |
-| `dot ai-setup` | Bootstrap AI CLIs interactively (deprecated alias for `dot ai login`) |
-| `dot ai-query` | Context-aware RAG query over the repo (deprecated alias for `dot ai ask`) |
-| `dot mode` | Show or switch the active agent profile |
-| `dot agent` | Inspect agent metadata, logs, checkpoints, and conformance |
-| `dot agent checkpoint` | Save, list, show, and replay bounded agent checkpoints |
-| `dot agent conformance` | Validate A2A discovery and agent card conformance (`--strict/-s`,`--json/-j`) |
-
-### Tools
-
-| Command | Description |
-|---------|-------------|
-| `dot env` | Show managed runtime and tool versions |
-| `dot env emit` | Emit a portable workstation environment manifest (SBOM) |
-| `dot profile` | Show or switch the active configuration profile |
-| `dot keys` | Show the keybindings and signing reference |
-| `dot tools` | Show tools documentation |
-| `dot tools install` | Enter Nix development shell |
-| `dot new <lang> <name>` | Scaffold a project (`python`/`go`/`node`) |
-| `dot sandbox` | Launch Docker sandbox preview |
-| `dot learn` | Start the guided onboarding tour |
-| `dot docs` | Show the main repository documentation |
-| `dot log-rotate` | Rotate `~/.local/share/dotfiles.log` |
-| `dot completion <bash\|zsh\|fish\|nu>` | Generate shell completions from the command registry |
-| `dot lint` | Lint shell scripts (`--check/-c`,`--fix/-f`) |
-
-## Universal Scripts
-
-POSIX scripts in `~/.local/bin/` that work across macOS, Linux, and WSL.
-
-| Command | Description |
-|---------|-------------|
-| `als` | Interactive alias and script viewer (categorized) |
-| `cb` | Universal clipboard utility (detects `pbcopy`/`pbpaste`, `xclip`/`wl-copy`, or `clip.exe`) |
-| `open` | Universal file/URL opener (maps to `open`, `xdg-open`, or `explorer.exe`) |
-| `notify` | Universal desktop notifications (`osascript`, `notify-send`, or `powershell`) |
-| `extract` | Universal archive extractor with robust format support and `gum` UI feedback |
-| `up <n>` | Navigate up `n` directory levels |
-| `bm` | Directory bookmarking tool (`add`, `goto`, `list`, `remove`, `update`) |
-| `win` | WSL-specific shim for running Windows binaries with translated paths |
-
-## Appearance
-
-| Command | Description |
-|---------|-------------|
-| `dot theme` | Interactive picker (paired wallpaper themes only) |
-| `dot theme <name>` | Switch directly (e.g. `dot theme tahoe-dark`) |
-| `dot theme toggle` | Swap dark↔light within current family |
-| `dot theme rebuild` | Regenerate themes from system + custom wallpapers via K-Means in CIELAB (`--force`, `--list`) |
-| `dot theme list` | Show paired wallpaper themes with System/Custom source |
-| `dot wallpaper` | Apply a wallpaper independently of theme |
-| `dot fonts` | Install Nerd Fonts |
-| `dot tune` | Apply supported host tuning changes |
-
-Themes are auto-generated from wallpapers — `themes.toml` is not hand-edited. See [Theming Guide](../guides/THEMING.md) for the K-Means CIELAB extraction model and Apple-compatible dynamic HEIC support.
-
-## AI Bridges (deprecated aliases)
-
-These run a tool with dotfiles context injection. They still work but are
-**deprecated** in favour of `dot ai <tool>` (e.g. `dot ai claude "…"`); each
-prints a one-line hint. See [AI.md](../AI.md) for the full surface.
