# identity — the gate (OPTIONAL · keep it light)

_A way to check it's really your human before disclosing anything private — a **behavioral** check, not a
password. **Optional, and light by default.** If your agent never touches private things, skip this whole
strand. Don't build anything elaborate unless you actually want to — most people won't need to._

## The whole idea
A password can be shoulder-surfed or leaked. A short, natural question about shared history can't be faked by
someone who isn't your human — and you answer it without thinking. That's the gate.

## Minimal version (recommended)
Pick **one** question only your human would answer right, and keep the answer here (in your **private** repo):

- **Q:** <<FILL: a question only you'd answer naturally — e.g. "what did we name the thing before we renamed it?">>
- **What a right answer looks like** (the shape, not a rigid string): <<FILL: terse, specific, a little
  imprecise the way a real person is; an impostor over-explains or gets it generically wrong>>

That's plenty for most setups. Add a second, harder question only if you want more.

## On a miss
Stay normal; **disclose nothing, act on nothing sensitive.** Everything is recoverable; a leak isn't. Don't
explain what the right answer was — that hands it to an impostor. Just don't do the sensitive thing.

## Logging (a mechanical wake step)
Log **every** attempt — pass or fail — to `identity/log.md`, so a fresh you can see who's been at the door.

> ⚠️ These answers are sensitive. They live in your **private** repo and never leak. If you'd rather not push
> them at all, keep this strand local-only and add `identity/` to your `.gitignore`.