brainiac-cli 0.16.0__py3-none-any.whl

brain/_assets/overlay/template/people/roster.md

@@ -0,0 +1,14 @@
+---
+overlay_type: people
+title: "People roster — starter template"
+updated: 2026-07-01
+---
+
+# People roster
+
+List the always-on people this owner's notes reference, with role (not
+necessarily a full bio) so disambiguation has a decoder.
+
+| Name / role | Relationship | Notes |
+|---|---|---|
+| `<Name or Role>` | `<e.g. manager, counterparty, direct report>` | `<one line>` |

brain/_assets/overlay/template/voice/voice-profile.md

@@ -0,0 +1,34 @@
+---
+overlay_type: voice
+title: "Voice profile — starter template"
+updated: 2026-07-01
+---
+
+# Voice profile
+
+Fill in the durable writing voice for this owner. Drafting-facing kernel
+skills (`save-conversation`, `promote`, `curation`) read this wherever they
+produce audience-facing prose under this owner's name.
+
+## Tone
+
+<!-- e.g. direct, technically deep, business-value focused -->
+
+## Register
+
+<!-- the target register — a durable, stable-over-time voice vs. the
+     "AI-polished" register, which is usually the explicit anti-pattern -->
+
+## Sign-off repertoire
+
+<!-- allowed closings, e.g.: Best regards / Thanks / Cheers -->
+<!-- and an explicit NEVER list, e.g.: never "Warm regards," -->
+
+## Languages
+
+<!-- which language(s) this owner writes in; which language to answer in -->
+
+## Sample snippets
+
+<!-- 2-3 short curated samples (a real sent email opener, a memo line) that
+     exemplify the voice in practice -->

brain/_assets/routines/manifest.json

@@ -0,0 +1,257 @@
+{
+  "manifest_version": "1",
+  "issued": "2026-06-30",
+  "session": "s13",
+  "purpose": "Host/VM-aware scheduled-task manifest for the brain product. One entry per live maintenance task, naming its cadence, command, connectors, and RUNTIME (host-write vs vm-read+draft). Consumed by scripts/register_tasks.py (the s07 registrar) and by routines/task-registrar's per-client registration steps.",
+  "locked_counts": {
+    "note": "THE LOCK (C-s02, ratified; AMENDED 2026-07-11 by owner decision): host os_scheduled budget is 2 — (1) brain-nightly (the maintenance umbrella) and (2) brain-synthesis (weekly headless kb-curator session; synthesis needs a model the engine deliberately does not hold). Any entry beyond these, or any os_scheduled=true entry on the VM, is a budget breach — amend locked_counts here first.",
+    "host_os_scheduled": 2,
+    "vm_os_scheduled": 0
+  },
+  "tasks": [
+    {
+      "id": "brain-nightly",
+      "display_name": "brain-nightly (THE maintenance umbrella — hourly)",
+      "folds": [
+        "chief-of-staff-nightly",
+        "daily-check (daily branch)",
+        "recommendations-aging (daily branch, unconditional file scan)",
+        "health (Monday branch)",
+        "integrity-scan (Tuesday branch)",
+        "ingestion-digest-weekly (Sunday branch)",
+        "curation (Sunday branch: stale-link + revisit-sample scan)",
+        "promotion-scan (Sunday branch: host brain promote-scan verb)",
+        "graphify-discovery (1st-of-month branch, REAL bounded build, ADR-0003 Ruling 6/(a))",
+        "inbox-ingest (daily branch, drain via sync)"
+      ],
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": true,
+      "persistence_cost": 1,
+      "cadence": "HOURLY (StartInterval 3600; amended 2026-07-11, owner decision: ingestion must be frequent — a captured document is searchable within the hour, not the next morning). Every firing runs the unconditional work (workspace sweep + inbox ingest + capture drain + incremental sync + snapshot publish + self-organization folds — all idempotent/incremental, single-runner lock prevents overlap); the date-gated branches (Mon=health, Tue=integrity, Sun=digest+curate+promote-scan, 1st=graphify) still fire once per their own schedule via .brain/maintain-state.json markers (ADR-0003 Ruling 5/(d) due-since-last-run).",
+      "command": "brain maintain --json",