-
-| Command | Description |
-|---------|-------------|
-| `dot cl` | Claude Code with context injection — use `dot ai claude` |
-| `dot copilot` | GitHub Copilot CLI — use `dot ai copilot` |
-| `dot kimi` | Kimi CLI — use `dot ai kimi` |
-| `dot agy` | Antigravity CLI — use `dot ai agy` |
-| `dot kiro` | Kiro CLI — use `dot ai kiro` |
-| `dot sgpt` | Shell-GPT — use `dot ai sgpt` |
-| `dot ollama` | Ollama — use `dot ai ollama` |
-| `dot opencode` | OpenCode — use `dot ai opencode` |
-| `dot aider` | Aider — use `dot ai aider` |
-
-## Secrets
-
-| Command | Description |
-|---------|-------------|
-| `dot secrets-init` | Initialize the local age identity for secrets |
-| `dot secrets` | Manage encrypted secrets and environment buckets |
-| `dot secrets-create` | Create a new encrypted secrets file |
-| `dot ssh-key` | Encrypt a local SSH key with age |
-| `dot ssh-cert` | Manage short-lived SSH certificates (`issue`/`status`/`revoke`) |
-
-## Security (opt-in)
-
-| Command | Description |
-|---------|-------------|
-| `dot backup` | Create a compressed backup |
-| `dot policy` | Check and enforce security policies across the environment |
-| `dot encrypt-check` | Check disk encryption status |
-| `dot firewall` | Apply firewall hardening |
-| `dot telemetry` | Disable telemetry |
-| `dot dns-doh` | Enable DNS-over-HTTPS |
-| `dot lock-screen` | Enforce lock screen idle settings |
-| `dot usb-safety` | Disable automount for removable media |
-
-## Fleet
-
-| Command | Description |
-|---------|-------------|
-| `dot fleet` | Show fleet node status, namespace, and drift |
-| `dot fleet drift` | Check configuration drift across managed files |
-| `dot fleet namespace` | Show or set the active fleet namespace |
-| `dot fleet events` | Show recent local fleet events |
-| `dot teleport <user@host>` | Deploy the dotfiles environment to a remote host over SSH |
-
-## Subcommands
-
-Every `dot` command's individually-enforced subcommands (see `dot help`).
-
-| Command | Description |
-|---|---|
-| `dot fleet status` | Show this node's fleet status: id, namespace, version, OS, drift, last apply |
-| `dot fleet enforce` | Show or set RBAC enforcement mode (advisory/strict) for agent profiles |
-| `dot fleet apply` | SSH to every host in fleet.toml and run dot sync (or a custom --cmd) |
-| `dot ai chat` | Start an interactive AI session with a chosen tool |
-| `dot ai tools` | Show installed AI CLI tools and their versions |
-| `dot ai install` | Install AI CLI tools via mise/native installers |
-| `dot ai serve` | Run the local AI gateway/proxy that routes non-Claude providers |
-| `dot ai cost` | Report AI spend across every provider from the unified run log |
-| `dot ai login` | Interactive setup/authentication for installed AI CLI tools |
-| `dot ai doctor` | Diagnose AI tooling configuration and connectivity |
-| `dot ai ask` | Context-aware RAG query over your dotfiles |
-| `dot ai run` | Run a one-shot prompt with an AI tool |
-| `dot ai delegate` | Delegate a coding task to a cheaper AI model under agent policy |
-| `dot mode list` | List available agent operating profiles (ask/plan/apply/audit) |
-| `dot mode current` | Show the active agent profile and its policy |
-| `dot mode show` | Show details of a specific agent profile |
-| `dot mode set` | Switch the active agent profile |
-| `dot mode run` | Run a command under a given agent profile with a checkpoint |
-| `dot mode doctor` | Validate the agent-profiles.json config and default profile |
-| `dot agent card` | Show the local agent card metadata |
-| `dot agent log` | Tail the agent session audit log |
-| `dot agent checkpoint` | Manage agent run checkpoints (save/list/show/replay) |
-| `dot agent delegate` | Delegate execution to an allowed sub-agent |
-| `dot agent a2a-card` | Show or validate the A2A v0.3 agent card |
-| `dot agent conformance` | Run the A2A conformance test suite |
-| `dot mcp doctor` | Run the MCP policy/supply-chain/config audit |
-| `dot mcp registry` | Show the configured MCP server registry |
-| `dot secrets edit` | Edit the encrypted secrets file (age) |
