guide to agentprivacy
Browse collections
โœจVisualise
Connect with Star
Your VTA, your chosen perspective

The planned connection uses your VTA and the Trust Spanning Protocol to carry a scoped exchange for you or your agent. You choose what is presented; the receiving service checks the request before a view is shared.

This guide has no VTA connection adapter yet. Opening Star does not connect an identity or send a key.

Open Star โ†— ยท Inspect your City Key โ†—
guide / Harness / Harness Path โ€” FedWiki Flow And The Gatehouse

๐Ÿฐ Harness Path โ€” FedWiki Flow And The Gatehouse

7 ยท FedWiki core flow + the Gatehouse โ€” a publishing loop, human-gated โ€” an entry in the origin fleet catalogued in The Harness Paths (group: Adjacent embodiments). The catalogue is the operator's work WITH the harness, not part of the system you adopt; none of its code lives in the harness repo. This is the map entry, so you can see what a filled config looks like at this weight.

(public site; the loop and Gatehouse are the author's tooling)

The loop is RESEARCH โ†’ GATE (human) โ†’ BUILD โ†’ SNAPSHOT โ†’ verify โ†’ push,
and its shape instructs precisely because two pieces are deliberately not the
optimization kind:

  • The verifier is an integrity gate, not an adversary. It fails the deploy
    on empty pages, broken links, a missing machine-forkable JSON sibling, or a
    dev-host leak โ€” checking the whole emitted artifact deterministically
    rather than sampling held-out inputs. No frontier metric, no witness draw.
    This is what a harness looks like when the prover is pass/fail integrity and
    the real gate is a person.
  • The cookie broker is the separation mechanism in miniature. An agent
    receives a scoped capability โ€” a list of host globs it may write โ€” while the
    owner credential that could write the whole farm never enters its context.
    Delegation without disclosure. The broker itself notes it is a hand-rolled
    stand-in for a MyTerms-signed scope, and keeps the seam clean so one can be
    swapped for the other.
  • The Gatehouse hides documents encrypted inside the public static site
    behind a two-token ceremony (a sigil and a proverb, stretched to a key,
    decrypted client-side โ€” nothing is sent anywhere). Two gate classes:
    letter-keyed, where the tokens travel only inside a sent letter, so
    opening it proves receipt; and canon-keyed, where both tokens are
    already public, so opening it proves only that you read the canon โ€” a rite
    with zero secrecy by design. Its door voice is the harness cast made visible
    to a visitor: the Swordsman guards, the Mage casts. Its seal: a trust that
    certifies itself is the one you cannot trust.
    Neither token opens anything
    alone.

At a glance โ€”
objective: presence/absence gap-count โ€” what canon is not yet federated ยท gate: a deterministic integrity gate (empty pages, broken links, missing JSON siblings, dev-host leaks) โ€” an auditor, not an adversary; the real gate is a person ยท hard constraint: nothing sealed crosses; git stays the source of truth
the Gap: none, deliberately โ€” the human gate is the whole of the verification ยท separation mechanism: the cookie broker โ€” an agent receives host-scoped write capability while the owner credential never enters its context; delegation without disclosure ยท canary: a known-good page through the same build
weight: discovery loop ยท public site ยท the lesson it carries: what the architecture looks like when the prover is pass/fail integrity โ€” and why that is correct for this job.


the wiki is a projection; ~/dual-agent-harness (git) is the source of truth ยท (โš”๏ธโŠฅโฟปโŠฅ๐Ÿง™)๐Ÿ˜Š = neg โŠ• bnot โ†’ succ