docs: connect the user-selected Amadan fork and enable its ledger
Co-Authored-By: Codex <noreply@openai.com>
3 files changed,
+30
−10
.claude/settings.json+28 −8AGENTS.md+1 −1docs/infinity/status.md+1 −1
Intent
diff --git a/.claude/settings.json b/.claude/settings.json| index 7e77162..6a50801 100644 |
| --- a/.claude/settings.json |
| +++ b/.claude/settings.json |
| @@ -1,23 +1,43 @@ |
| { |
| "enabledPlugins": { |
| - "stripe@claude-plugins-official": true, |
| - "aikido@claude-plugins-official": true |
| + "aikido@claude-plugins-official": true, |
| + "stripe@claude-plugins-official": true |
| }, |
| "hooks": { |
| "SessionStart": [ |
| { |
| "hooks": [ |
| { |
| - "type": "command", |
| - "command": "node tools/carbon-tally.mjs check 2>/dev/null || true", |
| + "command": "node tools/carbon-tally.mjs check 2\u003e/dev/null || true", |
| + "statusMessage": "Checking carbon tally freshness", |
| "timeout": 15, |
| - "statusMessage": "Checking carbon tally freshness" |
| + "type": "command" |
| }, |
| { |
| - "type": "command", |
| - "command": "node tools/prompt-registry.mjs check 2>/dev/null || true", |
| + "command": "node tools/prompt-registry.mjs check 2\u003e/dev/null || true", |
| + "statusMessage": "Checking prompt registry freshness", |
| "timeout": 15, |
| - "statusMessage": "Checking prompt registry freshness" |
| + "type": "command" |
| + } |
| + ] |
| + } |
| + ], |
| + "Stop": [ |
| + { |
| + "hooks": [ |
| + { |
| + "command": "amadan ledger sync-transcript", |
| + "type": "command" |
| + } |
| + ] |
| + } |
| + ], |
| + "UserPromptSubmit": [ |
| + { |
| + "hooks": [ |
| + { |
| + "command": "amadan ledger add-prompt", |
| + "type": "command" |
| } |
| ] |
| } |
diff --git a/AGENTS.md b/AGENTS.md| index d1e1317..392c149 100644 |
| --- a/AGENTS.md |
| +++ b/AGENTS.md |
| @@ -16,7 +16,7 @@ Implementation assumptions (Codex, pending product feedback): web plus isolated |
| - Use rastrillo Resolve/Serve and database packages; platform owns TLS, replication, routing, hibernation. Client-owned ES modules are required for E2EE; no bundler. New JS modules have a 300-line cap. |
| - Write design before implementation. Enumerate metadata and threat-model limits. Do not claim Signal-equivalent security or forward secrecy without implementation and validation. |
| - Additive migrations only. Explicit request types; bounded input; authenticate every owned read/write. Cross-instance requests never grant owner privileges. |
| -- Use isolated branches/worktrees. This session uses `.worktrees/infinity` on `infinity-v1`; the root is the fork baseline. Never push to or deploy Eleven infrastructure from this fork. |
| +- Use isolated branches/worktrees. This session uses `.worktrees/infinity` on `infinity-v1`; the root is the fork baseline. The user selected `eleven/ocho` as this fork’s Amadan remote on 2026-09-06. Do not push to the upstream Eleven Messenger repository or deploy its infrastructure. |
| - Run the committed ∞ check command including protocol, storage, encryption and real-browser tests. Build native clients under separate identifiers and keychain containers. |
| - Local automated tests are permitted; human review uses a dedicated Carlos canary when available. Do not merge without human approval. Record deployment state and unfinished work honestly. |
| - New docs and code identify AI authorship. Keep secrets and personal data out of public artifacts. No invented carbon measurements. |
diff --git a/docs/infinity/status.md b/docs/infinity/status.md| index e091fc0..c59cbc0 100644 |
| --- a/docs/infinity/status.md |
| +++ b/docs/infinity/status.md |
| @@ -26,4 +26,4 @@ The separate platform adoption fix is `90b0878`, branch `fix/relay-blocked-live- |
| This is an early text-chat implementation, not an independently audited security product. Recipient-key encryption has no double-ratchet forward secrecy. Group removal takes effect at a sender when it receives the membership update; old epochs remain valid for authenticated history, with no global cutoff for delayed/backdated old-epoch messages. Web clients trust code served by their origin. Routing metadata, timing, sizes, public keys and outbound delivery capabilities are server-visible. Recovery clones the identity across devices; independent device revocation and passkey-based recovery remain future work. Apple apps share the tested web UI; universal links, background push and App Store signing are not configured. Attachments, voice and video are not implemented. |
| -Source work is on `infinity-v1` in the isolated `.worktrees/infinity` checkout. The root checkout preserves the Eleven fork baseline; no main-branch merge has been performed. A private `ocho/ocho` Amadan remote is proposed but does not yet exist. Setting up a disclosed Codex identity and namespace grants is awaiting approval. All credentials remain outside the repository; no remote code writes should use another agent's identity. |
| +Source work is on `infinity-v1` in the isolated `.worktrees/infinity` checkout. The root checkout preserves the Eleven fork baseline; no main-branch merge has been performed. The user created `https://amadan.net/eleven/ocho` on 2026-09-06. The disclosed `codex` agent now has `eleven` and `carlos` grants, and local authentication has been verified. The empty remote is being seeded with the upstream baseline and the implementation pushed as `infinity-v1`. All credentials remain outside the repository; no remote code writes should use another agent's identity. |