-| `dot secrets set` | Store a secret value under a key |
-| `dot secrets get` | Retrieve a secret value (--raw for plaintext) |
-| `dot secrets list` | List indexed secret keys |
-| `dot secrets load` | Emit export lines for a secrets bucket (use with eval) |
-| `dot secrets provider` | Show the active secrets provider |
-| `dot env list` | List managed tool versions via mise |
-| `dot env prune` | Show or remove orphan tool installs (--yes to commit) |
-| `dot env install` | Install requested tool versions via mise |
-| `dot env use` | Pin a tool version globally/locally via mise |
-| `dot registry list` | List modules in the configured module registry |
-| `dot registry search` | Filter registry modules by keyword |
-| `dot registry info` | Print full metadata for a registry module |
-| `dot registry install` | Install a registry module (scaffold) |
-| `dot registry url` | Show the active registry URL |
-| `dot registry set-url` | Override the registry URL (https only; persists) |
-| `dot theme list` | Show all available terminal/wallpaper themes |
-| `dot theme set` | Set a theme by name (interactive picker if omitted) |
-| `dot theme toggle` | Toggle light/dark within the current theme family |
-| `dot theme sync` | Sync the dotfiles theme with system dark/light mode |
-| `dot theme family` | Cycle between theme families |
-| `dot theme current` | Show the current theme info |
-| `dot theme rebuild` | Regenerate themes from system and custom wallpapers |
-| `dot wallpaper sync` | Sync wallpaper from your library |
-| `dot wallpaper rotate` | Rotate to the next wallpaper in your library |
-| `dot tools install` | Enter the Nix development shell with all managed tools |
-| `dot tools docs` | Show the full tools markdown documentation |
-| `dot profile show` | Show the active configuration profile and feature flags |
-| `dot profile set` | Set the active configuration profile (run dot sync to apply) |
-| `dot agents list` | Show recognised AI agent harnesses and their config paths |
-| `dot agents check` | Verify AGENTS.md tracks CLAUDE.md (exit 1 if drifted) |
-| `dot agents render` | Regenerate AGENTS.md and per-harness config from CLAUDE.md |
-| `dot aliases list` | List all shell aliases shipped by the dotfiles |
-| `dot aliases search` | Search aliases by term |
-| `dot aliases why` | Show details and deprecation status for a single alias |
-| `dot aliases stats` | Show alias usage counts from shell history |
-| `dot aliases cheatsheet` | Generate the alias cheatsheet markdown |
-| `dot aliases tiers` | Show which alias tiers/ecosystems are enabled |
-| `dot patterns list` | List AI steering patterns |
-| `dot patterns view` | View an AI steering pattern |
-| `dot patterns edit` | Edit an AI steering pattern in $EDITOR |
-| `dot keys sign-check` | Verify git commit-signing configuration and key availability |

package/docs/registry.json

@@ -1,6 +0,0 @@
-{
-  "version": 1,
-  "updated": "2026-05-15T16:30:00Z",
-  "registry": "sebastienrousseau/dotfiles",
-  "modules": []
-}

package/docs/schema/dot-env-v1.json

@@ -1,110 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://sebastienrousseau.github.io/dotfiles/schema/dot-env-v1.json",
-  "title": "Dotfiles Environment Manifest v1",
-  "description": "Portable workstation-environment manifest emitted by `dot env emit`. The canonical 'what is installed on this machine + at what version + from which source' record. Designed to feed downstream tooling: CycloneDX SBOM aggregators, AgentSpec/AAIF agent runtimes, EU CRA compliance reports.",
-  "type": "object",
-  "required": [
-    "schema_version",
-    "manifest_version",
-    "emitted_at",
-    "emitter",
-    "host",
-    "tools"
-  ],
-  "additionalProperties": false,
-  "properties": {
-    "schema_version": {
-      "type": "string",
-      "format": "uri",
-      "description": "URL of the schema this manifest conforms to. Must equal $id of this file."
-    },
-    "manifest_version": {
-      "type": "string",
-      "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$",
-      "description": "Semantic version of the manifest payload itself, independent of the schema URL."
