Audit: the public/private inventory — what lives in amicode vs amicissimo vs the fork

[aarontrowbridge]

Important

Problem — Aaron's ruling: "most things should be in amicode." After the fleet overlay landing and the fork retirement, nobody has walked the inventory: is anything premium-adjacent ungated in amicode? Is anything base-ish stranded in amicissimo? Is anything still living on the retiring fork that needs re-homing or an upstream ask?
Approach — Read-only audit, three lenses: (1) amicode — sweep for fleet/coordination-flavored surfaces staging WITHOUT the entitlement (the freeze validator governs the overlay→base direction; this checks base→world); (2) amicissimo — sweep for base-class content that belongs in the product (the strategy surface's serve-path is settled; what else lives there?); (3) the fork — what remains on the patch stack that the overlay or an upstream PR should absorb (the yellow-chunks UI work included). Output: an inventory table + disposition per row (move / gate / upstream-ask / retire), each disposition its own follow-up issue.

[aarontrowbridge]

Scope sharpened (2026-09-07, Aaron: 'we deprecated amico-plugin and amico-run — take a deep pass'): add the deprecation reconciliation as lens zero — (0a) amico-plugin: retired 2026-08-26 (user directive, body dissolved into amicode + armonissima, census verdict 'graveyard'); find every remaining surface — the surviving ~/harmoniqs/amico-plugin checkout (dirty, unsalvaged skills/promote per the census), the 5 open PRs on the repo (#40/#42/#45/#48/#58), any live references in amicode/amicissimo/skill surfaces; (0b) amico-run: sunset APPROVED in A1′ (plans/2026-08-30-ecosystem-consolidation.md — the Aug 17 five-verb dissolution, C1 executes) but NOT executed — map the full touchpoint inventory (AGENTS.md solve workflow, CI lanes, the verbs surface, dist/launcher, the scores-runtime coupling) so C1's slice can be cut from the audit's table.

[aarontrowbridge]

Audit of record — 2026-09-07 (read-only sweep; one premise corrected)

Correction to the auditor's baseline: ADR-0004 is no longer proposed — amicissimo#382 MERGED 2026-09-06 18:34Z. The Lens-1 "defer to ADR-0004 acceptance" items are therefore LIVE rulings needed now.

Lens 0a — amico-plugin (retired 2026-08-26; reconciliation)

• The census's "unsalvaged skills/promote" verdict was WRONG: the dirty checkout content is byte-identical to open PR 1.4 — Gate VSIX contents in CI (packaging.test.ts is currently inert) #45 (interactive promote skill + visibility authoring gate). Semantics already exist in amicode's amico-vault skill; the interactive skill does not.
• Surviving checkouts: ~/harmoniqs/amico-plugin (dirty, 3 UNPUSHED commits — the fleet-profile compiler work, referenced nowhere else — must be ruled on before any rm -rf) + ~/harmoniqs/amico-plugin-vault-cli (clean, 2 unmerged commits, PR test(inspector): no coverage for RunsRootWatcher poll / idle-on-finished / warming-up state machine #27).
• 13 open PRs (not 5): Δ6 — User-overridable wall-clock cap (Step Function executionTimeout param) #40/Δ5 — Completion ping (S3 FINISHED event → SNS) #39/1.3 — RunInspector → multi-run #58/DRAFT feat(template): verified Piccolissimo solve template (beta target) + integration contract #24/perf: smoother solve cold-start — warming-up UX + live-frame display fix #23/fix(test): boot_smoke.mjs tests the pre-#12 opencode layout (stale, false-green) #25/fix(provisioning): install.sh doesn't verify Julia version vs the pinned Manifest (1.12.3) #26/β.5 — Minimal single-run inspector (stats row + live plot) #5 verified landed-elsewhere → close; 0.3 — Store the single-user LLM API key and hand it off to opencode at boot #42 (intonatoqick — the only other un-landed content) + 1.4 — Gate VSIX contents in CI (packaging.test.ts is currently inert) #45 + UX3 — Pulse/run catalog browser (master-detail) (E1) #48/test(inspector): no coverage for RunsRootWatcher poll / idle-on-finished / warming-up state machine #27 (restricted 6th vault kind — the staged prompt already routes restricted, the skill says five kinds) need rulings.
• Live reference errors: scripts/armonia-workstation:31 (bootstrap expects an amico-plugin checkout), templates/vault/README.md:4 ("via the amico-plugin skills + hooks" — discovery is now mount_store.ts). 16 other refs are honest historical comments.