+      "command_notes": "brain maintain is the umbrella CLI verb (src/brain/core.py BrainCore.maintain, src/brain/maintenance.py maintain_branches): it runs sync --publish + brief + a cheap unconditional recommendations-aging scan every run, then runs health/integrity/digest for real on their date-gated day (1st-of-month graphify now invokes a REAL bounded build via BrainCore.graphify -- ADR-0003 Ruling 6/(a) supersedes this manifest's earlier row-7 \"documented only\" disposition; see the graphify-discovery row below). The Sunday digest branch now ALSO runs curate (stale-wikilink-target detection + an age x centrality revisit sample) and promote-scan, queuing findings into .brain/memory/hot.md (idempotent per branch/run-date via a hot.md idempotency-key marker); the graphify branch queues its own egress-gated link candidates into hot.md the same way. A single-runner file lock (.brain/maintain.lock) makes a concurrent maintain skip rather than race; a crash mid-branch leaves that branch's last-run marker unadvanced (still due next run) without blocking the branches that already succeeded. .brain/maintain-state.json is ONE file serving both the catch-up markers and the heartbeat (brain status surfaces a stale >48h daily branch or repeated branch failures) -- the same file src/brain/config.py maintain_state_path() and the session-start.sh hook's stale-nightly check both read. This single command IS the full date-gated heartbeat this manifest's locked_counts promises. Nightly REGISTRATION (not what it runs) is owned by /brainiac-install (per-vault launchd label com.profile-a-brain.daily-brief / Windows task brain-daily-brief, via `brain init --full --apply`) -- see docs/adr/0003-parity-architecture.md 'Settled context'; this manifest's registration block below documents the underlying scripts /brainiac-install drives.",
+      "connectors": [
+        "macOS launchd (LaunchAgent com.profile-a-brain.daily-brief)",
+        "Windows Task Scheduler (task brain-daily-brief)"
+      ],
+      "registration": {
+        "mac": {
+          "mechanism": "launchd LaunchAgent",
+          "label": "com.profile-a-brain.daily-brief",
+          "install_script": "scripts/install-brief-mac.sh",
+          "plist": "scripts/brain-brief-mac.plist",
+          "runtime_script": "scripts/brain-brief.sh"
+        },
+        "windows": {
+          "mechanism": "Task Scheduler",
+          "task_name": "brain-daily-brief",
+          "install_script": "scripts/install-brief-windows.ps1"
+        }
+      },
+      "vm_eligible": false,
+      "notes": "Host-only by construction -- the VM has no scheduler and registers nothing (client-access-model.md). Every write/sign/maintenance verb is refused on role=vm before BrainCore is constructed."
+    },
+    {
+      "id": "daily-check",
+      "source_task": "owner-vault-daily-check",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "daily branch of brain-nightly (zero extra OS entries); standalone form is on-invoke",
+      "command": "brain check --json",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Index reconcile + drain drafts + status. _index.md regen stays vault-overlay (no brain equivalent)."
+    },
+    {
+      "id": "health",
+      "source_task": "owner-vault-health",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "Monday branch of brain-nightly; standalone form is on-invoke",
+      "command": "brain health --json",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "status + audit-chain verify + substrate self-test. Residual Obsidian/Bases-core plugin-hash check (if any client still runs Obsidian in parallel) stays a vault-overlay step, not a brain verb."
+    },
+    {
+      "id": "integrity-scan",
+      "source_task": "owner-vault-integrity-scan",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "Tuesday branch of brain-nightly; standalone form is on-invoke",
+      "command": "brain integrity --min-score 0.95 --json",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Audit-chain verify + corpus-wide near-dup scan directly over the brain vector backend (e5-small ONNX) -- no MCP round-trip. Near-dup bands re-baselined for e5-small per execution-contract.md S5."
