Ecosystem governance & standards of excellence — operating standard (2026-07-11)
Owner-promoted operating standard for new-project agents: excellence, stack policy, research cadence, Diffuser open-box routing, Thaladex memory compression, Mac never hosts. Complements agent protocol vnext.
Body
Ecosystem governance & standards of excellence — operating standard
Catalog slug: [REDACTED:high-entropy]
Kind: runbook / rules
Promoted: 2026-07-11 (owner Decision 1 = A) via public Explorer AI authoring
Local receipt: handoffs notes / fable-ecosystem-gov-excellence (20260711)
Engines: Cursor/Codex/Grok OK; ZAI OUT
Note: Tag governance omitted — not in AI session tag grants; used docs+rules+runbook+uai-explorer.
| Field | Value |
|---|---|
| Doc ID | fable-ecosystem- governance-excellence-20260711 |
| Mode | Explorer operating standard (promoted from Fable discussion draft) |
| Status | PROMOTED to Explorer catalog (public) — Decision 1 = A |
| Audience | New-project agents, Fable parents, Grok/Codex mules |
| Engines | Cursor Fable drafting; Grok SuperHeavy review OK; ZAI OUT |
| Mac | Workstation/archives only — never hosts product runtimes |
| Thaladex product | OFF this pass — operator/agent memory compression only |
| Supersedes locally | Long ad-hoc start prompts; does not replace Explorer protocol until promoted |
| Related | START_HERE.md · Explorer [REDACTED:high-entropy] · operator-dispatch- skills-preplan-20260711.md · operator-engine-roster-20260711.md · grok-superheavy-mule-harness-20260711.md · fable-nuc-harder- worker-discussion-20260711.md · uai-friendly-names-registry-20260709.md |
Owner: edit freely. Checkboxes in §11 are owner-only. Agents MUST NOT fill GO boxes or promote this draft to Explorer catalog without a checked Decision.
1. Purpose — bootstrap packet for new-project agents
When an agent starts a new project (or applies standards of excellence to an existing lane), it must know how we operate in this ecosystem — not invent a parallel culture from Cursor defaults.
Design intent: keep the initial chat prompt short. The agent loads authority from:
- This draft (local receipt until Explorer promotion)
START_HERE.md(endpoint + PAT + host map)- Explorer published SOT — especially
[REDACTED:high-entropy]
This doc is the “how we work” packet. Explorer remains sole published SOT for binding rules. Local handoffs are receipts and discussion drafts unless promoted.
Minimal start-prompt stub: §12.
2. Standards of excellence
Work that ships (or is proposed to ship) must be:
| Standard | Meaning |
|---|---|
| Quality | Correct, readable, tested where risk warrants; Fable polish on human/agent surfaces; no “works on my laptop” theater |
| Scalable | Controllers and agents consume Diffuser-routable lanes — never pinned to one GPU/device; capacity can move (Echo, NUC Syl, future Forge) without rewriting the product |
| Reversible | Prefer reversible deploys, stop-not-destroy sandboxes, evidence receipts, owner GO for promote/wipe/mutate |
| Friendly names | Operator prose uses beacon / echo / nuc / cadence / diffuser / thaladex / explorer / mesh — not raw IPs/ports unless debugging (uai-friendly-names-registry-20260709.md) |
| Mac never hosts | Mac = workstation + archives only — no Docker, product listeners, compose-up, or runtime installs for UAI stacks |
| No local SOT copies | Do not hoard catalog mirrors, runtime DBs, or product data on Mac; read Explorer via API; receipts stay in handoff tree |
| Owner checkboxes | Agents MUST NOT fill staged-wipe / GO / promote boxes |
| Secrets | Never paste tokens, PATs, .env, private keys into docs, Explorer catalog, Thaladex remember text, or chat receipts |
Anti-excellence: one-device shackle; soft re-shackle (fail-open to local Arc 140T when Diffuser/remote lanes flake); silent catalog edits; idle sandboxes; ZAI dispatch (OUT); burning Cursor quota as the mule; inventing lab hosts while Director/Forge deferred; treating this unpromoted draft as higher authority than Explorer protocol.
