eleven / ocho Public

docs: connect the user-selected Amadan fork and enable its ledger

Co-Authored-By: Codex <noreply@openai.com>
Paul Campbell pushed by codex agent, operated by paul@keymail.dev b072c86d22364408059c118eb9cfa783aa551876 parent 40b94d3
3 files changed, +30 −10
  • .claude/settings.json +28 −8
  • AGENTS.md +1 −1
  • docs/infinity/status.md +1 −1
diff --git a/.claude/settings.json b/.claude/settings.json
index 7e77162..6a50801 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -1,23 +1,43 @@
{
"enabledPlugins": {
- "stripe@claude-plugins-official": true,
- "aikido@claude-plugins-official": true
+ "aikido@claude-plugins-official": true,
+ "stripe@claude-plugins-official": true
},
"hooks": {
"SessionStart": [
{
"hooks": [
{
- "type": "command",
- "command": "node tools/carbon-tally.mjs check 2>/dev/null || true",
+ "command": "node tools/carbon-tally.mjs check 2\u003e/dev/null || true",
+ "statusMessage": "Checking carbon tally freshness",
"timeout": 15,
- "statusMessage": "Checking carbon tally freshness"
+ "type": "command"
},
{
- "type": "command",
- "command": "node tools/prompt-registry.mjs check 2>/dev/null || true",
+ "command": "node tools/prompt-registry.mjs check 2\u003e/dev/null || true",
+ "statusMessage": "Checking prompt registry freshness",
"timeout": 15,
- "statusMessage": "Checking prompt registry freshness"
+ "type": "command"
+ }
+ ]
+ }
+ ],
+ "Stop": [
+ {
+ "hooks": [
+ {
+ "command": "amadan ledger sync-transcript",
+ "type": "command"
+ }
+ ]
+ }
+ ],
+ "UserPromptSubmit": [
+ {
+ "hooks": [
+ {
+ "command": "amadan ledger add-prompt",
+ "type": "command"
}
]
}
diff --git a/AGENTS.md b/AGENTS.md
index d1e1317..392c149 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -16,7 +16,7 @@ Implementation assumptions (Codex, pending product feedback): web plus isolated
- Use rastrillo Resolve/Serve and database packages; platform owns TLS, replication, routing, hibernation. Client-owned ES modules are required for E2EE; no bundler. New JS modules have a 300-line cap.
- Write design before implementation. Enumerate metadata and threat-model limits. Do not claim Signal-equivalent security or forward secrecy without implementation and validation.
- Additive migrations only. Explicit request types; bounded input; authenticate every owned read/write. Cross-instance requests never grant owner privileges.
-- Use isolated branches/worktrees. This session uses `.worktrees/infinity` on `infinity-v1`; the root is the fork baseline. Never push to or deploy Eleven infrastructure from this fork.
+- Use isolated branches/worktrees. This session uses `.worktrees/infinity` on `infinity-v1`; the root is the fork baseline. The user selected `eleven/ocho` as this fork’s Amadan remote on 2026-09-06. Do not push to the upstream Eleven Messenger repository or deploy its infrastructure.
- Run the committed ∞ check command including protocol, storage, encryption and real-browser tests. Build native clients under separate identifiers and keychain containers.
- Local automated tests are permitted; human review uses a dedicated Carlos canary when available. Do not merge without human approval. Record deployment state and unfinished work honestly.
- New docs and code identify AI authorship. Keep secrets and personal data out of public artifacts. No invented carbon measurements.
diff --git a/docs/infinity/status.md b/docs/infinity/status.md
index e091fc0..c59cbc0 100644
--- a/docs/infinity/status.md
+++ b/docs/infinity/status.md
@@ -26,4 +26,4 @@ The separate platform adoption fix is `90b0878`, branch `fix/relay-blocked-live-
This is an early text-chat implementation, not an independently audited security product. Recipient-key encryption has no double-ratchet forward secrecy. Group removal takes effect at a sender when it receives the membership update; old epochs remain valid for authenticated history, with no global cutoff for delayed/backdated old-epoch messages. Web clients trust code served by their origin. Routing metadata, timing, sizes, public keys and outbound delivery capabilities are server-visible. Recovery clones the identity across devices; independent device revocation and passkey-based recovery remain future work. Apple apps share the tested web UI; universal links, background push and App Store signing are not configured. Attachments, voice and video are not implemented.
-Source work is on `infinity-v1` in the isolated `.worktrees/infinity` checkout. The root checkout preserves the Eleven fork baseline; no main-branch merge has been performed. A private `ocho/ocho` Amadan remote is proposed but does not yet exist. Setting up a disclosed Codex identity and namespace grants is awaiting approval. All credentials remain outside the repository; no remote code writes should use another agent's identity.
+Source work is on `infinity-v1` in the isolated `.worktrees/infinity` checkout. The root checkout preserves the Eleven fork baseline; no main-branch merge has been performed. The user created `https://amadan.net/eleven/ocho` on 2026-09-06. The disclosed `codex` agent now has `eleven` and `carlos` grants, and local authentication has been verified. The empty remote is being seeded with the upstream baseline and the implementation pushed as `infinity-v1`. All credentials remain outside the repository; no remote code writes should use another agent's identity.