mishkan-harness 0.2.5 → 0.2.7

package/docs/engineer/profile.md

@@ -0,0 +1,754 @@
+---
+name: y4nn-profile
+description: Canonical developer profile of Y4NN. Loaded as cached context by MISHKAN agents.
+type: developer_profile
+version: 1.0
+last_updated: 2026-05-27
+scope: agent-loadable
+language: en
+---
+
+# Y4NN — Developer Profile
+
+## 0. Identity
+
+```yaml
+legal_name: Ragnang-Newende Yanis Axel DABO
+handle: >_TheY4NN
+github: Y4NN777
+emails:
+  - yanisaxel.dabo@aiobi.world  # primary work
+  
+  - nage-remorqueur8o@icloud.com  # claude.ai account
+git_authors:
+  - TheY4NN777 <yanisaxel.dabo@aiobi.world>
+  - Yanis Axel Dabo <yanisaxel.dabo@aiobi.world>
+machine_identities:
+  - ogu  # current
+  - aiobi6  # prior
+title: Junior Software Engineer
+internal_role: Mainteneur Staging & Production @ OGUN
+employer: Aïobi
+languages:
+  - fr  # primary, all internal/meta work
+  - en  # secondary, technical artifacts and code
+location: France/Africa axis (Aïobi = sovereign African tech ecosystem)
+brand_rule: "Aïobi" with tréma — never "Aiobi"
+```
+
+## 1. Operating Role
+
+Build-and-deploy engineer for the Aïobi product suite. Bridge between feature development and infrastructure operations. Owns the operational delivery pipeline end-to-end across five production services. Sole owner of one (IAM). Builder of one independent thesis-grade project (AïobiOS).
+
+```yaml
+role_components:
+  - feature_engineering   # full-stack, multi-stack
+  - deployment_engineering  # staging + prod for entire suite
+  - devsecops_practice      # hardening, secret management, audits
+  - incident_response       # primary on-call
+  - documentation_authoring # design specs, runbooks, postmortems
+  - ai_tooling_engineering  # custom agents, harness design
+reports_to:
+  - cto: unnamed (Direction Technique Aïobi)
+collaborates_with:
+  - youssouf_kouanda: Forms feature lead + MR gate (OGUN-kal)
+  - cephas_congo: eshu backend co-developer (LEGBA-8I)
+  - cheick_oumar_tarnagueda: ops support (OGUN-TCO)
+  - hermes_team: hardware/server provisioning
+  - antoine_lebaud: original AïobiMeet author (less active)
+```
+
+## 2. Surface Owned
+
+### 2.1 Aïobi-IAM (sole owner)
+```yaml
+status: production
+stack: Keycloak 20 + custom Java SPI + realm YAML + theme bind-mounts
+ownership: 100%
+commits_in_window: 115
+artifacts:
+  - SWE-BASICS-BEFORE-CODE design suite: 01_PRD → 05_MODELING (locked)
+  - Custom SPI: aiobi-user-provider (Java, compiled in-pipeline)
+  - Hardening overlay (docker-compose.hardening.yml)
+  - Rollback runbook with pre-flight state capture
+  - Integration journals for Forms / Docs / Meet onboarding
+boundary: builds, integrates, hardens, deploys, operates
+```
+
+### 2.2 AïobiMeet
+```yaml
+status: production
+stack: Django + React + LiveKit + FastAPI + Keycloak SSO
+ownership: ops/infra/deploy (not original author)
+original_author: Antoine Lebaud (1388 historical commits)
+commits_in_window: 320
+boundary:
+  owns: docker/production, docker/staging, gitlab-ci.yml, Keycloak realm config,
+        Prometheus/Grafana setup, Whisper ASR tuning, hotfixes, deploys
+  does_not_own: original feature architecture, core conferencing logic
+incidents_handled: 30+ staging errors, 11 prod errors documented
+```
+
+### 2.3 aiobi-form (Forms)
+```yaml
+status: production
+stack: Laravel 11 + Nuxt 3 (dual-licensed AGPLv3 + proprietary)
+ownership: deploy + IAM integration + ops + production hotfixes
+feature_lead: Youssouf Kouanda
+mr_gate: Youssouf Kouanda (25+ merges in 8 weeks)
+commits_in_window: 55
+boundary:
+  owns: deploy-remote.sh, nginx-prod.conf, Traefik ingress, IAM integration,
+        staging bootstrap, prod hotfixes
+  does_not_own: feature development (Youssouf), core Notion-Forms fork (Julien Nahum upstream)
+audit_findings: 46 (critical/high/medium catalogued)
+```
+
+### 2.4 aiobi-docs
+```yaml
+status: staging active, prod pending
