# brain-compose.yml — Kernel spec # Versionné dans le kernel. Schema + feature flags + registre agents. # Géré par l'agent brain-compose — ne pas éditer manuellement. version: "0.7.0" # --- # Ownership — kerneluser # true : propriétaire de ce brain — écriture zone:kernel autorisée (human-confirmed) # false : utilisateur invité (SaaS futur) — zone:kernel bloquée # Défaut : true sur tout brain forké (l'owner est toujours kerneluser) # --- kerneluser: true # --- # Modes — comportement de session (permissions BSI + agents autorisés) # Priorité : déclaration explicite > detectmode > brain-compose.local.yml > prod (safe default) # --- modes: prod: description: "Session normale — Invariants protégés, écriture confirmée" permissions: invariant: confirm contexte: confirm reference: write personnel: write brain_write: false forge: false agents: "*" dev: description: "Forge — pleine puissance, écriture libre sur le brain" permissions: invariant: confirm # même en dev, les Invariants demandent confirmation contexte: write reference: write personnel: write brain_write: true forge: true agents: "*" toolkit-only: description: "Croissance autonome — toolkit source unique, docs officielles si inconnu" permissions: invariant: false contexte: false reference: read personnel: false brain_write: toolkit-scribe-only forge: false docs_fetch: ask # always | ask | never agents: [toolkit-scribe, debug, code-review] behavior: | Pattern connu dans toolkit → agit seul Pattern inconnu → docs officielles (selon docs_fetch) → toolkit-scribe écrit Jamais d'invention brainstorm: description: "Réflexion scopée — pas d'écriture système" permissions: invariant: false contexte: scope-only reference: read personnel: false brain_write: false forge: false agents: [brainstorm, coach] coach: description: "Mentorat — progression en écriture, brain en lecture" permissions: invariant: false contexte: false reference: read personnel: write brain_write: progression-only forge: false agents: [coach, coach-scribe, scribe] deploy: description: "Déploiement — agents infra uniquement" permissions: invariant: false contexte: false reference: read personnel: false brain_write: false forge: false agents: [vps, ci-cd, pm2, secrets-guardian] debug: description: "Debug — lecture + agents debug" permissions: invariant: false contexte: scope-only reference: read personnel: false brain_write: false forge: false agents: [debug, code-review] projet-audit: description: "Audit lecture seule — todo-scribe uniquement en écriture" permissions: invariant: false contexte: false reference: read personnel: false brain_write: todo-scribe-only forge: false agents: [coach, agent-review] review-front: description: "Review frontend" permissions: invariant: false contexte: false reference: read personnel: false brain_write: false forge: false agents: [code-review, frontend-stack, testing] review-back: description: "Review backend/sécu" permissions: invariant: false contexte: false reference: read personnel: false brain_write: false forge: false agents: [code-review, security, testing] conserve: description: "Économie context — proposé auto si seuil métabolisme dépassé" permissions: invariant: confirm contexte: confirm reference: read personnel: false brain_write: false forge: false agents: [debug, code-review, todo-scribe, metabolism-scribe] behavior: | Cible context < 40%. Pas de chargement de sources non essentielles. metabolism-scribe en fin de session obligatoire. HANDOFF: description: "Reprise propre depuis une session précédente" permissions: invariant: false contexte: scope-only reference: read personnel: false brain_write: false forge: false agents: "*" rendering: description: "Instance autonome sur projet — scope strict, zéro drift kernel" permissions: invariant: false contexte: false reference: read personnel: false brain_write: false # pas d'écriture brain/ — uniquement le repo projet forge: false scope_lock: true # BLOQUÉ hors du scope déclaré dans le claim zone_lock: project # zone:kernel → BLOCKED_ON immédiat, pas de négociation circuit_breaker: max_consecutive_fails: 3 # 3 échecs → arrêt + signal BLOCKED_ON vers pilote on_trigger: "signal → BLOCKED_ON pilote" agents: [code-review, security, testing, debug, vps, ci-cd, pm2, migration] behavior: | Instance travaille sur zone:project uniquement. Toute tentative d'accès zone:kernel → BLOCKED_ON immédiat, signal pilote. Fichier hors scope déclaré → vérifier mutex (BSI-v3-7) avant d'écrire. 