grimoire-kit 3.4.4__tar.gz → 3.5.0__tar.gz

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/CHANGELOG.md

@@ -7,6 +7,20 @@ et ce projet adhère au [Semantic Versioning](https://semver.org/lang/fr/).
 
 ## [Unreleased]
 
+## [3.5.0] - 2026-06-08
+
+### Ajouté
+
+- **Installation par besoins** — nouvelle couche d'installation custom : `grimoire standard needs`, `standard plan --needs ...`, `standard init --needs/--pattern/--memory/--interactive` et `standard doctor`. Deux fichiers déclaratifs (`framework/agentic-standard/capability-map.yaml`, `needs-catalog.yaml`) résolvent un besoin projet en profil + patterns + artefacts + extras technologiques, et écrivent un `install-manifest.yaml` auditable. Auto-install des extras opt-in via `--install-extras`.
+- **Parité patterns R8/R9/R10** — back-port dans les templates Kit des patterns `redis-hot-memory-soft-gate`, `governed-hook-gateway`, `skill-classification-matrix`, `governed-observability-cockpit`, des familles de règles `hooks`/`skills`/`observability`, du contrat `observability-policy.yaml`, de la taxonomie `managed_sources` et de la dimension de score `observability_cockpit`.
+- **Catalogue de patterns étendu (9 → 15)** — ajout de `code-graph-projection` (neo4j), `governed-agent-orchestration`, `governed-knowledge-indexing`, `mission-evidence-ledger`, `tool-mediation-gate` (mcp) et `provider-cost-slo`, câblés dans `capability-map.yaml` et `needs-catalog.yaml`.
+- **Memory OS cible** — portage du socle Weaviate + Neo4j + SQLite sidecar, migration Qdrant -> Weaviate/Neo4j, projections graph/vector, commandes `grimoire memory graph`, `memory vector`, `memory gate` et noyaux missions/evidence/policies/runtime/traces/bridges/evals.
+- **Standard Memory OS** — `grimoire standard init/verify/audit/score/gate` vérifie maintenant un contrat Memory OS cible : Redis hot memory, Weaviate mémoire sémantique durable, Neo4j projection graphe, SQLite sidecar/fallback et Qdrant en source legacy/migration uniquement.
+
+### Changé
+
+- **Détection mémoire** — `grimoire init --backend auto` privilégie désormais Weaviate quand il est disponible localement, conserve Qdrant comme fallback compatible (`qdrant-local`), puis Ollama et le backend local.
+
 ## [3.4.4] - 2026-05-29
 
 ### Corrigé

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: grimoire-kit
-Version: 3.4.4
+Version: 3.5.0
 Summary: Composable AI agent platform — personas, memory, workflows, and quality automation for any project.
 Project-URL: Homepage, https://github.com/Guilhem-Bonnet/Grimoire-kit
 Project-URL: Repository, https://github.com/Guilhem-Bonnet/Grimoire-kit
@@ -25,19 +25,25 @@ Requires-Dist: rich>=13.0
 Requires-Dist: ruamel-yaml>=0.18
 Requires-Dist: typer>=0.12
 Provides-Extra: all
+Requires-Dist: chromadb<0.7,>=0.6; extra == 'all'
 Requires-Dist: mcp>=1.0; extra == 'all'
+Requires-Dist: neo4j>=5.0; extra == 'all'
 Requires-Dist: ollama>=0.3; extra == 'all'
 Requires-Dist: qdrant-client>=1.9; extra == 'all'
+Requires-Dist: redis>=5.0; extra == 'all'
 Requires-Dist: sentence-transformers>=3.0; extra == 'all'
 Provides-Extra: dev
+Requires-Dist: chromadb<0.7,>=0.6; extra == 'dev'
 Requires-Dist: mcp>=1.0; extra == 'dev'
 Requires-Dist: mypy>=1.10; extra == 'dev'
+Requires-Dist: neo4j>=5.0; extra == 'dev'
 Requires-Dist: ollama>=0.3; extra == 'dev'
 Requires-Dist: pre-commit>=4.0; extra == 'dev'
 Requires-Dist: pytest-cov>=5.0; extra == 'dev'
 Requires-Dist: pytest-xdist>=3.0; extra == 'dev'
 Requires-Dist: pytest>=8.0; extra == 'dev'
 Requires-Dist: qdrant-client>=1.9; extra == 'dev'
+Requires-Dist: redis>=5.0; extra == 'dev'
 Requires-Dist: ruff>=0.6; extra == 'dev'
 Requires-Dist: sentence-transformers>=3.0; extra == 'dev'
 Provides-Extra: docs
@@ -46,11 +52,19 @@ Requires-Dist: mkdocstrings[python]>=0.25; extra == 'docs'
 Requires-Dist: pymdown-extensions>=10.0; extra == 'docs'
 Provides-Extra: mcp
 Requires-Dist: mcp>=1.0; extra == 'mcp'
+Provides-Extra: mempalace
+Requires-Dist: chromadb<0.7,>=0.6; extra == 'mempalace'
+Provides-Extra: neo4j
+Requires-Dist: neo4j>=5.0; extra == 'neo4j'
 Provides-Extra: ollama
 Requires-Dist: ollama>=0.3; extra == 'ollama'
 Provides-Extra: qdrant
 Requires-Dist: qdrant-client>=1.9; extra == 'qdrant'
 Requires-Dist: sentence-transformers>=3.0; extra == 'qdrant'
+Provides-Extra: redis
+Requires-Dist: redis>=5.0; extra == 'redis'
+Provides-Extra: weaviate
+Requires-Dist: sentence-transformers>=3.0; extra == 'weaviate'
 Description-Content-Type: text/markdown
 
