AkurAI-Platform / AGENTS.md

Latest change 70c58ab48e67b41342965378857c463fb53f6ab7 - AGENTS.md: drop the pi-bun dispatch-loop MCP section (pi-bun is retired) by Ólafur Búi Ólafsson

# AGENTS.md — AkurAI-Platform

Documentation for this repo lives in **akurai-notes MCP**.

- **Canonical note:** `AkurAI-Platform — Docs` (note id 26)
- **Index note:** `AkurAI-Platform — Project Index` (note id 84)
- **Secrets:** akurai-passvault; merchant login is entry 42, production Checkout credentials are not yet available

## How to retrieve

```
search_notes("AkurAI-Platform")
get_note(26)
```

Covers: purpose, scope rules, file index, deployment rule, ISA (problem/vision/criteria/decisions/verification).

## Agent operations

### Privilege boundary

Task-worker sessions run without root escalation. NEVER run local `sudo`; it cannot
succeed under the worker's `no_new_privileges` sandbox. Local implementation and
static checks use only repository-owned paths and the commands in `package.json`.
Privileged EC2 changes run only in the approval-gated `.akurai.yml` deploy job via
`akurai-ec2`; implementation agents hand the commit SHA to the release stage.