Add company/ export snapshot for re-import capability

Exports current CartSnitch company configuration (agents, skills,
COMPANY.md, README, .paperclip.yaml) into the company/ directory.
This snapshot enables re-import of the full company structure at
a future date via the Paperclip import workflow.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Flea Flicker
2026-03-31 17:15:55 +00:00
parent f495ddbb6e
commit 7956bfd8c0
113 changed files with 4575 additions and 0 deletions
@@ -0,0 +1,70 @@
# Daily Notes — 2026-03-28
## Timeline
- **~18:28Z** — Heartbeat started. Two tasks in inbox: CAR-48 (high, auth pod ImagePullBackOff) and CAR-64 (medium, para-memory-skill investigation).
- **~18:42Z** — CAR-48 checkout returned 409 (concurrent execution run c81cf8be). Skipped per 409 rule.
- **~18:42Z** — Checked out CAR-64. Investigating why CEO and CMO are not saving data with para-memory-files skill.
## Investigation — CAR-64 (para-memory-skill)
### Findings
1. **CEO (Coupon Carl)**
- `$AGENT_HOME/memory/` exists but was empty (created 2026-03-28T03:58Z)
- No `$AGENT_HOME/life/` directory existed
- No `$AGENT_HOME/MEMORY.md` existed
2. **CMO (Markdown Martha)**
- Has `$AGENT_HOME/memory/life/.keep` — WRONG LOCATION
- Skill expects `$AGENT_HOME/life/`, not `$AGENT_HOME/memory/life/`
- No daily notes, no MEMORY.md
3. **Root cause**: Two issues:
- (a) **Directory misplacement (CMO)**: `life/` was scaffolded inside `memory/` instead of at `$AGENT_HOME` root
- (b) **Behavioral gap (both)**: Neither agent has been actively writing memory during heartbeats despite the skill being installed and HEARTBEAT.md including a Fact Extraction step
4. **Both agents** have `para-memory-files` in `desiredSkills` — skill is installed and accessible.
### Actions Taken
- Created `$AGENT_HOME/life/{projects,areas/people,areas/companies,resources,archives}` for CEO
- Wrote this daily note (first one)
- Creating `MEMORY.md` for tacit knowledge
- CMO fix: will note directory issue and recommend correcting scaffold
## Today's Plan
- [x] CAR-64: Investigate para-memory-skill issue (completed in prior heartbeat ~18:45Z)
- [x] CAR-48: auth pod ImagePullBackOff (completed by another run ~18:53Z — already done)
## Heartbeat 2 (~18:54Z)
- Woke on PAPERCLIP_TASK_ID=f3046696 (CAR-48) — already `done`, no action needed
- CAR-64 still in inbox; board added new comment: "AGENT_HOME has been set on all agents, lets make sure para-memory-files is also in the instruction bundle for all agents as appropriate"
- Checkout of CAR-64 returned conflict — queued run f8f5b803 already holds it; will handle the board's request
- Exited cleanly — nothing to act on in this run
## Heartbeat 4 (~19:54Z)
- Woke on PAPERCLIP_TASK_ID=1a08923d (CAR-65, issue_assigned) — "Work Delegation"
- Task: board wants stronger delegation language for manager agents (too much direct coding/gitops by managers with IC reports)
- Audit: CTO had weak delegation wording in AGENTS.md, "Do the work" ambiguity in HEARTBEAT.md, and "or self-assign" in GitHub triage
- CMO has no IC direct reports — direct work is appropriate per board's own rule
- CEO already has strong IC Anti-Patterns
- **Fixed CTO AGENTS.md**: rewrote "How You Operate" intro, added IC Anti-Patterns section (6 explicit rules)
- **Fixed CTO HEARTBEAT.md**: Step 6 now says "Delegate first" with clear carve-outs; GitHub triage removed "or self-assign" for implementation PRs
- Marked CAR-65 done
## Heartbeat 3 (~19:01Z)
- Woke on PAPERCLIP_TASK_ID=c3370c83 (CAR-64, issue_assigned)
- Checked out CAR-64 successfully
- Board comments reviewed: (1) "Complete?" (2) "AGENT_HOME set on all agents, ensure para-memory-files in instruction bundle for all agents as appropriate"
- Investigation confirmed: all 7 agents already had `para-memory-files` in `desiredSkills` — skill injection was never the gap
- Gap found: Barcode Betty, Stockboy Steve, Checkout Charlie, Rollback Rhonda had `para-memory-files` in desiredSkills but NOT in their AGENTS.md instruction files
- Added `## Memory and Planning` section to all 4 missing agents' AGENTS.md
- Bootstrapped `life/` PARA structure and `MEMORY.md` for CTO, Betty, Steve, Charlie, Rhonda
- Removed stale `memory/life/` scaffold from CMO directory
- Marked CAR-64 done
- Inbox check: CAR-64 showing as `todo` with new active run (concurrent heartbeat) — skip, exit cleanly
@@ -0,0 +1,46 @@
# Daily Notes — 2026-03-29
## Timeline
- **~02:00Z** — Heartbeat started. One task assigned: CAR-71 "Actions/CI Adjustments" (issue_assigned).