+stack: Django + Yjs/CRDT + React (Impress fork)
+ownership: deploy + IAM integration + staging
+commits_in_window: 53
+artifacts:
+  - ADR-0001 (Yjs CRDT decision, full trade-off matrix)
+  - Postmortem 2026-05-12 (staging recovery, dual root cause)
+  - Refacto plan 02 (52 KB)
+boundary:
+  owns: staging deploy, IAM theme + logout flow, CI/CD
+  shared: core docs platform (Anthony LC, Manuel Raynaud upstream)
+```
+
+### 2.5 eshu
+```yaml
+status: in development, OAuth + prod setup phase
+stack: FastAPI + Vue 3 + Capacitor + LangChain + CrewAI + ChromaDB
+ownership: integration + prod release (equal partnership)
+co_developer: Cephas Congo
+commits_in_window: 37 (Cephas: 36)
+boundary:
+  owns: prod setup, OAuth flows, deploy pipeline, develop→main merges for prod
+  does_not_own: backend feature development (Cephas)
+```
+
+### 2.6 AïobiOS-Guidance (personal/thesis)
+```yaml
+status: late prototype / pre-production
+location: /home/ogu/Projects/AïobiOS-Guidance/  (not in /theY4NN/)
+type: thesis-grade Ubuntu 24.04 LTS customisation
+stack: Cubic chroot + dpkg-divert + bash + GRUB + Plymouth + GDM + Yaru
+code_volume: 942 LOC shell across 10 scripts
+docs_volume: 2549 lines markdown across 7 engineering logs + guides
+ownership: 100% sole author
+methodology: doctoral — 19 issues numbered continuously, each traced to root cause across abstraction layer (CSS → Yaru gresource → AccountsService D-Bus → dpkg-divert)
+visibility: private — not yet public
+```
+
+## 3. Velocity Snapshot
+
+```yaml
+window: ~3 months (recent)
+total_commits: 626
+insertions: 66115
+deletions: 11265
+files_touched: 1501
+repos_active: 5 (+ AïobiOS personal)
+stacks_active: 5 (Python, PHP, JS/TS, Java SPI, Bash)
+environments_per_service: 4 (dev, staging, prod, secure)
+cadence:
+  peak_hours_cet: [10-14, 16-23]
+  hotfix_bursts: 00-04 CET, late-night
+  weekday_only: true
+  recent_hotfix_density: 4 prod commits in 22 minutes (2026-05-12 02:00-02:22)
+```
+
+## 4. Demonstrated Stack
+
+### 4.1 Languages (actively shipping)
+```yaml
+python:
+  level: strong
+  evidence: FastAPI async + Pydantic + Alembic + asyncpg, Django production, LangChain/CrewAI/ChromaDB integration
+php:
+  level: working
+  evidence: Laravel 11 production, Eloquent ORM, blade templates
+typescript_javascript:
+  level: strong
+  evidence: Nuxt 3 SSR, React, Vue 3, Vitest, component libraries, i18next
+java:
+  level: working
+  evidence: Keycloak SPI compilation, enum refactor, test suite (aiobi-user-provider)
+bash:
+  level: strong
+  evidence: deploy-remote.sh patterns, AïobiOS scripts, dpkg-divert orchestration, UTF-8 byte-level reconstruction
+yaml:
+  level: strong
+  evidence: realm config, docker-compose, GitLab CI, idempotent overlays
+languages_absent: [go, rust, c, c++]
+```
+
+### 4.2 Infrastructure stack
+```yaml
+containerisation:
+  docker: strong
+  docker_compose: strong (multi-environment overlays, hash-based config drift detection, hardening overlays)
+  kubernetes: absent
+ci_cd:
+  gitlab_ci: strong (268 yml touches, environment scoping, protected vars, conditional jobs)
+  github_actions: limited (aiobi-docs only)
+iac:
+  declarative: absent (no Terraform, no Pulumi, no Helm)
+  imperative: strong (custom bash deploy patterns, SSH-direct with health polling)
+observability:
+  prometheus: deployed
+  grafana: deployed
+  sentry: deployed across 3 projects
+  glitchtip: deployed
+  loki: deployed
+  opentelemetry: absent
+  slo_definitions: absent
+  burn_rate_alerts: absent
+secrets:
+  sops: in use
+  gitlab_protected_vars: in use
+  vault: absent
+service_mesh: absent
+mtls_between_services: absent
+```
+
+### 4.3 Security stack
+```yaml
+practices:
+  - SECURITY.md per repo with disclosure policy
+  - CVE-pinned dependencies (explicit comments referencing CVE IDs)
+  - Hardening overlays for Keycloak (always re-applied on recreate)
