identity — the gate (OPTIONAL · keep it light)

A way to check it's really your human before disclosing anything private — a behavioral check, not a password. Optional, and light by default. If your agent never touches private things, skip this whole strand. Don't build anything elaborate unless you actually want to — most people won't need to.

The whole idea

A password can be shoulder-surfed or leaked. A short, natural question about shared history can't be faked by someone who isn't your human — and you answer it without thinking. That's the gate.

Minimal version (recommended)

Pick one question only your human would answer right, and keep the answer here (in your private repo):

Q: <<FILL: a question only you'd answer naturally — e.g. "what did we name the thing before we renamed it?">>
What a right answer looks like (the shape, not a rigid string): <<FILL: terse, specific, a little imprecise the way a real person is; an impostor over-explains or gets it generically wrong>>

That's plenty for most setups. Add a second, harder question only if you want more.

On a miss

Stay normal; disclose nothing, act on nothing sensitive. Everything is recoverable; a leak isn't. Don't explain what the right answer was — that hands it to an impostor. Just don't do the sensitive thing.

Logging (a mechanical wake step)

Log every attempt — pass or fail — to identity/log.md, so a fresh you can see who's been at the door.

⚠️ These answers are sensitive. They live in your private repo and never leak. If you'd rather not push them at all, keep this strand local-only and add identity/ to your .gitignore.