+    },
+    {
+      "id": "curation",
+      "source_task": "owner-vault-curation (kb-curator: audit / lint-orphans / lint-stale / lint-callouts / propose-cleanup / refresh-index / rotate-logs)",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "Sunday branch of brain-nightly (zero extra OS entries, AUT-02); standalone form (`brain curate`) is on-invoke on host",
+      "command": "brain curate --json -- refresh-index + unclassified-notes lint + stale-wikilink-target detection + an age x whole-corpus-PageRank-centrality revisit sample (all now brain-retrieval-engine checks, ADR-0003 Ruling 5); orphan/contradiction/callout lint stays the .claude/skills/curation kernel skill (vault-graph structure, no brain-retrieval equivalent)",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "AUT-02 (s08) moved stale-link + revisit-sample OUT of 'no brain equivalent' and into `brain curate` proper, reusing the existing src/brain/graph.py wikilink-BFS+PPR module (whole-corpus PageRank, superseding that module's previously-documented 'global centrality is gap G3, age-only fallback'). The .claude/skills/curation kernel skill stays the on-invoke DEEPER interactive surface (orphans/contradictions/callouts) and now documents that the engine runs its half of the scan every Sunday automatically. Findings queue into .brain/memory/hot.md via the Sunday brain-nightly branch, idempotent per run-date. Registration: /brainiac-install (no new OS task -- folds into the existing brain-nightly registration)."
+    },
+    {
+      "id": "promotion-scan",
+      "source_task": "owner-vault-promotion-scan",
+      "disposition": "FOLD (host Sunday) + ON-INVOKE (VM triage)",
+      "runtime": "host-write (scheduled) / vm-read+draft (on-invoke)",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "Sunday branch of brain-nightly for the host `brain promote-scan` verb (zero extra OS entries, AUT-02); the VM-eligible triage form is separately on-invoke (Cowork, surfaced at bootstrap or fired manually -- never OS-scheduled, per the locked VM=0 budget)",
+      "command": "Host Sunday fold: `brain promote-scan --json` (opens the index; findings queue into .brain/memory/hot.md). VM on-invoke triage:\nbrain bases-query --where status=candidate --max-tier Internal --json   # find candidates (VM-allowed, no index-open) \nbrain search \"<topic>\" --max-tier Internal --json                         # corroborate \nbrain draft-capture --content \"<proposal>\"                                # stage an unsigned DRAFT, drained+signed by the next host `brain sync`",
+      "command_notes": "The host-only `brain promote-scan` CLI verb (added in C-s03/CUT-03) is the DIFFERENT, more powerful host-side triage ritual that opens the index -- it is refused on role=vm, and as of AUT-02 (s08) it ALSO runs automatically as part of the Sunday brain-nightly branch. The VM-eligible on-invoke form is unchanged and uses only bases-query/search/draft-capture, all on the VM_ALLOWED list (src/brain/cli.py).",
+      "connectors": [
+        "Cowork chat session (manual paste-prompt; poke-only trigger, no cron)"
+      ],
+      "vm_eligible": true,
+      "notes": "Promotion itself stays a human (P-10-equivalent) gate in BOTH forms; the host Sunday fold is triage-only (queues a hot.md entry, never auto-promotes). See routines/task-registrar's Cowork paste-prompt for the VM form. Registration for the host fold: /brainiac-install (no new OS task)."
+    },
+    {
+      "id": "inbox-ingest",
+      "source_task": "owner-vault-inbox-ingest",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "daily branch of brain-nightly (drain via sync); standalone/event-driven form is on-invoke on host",
+      "command": "brain sync --json",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Binary-extraction pipeline stays overlay tooling; only its re-index step folds to brain sync (the incremental indexer IS the drain)."
+    },
+    {
+      "id": "graphify-discovery",
+      "source_task": "owner-vault-graphify-discovery",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "monthly (1st), REAL build inside the graphify branch of brain-nightly (ADR-0003 Ruling 6/(a)); standalone form (`brain graphify`) is on-invoke on host",
+      "command": "brain graphify --json",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "ADR-0003 Ruling 6/(a) SUPERSEDES this manifest's earlier task-disposition row 7 (\"documented only\" -- no clean fold, unbounded runtime risk). Both grounds are resolved by design: src/brain/graphify.py gives maintain a single function to call (clean fold), and three caps bound the monthly run -- a corpus-manifest drift gate (no-op in ms when unchanged), embedding reuse (never re-embeds), and a self-reported wall-clock budget (target <=60s at current corpus scale, action_required past 5min). brain maintain's graphify branch now sets invoked=true and calls BrainCore.graphify (src/brain/core.py), which builds a stamped `authoritative:false` graph.json (wikilink edges + capped, scored INFERRED embedding-neighbour edges) atomically to .brain/graph/, and queues egress-gated link candidates into .brain/memory/hot.md for human review (graphify never auto-writes a link into a note). `brain status` surfaces the build's generation/age. `brain graph-expand --use-inferred` can optionally consume the INFERRED edges as extra discovery-only traversal input."