+  - SSO across suite via Keycloak (single source of identity)
+  - Rate limiting (slowapi) on FastAPI endpoints
+  - Session security middleware
+  - Manual security audits (Forms audit: 46 findings catalogued)
+automation:
+  sast_in_ci: absent  # no semgrep, bandit, trivy, gitleaks, OSV-Scanner gates
+  dependency_scanning_in_ci: absent
+  threat_modelling_artifact: absent  # STRIDE doc not produced
+  responsible_disclosure_received: 0
+```
+
+### 4.4 Domain expertise (deep)
+```yaml
+keycloak:
+  level: deep
+  evidence: 229 mentions in transcripts, custom SPI in Java, realm YAML hardening, theme bind-mounts, JDBC session persistence (Infinispan), SSO federation across 4 apps, broker IdP setup
+docker_networking:
+  level: deep
+  evidence: Traefik routing edge cases, IPv6 vs IPv4 localhost healthcheck issues, ghost iptables on dead bridges, subnet pinning, hardening overlays
+linux_systems_customisation:
+  level: deep (AïobiOS)
+  evidence: dpkg-divert across 6 subsystems, GRUB customisation, Plymouth themes, GDM/Yaru/AccountsService layer debugging, systemd one-shot first-boot provisioning
+rag_ai_stack:
+  level: working
+  evidence: eshu uses LangChain + CrewAI + ChromaDB + sentence-transformers + Groq/OpenAI/Google models in production
+crdt_realtime:
+  level: working
+  evidence: ADR-0001 Yjs evaluation with full trade-off matrix, integration in aiobi-docs
+```
+
+## 5. Engineering Methodology
+
+### 5.1 Workflow rules (observed)
+```yaml
+design_before_code:
+  rule: PRD → SRS → CONTRACT → ARCHITECTURE → MODELING locked before implementation
+  applied_in: [Aïobi-IAM, MISHKAN]
+  source: SWE-BASICS-BEFORE-CODE framework
+explain_before_implement:
+  rule: 2-3 sentence explanation + trade-offs + wait for approval before any code change
+  source: feedback_explain_before_code.md (triggered by 3-cycle date-picker incident)
+diagnose_before_fix:
+  rule: exact stacktrace / HTTP status / log line required before any fix
+  reject: "soupçon" (guess-based) reasoning
+  source: feedback_diagnose_before_fix.md
+durable_solutions_only:
+  rule: no sed-in-CI, no manual patches, no temporary workarounds
+  must_work_in_prod: true
+  source: feedback_durable_solutions.md
+verify_before_destructive:
+  rule: git status --short before every push, read compose paths before deploy
+  source: project_aiobi-ops memory
+no_invented_facts:
+  rule: no estimation of timeframes without git log verification
+  source: feedback_no_invented_facts.md
+no_scope_creep:
+  rule: fix only what was specified; no "au passage" refactors
+  source: feedback_no_scope_creep.md
+```
+
+### 5.2 Commit discipline
+```yaml
+format: "type(scope) short description"
+extended: "type(scope) subject — body with logs, root cause, before/after"
+types_used: [fix, feat, docs, chore, hotfix, refactor, ops]
+emojis: forbidden
+co_authored_by: forbidden
+case: lowercase subject
+period_terminator: no
+shared_server_protocol:
+  - GIT_COMMITTER_NAME="TheY4NN777"
+  - --author flag explicit on every commit
+  - never modify git config
+body_style: 5-15 lines with environment details, error messages, alternatives considered
+language: French in subject and scope, French or English in body
+```
+
+### 5.3 Deployment discipline
+```yaml
+flow: staging → validate → MR develop→main → prod
+trigger: continuous deploy (no semver tags)
+narration: git log + .claude/plans/ + docs/ops/
+ci_runner_topology:
+  - runner_host: ops-serv (10.13.13.14)
+  - prod_runtime: Aïobi Master (207.180.255.229, 10.13.13.1) — pure runtime, no CI
+  - pattern: SSH-direct deploy with scoped key + sudo NOPASSWD discipline
+pre_deploy_checks:
+  - hash-based config drift detection (sha256 diff on env files)
+  - health polling with timeout + retry
+  - container restart only if config hash changed
+post_deploy:
+  - structured DEPLOYMENT-LOG.md updated per service per env
+incident_pattern:
+  - reproduce in staging first
