Initial Agent OS scaffolding — identity, brain, memory, infra-monitor skill

memory/active-projects.md

@@ -0,0 +1,23 @@
+# Active Projects
+
+Current in-flight work. Update at the end of each session.
+Last updated: 2026-04-30
+
+---
+
+## Agent OS — Phase 1 (NEXT)
+Complete the foundation before building skills.
+- [ ] Set up NFS export on 172.27.40.3 + mount on Kubuntu at /mnt/agent-os
+- [ ] Run identity interview with Claude → populate identity.md
+- [ ] Seed brain.md review and confirm accuracy
+- [ ] Clone this repo to /opt/agent-os/ on server
+
+## Agent OS — Phase 3 (PENDING Phase 1)
+- [ ] Build infra-monitor skill
+- [ ] Set up cron schedule (hourly heartbeat, daily digest)
+- [ ] Wire up Home Assistant notifications
+
+## Gitea documentation
+- [x] nxm-infrastructure repo — Obsidian vault imported
+- [x] nexum-projects repo — Obsidian vault imported
+- [x] agent-os repo — scaffolding created

memory/constraints.md

@@ -0,0 +1,13 @@
+# Constraints
+
+Hard limits agents must respect. Never work around these without explicit user confirmation.
+Last updated: 2026-04-30
+
+---
+
+- Never take destructive or irreversible action without explicit confirmation (delete, overwrite, drop, reset, force push)
+- Never store credentials in output files, logs, or generated markdown — reference their location instead
+- Never skip git hooks or bypass signing
+- TrueNAS (172.27.40.5) is being migrated to a new server — do not create hard dependencies on that IP
+- Linux server (172.27.40.3) has no GPU — never schedule LLM inference to run locally there
+- Docker Compose only — no Kubernetes, no Swarm

memory/notes-from-last-run.md

@@ -0,0 +1,8 @@
+# Notes from Last Run
+
+Populated automatically at the end of each skill run. Cleared at the start of each new session.
+Last updated: —
+
+---
+
+*No runs yet — Agent OS not yet deployed.*

memory/persistent.md

@@ -0,0 +1,18 @@
+# Persistent Memory
+
+Facts that don't expire. If you'd have to re-explain it to a new agent every time, it belongs here.
+Last updated: 2026-04-30
+
+---
+
+## Infrastructure decisions
+- RustDesk is self-hosted on 172.27.40.3 — clients connect to local server not public relay
+- Netbird client management is on port 8443 via Caddy sidecar, NOT port 443
+- Headscale v0.28: all write operations require numeric user ID, not username
+- Tailscale on Windows overrides DNS — disconnect before testing split DNS changes
+- Servers running Tailscale must run `sudo tailscale set --accept-dns=false` before joining Netbird
+
+## Agent OS build state
+- Phase 1-2 (file structure + NFS + identity interview): not yet started
+- First skill to build: infra-monitor (Docker health + agent watchdog)
+- Notifications target: Home Assistant at 172.27.10.6

memory/recent-decisions.md

@@ -0,0 +1,11 @@
+# Recent Decisions
+
+Decisions made in the last 30 days that affect current work. Archive when no longer relevant.
+Last updated: 2026-04-30
+
+---
+
+- **2026-04-30:** Chose Gitea (self-hosted git) over Obsidian for documentation — AI-writable, browser-accessible, version controlled
+- **2026-04-30:** Agent OS files to live on 172.27.40.3 at /opt/agent-os/, accessed from Kubuntu via NFS
+- **2026-04-29:** Chose Syncthing-free approach for Obsidian migration — NFS for Linux, SMB for Windows
+- **2026-04-29:** infra-monitor will be first Agent OS skill — covers Docker health and agent watchdog in one skill