Lens 0b — amico-run (sunset approved A1′; C1 never executed)

• 533 references / ~180 files on amicode main. Half-done structurally: amico run already delegates byte-for-byte to launch(); the five-verb dissolution maps cleanly (AUTHOR=authoring.ts · EXECUTE=launch/executors · VERIFY=verify.ts · REMEMBER=spine verbs done · METER=doctor/estimate).
• C1 slice: (1) delete the amico-run bin + rename under the five verbs, (2) sweep ~30 doc/test files, (3) re-cut the staged AGENTS.md. Only executable consumers: the extension spawn PATH, the CI producer lane, the PATH shim (which resolves to a moving checkout — the plan's known hazard). Notturno's 16 workflows consume amico, not amico-run — they survive the sunset.
• Standalone bug found: the live hub AGENTS.md hardcodes /Users/aaron/… macOS paths (×4) on a Linux hub.

Lens 1 — premium-adjacent in amicode

• Clean: the premium gate surface is exactly the sanctioned pair (mode_cards + fleet_staging) + HP solver tier; the Subagent-public floor: the no-entitlement spawn+dispatch fixture + entitlement-freedom guards (ADR-0004 decision 1) #826 subagent-public floor is pinned; coordination machinery: zero hits in base.
• 11 un-gated fleet client modules in base (fleet_fallback/health/panel, hub_ops (SSH hub restart!), hub_proxy, hub_credential, fleet_tunnel/writes/posture, merged_projection, vault_browser), wired unconditionally — they predate the Sep-5 ruling so no freeze violation, but with ADR-0004 now ACCEPTED each needs its base/carve-out/fleet-class placement. hub_ops.ts is the clearest fleet-class candidate.

Lens 2 — base-class stranded in amicissimo

• scripts/retrieve.jl + benchmarks/retrieval/ implement the public amico-catalog verb's semantics with the regression benchmark on the private side → re-home candidate.
• Notturno framework core = superseded-by-C1 engine (extract per A1′: instance deny-list first); notturno instance (briefs/hopper/Slack) stays private.
• June night-engine zombie (automation/notturno/night/ + systemd timers) → retire (already ruled by the plan §61).
• Provisioning scripts (erlich/mini): engine-generic vs instance-machine — needs ruling.

Lens 3 — fork remnants

• Yellow-chunks confirmed structurally outside the overlay extraction (the overlay froze at d161eb0c, pre-yellow; all 10 commits are the port debt). Add CONTRIBUTING.md, issue templates, and PR template (#303) #305 = port-to-overlay. Bug dock: composer wedges when the server can't arm report-a-bug (staged-skill drift) #296/BUG: Model picker switch doesn't update the extension's tracked model; session started text-only breaks on image attach #298 = keep-as-reference until the lifecycle campaign closes. Chats flyout: rename, remove projects section, add browsable archive #281/Two-tier skill surfaces: admit internal library skills from the private plugin checkout #244/Typed ProblemSpecs (Plan 2) + learning-loops run ledger L1 (Plan 3) #212 = upstream anomalyco/opencode asks. Pasqal device path — optimized pulse to a Pasqal Cloud device through the Pasqal Connection #160/Add trace-export tooling (Phoenix/Langfuse) #207 = retire with the fork.
• The fork's GitHub description still says "NEVER make public" — the repo is public; description needs fixing.