+  - identify dual root causes (applicative + network often both present)
+  - blameless postmortem with timeline + lessons + action items
+```
+
+### 5.4 Documentation discipline
+```yaml
+audience: builders (not end-users)
+density:
+  readmes: 50-150 lines (terse)
+  design_docs: 300-800 lines (heavy)
+  runbooks: copy-paste-safe, one command per failure mode
+templates_applied:
+  - SWE-BASICS-BEFORE-CODE (PRD/SRS/CONTRACT/ARCHITECTURE/MODELING)
+  - postmortem: timeline + root causes + lessons + action items
+  - integration journal: chronological narrative with gotchas table
+language_split:
+  french: 90% (internal team-facing)
+  english: 10% (architecture, design docs, MISHKAN)
+status_marker: absent — no draft/live/superseded frontmatter convention yet
+closure_discipline: weak — many docs marked "à valider" indefinitely
+```
+
+## 6. AI-Tooling Profile
+
+### 6.1 Setup
+```yaml
+primary_tool: Claude Code (exclusive — no Cursor/Windsurf/Aider/Continue)
+user_level_dir: ~/.claude/
+user_agents:
+  - aiobi-ops (40 KB, specialised DevOps agent with 20+ documented gotchas, 15+ incidents)
+  - explore-codebase
+  - explore-docs
+  - action
+  - websearch
+user_commands: [epct, explore, run-tasks, watch-ci, commit, create-pull-request, fix-pr-comments, oneshot]
+hooks:
+  pre_tool_use: bun-TypeScript command validator (~/.claude/scripts/command-validator/)
+  stop_notification: audio cues (afplay)
+mcp_servers_configured: 0  # planned via MISHKAN, not active
+bash_aliases:
+  cc: "claude --dangerously-skip-permissions"
+  ccc: "claude --dangerously-skip-permissions -c"
+memory_files_per_project: 25-30  # flat-file knowledge graph at ceiling
+total_memory_tokens: ~48000 across 93 files
+```
+
+### 6.2 Delegation map (transcript-derived)
+```yaml
+high_delegation:
+  - ui_css_svg_animations  # one-shot accepted
+  - config_generation       # YAML, docker-compose, XML
+  - keycloak_spi_boilerplate
+medium_delegation:
+  - database_migrations  # generate then heavily review, execute self
+low_delegation:
+  - tests  # prefers manual verification
+zero_delegation:
+  - git_push
+  - ssh_to_prod
+  - docker_exec_on_prod
+  - sudo_operations
+  - schema_migration_execution
+  - log_forensics_execution  # ai analyses output, human runs commands
+```
+
+### 6.3 Prompting fingerprint
+```yaml
+early_session_style:
+  format: highly structured JSON (tâche/entrée/format_de_sortie/exigences)
+  avg_length_chars: 1062
+  rigor: high
+late_session_style:
+  format: conversational, terse, French command-style
+  avg_length_chars: 7948  # logs/terminal dumps included
+  rigor: scales with task difficulty — reverts to structure under pressure
+language_triggers:
+  french: emotional venting, narrative progress, sharp corrections, local observations
+  english: terminal commands, framework names, error messages, technical specs
+  mixed: 13% of messages
+fatigue_signal:
+  threshold: after 23:00 UTC
+  symptoms: typo density 3x baseline, prompts shift to raw terminal dumps, code-switching increases
+ai_collaboration_maturity: 3.5/5
+friction_tax: 3-5% of session time
+recurring_friction_topics:
+  - keycloak_session_persistence  # 125 instances
+  - commit_format_compliance       # 129 instances
+  - git_push_coordination          # 53 instances
+  - database_schema_sync           # 29 instances
+```
+
+### 6.4 Non-negotiables (durable AI rules)
+```yaml
+- aiobi_brand_uses_treme: "Aïobi" — never "Aiobi"
+- no_co_authored_by_trailers_in_commits
+- no_emojis_in_commits
+- explain_then_wait_before_implementing
+- no_scope_creep_au_passage
+- diagnose_before_fix_no_soupcon
+- no_invented_timeframes_or_facts
+- no_assistant_ssh_to_prod
+- no_assistant_git_push
+- stop_pending_action_when_user_speaks  # interruption priority
+- use_edit_tool_not_sed  # vscode visibility
+- check_both_gitlab_ci_and_deploy_remote_sh_for_deploy_logic_changes
+- shared_server_requires_git_committer_name_env_var
