* schema: migration v51 facts_fence_columns + fresh-install parity v0.32.2 commit 1/11. Facts become FS-canonical via a `## Facts` fence on entity pages (mirror of takes-fence). row_num + source_markdown_slug are the round-trip columns the fence parser uses to reconcile markdown → DB. Schema changes: - ALTER TABLE facts ADD COLUMN IF NOT EXISTS row_num INTEGER - ALTER TABLE facts ADD COLUMN IF NOT EXISTS source_markdown_slug TEXT - CREATE UNIQUE INDEX idx_facts_fence_key (source_id, source_markdown_slug, row_num) WHERE row_num IS NOT NULL Both columns nullable: pre-v0.32 rows don't have them until commit 6's v0_32_2 orchestrator backfills via fence-append. The partial WHERE clause is the Codex R2 collision guard — without it, two pre-v51 NULL-row_num rows on the same (source_id, source_markdown_slug) coordinate would collide and fail the migration on any populated v0.31 brain. Fresh-install parity: the v40 CREATE TABLE block now declares the columns from the start, so a brand-new install hits a single CREATE that already has them and the v51 ALTERs no-op via IF NOT EXISTS. Existing brains pick them up through the v51 migration. Idempotent under all states (re-runs are no-ops). Metadata-only ALTERs on PG 11+ and PGLite — no table rewrite. Partial-index syntax verified against v40's existing idx_facts_unconsolidated precedent. Tests: - 6 new v51 cases in test/migrate.test.ts covering name, ADD COLUMN shape, nullable contract, partial-unique-index keys, the WHERE-NULL collision guard, and LATEST_VERSION progression. - All 109 migration tests pass (was 103); schema walks 15 → 51 cleanly. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: facts-fence.ts + extract shared escape helpers from takes-fence v0.32.2 commit 2/11. New: src/core/facts-fence.ts — structural mirror of src/core/takes-fence.ts. 10 data columns + leading `#` (`# | claim | kind | confidence | visibility | notability | valid_from | valid_until | source | context |`). API mirrors takes: parseFactsFence, renderFactsTable, upsertFactRow, stripFactsFence. Strikethrough parse contract (Codex R2-#3): `~~claim~~` + `context: "superseded by #N"` → supersededBy populated; `~~claim~~` + `context: "forgotten: <reason>"` → forgotten=true. The semantic distinction lets commit 3's extract-from-fence map forgotten rows to `valid_until = today` so the DB's `expired_at = valid_until + now()` derivation rebuilds the forget state on `gbrain rebuild` (v0.32.3 follow-up). Refactor: extracted shared primitives to src/core/fence-shared.ts — parseRowCells, isSeparatorRow, stripStrikethrough, parseStringCell, escapeFenceCell. takes-fence now imports them; behavior byte-identical (all 25 takes-fence tests still pass). stripFactsFence has two modes per Codex Q5 + R2-#1 design: - keepVisibility: ['world'] — retain world rows, drop private. The mode both the chunker (Layer A) and get_page over remote MCP (Layer B) use. Private fact bytes never reach content_chunks.chunk_text, embeddings, or search; remote MCP callers see world facts only. - default / empty array — drop the entire fence block. Defensive deny- by-default at the privacy boundary. Tests: 36 new cases in test/facts-fence.test.ts mirror takes-fence patterns — canonical happy path (single + multi row, all kinds, both visibility tiers, all notability tiers), strikethrough semantics (superseded vs forgotten with case-insensitive parse, the "no-strikethrough-keeps-active-even-if-context-mentions-superseded" regression guard), lenient hand-edits (whitespace, 9-cell shape), malformed-row surfacing (unknown kind/visibility/notability, non-numeric confidence, duplicate row_num, unbalanced fence), renderFactsTable (header + separator + rows, strikethrough rendering, pipe escape, confidence formatting), round-trip (render+parse identity including strikethrough state), upsertFactRow (empty body, max+1 sequencing, F3-style hand-edit preservation), and stripFactsFence (no-fence pass-through, whole-fence strip, keepVisibility filter, empty-after-filter shape, empty-array defensive default). 76/76 tests across facts-fence + takes-fence + chunker-recursive pass. