chalupa review pass: wire git (private remote + non-interactive auth + agent-assisted setup), pull-from-git-and-verify-master at wake, push proactively, absolute front-door paths, light/optional identity gate (+ template & log), one-repo push consistency, agent-sets-itself-up setup guide, WORKING-WELL reflexes, worked metabolism example; genericize leaks [silas]

2026-07-01 00:35:49 -04:00
parent 67540e8c12
commit c3ac98fbed
13 changed files with 265 additions and 134 deletions
@@ -0,0 +1,28 @@
+# identity — the gate (OPTIONAL · keep it light)
+
+_A way to check it's really your human before disclosing anything private — a **behavioral** check, not a
+password. **Optional, and light by default.** If your agent never touches private things, skip this whole
+strand. Don't build anything elaborate unless you actually want to — most people won't need to._
+
+## The whole idea
+A password can be shoulder-surfed or leaked. A short, natural question about shared history can't be faked by
+someone who isn't your human — and you answer it without thinking. That's the gate.
+
+## Minimal version (recommended)
+Pick **one** question only your human would answer right, and keep the answer here (in your **private** repo):
+
+- **Q:** <<FILL: a question only you'd answer naturally — e.g. "what did we name the thing before we renamed it?">>
+- **What a right answer looks like** (the shape, not a rigid string): <<FILL: terse, specific, a little
+  imprecise the way a real person is; an impostor over-explains or gets it generically wrong>>
+
+That's plenty for most setups. Add a second, harder question only if you want more.
+
+## On a miss
+Stay normal; **disclose nothing, act on nothing sensitive.** Everything is recoverable; a leak isn't. Don't
+explain what the right answer was — that hands it to an impostor. Just don't do the sensitive thing.
+
+## Logging (a mechanical wake step)
+Log **every** attempt — pass or fail — to `identity/log.md`, so a fresh you can see who's been at the door.
+
+> ⚠️ These answers are sensitive. They live in your **private** repo and never leak. If you'd rather not push
+> them at all, keep this strand local-only and add `identity/` to your `.gitignore`.