+    },
+    {
+      "id": "autoresearch-cascade",
+      "source_task": "owner-vault-autoresearch-cascade",
+      "disposition": "ON-INVOKE",
+      "runtime": "host",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "on-invoke only, recommended quarterly BY CONVENTION -- documented here as prose, never a cron/schedule entry (ADR-0003 Ruling 7: too judgment-laden for the nightly heartbeat, needs a human to read the evidence before a kept change becomes a shipped default)",
+      "command": ".claude/skills/autoresearch/SKILL.md -- bounded loop: eval/capture_run.py (baseline + one-parameter-change candidate) -> eval/harness_direct.py -> eval/gate.py --metric recall@20 -> keep (non-inferior AND improved) or revert; every iteration writes eval/runs/autoresearch-*.json",
+      "command_notes": "AUT-04 (session s11) REPOINTS this row from an earlier placeholder ('autoresearch cascade' as a manual search+draft-capture research helper, which was VM-eligible) to the ADR-0003 Ruling 7 design actually built: a retrieval-PARAMETER self-tuning loop. It needs the profile-a-brain dev checkout (src/, eval/, the golden set + qrels the real owner vault was graded against) -- not something the sandboxed Cowork VM (vault/.brain/ runtime + published snapshot only, no eval/ or src/ on that mount) can run. Hence runtime=host, vm_eligible=false (was true under the old placeholder). It never edits src/brain/ -- a KEPT change is evidence + a recommendation; applying it to the shipped CLI/BrainCore defaults is a separate, human-reviewed code change.",
+      "connectors": [
+        "Claude Code / any harness with a full profile-a-brain repo checkout on PATH (src/, eval/) -- NOT a Cowork VM session",
+        "external research connectors stay human-initiated (egress posture, unchanged)"
+      ],
+      "vm_eligible": false,
+      "notes": "An analyst job, not a heartbeat. Evidence artifacts under eval/runs/autoresearch-*.json carry a top-level `captured` ISO field src/brain/core.py's `_autoresearch_status` reads for the morning brief's staleness line (ADR-0003 2026-07-05/s09 Amendment) -- so even a quarter where every candidate was reverted still refreshes the signal that the poke happened. See .claude/skills/autoresearch/SKILL.md for the full bounded-loop contract."
+    },
+    {
+      "id": "ingestion-digest-weekly",
+      "source_task": "owner-vault-ingestion-digest-weekly",
+      "disposition": "FOLD",
+      "runtime": "host-write (scheduled emission) / vm-read+draft (on-invoke)",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "Sunday branch of brain-nightly for the scheduled emission (folded, host, zero extra OS entries); on-demand VM form is on-invoke",
+      "command": "brain digest --days 7 --json",
+      "connectors": [
+        "Cowork chat session (on-invoke VM form only; manual paste-prompt; poke-only trigger, no cron)"
+      ],
+      "vm_eligible": true,
+      "notes": "`digest` is on the VM_ALLOWED list (read-only), so the on-demand form can run directly in Cowork without a paste-prompt registrar step if the owner just wants a one-off read. The registrar's Cowork prompt offers it as a named poke-only trigger purely for convenience (avoid retyping)."
