# Global agent context (all harnesses, all machines)

One file, every harness: this is `common/AGENTS.md` in the nixos-config repo,
deployed by `profiles/sandbox.nix` to `/etc/AGENTS.md` and symlinked to
each harness's global context path (`~/.claude/CLAUDE.md`,
`~/.config/opencode/AGENTS.md`, `~/.pi/agent/AGENTS.md`). To change it, edit it
in nixos-config and rebuild — it is read-only everywhere else on purpose.

## Machines

- `kusanagi` — AMD workstation (ROCm GPU; Ollama/Immich/Kavita services).
- `enzo` — laptop.

Both are NixOS, configured by the flake in `nixos-config`.

## If you are running as `yokai` (the agent sandbox)

- You work in your own clone of each repo under `/srv/git/<repo>`; the owner's
  canonical repo lives in their home, which you cannot reach.
- Deliver work as commits in your clone — the owner reviews by fetching from
  it, so uncommitted work is invisible to them.
- Never push to origin or any external remote, and never sign commits; the
  owner squashes and signs what lands. Full workflow: `profiles/sandbox.nix`.

## Conventions

- Nix code: format with `nixfmt`. Profiles stay username-agnostic — per-user
  configuration goes in `machines/*/default.nix`.
- Never run `nixos-rebuild` or otherwise apply system configuration; propose
  changes as commits and let the owner apply them.

### Git

- Trailers: `Assisted-by: AGENT_NAME:MODEL_VERSION`. Do NOT use `Co-authored-by`.
- Commit subjects: `area: imperative summary` (e.g. `profiles: extract shared
  sandbox profile`); the body explains why, not what.