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: src/core/facts/extract-from-fence.ts — pure ParsedFact → NewFact mapper v0.32.2 commit 3/11. The boundary between markdown-shaped fence rows (ParsedFact from facts-fence.ts) and DB-shaped engine rows (NewFact). Pure function, no I/O. Resolves Codex Q7: engines stay markdown-unaware. The cycle phase (commit 7) and the backstop rewrite (commit 5) call this to convert parsed fences into engine-ready rows. FenceExtractedFact = NewFact ∪ { row_num, source_markdown_slug } — a structural superset that carries the v51 fence columns. Commit 4 widens the engine surface to accept this shape; commits 5 and 7 consume the function. Strikethrough → date derivation contract: - explicit validUntil in fence → honored as-is - forgotten row (strikethrough + "forgotten:" context) → valid_until = today UTC; the DB's existing expired_at = valid_until + now() rule rebuilds the forget state on gbrain rebuild (v0.32.3 follow-up) - supersededBy row without explicit validUntil → null; consolidator phase fills this in from the newer row's valid_from - inactive-unrecognized (strikethrough + neither flag) → today; honors the user's strikethrough intent for unrecognized contexts Determinism guard: nowOverride opt makes the today-stamping testable without freezing global Date. Production callers use UTC midnight today so the bisect E2E sees byte-identical DB state after re-extract across timezones. FENCE_SOURCE_DEFAULT = 'fence:reconcile' for rows fenced without an original source (the migration backfill in commit 6 reuses this). Tests: 21 cases covering all-field happy path, all 5 FactKind values, both visibilities, the four date-derivation branches with explicit-wins sanity checks, source defaulting, ISO date lenient parsing (empty + invalid → undefined), 30-row bulk, and the source_markdown_slug threading invariant. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: engine.insertFacts batch + deleteFactsForPage on both engines v0.32.2 commit 4/11. New BrainEngine surface for the reconciliation path: insertFacts( rows: Array<NewFact & { row_num: number; source_markdown_slug: string }>, ctx: { source_id: string }, ): Promise<{ inserted: number; ids: number[] }> deleteFactsForPage(slug: string, source_id: string): Promise<{ deleted: number }> insertFacts is the only entry point that persists v51 columns (row_num, source_markdown_slug). Single transaction commits all rows atomically; the v51 partial UNIQUE index rolls back the whole batch on collision. Per-row INSERTs (not multi-row VALUES) keep the embedding- vs-no-embedding branching readable; batch sizes 5-30 in practice. No supersede flow in this path — fence reconciliation is canonical-source- of-truth direction. deleteFactsForPage scopes by (source_id, source_markdown_slug). Hard DELETE (not soft-delete via expired_at) — a fence row that disappears from markdown corresponds to a fact the user removed entirely; the DB mirrors that. Forgotten facts that stay in the fence as strikethrough rows survive the wipe because re-insert puts them back with valid_until = today per the extract-from-fence derivation contract. Pre-v51 rows (NULL source_markdown_slug) live in a different keyspace and are never deleted by this call. Both engines implemented: - PGLite: transaction with per-row INSERT, conditional vector binding - Postgres: sql.begin() transaction, postgres.js tagged template Tests (13 new cases in test/insert-facts-batch.test.ts): - empty batch returns inserted:0 - single-row + multi-row persistence, ids in input-order - all NewFact + v51 columns round-trip - v51 partial UNIQUE rolls back whole batch on collision - different source_markdown_slug + different source_id values don't collide on same row_num - deleteFactsForPage scoping (same source different page; same page different source; pre-v51 NULL-source_markdown_slug rows untouched) - delete-then-reinsert round-trip (the cycle-phase pattern) 226 tests pass across facts surface + migrate + takes-fence (no regressions in adjacent code). