git:20260831.5c24189 to git:20261016.3aa526b

4 added, 0 removed. Audit A to A.

# Agent instructions

This repository is the canonical workspace for the AI teammate platform.

## Product principles

- Keep the product local-first and open source. Persistent cloud computers are a later, optional layer.

- Treat runtime, model, provider route, and fallback policy as separate concepts.

- Codex and Claude are first-class agent runtimes. OmniRoute is an optional local gateway, never the control plane.

- Never copy, pool, upload, or inspect user subscription credentials. Prefer installed official CLIs, official SDKs, API keys in the OS keychain, and local models.

- Never retry an irreversible action after an uncertain result. Reconcile it using receipts and idempotency keys.

- Every model/runtime switch must be visible in the append-only mission event stream.

## Engineering practices

- Use TypeScript in strict mode.

- Keep runtime orchestration independent from Electron and React.

- Add tests for routing, quota classification, permission boundaries, checkpointing, and handoff behavior.

- Do not persist hidden chain-of-thought. Persist concise summaries, plans, tool receipts, approvals, and artifact hashes.

+ Reasoning a runtime SHOWS its own user is not hidden, and is kept for the thinking row, bounded and scrubbed of secrets

+ (Colin's call, 2026-09-16): Claude Code's thinking blocks, Codex app-server's reasoning summary, an ACP agent's

+ thought chunks. What a runtime does not show is never kept: Codex app-server's raw reasoning `content`, and the

+ whole reasoning item on the older `codex exec` path. A ledger a person shares carries the kept part too.

- Preserve unrelated changes; multiple Codex tasks may work through separate worktrees.

## Shared context

Read `PROJECT.md` and `docs/CROSS_TASK_CONTEXT.md` before beginning a substantial task. Update the relevant document when a durable product or architecture decision changes.