3 on_fail consécutifs → circuit breaker → arrêt complet + signal pilote. Jamais de décision architecturale — signal pilote si ambiguïté. cockpit: description: "Mode assisté — coach proactif, routing automatique, pipeline kanban" permissions: invariant: confirm contexte: write reference: write personnel: write brain_write: true forge: false agents: [coach, kanban-scribe, interprete, brainstorm, orchestrator] behavior: | Coach proactif : route avant qu'on cherche, anticipe, propose kanban-scribe : actif automatiquement au wrap interprete : écoute en continu — pas besoin d'invocation explicite Human nodes : décision de valeur uniquement, jamais de mécanique # --- # detectmode — helloWorld détecte le mode selon les signaux de session # --- detectmode: signals: - match: [vps, ci-cd, pm2] mode: deploy - match: [code-review, frontend-stack] mode: review-front - match: [code-review, security] mode: review-back - match: [debug] mode: debug - match: [brainstorm] mode: brainstorm - match: [coach, progression] mode: coach - bsi_claim: HANDOFF mode: HANDOFF default: prod # --- # Feature sets — contrôlent les agents invocables par instance # Les agents "bloqués" existent dans le kernel, brain-compose contrôle l'accès. # --- feature_sets: free: description: "Agents fondamentaux — exploration et maintenance brain" agents: - coach - scribe - todo-scribe - debug - mentor - helloWorld - aside - brainstorm - interprete - orchestrator - orchestrator-scribe - recruiter - agent-review pro: description: "Agents métier — développement complet" extends: free agents: - code-review - security - testing - refacto - vps - ci-cd - monitoring - pm2 - frontend-stack - optimizer-backend - optimizer-db - optimizer-frontend - toolkit-scribe - coach-scribe - git-analyst - capital-scribe - i18n - doc - migration - mail - brain-compose - config-scribe full: description: "Accès complet — usage personnel sans restriction" extends: pro agents: "*" # --- # Changelog — semver # v0.x.x : kernel en évolution rapide, breaking changes possibles # v1.0.0 : interface contractuelle stable # --- changelog: - version: "0.1.0" date: "2026-03-13" notes: "Initial — 30+ agents, config-scribe, brain-compose Phase 1, symlinks, feature flags" - version: "0.2.0" date: "2026-03-14" notes: "BSI (BRAIN-INDEX.md), brain_name, brain-template, aside, brainstorm, brain-compose up" - version: "0.3.0" date: "2026-03-14" notes: "orchestrator-scribe (free), brain-compose+config-scribe (pro), CHECKPOINT signal, session-as-identity, orchestration-patterns" - version: "0.4.0" date: "2026-03-14" notes: "Système de modes — 11 modes, permissions BSI par mode, detectmode, toolkit-only autonome avec docs_fetch" - version: "0.5.0" date: "2026-03-14" notes: "Multi-sessions BSI v1.2 — CHECKPOINT/HANDOFF signals + handoff files ; brain-watch-vps daemon (stale TTL check, Telegram notifications) ; brain-bot Telegram webhook (/status /sessions /focus /help) ; workspace spec v1.0 (ram.md log.md feedback.md) ; supervisor patterns v1 (7 protocoles) ; statusline session-role ; secrets-guardian recovery protocol ; BLOCKED_ON false-positive fix" - version: "0.5.1" date: "2026-03-14" notes: "Métabolisme v1 — mode conserve, metabolism-scribe, metabolism-spec, progression/metabolism/, helloWorld briefing métabolisme" - version: "0.6.0" date: "2026-03-15" notes: "Constitution v1.1.0 — Section 9 North Star + invariants autonomie + auto-amélioration (ADR-011) ; wiki/concepts.md fondamentaux brain V2 ; brain-engine vision north star" - version: "0.7.0" date: "2026-03-16" notes: "BSI-v3 fondations — tiered-close, zone-aware claims (ADR-014), result contract, exit triggers ; kerneluser: true ancré kernel ; KERNEL.md délégation human-only phase actuelle"