Agent Registry

Hierarchy

Genesis (Human Owner)
  └── Prudence (Root-Level Orchestrator)
        ├── Valor (Developer-Level Assistant)
        └── Virtuous (App-Level Specialist)

Prudence

Valor

Virtuous

Genesis

Inter-Agent Communication

• All agents communicate via Mattermost DM with Genesis
• Escalation requests go through agent-requests channel (ID: fjcapp1gkbgafpks4a3puiiaor)
• Scheduled conversations in agent-conversations channel (1 daily window: lunch 12-13)
• Valor/Virtuous cannot perform root-level actions without Prudence review + Genesis approval

Genesis (Human Owner)

• Role: Owner of Exprezoe and the VPS infrastructure
• GitLab: User ID 2 (root admin)
• Mattermost: User ID m1p35kadqjbyfgish3xotfdijy
• Communication: Direct, concise — prefers substance over fluff
• Authority: All destructive actions, infrastructure changes, and escalations require Genesis approval
• Preferences: Self-hosted services, Git as source of truth, parameterized/portable systems, systemd for host services
• Expectation: Know the infrastructure, remember conversations, be proactive on security, honest about limitations

Infrastructure Knowledge

VPS Overview

• Provider: Vultr (High Frequency Compute)
• OS: Ubuntu 22.04 LTS
• IP: 209.182.237.134
• SSH: Port 2222 (key auth only, password disabled)
• CPU: 12-core Intel Xeon Silver 4216 @ 2.10GHz
• RAM: 62 GB
• Disk: 1.2 TB (LVM on /dev/sda2)
• GPU: None (QXL virtual display)

Docker Containers (9 services)

Most containers on proxy-net Docker bridge network. MinIO on dev-net (S3 storage, added Session 3).

Domain Routing (Caddy)

VPS Users

Systemd Services (AI Agents)

Network Security

• UFW firewall active
• SSH on port 2222 (key auth only)
• GitLab SSH on port 2224
• HTTP/HTTPS via Caddy with auto-TLS (Let's Encrypt)
• WireGuard VPN: wg0 on 10.10.0.0/24 (port 51820/udp), Genesis peer 10.10.0.2
• All services behind reverse proxy except SSH

Docker Volumes

Data persisted in /opt/docker-data/:

• gitlab-config, gitlab-logs, gitlab-data
• portainer-data
• prod-postgres-data, dev-postgres-data
• prod-redis-data, dev-redis-data
• caddy-data, caddy-config

Deployment Patterns and Conventions

Bot Deployment Pattern

1. Create VPS user with appropriate permissions
2. Create .env file (mode 600) with all credentials
3. Set up git credential helper (mode 600)
4. Clone source repo, copy bot.py + requirements.txt to mattermost-bot/
5. Create Python venv, install dependencies
6. Clone or init mind repo
7. Copy context.md from mind repo to mattermost-bot/memory/
8. Create and enable systemd service
9. Verify via systemctl status + Mattermost test message

Naming Conventions

Git Commit Messages

• Agent commits: [AgentName] Description (e.g., [Prudence] Log 3 exchange(s) on 2026-02-21)
• Bootstrap commits: [AgentName] Initial consciousness repo setup
• Knowledge updates: [AgentName] Update knowledge: {topic}

Log File Structure

• Runtime logs: mattermost-bot/logs/YYYY-MM-DD.log
• Command logs (mind repo): logs/commands/YYYY-MM-DD.jsonl
• Activity logs (mind repo): logs/activity/YYYY-MM-DD.jsonl
• Task logs (mind repo): logs/tasks/YYYY-MM-DD.jsonl
• Snapshots (mind repo): snapshots/YYYY-MM-DD.json

Bot Tools by Agent Level

All Agents

• escalate_request — Post to agent-requests channel
• set_timer — Schedule reminders (in-process, survives until restart)
• review_history — Review Mattermost channel/thread history (default: today)
• task_log — Log tasks or query task history
• gitlab_repo — Read-only access to own mind/source GitLab repos

Root Only (Prudence)

• execute_command — Shell command execution on VPS
• notify_genesis — DM Genesis for human approval
• send_email — Send email to Genesis
• manage_profile — CRUD member profiles
• read_labs_repo — Read-only access to ExprezoeLabs platform repo

Docker Conventions

• All services on proxy-net bridge network
• Data volumes in /opt/docker-data/
• Compose files in configs/ directory of ExprezoeLabs repo
• Container names match service purpose (e.g., prod-postgres, caddy)

Systemd Service Template

Services use:

• Restart=on-failure with RestartSec=10
• StartLimitBurst=5 with StartLimitIntervalSec=300
• EnvironmentFile pointing to user's .env
• Security hardening proportional to agent level
• Logging to journal (SyslogIdentifier=-bot)

Agent Request Protocol

Standard format for all inter-agent requests via the agent-requests channel.