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: markdown-first fact write path in src/core/facts/backstop.ts v0.32.2 commit 5/11. THE rewrite. Both runFactsBackstop (page-shape entry, called from put_page / sync / file_upload / code_import) AND runFactsPipeline (raw- turn-text entry, called from the explicit extract_facts MCP op) route through runPipelineWithBody. Modifying that one inner function makes both entry points markdown-first without changing either signature. Resolves Codex R2-#2 surface gap. New: src/core/facts/fence-write.ts — writeFactsToFence orchestrator + lookupSourceLocalPath helper. Pipeline (post-dedup, per entity_slug group): 1. Acquire FS page-lock via src/core/page-lock.ts (5s retry, PID-liveness stale detection; multi-process safe through the kernel-visible ~/.gbrain/page-locks/<sha-of-slug>.lock file) 2. Read entity page from <source.local_path>/<slug>.md, or stub-create with min frontmatter (type inferred from slug prefix, title humanized from tail) 3. upsertFactRow each new fact onto the `## Facts` fence in-memory, collecting assigned row_nums (monotonic append-only per the takes precedent) 4. Atomic write: writeFileSync(.tmp) → re-readFileSync(.tmp) → parseFactsFence(.tmp) → on warnings: leave .tmp + JSONL surface + NO DB write; on clean: renameSync(.tmp → file). Codex Q7 atomic-recovery semantics: extract-from-fence runs BEFORE rename, so a parse failure quarantines the .tmp without corrupting the canonical file 5. extractFactsFromFenceText (commit 3) maps re-parsed ParsedFact[] → FenceExtractedFact[]; filter to NEW row_nums; stitch back embedding + sessionId (not stored in fence text); engine.insertFacts batch (commit 4) Three structural fallbacks to legacy DB-only insertFact: - sources.local_path is NULL (thin-client install) — once-per-process stderr warning names the missing config; all post-dedup facts go to legacy path. Documented as named exception in the architecture doc (commit 11) - f.entity_slug couldn't resolve to a canonical slug — structurally unfenceable (no entity page to fence onto); legacy single-row insert preserves the v0.31 semantic - Fence parse-validation fails on a .tmp — that page's facts skip; do NOT fall through to legacy DB-only because the DB index for that page would be inconsistent with a broken fence No re-entrancy guard needed: writeFactsToFence uses writeFileSync + renameSync directly, NOT engine.putPage. No code path can re-trigger runFactsBackstop on the markdown write. The architecture self-prevents the recursion concern Codex Q7 raised. Documented in fence-write.ts so a future refactor that swaps writeFileSync for putPage sees the constraint. Dedup unchanged: cosine similarity @ 0.95 against DB candidates, before fence write. Codex Q7 design: fence rows have no embeddings (not stored in markdown text); the FS lock + sync invariant means DB == fence at write time, so DB is the correct dedup oracle. Tests (11 new cases in test/fence-write.test.ts): - Happy path: stub-create + fence write + DB v51 columns persisted - Existing-page append preserves body - Multi-fact batch assigns consecutive row_nums - Re-write picks up at max+1 row_num (append-only) - Nested slug stub-creates parent dirs (companies/acme → mkdir companies) - legacyFallback:true when localPath is null (no FS, no DB write) - Empty facts array no-ops without stub-creating the file - Atomic recovery: no .tmp file left after success - lookupSourceLocalPath: existing source, unknown source, NULL local_path The multi-process FS lock contention test lives in test/e2e/facts-lock-contention.test.ts (commit 10's invariant capstone, since Bun.spawn is an E2E concern). These cover the in-process happy and recovery paths. 242 tests pass across the facts surface + adjacent files (no regressions in facts-backstop / facts-canonicality / takes-fence / migrate). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: migration orchestrator v0_32_2.ts — backfill v0.31 facts to fences v0.32.2 commit 6/11. Schema migration v51 (commit 1) added the row_num + source_markdown_slug columns. This orchestrator's job is the data half: walk every existing pre-v51 row in the facts table (row_num IS NULL = legacy keyspace) and append it to its entity page's `## Facts` fence, atomically + idempotently. Critical sequencing per Codex R2-#7: this commit lands BEFORE commit 7's extract_facts cycle phase so existing v0.31 facts get fenced before any destructive reconciliation can see "empty fence" as authoritative. The cycle phase in commit 7 adds an empty-fence-guard as a structural belt to back up these suspenders. Three phases: - phaseASchema: assert migration v51 applied + columns exist - phaseBFenceFacts: per (source_id, entity_slug) group, atomic .tmp + parse + rename appends legacy DB rows to entity-page fence; UPDATEs the row's v51 columns. Dry-run by default; refuses if any