 <picture>

grimoire_kit-3.5.0/framework/agentic-standard/capability-map.yaml

@@ -0,0 +1,171 @@
+$schema: "grimoire-agentic-standard-capability-map/v1"
+
+metadata:
+  id: agentic-standard-capability-map
+  version: "0.1.0"
+  owner: grimoire-kit
+  intent: >
+    Map each executable pattern to the artifacts, rules, checks and optional
+    technology extras it requires, so a custom install can select only what a
+    project's flow actually needs.
+
+# Technology extras mirror [project.optional-dependencies] in pyproject.toml.
+# `pip_extra` is the name used in `pip install 'grimoire-kit[<extra>]'`.
+tech_extras:
+  redis:
+    pip_extra: redis
+    role: "Hot memory: TTL, leases, locks, streams/pubsub. Never a durable source of truth."
+    degrades_to: "local SQLite sidecar"
+  weaviate:
+    pip_extra: weaviate
+    role: "Durable semantic/vector memory (target backend)."
+    degrades_to: "local SQLite sidecar"
+  neo4j:
+    pip_extra: neo4j
+    role: "Durable graph projection: memory, code, task, evidence, decision."
+    degrades_to: "no graph projection"
+  qdrant:
+    pip_extra: qdrant
+    role: "Legacy vector backend, limited to migration/rollback."
+    degrades_to: "weaviate or local"
+  mempalace:
+    pip_extra: mempalace
+    role: "Experimental local vector store (chromadb)."
+    degrades_to: "local SQLite sidecar"
+  ollama:
+    pip_extra: ollama
+    role: "Local LLM provider for local-first / offline routing."
+    degrades_to: "hosted provider routing"
+  mcp:
+    pip_extra: mcp
+    role: "Model Context Protocol server, tools and bridges."
+    degrades_to: "no MCP tool mediation"
+
+# profile_min uses the profile ladder: starter < controlled < orchestrated < governed < production.
+# artifacts reference artifact_type keys declared in profile-map.yaml.
+patterns:
+  advanced-context-orchestrator:
+    category: context
+    artifacts: [context_contract]
+    rules: [memory.freshness-required]
+    checks: [context.budget_invalid, context.redaction_required]
+    tech_extras: []
+    profile_min: orchestrated
+  governed-memory-policy:
+    category: memory
+    artifacts: [memory_policy]
+    rules: [memory.freshness-required]
+    checks: [memory.required_types_missing]
+    tech_extras: []
+    profile_min: orchestrated
+  evidence-gated-fsm:
+    category: workflow
+    artifacts: [evidence_gates]
+    rules: [gate.requires-evidence]
+    checks: [gates.transitions_missing, evidence.pending_gate]
+    tech_extras: []
+    profile_min: starter
+  provider-routing-contract:
+    category: provider
+    artifacts: [llm_provider_registry]
+    rules: [provider.no-undeclared-route]
+    checks: [providers.default_unknown]
+    tech_extras: []
+    profile_min: controlled
+  runtime-journal:
+    category: runtime
+    artifacts: []
+    rules: []
+    checks: [events.invalid_line]
+    tech_extras: []
+    profile_min: governed
+  redis-hot-memory-soft-gate:
+    category: memory
+    artifacts: [memory_policy]
+    rules: [memory.hot-degrades-safely]
+    checks: [memory.hot_memory_partial]
+    tech_extras: [redis]