Rulings needed from Aaron (10)

1. PR 1.4 — Gate VSIX contents in CI (packaging.test.ts is currently inert) #45 promote skill — salvage where? · 2. PR 0.3 — Store the single-user LLM API key and hand it off to opencode at boot #42 intonatoqick — salvage or close · 3. Restricted 6th vault kind (UX3 — Pulse/run catalog browser (master-detail) (E1) #48/test(inspector): no coverage for RunsRootWatcher poll / idle-on-finished / warming-up state machine #27) — land or close · 4. The 11 fleet modules — per-module placement (hub_ops first) · 5. Yellow-chunks 10 commits — port priority or drop with fork · 6. #297b posture indicator + Add CONTRIBUTING.md, issue templates, and PR template (#303) #305 — overlay features or drop · 7. Retrieval benchmark — re-home or accept split · 8. Provisioning scripts — publish vs instance · 9. wip/fleet-profiles' 3 unpushed commits — salvage or drop (BEFORE any checkout deletion) · 10. Fork end-state — archive vs keep as ADR-0011 fixture substrate.

Already ruled (mechanics remain): amico-run sunset (C1) · amico-plugin retirement · subagent-public/coordination-premium · strategy-premium · night-engine retirement · the boundary freeze (adoption gate or ~90 days).

[aarontrowbridge]

RULINGS (Aaron, 2026-09-07 — delegated: "your recommendation, in line with my intent")

Intent frame applied: most things in amicode (public base); premium = only the ruled surfaces; deprecated = fully deprecated, nothing silently dropped; the fork retires; the daily UI must survive the retirement.

#	Ruling	Disposition
1	PR #45 promote skill	SALVAGE → amicode public skills (semantics already there; the interactive skill is base-class user surface)
2	PR #42 intonatoqick	SALVAGE → amicode public skills (IntonatoQICK is product surface)
3	Restricted 6th vault kind (#48/#27)	LAND in amicode's amico-vault (+ mount_store verification) — the live prompt already routes restricted; the skill must match
4	The 11 fleet client modules	Default keep-base-when-inert (the landed #394 design: transport = base-side staged seam, byte-identical without entitlement); gate the ops-surfaces (hub_ops.ts first — SSH hub restart is fleet-class per ADR-0004); fleet_panel stays base (single-machine doctor carve-out). One placement-pass issue with per-module tests
5	Yellow-chunks 10 commits	PORT to the app overlay — it's the daily driver UI (live on the hub by your activation); the debt becomes a work item, not a maybe
6	#297b posture indicator + #305 agent_order	PORT to the overlay as features (mode awareness was the ask)
7	Retrieval benchmark + retrieve.jl	RE-HOME into amicode beside the catalog verb (a public verb's regression benchmark doesn't live on the private side)
8	Provisioning scripts (erlich/mini)	STAY private — instance-machine, and machine provisioning is fleet-ops (premium per ADR-0002/0004)
9	wip/fleet-profiles' 3 unpushed commits	PUSH-AS-ARCHIVE (preserve on the repo, zero content risk), then clean the checkout; the July design is superseded by the #380 overlay — no transplant
10	Fork end-state	KEEP for now as the patch-stack/fixture record (parity goldens are frozen at the fork pin; #296/#298 remain reference until the lifecycle campaign closes); fix the GitHub description now ("retired fork — amicode composes stock v1.18.29 via its app overlay"); archive AFTER the yellow-chunks port + upstream asks land — your click at that gate

Execution notes: I execute everything short of gh repo archive and checkout deletion — those two land after the salvage PRs merge (your gate). amico-run C1 slices from the audit's touchpoint map (533 refs; bin delete + ~30-file sweep + AGENTS.md re-cut incl. the macOS-on-Linux path bug).

[aarontrowbridge]

Execution correction (ruling 9/10): amico-plugin is ALREADY ARCHIVED on GitHub (read-only, issues locked) — the 13 PRs are frozen tombstones; closing them is moot (the archive IS the tombstone; the disposition record lives here). Push-as-archive is impossible on a read-only repo → the 3 unpushed wip/fleet-profiles commits are preserved as a git bundle at vault-aaron/scratchpad/amico-plugin-wift-fleet-profiles.bundle (typo-guard: ...wip-fleet-profiles.bundle; verified: 3 commits, 493KB). Salvage source for #45/#42/#48/#27 = the PRs' diffs (readable via API) + the local checkout until deletion. Checkout deletion + any un-archiving remain Aaron's explicit clicks.