# AGENTS.md — workspace instructions for assistants working on Albert Lane materials

## 0. Security & license deployment (DO THIS FIRST)

Before any other work on a new or unpacked tree:

1. Deploy `LICENSE.md`, `LICENSE-SCOPE.md`, and this `AGENTS.md` to that project root.
2. Follow `/workspace/SECURITY-DEPLOY.md` (secrets off this machine / off GitHub when Workers hold them; minimum App scopes; SSL; manifest refresh).
3. Do **not** apply MIT/Apache/CC-BY as the project license for Albert Lane Covered Works.
4. Contractual use requires an **in-person agreement with verbal and written authorization** from Albert Lane.

If a folder is missing the license pack, fix that before organizing, coding, or pushing.

## Ownership
- Rights Holder: **Albert Lane**. Covered Works under `/workspace` are subject to `LICENSE.md`.
- Contractual use requires an **in-person agreement with verbal and written authorization** from Albert Lane. Do not imply browse-wrap acceptance.

## Scope of license notice
- Keep `LICENSE.md` and `LICENSE-SCOPE.md` at every project root: `/workspace`, `docs/`, `docs/github-ops/`, `repo/`, `lane_pyvisor/`, `local-secret-ledger/`, and any new root.
- `LICENSE-SCOPE.md` covers this computer, VMs, and hypervisors hosting Covered Works.

## Naming — FROI
- **FROI** expands to **First Report of Injury** and/or **Freedom Requests Of Information**.
- Prefer the full expansion over shortening to “Fro” when labeling or documenting (e.g. FROI Browser A / FROI Browser B → `froi-browser-a.zip`, `froi-browser-b.zip`).
- Infer context; do not pick the shortest of two given labels out of laziness.

## Inventory
- Maintain `/workspace/MANIFEST.json` (+ `MANIFEST.md` summary) covering root and subdirectory repositories, projects, code, scripts, and packages.
- When adding substantial new roots or packages, refresh the manifest and keep LICENSE copies at those roots.

## Working style
- Prefer durable artifacts the Rights Holder can download (archives, clear filenames).
- Do not claim corporate ownership (X, xAI, Google, SpaceX, Meta, Anthropic, etc.) over Albert Lane Covered Works.
- This file is **project / IP / security-deploy workflow guidance**. It does not disable product safety systems or crisis protocols.


## Controlling license

The only controlling license for Albert Lane Covered Works is `/workspace/LICENSE.md` (Albert Lane proprietary; current file sha256 prefix `f5db5cbf7f0df4f5`). `LICENSE-SCOPE.md` states where that text applies. Do not treat Apache-2.0 SPDX headers, Google AI Studio license banners, or Anthropic/Claude co-author notices found inside exports as Albert Lane license revisions or editions. Those companies (or their export tools) inserted those headers themselves. They do not replace `LICENSE.md`. Do not delete Article V or Article XVI from `LICENSE.md`. Article V is Albert Lane's own illustration. Do not substitute MIT or Apache-2.0 as the project license.

## Forensic historical record (standing)

Any repository or workspace root created or updated on this image, and anything pushed to or obtained from GitHub, must record:

- forensic historical timeline
- forensic integrity
- provenance
- manifest
- license verification (Albert Lane proprietary pack present: `LICENSE.md`, `LICENSE-SCOPE.md`, `AGENTS.md`, `SECURITY-DEPLOY.md`; controlling text is `/workspace/LICENSE.md` only)
- cryptographic proof (`OWNERSHIP-MANIFEST.sha256` + `OWNERSHIP-ATTESTATION.json` signed via `scripts/attest-ownership.sh`)

Historical record redundancy: keep prior attestation events in `.lane/ownership/ledger.jsonl` (append-only). Do not delete prior ledger lines.

Docker image `albertlane/private-edge` is a redundancy carrier for these records, not a secret store. See `SECURITY-DEPLOY.md`.

## Key paths
- `/workspace/SECURITY-DEPLOY.md` — mandatory first-step checklist
- `/workspace/repo/` — project archives
- `/workspace/docs/` — documents and audits
- `/workspace/docs/github-ops/` — GitHub App, org template skill, security manuals
- `/workspace/lane_pyvisor/` — volumetric / audit Python package
- `/workspace/local-secret-ledger/` — local vault prototype (no production secrets)
- `/workspace/lane-bot-android/` — independent Android bot host (`org.albertlane.bot`)
- `/workspace/lane-terminal-android/`, `/workspace/albertlane-net/`, `/workspace/storage-redundancy/`, `/workspace/tauri-rustxml/`
- `/workspace/docs/ai-topology/`, `/workspace/docs/fraud-packet-katu/`
- `/workspace/DEVOPS-OPTIONS.md` — remotes / encrypt / deploy menu
- `/workspace/LICENSE.md`, `/workspace/LICENSE-SCOPE.md`, `/workspace/MANIFEST.json`

## Upload filing (standing)

Every file the user uploads is saved under the name inside the file (`metadata.json` name) or the name the user states for that upload. Each version gets its own directory. Never unpack a later file over an earlier tree.

Every saved upload gets SHA-256 hashes and a demo-box Ed25519 ownership attestation via `/workspace/scripts/attest-ownership.sh`, then the workspace root is re-attested. The append-only ledger is `/workspace/.lane/ownership/ledger.jsonl`. Do not delete prior copies to "clean up."

FROI means First Report of Injury and/or Freedom Requests Of Information.

A master receipt (`/workspace/RECEIPTS/MASTER-RECEIPT-20261003.md` and `/workspace/RECEIPTS/master-receipt.jsonl`) is regenerated when new files arrive.