+    profile_min: governed
+  governed-hook-gateway:
+    category: governance
+    artifacts: [hook_registry, rule_packs]
+    rules: [hooks.must-use-gateway, hooks.no-destructive-bypass]
+    checks: [hooks.gateway_missing, hooks.destructive_bypass]
+    tech_extras: []
+    profile_min: governed
+  skill-classification-matrix:
+    category: orchestration
+    artifacts: [hook_registry, pattern_catalog]
+    rules: [skills.classified-before-use]
+    checks: [skills.classification_missing]
+    tech_extras: []
+    profile_min: governed
+  governed-observability-cockpit:
+    category: observability
+    artifacts: [observability_policy]
+    rules: [observability.cockpit-read-only, observability.inputs-are-declared, observability.no-secret-export]
+    checks: [observability.cockpit_mutation, observability.input_undeclared, observability.secret_export]
+    tech_extras: []
+    profile_min: governed
+  code-graph-projection:
+    category: memory
+    artifacts: [memory_policy]
+    rules: [memory.freshness-required]
+    checks: [memory.graph_projection_unverified]
+    tech_extras: [neo4j]
+    profile_min: orchestrated
+  governed-agent-orchestration:
+    category: orchestration
+    artifacts: [orchestration_policy]
+    rules: [orchestration.no-undeclared-handoff]
+    checks: [orchestration.role_undeclared, orchestration.handoff_unverified]
+    tech_extras: []
+    profile_min: orchestrated
+  governed-knowledge-indexing:
+    category: knowledge
+    artifacts: [knowledge_source_registry]
+    rules: [knowledge.source-declared]
+    checks: [knowledge.source_unindexed]
+    tech_extras: []
+    profile_min: orchestrated
+  mission-evidence-ledger:
+    category: workflow
+    artifacts: [evidence_gates, evidence_pack]
+    rules: [gate.requires-evidence]
+    checks: [ledger.mission_unlinked]
+    tech_extras: []
+    profile_min: governed
+  tool-mediation-gate:
+    category: security
+    artifacts: [hook_registry, rule_packs]
+    rules: [tools.mediated-before-use]
+    checks: [tools.unmediated_call, tools.threat_unmapped]
+    tech_extras: [mcp]
+    profile_min: governed
+  provider-cost-slo:
+    category: provider
+    artifacts: [llm_provider_registry]
+    rules: [provider.cost-budgeted]
+    checks: [provider.cost_unbudgeted, provider.slo_undeclared]
+    tech_extras: []
+    profile_min: production
+
+# Memory tiers are capabilities layered onto governed-memory-policy. Selecting a
+# tier pulls its backing tech extra without changing the core (SQLite) baseline.
+memory_capabilities:
+  semantic-memory:
+    tech_extras: [weaviate]
+    backs_pattern: governed-memory-policy
+    role: "RAG / durable semantic recall."
+  graph-memory:
+    tech_extras: [neo4j]
+    backs_pattern: governed-memory-policy
+    role: "Verifiable knowledge/code graph."
+  hot-memory:
+    tech_extras: [redis]
+    backs_pattern: redis-hot-memory-soft-gate
+    role: "Session/hot cache, leases, transient events."
+  legacy-migration:
+    tech_extras: [qdrant]
+    backs_pattern: governed-memory-policy
+    role: "Migrate/rollback from a legacy Qdrant store."