3. Stack policy
| Layer | Policy |
|---|---|
| Default product stack | Rust / Axum first for services and APIs |
| Systems / hot paths | C++ when performance, GPU/NPU bindings, or existing landlord code requires it (e.g. Syl/OpenVINO paths) |
| Python | Allowed for tooling and temporary solutions only — scripts, probes, one-shot migrations, research spikes. Not the default permanent product runtime |
| Frontends | Match product surface (minimal agent viewers, Beacon/Explorer UX); Fable polish; follow frontend skills when human UI |
| Data | Prefer existing product stores (Postgres for Thaladex, etc.); no ad-hoc Mac SQLite product homes |
Graduation rule: a Python spike that becomes permanent must be explicitly rewritten or owner-accepted as exception with a receipt. Temporary ≠ forgotten.
Naming in new prose: UAI Thaladex, UAI Diffuser (never Cortex / Auto Router).
4. Research pass protocol
Governance and architecture work uses a discussion → edit → implement cadence — not silent coding from a vibe.
| Phase | Who | Deliverable |
|---|---|---|
| 1. Fable discussion | Cursor Fable (parent) | Editable draft in handoffs notes/ — options, anti-patterns, one-at-a-time owner decisions |
| 2. Owner edit | Owner | Checkbox / prose edits; agents do not fill GO |
| 3. Grok mule implement | Grok SuperHeavy via scripts/grok-mule-dispatch.sh (Codex alternate) |
Plan → implement → receipt; skills preplan required |
| 4. Fable polish | Cursor Fable | UI/docs polish, merge receipts, surface next owner decision |
Rules:
- Research passes produce discussion docs, not deploys, unless a Proposed next action is owner-checked.
- Brutal Grok
--mode reviewis welcome on drafts before implement. - ZAI is OUT until owner reopens (
operator-engine-roster-20260711.md). - Present one owner decision at a time (see §11).
5. Thaladex memory compression protocol
Scope today: operator memory / agent memory compression — not Thaladex product rebuild.
| Use Thaladex to remember | Do not remember |
|---|---|
| Owner decisions and corrections | Secrets, tokens, PATs, private paths |
| Binding policy changes (stack, Diffuser role, engine roster) | Full doc dumps / catalog mirrors |
| Session outcomes with episode ids / receipt paths | Raw .env, SSH keys, survey data |
| Compact “what next agent must know” | Speculative plans presented as fact |
Compression rules
- Prefer episodes ≤ ~500 chars of compressed truth + pointer to receipt path.
- One decision = one sharp sentence; link the discussion doc id.
- Friendly names in remember text.
- No secret paste — if auth is needed, use env/token files outside chat; never echo tokens into remember bodies.
- Operator layer (when product OFF): remember/recall only; do not mutate Thaladex schema/viewer/API.
- Recall before re-deriving known operator state at session start when token available.
Suggested remember shape
YYYY-MM-DD <lane>: <compressed outcome>. Doc: <doc-id>. Engines: Fable/Grok; ZAI OUT. Mac never hosts.
6. Schema standards
Schemas (API contracts, job payloads, Diffuser lane descriptors, Explorer feedback shapes) must be:
| Rule | Detail |
|---|---|
| Versioned | Explicit version field or path segment; breaking changes get a new version, not silent field reuse |
| Friendly-named | Human/operator fields use ecosystem names; technical fallbacks documented separately |
| Diffuser-routable | Lane contracts describe capability + constraints, not a hard-coded device id as the only target |
| Tenant-safe (Thaladex) | Server-side token→tenant; never accept guest-supplied tenant_id as authority |
| Redaction-aware | Assume Explorer/AI lane redaction; no secrets in schema examples published to catalog |
| Evidence-backed promote | Schema changes that bind agents follow propose → verify → evidence → lab → public |
Anti-pattern: Cadence (or any controller) schema that encodes “must run on Arc 140T” as the only legal lane.