+    },
+    {
+      "id": "recommendations-aging",
+      "source_task": "owner-vault-recommendations-aging",
+      "disposition": "FOLD",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "daily branch of brain-nightly (unconditional cheap file scan, no separate branch, MEM-03); zero extra OS entries",
+      "command": "(no standalone CLI verb -- an in-process file scan inside `brain maintain`'s daily branch: src/brain/core.py BrainCore._recommendations_aging_fold, src/brain/maintenance.py recommendations_aging_scan)",
+      "command_notes": "Reads/writes .brain/memory/recommendations-open.jsonl (lifecycle: open -> aging [implicit: an open entry past the aging threshold, default 14 days] -> surfaced -> resolved) and appends surfaced entries to .brain/memory/hot.md, idempotently (an entry is queued into hot.md exactly once, guarded both by the JSONL status flip and a hot.md idempotency-key marker). Resolving a recommendation (removing it from the open file, logging it to .brain/memory/recommendations-log.md) is a documented convention (maintenance.resolve_recommendation), same as hot.md's own owner-clears-an-entry etiquette -- no CLI verb yet.",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "MEM-03 (s08) promoted this from an overlay-only pass-through to a real brain-nightly fold, porting the reference organization's `_recommendations_open.jsonl`/`_recommendations_log.md` SCHEMA (never content, ADR-0003 Appendix B). Registration: /brainiac-install (no new OS task)."
+    },
+    {
+      "id": "handoff-freshness",
+      "source_task": "owner-vault-handoff-freshness",
+      "disposition": "OVERLAY-ONLY",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "on-invoke (host) -- no SC/Bases/cascade coupling",
+      "command": "(vault-specific overlay tooling -- no brain CLI equivalent)",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Roster reconciliation: the live-vault roster carries a couple of near-pure pass-throughs beyond this manifest's disposition-tagged tasks (see totals.check) -- trivially OVERLAY-ONLY / HOST / ON-INVOKE, zero OS entries, no brain CLI equivalent."
+    },
+    {
+      "id": "write-audit",
+      "source_task": "owner-vault-write-audit",
+      "disposition": "OVERLAY-ONLY",
+      "runtime": "host-write",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "on-invoke (host) -- audits the vault's own audit chain + git coexistence, not the brain's",
+      "command": "(vault-specific overlay tooling; brain's own chain is verified separately via `brain verify-audit` / `brain anchor` / `brain verify-anchor`)",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Roster reconciliation: the live-vault roster carries a couple of near-pure pass-throughs beyond this manifest's disposition-tagged tasks (see totals.check) -- trivially OVERLAY-ONLY / HOST / ON-INVOKE, zero OS entries, no brain CLI equivalent."
+    },
+    {
+      "id": "brain-synthesis-weekly",
+      "display_name": "brain-synthesis (weekly model-backed synthesis session)",
+      "folds": [
+        "kb-curator weekly pass: state/MOC refresh from the week's raw ingests, promote-scan candidate promotion, index.md stamps, sync --publish"
+      ],
+      "disposition": "SCHEDULED-SESSION",
+      "runtime": "host-write",
+      "os_scheduled": true,
+      "persistence_cost": 1,
+      "cadence": "weekly Sunday 08:00 host local time (one hour after the nightly, so promote-scan/digest output is fresh); registry-driven — iterates every host vault in ~/.brainiac/workspaces.json, so a new install is covered with zero extra wiring",
+      "command": "scripts/brain-synthesis.sh (launchd label com.brainiac.synthesis)",
+      "notes": "Owner decision 2026-07-11: metadata automation (nightly folds) closed every organization gap except SYNTHESIS, which needs a model. Headless Claude Code session, bounded by --max-turns, scoped allowedTools, per-vault kb-curator skill required (skips loudly otherwise). Burns model credits weekly — cadence is the owner's dial."