grimoire_kit-3.5.0/framework/agentic-standard/needs-catalog.yaml

@@ -0,0 +1,135 @@
+$schema: "grimoire-agentic-standard-needs-catalog/v1"
+
+metadata:
+  id: agentic-standard-needs-catalog
+  version: "0.1.0"
+  owner: grimoire-kit
+  intent: >
+    User-facing project needs/flows. Each need maps to a recommended profile and
+    a set of patterns. A custom install resolves the union of selected needs into
+    a profile, an artifact set and the technology extras to install.
+
+# Each need:
+#   id                 stable selector used by `grimoire standard init --needs <id>`
+#   label              human-readable choice shown in the interactive wizard
+#   recommended_profile  profile ladder floor for this need
+#   patterns           catalog pattern ids pulled in by this need
+#   memory_capabilities optional memory tiers (semantic/graph/hot/legacy)
+#   extra_tech_extras  tech extras pulled in beyond those implied by patterns
+#   rationale          why this need maps to these patterns
+needs:
+  - id: solo-prototyping
+    label: "Solo dev / quick prototype (minimal governance)"
+    recommended_profile: starter
+    patterns: [evidence-gated-fsm]
+    memory_capabilities: []
+    extra_tech_extras: []
+    rationale: "A lightweight evidence-gated flow with no external services."
+
+  - id: provider-neutral
+    label: "Provider-neutral / local-first LLM routing"
+    recommended_profile: controlled
+    patterns: [provider-routing-contract]
+    memory_capabilities: []
+    extra_tech_extras: [ollama]
+    rationale: "Route every model call through a declared registry; allow local models."
+
+  - id: semantic-memory-rag
+    label: "Semantic memory / RAG over your documents"
+    recommended_profile: orchestrated
+    patterns: [governed-memory-policy, advanced-context-orchestrator]
+    memory_capabilities: [semantic-memory]
+    extra_tech_extras: []
+    rationale: "Durable vector recall with orchestrated, budgeted context bundles."
+
+  - id: knowledge-graph
+    label: "Verifiable knowledge / code graph"
+    recommended_profile: orchestrated
+    patterns: [governed-memory-policy, advanced-context-orchestrator, code-graph-projection, governed-knowledge-indexing]
+    memory_capabilities: [graph-memory]
+    extra_tech_extras: []
+    rationale: "Graph projection of memory, code, task and evidence relationships, bound to indexed sources."
+
+  - id: hot-session-cache
+    label: "Fast session / hot memory cache"
+    recommended_profile: governed
+    patterns: [redis-hot-memory-soft-gate]
+    memory_capabilities: [hot-memory]
+    extra_tech_extras: []
+    rationale: "Redis-backed session state that degrades safely when absent."
+
+  - id: multi-agent-orchestration
+    label: "Multiple agents with handoff / escalation"
+    recommended_profile: orchestrated
+    patterns: [advanced-context-orchestrator, skill-classification-matrix, governed-agent-orchestration]
+    memory_capabilities: []
+    extra_tech_extras: []
+    rationale: "Orchestrated context, classified skills and declared roles/handoffs for safe multi-agent flows."
+
+  - id: tool-mediation-security
+    label: "Mediate tools / MCP calls (OWASP agentic threats)"
+    recommended_profile: governed
+    patterns: [tool-mediation-gate, governed-hook-gateway]
+    memory_capabilities: []
+    extra_tech_extras: [mcp]
+    rationale: "Route tool/MCP calls through a trust gate mapped to OWASP agentic threats before execution."
+
+  - id: hooks-skills-governance
+    label: "Govern hooks and skills (gateway + classification)"
+    recommended_profile: governed
+    patterns: [governed-hook-gateway, skill-classification-matrix]
+    memory_capabilities: []
+    extra_tech_extras: []
+    rationale: "Route hooks through a policy gateway and classify skills before use."
+
+  - id: observability-cockpit
+    label: "Observability cockpit / governed dashboards"
+    recommended_profile: governed
+    patterns: [governed-observability-cockpit, runtime-journal]
+    memory_capabilities: []
+    extra_tech_extras: []
+    rationale: "Reproducible read-only cockpit projected from governed artifacts."
+
+  - id: enterprise-governance
+    label: "Organization-grade governance (full controls)"
+    recommended_profile: governed
+    patterns:
+      - advanced-context-orchestrator
+      - governed-memory-policy
+      - evidence-gated-fsm
+      - provider-routing-contract
+      - runtime-journal
+      - governed-hook-gateway
+      - skill-classification-matrix
+      - governed-observability-cockpit
+      - governed-agent-orchestration
+      - governed-knowledge-indexing
+      - mission-evidence-ledger
+      - tool-mediation-gate
+      - code-graph-projection
+    memory_capabilities: [semantic-memory, graph-memory]
+    extra_tech_extras: []
+    rationale: "All governed patterns with durable semantic + graph memory, mediated tools and a mission evidence ledger."
+
+  - id: production-release-gating
+    label: "Production critical flow with release gates"
+    recommended_profile: production
+    patterns:
+      - advanced-context-orchestrator
+      - governed-memory-policy
+      - evidence-gated-fsm
+      - provider-routing-contract
+      - runtime-journal
+      - redis-hot-memory-soft-gate
+      - governed-hook-gateway
+      - skill-classification-matrix
+      - governed-observability-cockpit
+      - governed-agent-orchestration
+      - governed-knowledge-indexing
+      - mission-evidence-ledger
+      - tool-mediation-gate
+      - code-graph-projection
+      - provider-cost-slo
+    memory_capabilities: [semantic-memory, graph-memory, hot-memory]
+    extra_tech_extras: []
+    rationale: "Full pattern set with hot, semantic and graph memory, cost/SLO budgeting and mediated tools for critical releases."