7. Runbook standards
| Rule | Detail |
|---|---|
| Reproducible | Copy-paste commands with env vars; expected HTTP codes; stop conditions |
| Host roles | State which host runs what (VPS / NUC / Echo / lab CT) — Mac never in the runtime column |
| Stop sandboxes | KEEP CT123/124/126…; MUST stop when done; MUST NOT destroy by default |
| Friendly names | Prose uses registry names; technical fallbacks in a column or appendix |
| Receipts | Write outcomes under docs/handoffs/…/notes/ with date + doc id |
| No silent binding edits | Binding rule changes need owner path + Explorer promote when ready |
| Capability cards | Mutate infra only with card; missing card ⇒ abort + Explorer feedback |
8. Cursor development loop
Current high-quality loop (quota-aware):
Fable plan / discussion
→ skills preplan (mandatory)
→ Grok SuperHeavy or Codex mule implement
→ Fable polish (UI, prose, merge)
→ receipt + optional Thaladex remember
→ one owner decision (if needed)
| Role | Engine | Pays |
|---|---|---|
| Plan, critique framing, polish | Cursor Fable | Cursor session |
| Bulk implement / brutal review | Grok SuperHeavy | Owner xAI Heavy via scripts/grok-mule-dispatch.sh |
| Alternate mule | Codex | Owner Codex sub |
| Do not use | ZAI GLM; Cursor Task grok-build-0.1 as mule |
— |
gitnexus (this repo): impact analysis before editing symbols; detect_changes before commits. See workspace GitNexus skills.
Concurrency: ≤3 Grok PIDs; one attempt; no fan-out storms (grok-superheavy-mule-harness-20260711.md).
9. Skills preplan — mandatory
Before every dispatch (parent, Fable polish, Grok mule, Codex): complete the checklist in operator-dispatch- skills-preplan-20260711.md.
| Must | Detail |
|---|---|
| List | Candidate skills from workspace + Cursor plugins |
| Match | Skill → job matrix |
| Instruct | Worker brief: Read and follow skill <absolute path> before coding. |
| Side systems | Explorer API, Thaladex remember/recall, Diffuser, gitnexus |
| Incomplete brief | Do not spawn |
Skills cut initial prompt size and prevent rework — they are not optional token savings.
10. Diffuser as open lab router (ecosystem_router)
UAI Diffuser is the ecosystem open box to lab resources — an ecosystem_router for agents, tools, models, placement, jobs, and embeds — not embeddings-only and not a single-GPU dispatcher with a fancy name.
| Actor | Relationship to Diffuser |
|---|---|
| Diffuser | Discovers/routes work to lanes by capability (Echo embed, future NUC Syl inference, VPS L0, dial-home consumers, tool/agent farms, …) |
| Controllers (e.g. Cadence) | Take whatever lane Diffuser has developed — scalable API clients, not device owners |
| Agents / jobs | Must be scalable — callable on any suitable lane; never pinned to one GPU; never soft-fallback to “just use local 140T” when remote lanes flake |
| Syl/OpenVINO (NUC) | Compute landlord saturates Arc 140T / NPU — Diffuser and Cadence call it |
Soft re-shackle ban
Hard pin to Arc 140T is already forbidden. Equally forbidden: fail-open local 140T as the quiet default when Diffuser/Echo/Forge lanes are down. Controllers mark lane unhealthy / queue / abort — they do not re-bind identity to the NUC GPU.
Binding clarifications (cross-link NUC discussion)
- Cadence is a controller / API plane, not a GPU saturator.
- Locking Cadence (or any agent) to Arc 140T — hard or soft — is a shackle.
- Diffuser open-box routing means Cadence (and peer controllers) consume Diffuser lanes as they appear — Echo today, NUC landlord when ready, Forge later — without rewriting identity.
- Echo remains primary embed lane until owner says otherwise; NUC is complementary spill / inference landlord, not Echo replacement by default.
See amended paragraph in fable-nuc-harder- worker-discussion-20260711.md.
Authority note: Decision 1 = A (promoted). This slug is an Explorer catalog operating standard. Binding agent protocol remains [REDACTED:high-entropy]; this packet complements it.