-    },
-    "emitted_at": {
-      "type": "string",
-      "format": "date-time",
-      "description": "RFC 3339 / ISO 8601 UTC timestamp when the manifest was produced."
-    },
-    "emitter": {
-      "type": "object",
-      "required": ["name", "version", "repo"],
-      "additionalProperties": false,
-      "properties": {
-        "name": {
-          "type": "string",
-          "description": "Tool name that produced the manifest (e.g. 'dot env emit')."
-        },
-        "version": {
-          "type": "string",
-          "description": "Version of the emitter (e.g. '0.2.503')."
-        },
-        "repo": {
-          "type": "string",
-          "description": "Source repository identifier (e.g. 'github.com/sebastienrousseau/dotfiles')."
-        }
-      }
-    },
-    "host": {
-      "type": "object",
-      "required": ["hostname", "os", "arch"],
-      "additionalProperties": false,
-      "properties": {
-        "hostname": {
-          "type": "string",
-          "description": "Result of `uname -n`. May be 'unknown' in headless / containerised contexts."
-        },
-        "os": {
-          "type": "string",
-          "description": "Result of `uname -s` — Darwin, Linux, MINGW64_NT-*, etc."
-        },
-        "arch": {
-          "type": "string",
-          "description": "Result of `uname -m` — x86_64, arm64, aarch64, etc."
-        }
-      }
-    },
-    "tools": {
-      "type": "array",
-      "description": "Flattened list of all tool installations mise sees on this host. Multiple records per tool are allowed when multiple versions are installed.",
-      "items": {
-        "type": "object",
-        "required": ["name", "version", "source"],
-        "additionalProperties": false,
-        "properties": {
-          "name": {
-            "type": "string",
-            "description": "Tool identifier as mise knows it (e.g. 'node', 'aqua:charmbracelet/gum', 'npm:@anthropic-ai/claude-code')."
-          },
-          "version": {
-            "type": ["string", "null"],
-            "description": "Installed version. null when the install record is incomplete."
-          },
-          "source": {
-            "type": "string",
-            "description": "Absolute path of the config file that requested this tool. The literal string 'orphan' for installs not referenced by any active config."
-          },
-          "source_type": {
-            "type": ["string", "null"],
-            "description": "mise source classifier — typically 'mise.toml'."
-          },
-          "requested_version": {
-            "type": ["string", "null"],
-            "description": "Version spec the config requested (e.g. '24.14.0', 'latest', '3.12'). null for orphans."
-          },
-          "install_path": {
-            "type": ["string", "null"],
-            "description": "Absolute path of the install directory under mise's data root."
-          },
-          "active": {
-            "type": "boolean",
-            "description": "True iff this version is the one shimmed/active for the current path."
-          }
-        }
-      }
-    }
-  }
-}

package/docs/schema/dot-registry-v1.json

@@ -1,33 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://sebastienrousseau.github.io/dotfiles/schema/dot-registry-v1.json",
-  "title": "Dot Module Registry v1",
-  "description": "Integrity-pinned index consumed by dot registry.",
-  "type": "object",
-  "required": ["version", "modules"],
-  "additionalProperties": false,
-  "properties": {
-    "version": { "const": 1 },
-    "updated": { "type": "string", "format": "date-time" },
-    "registry": { "type": "string", "minLength": 1 },
-    "modules": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["name", "version", "description", "archive_url", "sha256"],
-        "additionalProperties": false,
-        "properties": {
-          "name": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{0,31}$" },
-          "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+([+-][0-9A-Za-z.-]+)?$" },
-          "description": { "type": "string", "maxLength": 200 },
-          "archive_url": { "type": "string", "pattern": "^https://" },
-          "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
-          "repo": { "type": "string", "pattern": "^https://" },
-          "tags": { "type": "array", "items": { "type": "string" }, "uniqueItems": true },
-          "maintainer": { "type": "string", "minLength": 1 },
-          "license": { "type": "string", "minLength": 1 }
-        }
-      }
-    }
-  }
-}

package/docs/security/AI_ACT_COMPLIANCE.md

@@ -1,94 +0,0 @@
----
-render_with_liquid: false
----
-
-# EU AI Act Compliance Assessment
-
-This document maps the dotfiles project against the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) to confirm compliance posture and applicable obligations.