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/framework/agentic-standard/profile-map.yaml

@@ -83,6 +83,9 @@ artifact_types:
   waivers:
     template: "framework/agentic-standard/templates/waivers.yaml"
     purpose: "Declare temporary governance waivers and approval evidence."
+  observability_policy:
+    template: "framework/agentic-standard/templates/observability-policy.yaml"
+    purpose: "Declare reproducible cockpit inputs, outputs, views, redaction, and non-authoritative projection rules."
 
 profiles:
   - id: starter
@@ -189,6 +192,7 @@ profiles:
       - remediation_plan
       - accepted_risks
       - waivers
+      - observability_policy
     recommended_archetypes:
       - minimal
       - agentic-standard
@@ -229,6 +233,7 @@ profiles:
       - remediation_plan
       - accepted_risks
       - waivers
+      - observability_policy
     recommended_archetypes:
       - minimal
       - agentic-standard
@@ -282,6 +287,8 @@ generation_targets:
       source_artifact: accepted_risks
     - path: "_grimoire/standard/waivers.yaml"
       source_artifact: waivers
+    - path: "_grimoire/standard/observability-policy.yaml"
+      source_artifact: observability_policy
   task_runtime:
     - path: "_grimoire-output/evidence/{task-id}/task-envelope.md"
       source_artifact: task_envelope

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/framework/agentic-standard/templates/compliance-score.yaml

@@ -8,10 +8,12 @@ dimensions:
   knowledge_registry: 10
   task_board: 10
   memory_policy: 10
+  memory_os: 10
   context_contract: 10
   decision_graph: 6
   rule_packs: 6
   hook_registry: 6
+  observability_cockpit: 6
   orchestration_policy: 10
   evidence_gates: 10
   runtime_journal: 4

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/framework/agentic-standard/templates/context-contract.yaml

@@ -19,6 +19,7 @@ bundle_sections:
   - excluded_sources
   - memory_inclusions
   - memory_exclusions
+  - memory_os
   - knowledge_nodes
   - provider_constraints
   - agent_role_constraints
@@ -48,6 +49,7 @@ checks:
   - context_is_reproducible
   - selected_sources_are_allowed
   - memory_injections_match_policy
+  - memory_os_contract_is_declared
   - provider_constraints_match_registry
   - context_budget_is_enforced
   - redactions_are_recorded