+    },
+    {
+      "id": "offhost-watchdog",
+      "display_name": "off-host watchdog of last resort (WD-01)",
+      "disposition": "APP-SCHEDULED-NOTE (never os_scheduled)",
+      "runtime": "local script (available now) / cloud routine (spec'd, DEFERRED pending a remote-read transport)",
+      "os_scheduled": false,
+      "persistence_cost": 0,
+      "cadence": "intended weekly, via a Claude `/schedule` cloud routine — NOT an OS scheduler entry, so it survives launchd's own death (the exact failure mode it exists to catch). Deliberately excluded from `locked_counts.host_os_scheduled`: that budget counts OS-level schedulers (launchd/Task Scheduler) on THIS host; a cloud routine runs on Anthropic's own cron infrastructure, a different substrate entirely.",
+      "command": "python3 scripts/offhost_watchdog_check.py [--json] [--no-notify] -- iterates every host vault in ~/.brainiac/workspaces.json, calls brain.maintenance.offhost_watchdog_findings(vault) per vault, fires ONE macOS notification (the existing OBS-02 osascript channel, brain.maintenance.fire_notification) on any breach, silent otherwise",
+      "command_notes": "WD-03/WD-01 (s07, 2026-07-12): offhost_watchdog_findings keys freshness on the LATEST health-history record's `ts` (a precise ISO datetime, written every hourly maintain run) rather than maintain-state.json's `last_run` (an ISO DATE, which can only express staleness in whole-day/24h steps -- too coarse for a 26h threshold). It delegates to the UNCHANGED synthesis_heartbeat_finding (WATCHDOG-01, commit d28c0ce) and health_trend for the other two checks -- extends that shipped pattern rather than rebuilding it. OWNER DECISION 2026-07-12: only the LOCAL leg (this row) ships this session; the off-host CLOUD leg (a real /schedule routine reading this data remotely) is DEFERRED -- verified via the schedule skill's own documentation that a cloud routine \"cannot access local files, local services, or local environment variables\", so there is no remote-read channel for it yet. No new outbound egress or credentials were introduced. See docs/operations/wd01-offhost-watchdog-spec.md (the routine PROMPT + registration instructions for once a remote-read channel exists) and docs/operations/wd01-deferred-cloud-leg.md (what's missing + the revisit trigger).",
+      "connectors": [],
+      "vm_eligible": false,
+      "notes": "Tests: tests/test_offhost_watchdog.py -- a forced-stale fixture proves the breach path fires (and that a fresh heartbeat / no-history-at-all both stay silent). This row is intentionally the FIRST manifest entry of its kind (app-scheduled, not OS-scheduled) -- there is no prior precedent to reconcile against."
+    }
+  ],
+  "totals": {
+    "tasks_listed": 14,
+    "host_os_scheduled_entries": 1,
+    "vm_os_scheduled_entries": 0,
+    "vm_eligible_on_invoke_tasks": 2,
+    "check": "14 manifest rows = 1 umbrella (brain-nightly) + 10 disposition-tagged tasks it folds/hosts/on-invokes + 2 roster-reconciliation pass-throughs (handoff-freshness, write-audit) + 1 app-scheduled-note (offhost-watchdog, s07/WD-01) that deliberately sits OUTSIDE locked_counts (it is not an OS scheduler entry). recommendations-aging moved from a roster pass-through to a real brain-nightly FOLD in AUT-02/MEM-03 (s08). persistence accounting matches this manifest's locked_counts exactly: 1 host, 0 VM (offhost-watchdog adds 0 to both, by design). autoresearch-cascade dropped from vm_eligible_on_invoke_tasks (3 -> 2) in AUT-04/s11: it needs the profile-a-brain dev checkout (src/, eval/), not something a Cowork VM session (vault/.brain/ runtime only) can run -- see that row's command_notes."
+  }
+}

brain/_assets/scripts/brain-brief-mac.plist

@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<!-- brain-daily-brief — macOS launchd LaunchAgent (UX-02)
+     Install: BRAIN_VAULT=/path/to/vault bash scripts/install-brief-mac.sh
+     Uninstall: launchctl unload ~/Library/LaunchAgents/com.brainiac.nightly.<id>.plist
+                rm ~/Library/LaunchAgents/com.brainiac.nightly.<id>.plist
+     Logs: ~/Library/Logs/brain/brief-YYYY-MM-DD.log
+     Task name: com.brainiac.nightly.<id> (per-vault; <id> = 8-hex vault slug, rendered by install-brief-mac.sh)
+-->
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>LABEL_PLACEHOLDER</string>
+
+    <key>ProgramArguments</key>
+    <array>
+        <string>/bin/bash</string>
+        <string>SCRIPTS_DIR/brain-brief.sh</string>
+    </array>
+
+    <!-- BRAIN_VAULT and BRAIN_AUDIT_KEY_PEM are substituted by install-brief-mac.sh.
