24cf01028a
- Update AGENTS.md watermarks (all 10 files) to HEAD 038581e5
- Content already current from recent gardener migration and setup PRs
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
20 lines
1 KiB
Markdown
20 lines
1 KiB
Markdown
<!-- last-reviewed: 038581e555403586f4595f8a5f77d7dbb311779b -->
|
|
# Vault Agent
|
|
|
|
**Role**: Safety gate for dangerous or irreversible actions. Actions enter a
|
|
pending queue and are classified by Claude via `vault-agent.sh`, which can
|
|
auto-approve (call `vault-fire.sh` directly), auto-reject (call
|
|
`vault-reject.sh`), or escalate to a human via Matrix for APPROVE/REJECT.
|
|
|
|
**Trigger**: `vault-poll.sh` runs every 30 min via cron.
|
|
|
|
**Key files**:
|
|
- `vault/vault-poll.sh` — Processes pending actions: retry approved, auto-reject after 48h timeout, invoke vault-agent for new items
|
|
- `vault/vault-agent.sh` — Classifies and routes pending actions via `claude -p`: auto-approve, auto-reject, or escalate to human
|
|
- `vault/PROMPT.md` — System prompt for the vault agent's Claude invocation
|
|
- `vault/vault-fire.sh` — Executes an approved action
|
|
- `vault/vault-reject.sh` — Marks an action as rejected
|
|
|
|
**Environment variables consumed**:
|
|
- All from `lib/env.sh`
|
|
- `MATRIX_TOKEN`, `MATRIX_ROOM_ID`, `MATRIX_HOMESERVER` — Escalation channel
|