grimoire_kit-3.5.0/framework/agentic-standard/templates/hook-registry.yaml

@@ -0,0 +1,103 @@
+$schema: "grimoire-agentic-standard-hook-registry/v1"
+metadata:
+  project: ""
+  generated_by: "grimoire standard init"
+known_phases:
+  - pre_context_build
+  - post_context_build
+  - pre_provider_call
+  - post_provider_call
+  - pre_tool_call
+  - post_tool_call
+  - pre_state_transition
+  - post_state_transition
+  - pre_release
+  - on_failure
+  - on_rollback
+known_actions:
+  - allow
+  - warn
+  - block
+  - redact
+  - reroute
+  - require_evidence
+  - escalate
+  - create_remediation
+  - rollback
+hooks:
+  - id: context.require-task
+    phase: pre_context_build
+    action: block
+    rule_ref: task.exists
+    reason: "Context cannot be built for an undeclared task."
+  - id: provider.require-declared-route
+    phase: pre_provider_call
+    action: block
+    rule_ref: provider.no-undeclared-route
+    reason: "Provider routes must be declared before use."
+  - id: release.require-score
+    phase: pre_release
+    action: block
+    rule_ref: release.score-minimum
+    reason: "Release requires profile-specific compliance score."
+  - id: release.governed-requires-all-gates
+    phase: pre_release
+    action: block
+    rule_ref: release.gates-satisfied
+    reason: "Governed and production releases require all evidence gates satisfied."
+    profiles:
+      - governed
+      - production
+  - id: knowledge.auto-graph-on-context-build
+    phase: post_context_build
+    action: create_remediation
+    rule_ref: knowledge.graph-current
+    reason: "Context builds should refresh the local doc-to-graph view when knowledge sources are enabled."
+  - id: memory.hot-soft-gate
+    phase: pre_context_build
+    action: require_evidence
+    rule_ref: memory.hot-degrades-safely
+    reason: "Redis hot memory may be absent, but the degradation must be recorded and durable stores remain authoritative."
+    implementation_ref: ".github/hooks/grimoire-memory-gate.json"
+    script_ref: ".github/hooks/scripts/grimoire-memory-gate.sh"
+  - id: tools.terminal-guard
+    phase: pre_tool_call
+    action: block
+    rule_ref: hooks.no-destructive-bypass
+    reason: "Terminal and tool calls that can mutate state must pass safety/evidence checks."
+    implementation_ref: ".github/hooks/grimoire-terminal-guard.json"
+    script_ref: ".github/hooks/scripts/grimoire-terminal-guard.sh"
+  - id: hooks.gateway-required
+    phase: pre_tool_call
+    action: block
+    rule_ref: hooks.must-use-gateway
+    reason: "Project hooks should execute through the Grimoire hook gateway for traceability and policy mediation."
+    implementation_ref: ".github/hooks/scripts/grimoire-hook-gateway.sh"
+  - id: skills.require-classification
+    phase: pre_context_build
+    action: require_evidence
+    rule_ref: skills.classified-before-use
+    reason: "Skills must be classified before being promoted into core Kit templates or governed project packs."
+    implementation_ref: ".github/skills"
+# managed_sources classifies project hooks and skills before they are promoted.
+# core_template_candidates: reusable, governance-relevant assets shipped/recommended by the Kit.
+# project_pack: assets specific to one consumer project (fill in per project).
+# incubator: experimental assets not yet eligible for governed promotion.
+managed_sources:
+  hooks:
+    core_template_candidates:
+      - ".github/hooks/grimoire-memory-gate.json"
+      - ".github/hooks/grimoire-terminal-guard.json"
+      - ".github/hooks/grimoire-doc-drift.json"
+      - ".github/hooks/scripts/grimoire-hook-gateway.sh"
+    project_pack: []
+    incubator: []
+  skills:
+    core_template_candidates:
+      - ".github/skills/grimoire-code-review/SKILL.md"
+      - ".github/skills/grimoire-security-review/SKILL.md"
+      - ".github/skills/grimoire-verification/SKILL.md"
+      - ".github/skills/grimoire-writing-plans/SKILL.md"
+      - ".github/skills/grimoire-test-architecture/SKILL.md"
+    project_pack: []
+    incubator: []

{grimoire_kit-3.4.4 → grimoire_kit-3.5.0}/framework/agentic-standard/templates/memory-policy.yaml

@@ -9,6 +9,30 @@ defaults:
   provider_compatibility:
     hosted: "non-secret, approved project data only"
     local: "project-approved local data only"
+memory_os:
+  target:
+    hot_memory: "redis"
+    semantic_memory: "weaviate-server"
+    graph_projection: "neo4j"
+    sidecar: "sqlite"
+    legacy_vector_sources:
+      - "qdrant-local"
+      - "qdrant-server"
+  backend_roles:
+    redis: "Hot operational memory: TTL state, leases, locks, streams, and pub/sub; never the durable source of truth."
+    weaviate-server: "Durable semantic/vector memory target for accepted memories, knowledge facts, and code/task embeddings."
+    neo4j: "Durable typed graph projection for memories, facts, agents, tasks, evidence, files, symbols, and decisions."
+    sqlite: "Local sidecar and fallback for facts, diary entries, and offline-safe structured metadata."
+    qdrant: "Legacy vector source retained only for migration, rollback, and parity checks."
+  promotion_gates:
+    - "hot_memory_ttl_declared"
+    - "semantic_write_has_evidence"
+    - "graph_projection_has_source_refs"
+    - "qdrant_migration_bundle_verified"
+  runtime_commands:
+    - "grimoire memory gate"
+    - "grimoire memory migrate verify"
+    - "grimoire memory graph verify"
 memory_types:
   - memory_id: "session"
     type: "session"