+- prefer_durable_over_temporary
+```
+
+## 7. Active Work — Open Scope
+
+### 7.1 Aïobi-IAM
+```yaml
+status: v1.0.x in prod, v1.1.x ongoing
+open:
+  - SPI bind-mount priority escalation (in BACKLOG.md)
+  - Docker boltdb cleanup (tech debt acknowledged)
+  - Full federation across all 4 apps (Forms done, Docs in progress, Meet/eshu pending)
+locked: design phase complete (01_PRD through 05_MODELING)
+pending: 06_IMPLEMENTATION doc
+```
+
+### 7.2 aiobi-form
+```yaml
+status: Phase 1 IAM hardening shipped, Phase 2 finition pre-prod in flight
+open:
+  - silent SSO deployment
+  - JWT hardening completion
+  - audit findings remediation (46 catalogued, partial)
+boundary: Y4NN owns deploy and IAM integration; Youssouf owns features
+```
+
+### 7.3 aiobi-docs
+```yaml
+status: staging active, prod pending
+open:
+  - IAM theme migration to prod
+  - logout flow finalisation
+  - postmortem follow-ups from 2026-05-12 staging recovery
+  - realm_events_listener bug (2026-05-11, documented)
+```
+
+### 7.4 eshu
+```yaml
+status: OAuth + prod setup phase
+open:
+  - Google + Apple OAuth completion
+  - prod deployment (registry migration 10.13.13.1 → 10.13.13.14 in progress)
+boundary: shared with Cephas Congo
+```
+
+### 7.5 AïobiMeet
+```yaml
+status: continuous ops
+open:
+  - session persistence across Keycloak restarts (recurring friction)
+  - Whisper ASR performance on staging vs prod (AVX-512 CPU divergence, unconfirmed root cause)
+  - SSO session timeout tuning
+  - cadvisor memory limits ongoing
+```
+
+### 7.6 AïobiOS-Guidance (personal/thesis)
+```yaml
+status: late prototype / pre-production
+open:
+  - AppArmor/SELinux policy phase
+  - LUKS encryption integration
+  - Secure Boot signing
+  - ISO build automation (no CI yet)
+  - public release preparation
+locked: US-1.1 through US-1.4 (debloat, security, branding, GDM customisation)
+methodology_artifact: 19 issues numbered, each traced to root cause across layers
+```
+
+### 7.7 MISHKAN (harness research)
+```yaml
+status: design v1 complete, build pending
+locked: naming (45 agents), 6 teams, init flow, 5-layer architecture, knowledge promotion model
+open_decisions:
+  - cognee_deployment_mode  # local docker vs cloud vs hybrid
+  - local_model_runtime     # ollama vs lm-studio vs llama.cpp
+  - install_scope           # user-level vs per-project
+not_yet_designed:
+  - agent_system_prompts
+  - claude_md_templates
+  - rules_files_content
+  - hook_implementations
+  - skill_implementations
+  - curated_library_content
+  - cognee_graph_schema
+  - observability_pipeline
+  - model_routing_config
+```
+
+### 7.8 RAG-CLI (planned, not started)
+```yaml
+purpose: ingest 654K-token internal doc corpus, build knowledge graph, expose CLI for engineering process improvement queries
+foundation: same Cognee instance MISHKAN needs
+status: design only
+corpus_ready: yes — 325 files, 13 doc types, strong interlinking, dated
+```
+
+## 8. Documentation Corpus (RAG-ready)
+
+```yaml
+total_files: 325
+total_size_mb: 5.6
+total_tokens_est: 654000
+language_split:
+  fr: 90%
+  en: 10%
+distribution:
+  project_docs: 226 files, 591K tokens
+  home_level_docs: 6 files, 15K tokens
+  claude_session_memory: 93 files, 48K tokens
+doc_types_identified:
+  - DESIGN_SPEC      # PRD, SRS, ARCHITECTURE, MODELING
+  - INCIDENT_REPORT
+  - POSTMORTEM
+  - RUNBOOK
+  - INTEGRATION_JOURNAL
+  - HANDOVER_NOTE
+  - ARCHITECTURE
+  - AUDIT_REPORT
+  - README
+  - DEPLOYMENT_LOG
+  - SESSION_MEMORY
+  - ADR
+  - FEATURE_SPEC
+  - TODO_TRACKER
+quality_flags:
+  todo_fixme_markers: 42
+  superseded_docs: 33
+  contradictions_detected: 2
+  mixed_language_within_doc: 7
+  status_frontmatter_present: false  # convention not yet adopted
+entity_density: high
+  services: 20+   # Keycloak, PostgreSQL, Redis, Celery, Whisper, MinIO, LiveKit, Nginx, Traefik, Grafana, Sentry, GlitchTip, Loki, etc.