-
----
-
-## Risk Classification (Annex III Assessment)
-
-| Criterion | Assessment | Result |
-|-----------|-----------|--------|
-| Biometric identification | Not applicable | N/A |
-| Critical infrastructure | Not applicable | N/A |
-| Education / employment | Not applicable | N/A |
-| Essential services | Not applicable | N/A |
-| Law enforcement | Not applicable | N/A |
-| Migration / border control | Not applicable | N/A |
-
-**Classification: Minimal Risk**
-
-This project is a workstation configuration management tool. It does not deploy, train, or host AI models. It integrates with external AI CLI tools (Claude, Gemini, Ollama) as a consumer, not a provider.
-
----
-
-## Open-Source Exemption (Article 2(12))
-
-| Requirement | Status |
-|-------------|--------|
-| License type | MIT (permissive, open-source) |
-| Model weights distributed | No — no model training or distribution |
-| Free and open-source | Yes — publicly available source code |
-| No prohibited practices (Article 5) | Confirmed — no subliminal, exploitative, or social scoring use |
-
-**Result:** This project qualifies for the open-source exemption under Article 2(12). Open-source AI components released under free licenses are exempt from most AI Act obligations, provided they do not fall under prohibited practices or high-risk classifications.
-
----
-
-## Transparency Obligations
-
-Even for minimal-risk and exempt systems, the AI Act encourages transparency. This project voluntarily implements the following:
-
-| Obligation | Implementation | Evidence |
-|-----------|----------------|----------|
-| AI interaction disclosure | Agent session logging | `agent-sessions.jsonl` via `dot_agent_session_log()` |
-| Model identification | Model registry | `dot_config/dotfiles/model-registry.json` |
-| Configuration transparency | Agent profiles | `dot_config/dotfiles/agent-profiles.json` |
-| Audit trail | Structured logging | `~/.local/share/dotfiles.log`, `~/.local/state/dotfiles/` |
-| Workstation attestation | Attestation export | `dot attest --json` |
-
----
-
-## GPAI Provisions (Chapter V)
-
-| Criterion | Assessment |
-|-----------|-----------|
-| General-purpose AI model provider | **No** — this project does not train, fine-tune, or distribute AI models |
-| Systemic risk model | **No** — no model hosting or inference serving |
-| Downstream provider obligations | **No** — consumer of external AI APIs only |
-
-**Result:** GPAI provisions are not applicable. This project consumes AI services but does not provide them.
-
----
-
-## Enforcement Timeline
-
-| Milestone | Date | Relevance |
-|-----------|------|-----------|
-| AI Act entered into force | August 1, 2024 | Awareness |
-| Prohibited practices apply | February 2, 2025 | Confirmed no prohibited use |
-| GPAI rules apply | August 2, 2025 | Not applicable |
-| High-risk obligations apply | **August 2, 2026** | Not applicable (minimal risk) |
-| Full enforcement | August 2, 2027 | Maintain compliance posture |
-
-**Next review:** Before August 2026 enforcement date — reassess if project scope changes to include model hosting or high-risk use cases.
-
----
-
-## Cross-References
-
-| Document | Relevance |
-|----------|-----------|
-| [COMPLIANCE.md](COMPLIANCE.md) | SOC 2, ISO 27001, GDPR framework mapping |
-| [THREAT_MODEL.md](THREAT_MODEL.md) | Trust boundaries and attack surface |
-| [MCP_POLICY.md](MCP_POLICY.md) | MCP governance and supply-chain controls |
-| [SECURITY.md](SECURITY.md) | Core security model |
-
----
-
-## Summary
-
-This project is classified as **minimal risk** under the EU AI Act and qualifies for the **open-source exemption** under Article 2(12). No mandatory obligations apply. Transparency measures are voluntarily implemented through agent session logging, model registry, and workstation attestation.