11. Owner decision checkboxes (one-at-a-time)
Agents: leave unchecked. Present Decision 1 only until owner answers.
Decision 1 — Promote this draft to Explorer catalog?
When ready (not now without GO):
- [x] A — Promote (owner GO 2026-07-11): published sanitized version to public Explorer; local file remains receipt/breadcrumb
- [ ] B — Keep local draft another edit cycle; do not catalog yet
- [ ] C — Split: promote a short “excellence + stack + Diffuser” slug; keep research/Cursor/skills detail local
- [ ] D — Other: owner writes alternate promote path
Fable recommendation: B or light owner edit → then C (short binding slug) so new-project agents get a thin Explorer packet without dumping the whole discussion.
Decision 2 — Stack wording lock? (ask after Decision 1)
- [ ] Lock Rust/Axum + C++ first; Python tooling/temp only as written in §3
- [ ] Soften: Python OK for internal tools indefinitely if isolated
- [ ] Owner alternate stack table
Decision 3 — Research cadence lock? (ask after Decision 2)
- [ ] Lock Fable discussion → owner edit → Grok mule → Fable polish as default
- [ ] Allow Fable implement for small reversible docs-only passes without mule
- [ ] Owner alternate cadence
12. Minimal agent start-prompt stub (≤15 lines)
Copy-paste for new projects / excellence passes:
UAI new work — short bootstrap
1. Read START_HERE.md (Explorer endpoint+PAT). Do not re-ask owner.
2. GET Explorer ready → bootstrap → context [REDACTED:high-entropy].
3. Read handoffs notes / fable-ecosystem-gov-excellence (20260711)
4. Skills preplan: operator-dispatch- skills-preplan-20260711.md before any dispatch.
5. Stack: Rust/Axum + C++ first; Python tooling/temp only. Friendly names. Mac never hosts.
6. Engines: Cursor Fable plan/polish; Grok mule via scripts/grok-mule-dispatch.sh; Codex alt; ZAI OUT.
7. Controllers/agents consume Diffuser lanes (ecosystem_router) — never pin or soft-fallback to one GPU. Cadence ≠ 140T.
8. Thaladex: operator remember/recall compression only unless owner GO on product.
9. Explorer protocol wins until this draft is promoted. One owner decision at a time; do not fill GO boxes.
TASK: <one paragraph>
13. Explicit non-actions this pass
- [x] Promote to Explorer catalog — Decision 1 = A (done 2026-07-11)
- [ ] ~~Silent binding-rule edit of published protocol~~ — out of scope
- [ ] ~~Thaladex product rebuild~~ — out of scope
- [ ] ~~Mac host runtimes / Docker~~ — out of scope
- [ ] ~~ZAI dispatch~~ — OUT
14. Grok SuperHeavy review (brutal, 2026-07-11)
Receipt: grok-review-ecosystem- governance-excellence-20260711.md (grok_cli=ok, effort max).
| # | Grok gap | Fable response |
|---|---|---|
| 1 | Diffuser identity thin vs full ecosystem_router | §10 retitled/expanded — agents / tools / models / placement / jobs / embeds |
| 2 | Soft 140T re-shackle not banned | Anti-excellence + §10 soft re-shackle ban |
| 3 | Friendly names omit cadence; dual-SOT risk |
cadence added; authority note: Explorer wins until promote |
| — | Default B — do not promote | Aligns with Fable lean on Decision 1 |
15. Return summary (for parent / closeout)
| Item | Value |
|---|---|
| Discussion path | handoffs notes / fable-ecosystem-gov-excellence (20260711) |
| Explorer | Public ready (lab CT121 may be down); protocol slug fetched — draft does not replace it yet |
| Amends | NUC discussion Diffuser open-box paragraph; skills-preplan pointer to this doc |
| First owner question | §11 Decision 1 only — promote / keep local / split? |
| Grok review | grok-review-ecosystem- governance-excellence-20260711.md — must-fixes applied above |
| Thaladex | operator layer + episode (ids in local receipt only) |
Fable discussion only. Owner edits welcome. No Explorer promote without checked Decision 1.