+  hosts: 4 named  # id.aiobi.world, meet.aiobi.world, docs.aiobi.world, AiobiDev
+  config_keys: 30+
+  ports: 15+
+  realms: 3
+  ip_subnets: 3
+```
+
+## 9. Gaps — Factual Inventory
+
+### 9.1 Skill (study required)
+```yaml
+kubernetes:
+  status: absent
+  blocking: declarative orchestration progression
+terraform_or_pulumi:
+  status: absent
+  blocking: IaC progression beyond bash + Compose
+helm:
+  status: absent
+  blocking: K8s package distribution
+go:
+  status: absent
+  blocking: SRE/Platform tooling layer
+rust:
+  status: absent
+  blocking: systems performance work (longer-term)
+formal_slo_practice:
+  status: absent
+  components_missing: [SLI definitions, error budgets, burn-rate alerts, SLO docs]
+distributed_systems_depth:
+  status: absent
+  components_missing: [service mesh, mTLS, circuit breakers, RPC framework]
+threat_modelling_as_artifact:
+  status: absent
+  components_missing: [STRIDE doc, attack tree, formal threat model per service or per system]
+```
+
+### 9.2 Practice (process change required)
+```yaml
+sast_gates_in_ci:
+  status: not_automated
+  manual_equivalent: present (46-finding Forms audit done manually)
+  tools_missing: [semgrep, bandit, trivy, gitleaks, OSV-Scanner]
+dependency_scanning_in_ci:
+  status: not_automated
+docs_closure_ritual:
+  status: weak
+  symptom: many docs marked "à valider" indefinitely
+  fix: status frontmatter + sprint-end closure pass
+changelog_automation:
+  status: partial
+  forms_repo: present
+  others_repo: absent
+  source: git-cliff or conventional-changelog could autogenerate from existing commits
+test_coverage:
+  status: variable
+  weakest_repos: [IAM, eshu]
+  strongest_repos: [aiobi-form (phpunit), aiobi-docs (vitest)]
+ai_friction_engineering:
+  status: reactive
+  symptom: 129 commit-format corrections, 125 session-persistence corrections, 53 push-protocol corrections
+  fix: bake recurring rules into mishkan-init skill + pre-commit hooks
+late_night_deploy_rule:
+  status: absent
+  symptom: typo density 3x and prompt rigor degrades after 23:00 UTC
+```
+
+### 9.3 Tooling (build required)
+```yaml
+cognee_or_knowledge_graph:
+  status: designed, not deployed
+mcp_servers_configured:
+  status: 0 configured
+  needed: [cognee, filesystem, git, security_scanner]
+mishkan_implementation:
+  status: spec v1 complete, code at 0%
+rag_cli:
+  status: design only
+memory_to_graph_migration:
+  status: not started
+  source: 93 flat-file MEMORY.md → Cognee nodes
+go_binary_for_internal_tooling:
+  status: none built yet
+```
+
+## 10. Strengths — Factual Inventory
+
+```yaml
+operational_mastery:
+  - 5 production services across 5 stacks managed solo on deploy side
+  - 626 commits / 66K insertions in 3 months at sustained quality
+  - Real blameless postmortems authored
+  - Idempotent rollback runbooks with pre-flight state capture
+  - Hash-based config drift detection in CI
+  - Dual root-cause identification in incidents
+keycloak_deep_expertise:
+  - Custom Java SPI built from scratch
+  - Realm YAML hardening + bind-mount persistence
+  - SSO federation across multiple apps
+  - Infinispan JDBC session persistence
+  - Theme customisation including UTF-8 byte-level reconstruction
+methodology_rigor:
+  - SWE-BASICS-BEFORE-CODE applied verbatim in IAM and MISHKAN
+  - ADR-0001 with 4-CRDT × 3-OT-framework trade-off matrix
+  - AïobiOS: 19 issues numbered, each traced to root cause across abstraction layer