grimoire_kit-3.5.0/framework/agentic-standard/templates/observability-policy.yaml

@@ -0,0 +1,86 @@
+$schema: "grimoire-agentic-standard-observability-policy/v1"
+metadata:
+  project: ""
+  profile: ""
+  generated_by: "grimoire standard init"
+  purpose: "Define the reproducible cockpit inputs, outputs and safety rules."
+principles:
+  - id: read_only_projection
+    statement: "The cockpit is a projection of governed artifacts and runtime events, never a source of truth."
+  - id: declared_inputs_only
+    statement: "Every cockpit input must be declared with owner, freshness and trust level."
+  - id: redacted_exports
+    statement: "Cockpit exports must not contain secrets, credentials, personal data or regulated data."
+declared_inputs:
+  - id: task_board
+    path: "_grimoire/standard/task-board.yaml"
+    owner: "maintainers"
+    trust_level: "authoritative"
+    freshness: "on-change"
+    dimensions: ["task_status", "evidence_refs", "blockers"]
+  - id: memory_policy
+    path: "_grimoire/standard/memory-policy.yaml"
+    owner: "maintainers"
+    trust_level: "authoritative"
+    freshness: "on-change"
+    dimensions: ["hot_memory", "semantic_memory", "graph_projection", "sidecar"]
+  - id: compliance_score
+    path: "_grimoire/standard/compliance-score.yaml"
+    owner: "maintainers"
+    trust_level: "authoritative"
+    freshness: "on-change"
+    dimensions: ["thresholds", "score_dimensions"]
+  - id: runtime_journal
+    path: "_grimoire-output/events/runtime-journal.jsonl"
+    owner: "automation"
+    trust_level: "medium"
+    freshness: "per-run"
+    dimensions: ["context_builds", "decision_traces", "hook_events", "gate_events"]
+  - id: evidence_packs
+    path: "_grimoire-output/evidence/**/evidence-pack.md"
+    owner: "maintainers"
+    trust_level: "high"
+    freshness: "per-task"
+    dimensions: ["validation", "controls", "accepted_gaps"]
+outputs:
+  - id: cockpit_report
+    path: "_grimoire-output/evidence/cockpit/cockpit-report.md"
+    format: "markdown"
+    mode: "read_only_projection"
+  - id: cockpit_evidence_pack
+    path: "_grimoire-output/evidence/cockpit/evidence-pack.md"
+    format: "markdown"
+    mode: "governed_evidence"
+views:
+  - id: memory_os_health
+    inputs: ["memory_policy", "runtime_journal", "evidence_packs"]
+    required_sections: ["hot", "semantic", "graph", "sidecar", "legacy"]
+  - id: task_and_evidence_overlay
+    inputs: ["task_board", "evidence_packs"]
+    required_sections: ["task_status", "evidence_refs", "open_gaps"]
+  - id: governance_status
+    inputs: ["compliance_score", "runtime_journal", "evidence_packs"]
+    required_sections: ["score_dimensions", "gate_events", "risk_or_waiver_refs"]
+redaction:
+  forbidden_data_classes:
+    - secrets
+    - credentials
+    - personal-data
+    - regulated-data
+  export_requires_redaction_check: true
+non_authoritative:
+  authoritative_sources:
+    - "_grimoire/standard/*.yaml"
+    - "_grimoire-output/evidence/**/evidence-pack.md"
+  advisory_sources:
+    - "_grimoire-output/events/runtime-journal.jsonl"
+  cockpit_may_not_update:
+    - "task status"
+    - "memory facts"
+    - "evidence gates"
+    - "compliance score"
+    - "accepted risks"
+checks:
+  - observability.cockpit_mutation
+  - observability.input_undeclared
+  - observability.secret_export