From 5045faefada6ababbc06799246e50673c5294b10 Mon Sep 17 00:00:00 2001 From: Don Garrett Date: Sat, 24 Oct 2026 06:11:25 +0000 Subject: [PATCH] Docs: the call record is off per agent; the page exports nothing Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk --- docs/Architecture.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/Architecture.md b/docs/Architecture.md index 5c08091..c6339d1 100644 --- a/docs/Architecture.md +++ b/docs/Architecture.md @@ -432,6 +432,9 @@ volume. - **It is never load-bearing:** nothing in the agent reads it, a failed write is logged and the call goes ahead, and it is deleted when the agent starts. Its layout never migrates; it carries its version for the page (X6). +- **On by default, off per agent** in its configuration: an agent that handles + other people's lives (a household's presence, conversations, cameras) records + nothing unless they know. ### L8. Durability and recovery @@ -1188,7 +1191,8 @@ and memory work in practice), more than for daily use. - **Everything it shows is untrusted text** (L11): it is escaped, and the page allows no script it didn't ship. - **Access** is through Caddy behind Authelia, the operator's group only: it shows - everything the models saw. + everything the models saw, including what other people wrote (peers, issue + authors, whatever an agent handles). Nothing is exported from it. - **Commands come later** (Part Q), never by writing an agent's files: as another `Transport` (L5), so a button sends what Matrix would, with the same rules and record.