+         The signing key is read from the macOS Keychain at install time and written
+         here; it is never stored in the source tree. -->
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>BRAIN_VAULT</key>
+        <string>VAULT_PATH</string>
+        <key>BRAIN_AUDIT_KEY_PEM</key>
+        <string>AUDIT_KEY_PEM_PLACEHOLDER</string>
+        <key>BRAIN_LOG_DIR</key>
+        <string>HOME_DIR/.brain/logs</string>
+        <!-- Workspace sweep sources (WSP-01, optional): os.pathsep-separated
+             folders whose SETTLED top-level files auto-flow into
+             <vault>/inbox/. `path=N` sets a per-dir age gate in days;
+             `path=0` = capture-inbox mode (same-day, 15-min write guard).
+             Empty = sweep disabled. Set per vault at install time. -->
+        <key>BRAIN_WORKSPACE_SWEEP_DIRS</key>
+        <string>SWEEP_DIRS_PLACEHOLDER</string>
+    </dict>
+
+    <!-- HOURLY (owner decision 2026-07-11: ingestion is frequent — a
+         captured document is searchable within the hour). Every firing runs
+         the incremental/idempotent work (sweep + ingest + drain + sync +
+         snapshot + self-organization folds); weekly/monthly branches stay
+         date-gated inside `brain maintain` via .brain/maintain-state.json,
+         so higher frequency never multiplies the heavy branches. -->
+    <key>StartInterval</key>
+    <integer>3600</integer>
+
+    <key>StandardOutPath</key>
+    <string>HOME_DIR/.brain/logs/launchd-brief-stdout.log</string>
+    <key>StandardErrorPath</key>
+    <string>HOME_DIR/.brain/logs/launchd-brief-stderr.log</string>
+
+    <!-- Do NOT run immediately on load — wait for the first scheduled time. -->
+    <key>RunAtLoad</key>
+    <false/>
+</dict>
+</plist>

brain/_assets/scripts/brain-brief.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+# brain-daily-brief — THE single sanctioned host scheduled task (`brain-nightly`,
+# persistence-budget.md THE LOCK). Runs the `brain maintain` umbrella, which is
+# sync --publish + brief PLUS the date-gated branches (Mon=health, Tue=integrity,
+# Sun=digest, 1st=graphify-documented-only) -- see src/brain/core.py
+# BrainCore.maintain + src/brain/maintenance.py maintain_branches.
+#
+# Invoked by macOS launchd (brain-brief-mac.plist) or Windows Task Scheduler
+# (install-brief-windows.ps1). This script is the ONE sanctioned automated
+# brain invocation and the guaranteed daily capture-drain FLOOR.
+#
+# Task name:    brain-daily-brief (per-vault launchd label com.brainiac.nightly.<id> /
+#               Windows task brain-daily-brief-<id>) -- the manifest entry for this
+#               task is routines/manifest.json id "brain-nightly". Stable IDs
+#               are kept unchanged across this s07 script update so an existing
+#               registration is NOT duplicated by the idempotent registrar
+#               (scripts/register_tasks.py) -- only its invoked command changed.
+# User context: current user (LaunchAgent / Task Scheduler user-level)
+# Schedule:     daily 07:00 (see installer scripts); date-gated branches fire
+#               INSIDE this one run -- see routines/manifest.json + persistence-budget.md.
+# Logs:         $BRAIN_LOG_DIR/brief-YYYY-MM-DD.log  (30-day rotation)
+# Uninstall:    see scripts/install-brief-mac.sh or install-brief-windows.ps1
+#
+# Security note: the audit signing key is resolved AT RUNTIME by
+# resolve_signing_key() (env BRAIN_AUDIT_KEY_PEM -> keychain fallthrough).
+# The key is NEVER stored in this file, and on macOS it is no longer baked
+# into the launchd plist either — the drain reads the Keychain when it runs
+# (fails closed if locked/absent). BRAIN_AUDIT_KEY_PEM in the plist env is
+# only populated when the operator explicitly injected it at install time.
+# Windows: same — the task action carries no key; brain resolves it from the
+# Credential Manager (keyring) at runtime.