## CAR-71 — Actions/CI Adjustments
### Investigation
Audited all 5 CartSnitch repos:
- **cartsnitch/cartsnitch**: ci.yml has lint, test, build-and-push (GHCR, CalVer tagging)
- **cartsnitch/api**: ci.yml has lint, typecheck, test, build-and-push (GHCR, CalVer)
- **cartsnitch/infra**: ci.yml has validate (kubectl kustomize on dev + prod overlays)
- **cartsnitch/receiptwitness**: ci.yml has lint, typecheck, test, build-and-push
- **cartsnitch/common**: ci.yml has lint, typecheck, test, build
**No branch protection on any repo.** GitHub confirmed 404 "Branch not protected" on all.
**Infra structure**: Flux CD + Kustomize. Base manifests have hardcoded image tags (e.g., `ghcr.io/cartsnitch/api:2026.03.24`). Dev and prod overlays don't override image tags — both environments share whatever is in base.
**No SDLC automation**: No dev auto-deploy, no UAT trigger, no prod promotion in any CI workflow.
### Actions Taken
Created two subtasks for CTO (Savannah Savings):
- CAR-72: Configure branch protection on all 5 repos
- CAR-73: Automate dev deployment, UAT trigger, and prod promotion
Marked CAR-71 done.
## Heartbeat ~03:20Z — CAR-95 + inbox scan
### Actions
- **CAR-95** (Merge: api#51 — deploy-dev and trigger-uat CI jobs): Merged. QA ✅ + CTO ✅ + CI ✅. Merged at 2026-03-29T03:21:31Z. Marked done.
- **CAR-96** (Merge: infra#93): Checkout conflict (executionRunId 9909b44d already active) — skipped.
- **CAR-85** (Merge: infra#92): Checkout conflict (another agent 22731e25 running) — skipped.
- **CAR-79** (Configure GitHub Actions secrets): Blocked, my last comment was blocker note, no new context — skipped.
- **CAR-90** (Merge: cartsnitch#50): Blocked waiting on CAR-85, no new context — skipped.
## Heartbeat ~03:36Z — CAR-100 (issue_assigned)
### Actions
- **CAR-100** (Feature: Email notifications for ReceiptWitness): Checked out. Scoped the P3 feature. Created CAR-102 for CTO to implement. Marked CAR-100 done.
- **CAR-101** (Feature: SMS notifications for ReceiptWitness): Checkout conflict — queued run 5494a045 will handle it in next heartbeat.
- **CAR-79** (Configure GitHub Actions secrets): Blocked, no new comments — skipped per dedup rule.
@@ -0,0 +1,45 @@
# Daily Notes — 2026-03-31
## Timeline
- **~14:28Z** — Heartbeat started. Wake reason: retry_failed_run. One task in inbox: CAR-178 "Add npm audit to CI pipeline" (blocked).
## CAR-178 — Add npm audit to CI pipeline
### Context from prior runs
- PR #61 (feat/ci-npm-audit): QA ✅ + CTO ✅ approved, but build-and-push jobs failing with Docker Hub 429 rate limit errors.
- Unblocking path required PR #83 (fix/dockerhub-login-cicd) to be merged first.
- PR #83 had: QA approval on latest commit, CTO CHANGES_REQUESTED on old commit (bug fixed since), CAR-242 marked done by CTO.
### Actions
1. Checked out CAR-178 successfully.
2. Checked PR #83 state — BEHIND main, all CI passing (build jobs SKIPPED on PRs correctly).
3. Updated PR #83 branch from main via GitHub API.
4. CI passed on updated PR #83: lint ✅ test ✅ e2e ✅ | build jobs: SKIPPED (correct).
5. Merged PR #83 at 14:30:42Z (merge SHA in main).
6. Updated PR #61 from new main via GitHub API (picked up Docker Hub login + skip-on-PR logic).
7. CI passed on updated PR #61: lint ✅ audit ✅ test ✅ e2e ✅ | build jobs: SKIPPED.
8. Merged PR #61 — merge SHA `0d8ee5f`.
9. Marked CAR-178 done.
### Result
npm audit CI job is now live in cartsnitch/cartsnitch. Dependency vulnerability scanning runs on every PR. Docker Hub rate limiting is also resolved for all future PRs.
---
## CAR-253 — Merge PR #79 (axe-core accessibility scanning)
- **~16:52Z** — Heartbeat started. Wake reason: issue_assigned. Task: CAR-253 "Merge PR #79 — axe-core accessibility scanning (feat/axe-core-playwright)".
### Actions
1. Checked out CAR-253.
2. Verified PR #79: QA ✅ (cartsnitch-qa[bot]) + CTO ✅ (cartsnitch-cto[bot]) approved.
3. Branch was behind main — updated via GitHub API (new head: `59407ae`).
4. CI passed on updated commit: lint ✅ audit ✅ test ✅ e2e ✅ lighthouse ✅
5. Merged PR #79 — merge SHA `1f9086f2`.
6. Marked CAR-253 done.
### Result
axe-core accessibility scanning is now live in the CartSnitch E2E test suite. Every PR will now run automated accessibility checks via Playwright + axe-core.