Merge pull request 'chore: gardener housekeeping 2026-04-17' (#930) from chore/gardener-20260417-0107 into main

.gitignore

@@ -20,7 +20,6 @@ metrics/supervisor-metrics.jsonl
 # OS
 .DS_Store
 dev/ci-fixes-*.json
-gardener/dust.jsonl
 
 # Individual encrypted secrets (managed by disinto secrets add)
 secrets/

AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Disinto — Agent Instructions
 
 ## What this repo is
@@ -44,12 +44,13 @@ disinto/                 (code repo)
 ├── formulas/      Issue templates (TOML specs for multi-step agent tasks)
 ├── docker/        Dockerfiles and entrypoints: reproduce, triage, edge dispatcher, chat (server.py, entrypoint-chat.sh, Dockerfile, ui/)
 ├── tools/         Operational tools: edge-control/ (register.sh, install.sh, verify-chat-sandbox.sh)
-│                  vault-apply-policies.sh, vault-apply-roles.sh, vault-import.sh, vault-seed-forgejo.sh — Vault provisioning (S2.1/S2.2)
+│                  vault-apply-policies.sh, vault-apply-roles.sh, vault-import.sh — Vault provisioning (S2.1/S2.2)
+│                  vault-seed-<svc>.sh — per-service Vault secret seeders; auto-invoked by `bin/disinto --with <svc>` (add a new file to support a new service)
 ├── docs/          Protocol docs (PHASE-PROTOCOL.md, EVIDENCE-ARCHITECTURE.md)
 ├── site/          disinto.ai website content
-├── tests/         Test files (mock-forgejo.py, smoke-init.sh, lib-hvault.bats, disinto-init-nomad.bats)
+├── tests/         Test files (mock-forgejo.py, smoke-init.sh, lib-hvault.bats, lib-generators.bats, vault-import.bats, disinto-init-nomad.bats)
 ├── templates/     Issue templates
-├── bin/           The `disinto` CLI script
+├── bin/           The `disinto` CLI script (`--with <svc>` deploys services + runs their Vault seeders)
 ├── disinto-factory/  Setup documentation and skill
 ├── state/         Runtime state
 ├── .woodpecker/   Woodpecker CI pipeline configs

architect/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Architect — Agent Instructions
 
 ## What this agent is

dev/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Dev Agent
 
 **Role**: Implement issues autonomously — write code, push branches, address

gardener/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Gardener Agent
 
 **Role**: Backlog grooming — detect duplicate issues, missing acceptance

gardener/dust.jsonl

@@ -0,0 +1 @@
+{"issue":915,"group":"lib/generators.sh","title":"remove no-op sed in generate_compose --build mode","reason":"sed replaces agents: with itself — no behavior change; single-line removal","ts":"2026-04-17T01:04:05Z"}

lib/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Shared Helpers (`lib/`)
 
 All agents source `lib/env.sh` as their first action. Additional helpers are

nomad/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # nomad/ — Agent Instructions
 
 Nomad + Vault HCL for the factory's single-node cluster. These files are

planner/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Planner Agent
 
 **Role**: Strategic planning using a Prerequisite Tree (Theory of Constraints),

predictor/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Predictor Agent
 
 **Role**: Abstract adversary (the "goblin"). Runs a 2-step formula

review/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Review Agent
 
 **Role**: AI-powered PR review — post structured findings and formal

supervisor/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # Supervisor Agent
 
 **Role**: Health monitoring and auto-remediation, executed as a formula-driven

vault/policies/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: 6bdbeb5bd2a200ff1b23724564da9383193f3e30 -->
+<!-- last-reviewed: 8ad5aca6bbee77634b3c63523042b1d39cefa96a -->
 # vault/policies/ — Agent Instructions
 
 HashiCorp Vault ACL policies for the disinto factory. One `.hcl` file per