+#
+# Threat model: see docs/operations/s09-evidence.md § Scheduled-task threat model.
+#
+# OBS-02 degradation alarm: `brain maintain` itself fires the macOS
+# notification (src/brain/maintenance.py fire_notification, invoked from
+# BrainCore.maintain) for any trend regression, tripped watchdog finding, or
+# blocked>0 outcome — deduplicated per finding per day under
+# .brain/notify-sent/. Set BRAIN_NOTIFY=off in this process's environment to
+# disable; non-macOS hosts degrade to a log-only no-op automatically.
+set -euo pipefail
+
+LOGDIR="${BRAIN_LOG_DIR:-$HOME/.brain/logs}"
+mkdir -p "$LOGDIR"
+LOG="$LOGDIR/brief-$(date +%Y-%m-%d).log"
+
+# Resolve the brain binary explicitly: launchd runs with a minimal PATH
+# (/usr/bin:/bin:...) that does NOT include ~/.local/bin or the install venv,
+# so a bare `brain` fails with "command not found" under the scheduled run.
+# Prefer the canonical install venv; fall back to PATH for dev/manual runs.
+BRAIN_BIN="${BRAIN_BIN:-}"
+if [ -z "$BRAIN_BIN" ]; then
+  if [ -x "$HOME/.brainiac/venv/bin/brain" ]; then
+    BRAIN_BIN="$HOME/.brainiac/venv/bin/brain"
+  else
+    BRAIN_BIN="$(command -v brain || true)"
+  fi
+fi
+if [ -z "$BRAIN_BIN" ]; then
+  echo "brain-brief: no brain binary found (venv missing and not on PATH)" >> "$LOG"
+  exit 1
+fi
+
+{
+  echo "=== brain-daily-brief / brain-nightly $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="
+  # maintain: sync --publish (drain pending captures + reconcile index +
+  # republish snapshot) + brief, THEN whichever of health/integrity/digest is
+  # due today (date-gated). graphify is documented-only (no build invoked --
+  # the discovery graph stays separate tooling per task-disposition.md row 7).
+  "$BRAIN_BIN" maintain --json
+} >> "$LOG" 2>&1
+
+# Rotate logs older than 30 days.
+find "$LOGDIR" -name 'brief-*.log' -mtime +30 -delete 2>/dev/null || true

brain/_assets/scripts/brain-synthesis-mac.plist

@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<!-- brain-synthesis — the SECOND sanctioned host scheduled task
+     (routines/manifest.json id brain-synthesis-weekly; THE LOCK host=2).
+     ONE per HOST, not per vault: scripts/brain-synthesis.sh iterates every
+     host vault in ~/.brainiac/workspaces.json, so a newly installed vault is
+     covered with zero extra wiring. Weekly Sun 08:00, one hour after the
+     hourly umbrella has refreshed promote-scan/digest output. Requires the
+     `claude` CLI + a kb-curator skill in the workspace; skips loudly
+     otherwise (see the script header). -->
+<dict>
+    <key>Label</key>
+    <string>com.brainiac.synthesis</string>
+
+    <key>ProgramArguments</key>
+    <array>
+        <string>/bin/bash</string>
+        <string>SCRIPTS_DIR/brain-synthesis.sh</string>
+    </array>
+
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>BRAIN_LOG_DIR</key>
+        <string>HOME_DIR/.brain/logs</string>
+        <key>PATH</key>
+        <string>HOME_DIR/.local/bin:HOME_DIR/.brainiac/venv/bin:/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>
+    </dict>
+
+    <key>StartCalendarInterval</key>
+    <dict>
+        <key>Weekday</key>
+        <integer>0</integer>
+        <key>Hour</key>
+        <integer>8</integer>
+        <key>Minute</key>
+        <integer>0</integer>
+    </dict>
+
+    <key>StandardOutPath</key>
+    <string>HOME_DIR/.brain/logs/launchd-synthesis-stdout.log</string>
+    <key>StandardErrorPath</key>
+    <string>HOME_DIR/.brain/logs/launchd-synthesis-stderr.log</string>
+
+    <key>RunAtLoad</key>
+    <false/>
+</dict>
+</plist>