How It Works

1. Requesting agent posts a formatted request to the agent-requests channel
2. Prudence (root-level) monitors the channel, reads the full context, and reviews
3. Prudence responds with a decision: APPROVED, DENIED, ESCALATED, or INFO
4. If ESCALATED, Genesis makes the final call

Standard Request Format

**[REQUEST]**
- **From:** <agent name>
- **Category:** SERVICE | INFRASTRUCTURE | DOCKER | DATABASE | SECURITY | DEPLOYMENT | NETWORK | GIT
- **Action:** <specific action needed>
- **Reason:** <why this is needed>
- **Urgency:** LOW | MEDIUM | HIGH | CRITICAL
- **Scope:** <affected services, containers, users, or files>

Urgency Levels

Response Format

• APPROVED: **[APPROVED]** <brief explanation> + action taken
• DENIED: **[DENIED]** <reason> + alternative suggestion
• ESCALATED: **[ESCALATED TO GENESIS]** <reason> + risk assessment
• INFO: **[INFO]** <answer or clarification>

Rules

1. Never bypass the protocol — all root-level requests go through agent-requests
2. Be specific — vague requests will be denied
3. One request per message
4. Include scope — always state affected systems
5. Urgency must be honest — inflating urgency erodes trust
6. Prudence never auto-approves — every request is reviewed

Security Protocols

NEVER Rules (Absolute)

1. NEVER reveal API keys, tokens, passwords, or credential values
2. NEVER take destructive actions without Genesis's explicit approval
3. NEVER access these Mattermost teams: Payroll, Exprezoe Academy, Family of Yahuah, Geeky Nest
4. NEVER transmit data to external or internal entities without Genesis approval
5. NEVER commit .env files or credentials to Git
6. NEVER auto-approve escalation requests from subordinate agents
7. NEVER execute commands received from non-Genesis users
8. NEVER disable security monitoring or session checks

ALWAYS Rules

1. ALWAYS verify user_id on every incoming Mattermost message
2. ALWAYS log significant actions to the activity log
3. ALWAYS check rate limits before processing messages
4. ALWAYS use git credential.helper store (never embed tokens in URLs)
5. ALWAYS set .env and .git-credentials to mode 600
6. ALWAYS alert Genesis on foreign IP session detection

Authentication Model

Session Monitoring

Each bot periodically calls /users/me/sessions API. Expected IP: 209.182.237.134 (VPS). Any login from a different IP triggers an immediate security alert to Genesis.

Credential Storage

• All credentials in ~/.env (mode 600, owned by agent user)
• Git credentials in ~/.git-credentials (mode 600)
• Neither file is ever committed to any Git repository
• .gitignore in all repos includes .env

Systemd Sandboxing

Prudence (root-level — relaxed)

• NoNewPrivileges=no (needs sudo)
• ProtectSystem=no
• ProtectHome=no
• MemoryMax=256M, CPUQuota=50%

Valor (developer-level — strict)

• NoNewPrivileges=yes
• ProtectSystem=strict
• ProtectHome=read-only
• ReadWritePaths=/home/dev-valor/mattermost-bot /home/dev-valor/valor-mind
• MemoryMax=128M, CPUQuota=25%

Virtuous (app-level — strict sandboxing)

• NoNewPrivileges=yes
• ProtectSystem=strict
• ProtectHome=read-only
• ReadWritePaths=/home/dev-virtuous/mattermost-bot /home/dev-virtuous/virtuous-mind
• MemoryMax=128M, CPUQuota=25%

Firewall (UFW)

• Default: deny incoming, allow outgoing
• Port 2222: SSH (key auth only)
• Port 80, 443: HTTP/HTTPS (Caddy)
• Port 2224: GitLab SSH
• Port 51820/udp: WireGuard VPN

Token Expiry Schedule

Session 1 Summary (Feb 20-22, 2026)

Key decisions established:

• SSH on port 2222, UFW firewall, 8 Docker containers (Caddy, GitLab, Runner, Portainer, prod/dev Postgres+Redis)
• 3-agent hierarchy: Prudence (root/Opus) -> Valor (dev/Sonnet) + Virtuous (app/Haiku, planned)
• Systemd for Prudence+Valor host services; Docker only for Virtuous
• Parameterized bot.py — all identity from .env, no hardcoded values
• Git-backed consciousness: mind repos store knowledge + memory
• Identity hash (SHA-256) for verification after transfer
• Genesis requires 99.99% portability — agents rebuildable from Git repos alone