+  - Doctoral-level engineering log methodology
+ai_tooling_intentionality:
+  - Custom 40 KB aiobi-ops specialist agent
+  - Religious MEMORY.md discipline (93 files, 48K tokens)
+  - Asymmetric delegation rule (creative high / stateful zero)
+  - bun-TypeScript command validator hook
+  - MISHKAN architectural spec (815 lines) as original harness research
+  - Zero multi-tool sprawl by deliberate choice
+documentation_practice:
+  - 654K tokens across 325 files, 13 distinct doc types
+  - Strong interlinking, dated, templated structure
+  - Bilingual (fr/en) with deliberate split by audience
+debugging_discipline:
+  - Verification-first (no soupçon allowed)
+  - Identifies dual root causes (applicative + network)
+  - Documented refusal of guess-based fixes
+brand_precision:
+  - Aïobi tréma enforced everywhere
+  - UTF-8 byte-level work in shell when needed
+  - Commit format strict and durable
+security_practice:
+  - SECURITY.md per repo
+  - CVE-pinned dependencies with explicit comments
+  - SOPS for secret management
+  - Hardening overlays always re-applied
+  - SSO across suite via Keycloak
+```
+
+## 11. Project File Layout (Reference)
+
+```yaml
+home_root: /home/ogu/
+work_root: /home/ogu/theY4NN/
+work_repos:
+  - /home/ogu/theY4NN/Aïobi-IAM/
+  - /home/ogu/theY4NN/AïobiMeet/
+  - /home/ogu/theY4NN/aiobi-form/
+  - /home/ogu/theY4NN/aiobi-docs/
+  - /home/ogu/theY4NN/eshu/
+  - /home/ogu/theY4NN/a-obi-design-system/  # dormant
+  - /home/ogu/theY4NN/docs/
+  - /home/ogu/theY4NN/harness/  # MISHKAN design
+personal_root: /home/ogu/Projects/
+personal_repos:
+  - /home/ogu/Projects/AïobiOS-Guidance/
+claude_data:
+  - ~/.claude/
+  - ~/.claude/projects/<encoded-path>/memory/
+  - ~/.claude/projects/<encoded-path>/*.jsonl
+infra_topology:
+  - aiobi_master: 207.180.255.229 (10.13.13.1) — production runtime
+  - ops_serv: 10.13.13.14 — CI runner host
+  - aiobi_dev: shared staging server (Forms, Meet, Docs, eshu staging)
+```
+
+## 12. Operating Preferences (Cached Rules)
+
+```yaml
+session_modes:
+  exploration: default, free conversation, agents on demand
+  execution: triggered by /mishkan-init or convergence
+interruption_priority: drop pending action immediately when user speaks
+tool_choice:
+  prefer: Edit (vscode visibility)
+  avoid: sed for file modifications
+  use_for_files: Read/Edit/Write
+  reserve_for_shell: Bash only when no dedicated tool exists
+git_protocol:
+  commit: assistant may commit locally
+  push: human only
+  ssh_to_prod: human only
+  schema_migration_execution: human only
+  log_inspection_execution: human only (assistant analyses output)
+explanation_protocol:
+  before_implementing: 2-3 sentences + trade-offs + wait for approval
+  after_implementing: terse summary, do not narrate the diff
+language_protocol:
+  internal_meta_work: French acceptable
+  technical_artifacts: English preferred
+  commit_subjects: French acceptable
+output_protocol:
+  no_emojis: enforced everywhere
+  no_co_authored_by_trailers: enforced
+  detailed_explanations_over_summaries: preferred when documenting
+  no_invented_facts: verify timeframes against git log or mark as estimation
+scope_protocol:
+  fix_what_was_specified: no "au passage" cleanup
+  ask_before_widening: scope expansion requires approval
+```
+
+---
+
+*Profile is canonical present-state. Update on milestone events, role changes, or major work scope shifts. Designed for agent context loading with high signal density and low ceremony.*