cleanup

docs/current-work.md

@@ -10,6 +10,7 @@ Complete independent agreed work and obvious fixes autonomously. Leave consequen
 unknowns pending and collect recommendations/alternatives into one substantial review
 batch. Ask earlier only to prevent broad rework/blockage. The old 2–4-question quota
 is superseded. Keep effort focused; no speculative systems or peripheral research.
+Do not write or run tests or perform extensive validation unless explicitly requested.
 Do not activate, push, decrypt for discovery or access company systems with write
 authority. No subagents unless explicitly authorized by current instructions.
 
@@ -31,7 +32,7 @@ The unedited `~/sync/notes/setup-todo.md` remains an idea inbox, not authorizati
   Noctalia labels; shell titles include directory/command. Garden shell initialization
   now belongs to company integration instead of every host's generic shell.
 - Kanagawa declares Adwaita/hicolor icon fallback; modest Limine branding/layout.
-  A pinned Elephant patch defers its startup `rbw list` to the explicit vault query.
+  Walker uses upstream Elephant without a local vault patch. It may query `rbw` at startup.
 - GitHub devenv 2.3.2 installed with native Zsh hook and upstream reload defaults.
   CLI dependencies keep upstream pins/cache; workbench tools use this repository's
   exact nixpkgs pin. Company tools are also installed through the work profile. Product and
@@ -87,8 +88,8 @@ Final full validation passed before the final review deletions:
 `/tmp/nixos-validate-t7zv1zux` (session 88912,
 completed exit 0). Formatting, devenv preparation, flake check, all three host
 builds (Orion, Polaris, Zenith), and the tools-only workbench build passed.
-This includes the final notes startup ordering, serialized vault-query patch,
-FUSE wrapper paths, native Zsh retry function and SecretSpec package collision fix.
+This includes the final notes startup ordering, FUSE wrapper paths, native Zsh retry
+function and SecretSpec package collision fix. The vault patch was removed afterward.
 No systems were activated.
 
 Native devenv tools-only startup also passed in an isolated temporary home:
@@ -101,9 +102,9 @@ Evidence: `/tmp/foundation-editor-check/{startup,notes}.log`. No real notebook o
 credentials loaded. Built Kanagawa index declares `Inherits=Adwaita,hicolor`.
 Python source syntax and local documentation links checked; no automated tests added.
 
-The final review only removed the unaccepted Kubernetes login wrapper and the
+The earlier final review removed the unaccepted Kubernetes login wrapper and the
 machine-wide devenv cache setting; the flake-scoped cache remains. Full builds were
-not repeated for those deletions.
+not repeated for those deletions. The later Walker patch removal has not been built.
 
 Builds do not establish interactive acceptance. The user checkpoint remains; do not
 repeat full builds for documentation-only handoff edits.
@@ -118,12 +119,10 @@ concrete role: in-memory concurrent secret loading with completeness checks, one
 encrypted credential reshaping, dynamic OBS rclone configuration, or pre-existing
 dictation/transcription behavior.
 
-The user checkpoint is still required before this pass is complete. No implementation
-commit was made in this turn.
-
-Initial local commit `f164d8b` predates this implementation. Four documentation files
-were already modified during the design pass; those changes belong to this effort.
-No remote changes or activation have occurred. External workbench analysis/content
+The user checkpoint is still required before this pass is complete. The implementation
+was committed as `5748b34` after the initial foundation commit `f164d8b`. Later
+cleanup removed the Walker patch, Handy test and AI capability README.
+No activation was recorded during that pass. External workbench analysis/content
 changes are unrelated and must not be committed here. Previous external loader
 copies remain at `/tmp/workbench-environment-before-6k4dwzuo`; only root/workbench environment documentation and ignore entries were updated.
 Backups: `/tmp/foundation-workbench-docs-bvrs1hu9`. Old external loaders remain

docs/design.md

@@ -52,8 +52,8 @@ Use store-qualified executables or `runtimeInputs` in packaged scripts; make run
 paths and failures explicit. Do not duplicate package lists, generated settings or
 binding references in documentation.
 
-These clarify the agreed model; they are not a one-package-per-file rule, a new
-testing policy, or a requirement for additional abstractions.
+These clarify the agreed model; they are not a one-package-per-file rule or a
+requirement for additional abstractions.
 
 ## Daily environment
 
@@ -74,9 +74,9 @@ Notes stay in `~/sync/notes`, mostly meeting material; no new taxonomy. HTTP and
 database targets remain independently selected and visibly named. Dadbod working
 queries and connection state stay outside Git; see the editor's `database.lua`.
 
-Kanagawa remains the theme with Adwaita fallback icons. rbw unlocks on requested
-vault access, preserving its lock policy. Outlook PWA owns work email/calendar
-editing. Mailspring owns personal mail; Thunderbird remains a backup. Noctalia
+Kanagawa remains the theme with Adwaita fallback icons. Walker uses upstream Elephant
+without a local vault patch; it may query rbw during startup. Outlook PWA owns work
+email/calendar editing. Mailspring owns personal mail; Thunderbird remains a backup. Noctalia
 provides the combined read-only Radicale/Outlook agenda. The user accepts published
 ICS link access and supplies the URL privately through runtime settings. Personal
 calendar editing stays on the phone; keep khal/todoman.
@@ -118,11 +118,11 @@ validation feedback to repeated reminders. This applies the useful principle of
 progressive disclosure from [OpenAI's harness engineering article](https://openai.com/index/harness-engineering/)
 without introducing speculative skills, orchestration or evaluation infrastructure.
 
-`just validate` includes working-tree changes and new nonignored files without staging,
-formats, evaluates and builds. Concise results and saved logs minimize agent overhead.
-Targeted host builds support iteration; a full run also builds workbench tools.
-Builds do not prove activation or interactive behavior. Preserve the user's testing
-policy; this pass does not create a new automated testing policy.
+`just validate` is available on explicit request. It includes working-tree changes
+and new nonignored files without staging, formats, evaluates and builds. Targeted
+host builds are supported; a full run also builds workbench tools. Builds do not
+prove activation or interactive behavior. Do not write or run tests or perform
+extensive validation unless explicitly requested.
 
 Keep native update and activation commands. `nix flake update` is normal; selective
 updates (often `llm-agents`) are appropriate while nixpkgs breakage awaits repair.