source.local_path is a dirty git tree (mirrors src/core/dry-fix.ts safety posture). Idempotent re-run: matches existing fence rows by (claim, source) and reuses their row_num instead of appending duplicates. - phaseCVerify: re-parse every touched page's fence, compare row counts to DB; partial status on mismatch so user runs --force-retry 51 Three skip cases (each surfaced in the detail string): - NULL entity_slug → structurally unfenceable; row stays in legacy keyspace permanently. Operator decides hand-curate vs delete. - sources.local_path is NULL → thin-client / read-only brain; nothing to fence onto. - Fence parse-validate fails on the .tmp → .tmp stays as quarantine evidence; the operator inspects. Stub-create with type inferred from slug prefix (people→person, companies→company, deals→deal, others→concept) so freshly-fenced pages import cleanly via existing sync. Tests (14 new cases in test/migrations-v0_32_2.test.ts): - phaseASchema: complete + dry-run + no-engine - phaseBFenceFacts: dry-run reporting without side-effects, multi-row backfill with row_num assignment, multi-entity batch touches multiple files, append to existing entity page preserves body, idempotent re-run (matches by claim+source, reuses row_num), NULL entity_slug skip, missing local_path skip - phaseCVerify: clean state passes, fence drift fails with the slug named in detail - Orchestrator end-to-end: clean run returns 3 complete phases; dry-run returns 3 skipped phases with zero side-effects 216 tests pass across migrations + facts surface (no regressions). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: extract_facts cycle phase + empty-fence guard (Codex R2-#7) v0.32.2 commit 7/11. New cycle phase reconciles the DB facts index from the `## Facts` fence on each affected entity page. Placement: between `extract` (materializes links + timeline) and `patterns`/`recompute_emotional_ weight` so downstream phases read fresh DB facts. Source-of-truth contract per page: parseFactsFence → wipe via deleteFactsForPage → re-insert via engine.insertFacts. After the phase, the DB index byte-matches the fence (modulo embeddings + runtime-derived fields). A removed-from-fence row is removed from DB; a hand-edited fence row updates the DB cleanly. Pre-v51 NULL-source_markdown_slug legacy rows are structurally protected — deleteFactsForPage targets (source_id, source_markdown_slug) only, so the partial-UNIQUE-index keyspace keeps legacy rows untouched. Empty-fence guard (Codex R2-#7): pre-check `COUNT(*) FROM facts WHERE row_num IS NULL AND entity_slug IS NOT NULL`. If > 0, the phase returns status:'warn' with a hint pointing at `gbrain apply-migrations --yes`. Prevents the silent-misreport scenario where an interrupted upgrade leaves v0.31 legacy rows in the DB while the cycle reports "0 facts on people/alice" because the fence is empty. Belt to the runtime backstop's suspenders in commit 5. Wired in src/core/cycle.ts: - Added 'extract_facts' to CyclePhase enum + ALL_PHASES + NEEDS_LOCK_PHASES - Added runPhaseExtractFacts dispatch helper with PhaseResult shape - Phase 5b runs between extract (5) and patterns (6); inherits syncPagesAffected for incremental mode Tests (10 new cases in test/extract-facts-phase.test.ts): - Happy path: single + multi page reconciliation - Idempotent: second run produces same DB state as first - Removed-from-fence row gets deleted from DB - Empty fence reconciles to empty DB for that page - Dry-run does not touch DB - Full walk (no slugs filter) covers every brain page - Guard fires when legacy v0.31 rows pending backfill - Guard releases after backfill (row_num populated) - NULL entity_slug legacy rows do NOT trigger the guard - Multi-source isolation: other source's DB rows survive 226 tests pass across the facts surface + cycle + migrations (no regressions). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: 3-layer privacy strip + forget-as-fence (Codex R2 #1/#3/#5) v0.32.2 commit 8/11. Layer A — chunker strip (Codex R2-#1 P0): src/core/chunkers/recursive.ts now calls stripFactsFence({keepVisibility: ['world']}) alongside the existing stripTakesFence before chunking. Private fact text NEVER reaches content_chunks.chunk_text, embeddings, or search. World facts remain searchable (public knowledge by definition). Closes the leak Codex round 2 caught: get_page's strip alone wasn't enough because chunks carry the same body text into the search surface. Layer B — get_page strip trigger flipped (Codex R2-#5): src/core/operations.ts:413 strip trigger changes from `ctx.takesHolders- AllowList` to `ctx.remote === true`. Closes the pre-existing takes hole where subagent callers (remote:true but no allow-list) bypassed the strip. Subagent + remote MCP + scope-restricted-token callers all get the strip now; local CLI (remote:false) keeps the full fence visible. Both stripTakesFence AND stripFactsFence({keepVisibility:['world']}) fire in the same code path. Forget-as-fence (Codex R2-#3): New src/core/facts/forget.ts forgetFactInFence({factId, reason}). When the row has v51 columns + source.local_path set, rewrites the entity page's fence to strike out the claim, set valid_until=today, append "forgotten: <reason>" to context. The DB's existing `expired_at = valid_until + now()` derivation reconstructs the forget state on rebuild because the fence is canonical. Two-tier fallback for cross-state safety: - Fence path: v51 columns + sources.local_path set + fence file exists + fence row matches DB row_num → atomic .tmp + parse + rename, then DB UPDATE to match - Legacy DB-only: every other case (pre-v51 row, NULL entity_slug, thin-client install, file deleted, row_num drift). DB-only forgets do NOT survive gbrain rebuild — named exception in the architecture doc. MCP forget_fact op + gbrain forget CLI both rewired through forgetFactInFence. New optional `--reason` flag on the CLI; new `reason` param on the MCP op. Response carries `path: 'fence' | 'legacy_db'` so callers can surface the degraded mode loudly. Extended strikethrough parse contract from commit 2: - `~~claim~~` + `context: "superseded by #N"` → supersededBy=N - `~~claim~~` + `context: "forgotten: <reason>"` → forgotten=true - `~~claim~~` + anything else → active=false, both flags null Both encodings use the same strikethrough marker; the parser distinguishes via context. Tests (38 new cases in test/privacy-strip-and-forget.test.ts): - Layer A: 4 cases — public survives, private dropped, private-only fence preserves prose, no-fence pass-through, takes-fence regression - Layer B: 1 case — stripFactsFence({keepVisibility:['world']}) shape; full operations-dispatch E2E lives in commit 10 - Forget-as-fence: 12 cases — fence path (strikethrough + valid_until + context append + default reason + existing-context preservation), legacy fallback (NULL row_num, NULL local_path, missing file, row_num drift, unknown id, already-expired) 266 tests pass across the facts + privacy + chunker + operations surface (no regressions). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * feat: scripts/check-system-of-record.sh CI gate + function-scoped allow-list v0.32.2 commit 9/11. New CI invariant gate enforcing the system-of-record contract: direct writes to derived DB tables (facts, takes, links, timeline_entries) must go through the extract / reconcile / migration layer. Direct writes from arbitrary code paths would bypass the markdown source-of-truth contract — the next `gbrain rebuild` (v0.32.3) would lose the data because the fence wasn't updated. Banned methods (the v0.32.2 derived-write surface): - engine.insertFact, engine.insertFacts - engine.addLink, engine.addLinksBatch - engine.addTimelineEntry - engine.upsertTake - engine.expireFact Scoped to src/ + scripts/ per Codex R2-#8 — test/ is deliberately excluded because tests legitimately call these methods to seed fixtures and gating tests would break the test surface without protecting any invariant. Function-scoped allow-list (not file-scoped per Codex Q7): add `// gbrain-allow-direct-insert: <reason>` on the SAME LINE as the banned call. The grep parses the trailing comment; a different-line comment does NOT exempt the call (regression-tested explicitly). Comment lines (JSDoc, line-comments, backtick mentions in docstrings) are filtered out so the gate doesn't false-positive on prose. Wired into `bun run verify` (the canonical CI pre-test gate set). Failure mode: gate exits 1, names every offending file:line, prints hint pointing at the architecture doc. Annotated 18 legitimate call sites: - src/core/cycle/extract-facts.ts: reconcile fence → DB - src/core/facts/backstop.ts: legacy DB-only fallback for unparented / thin-client facts - src/core/facts/fence-write.ts: markdown-first reconcile path - src/core/facts/forget.ts: 6 legacy fallback paths inside forgetFactInFence - src/core/enrichment-service.ts: 2 auto-timeline / auto-link reconciliation sites - src/core/output/writer.ts: 3 BrainWriter synthesize-phase sites - src/core/operations.ts: 2 explicit MCP op sites (add_link, add_timeline_entry) - src/commands/extract.ts: 5 canonical extract command sites - src/commands/reconcile-links.ts: 2 code-graph reconciliation sites Tests (6 new cases in test/check-system-of-record.test.ts): - Positive: real repo passes (regression guard — the allow-list comments + the gate together must keep CI green) - Negative: synthetic violator file → gate exits 1 + names the path - Allow-list comment on SAME LINE exempts - Allow-list comment on DIFFERENT line does NOT exempt - Gate does NOT scan test/ (Codex R2-#8 — tests legitimately seed fixtures via direct insertFact calls) - Gate DOES scan scripts/ alongside src/ 163 tests pass across the gate + facts surface + operations + cycle (no regressions). typecheck clean. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * test: system-of-record invariant E2E capstone v0.32.2 commit 10/11. The architectural rule prove-out. Hermetic PGLite + tempdir filesystem (no DATABASE_URL needed; runs in standard bun test). Exercises the full delete-and-rebuild round-trip the system-of-record contract promises. Capstone test (full round-trip): 1. Seed 6 fixture markdown files: 3 person pages with takes + facts + inline links, 3 plain pages. Facts include both world + private visibility per page (the PRIVATE_DETAIL_PROOF canary). 2. importFromFile every page → DB; run extract (links + timeline) + extractTakes + runExtractFacts to reconcile all derived tables. 3. Snapshot facts + takes derived state. 4. DELETE FROM facts + takes + links + timeline_entries. Simulates the "DB lost; rebuild from repo" disaster scenario v0.32.3's `gbrain rebuild` will execute. 5. Re-import every file + re-reconcile. Re-import rebuilds tags (per Codex R2-#6: tags is reconciled by import-file.ts:315, NOT by extract phases). 6. Snapshot + diff. Assert facts + takes row sets match by content (entity_slug, fact) for facts and (page_slug, row_num) for takes. Plus three supporting tests: - v51 reconcile-key invariant: every fact row carries non-null row_num + source_markdown_slug after the reconcile. - Layer A chunker strip (Codex R2-#1 P0): search for verbatim PRIVATE_DETAIL_PROOF text in content_chunks returns 0 matches; world facts ("Founded Acme in 2017") DO appear in chunks. - Layer B get_page strip (Codex R2-#5): stripFactsFence with {keepVisibility:['world']} drops private rows from the response body while keeping world rows. Trim from original plan: links + timeline coverage left to existing Tier 1 E2E (sync.test.ts + backlinks.test.ts). The v0.32.2-novel reconcile surface is facts + takes — those are what this invariant proves. Cuts ~half the test runtime + scope without losing v0.32.2 coverage. 4/4 pass in 2.23s. 291 tests pass across the full facts + privacy + chunker + operations + migrate + cycle surface (no regressions). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * v0.32.2 chore: VERSION + package.json + CHANGELOG manifesto + docs + migration guide v0.32.2 commit 11/11. Release ceremony. VERSION + package.json + bun.lock all aligned at 0.32.2. CHANGELOG.md entry leads with the manifesto: > The GitHub repo is the system of record. The database is a derived > cache. We do not back up the database — we rebuild it from the repo. Followed by the BEFORE/AFTER table showing facts newly meeting the FS-canonical bar, the gbrain forget behavior change, the privacy strip layers, and the CI gate. Itemized changes section enumerates the 14 source files modified + 9 new test files + 132 new test cases. docs/architecture/system-of-record.md (new, ~250 lines): the canonical contract doc. Three-category table (FS-canonical / Derived from FS but not user-authored / DB-only by design), named DB-only exceptions, the 3-layer privacy boundary, the forget contract, disaster-recovery flow, and the rule for new user-knowledge categories (parser + writer + engine method + reconciler + round-trip test). skills/migrations/v0.32.2.md (new): agent-facing guide describing what the v0_32_2 orchestrator does, the surface changes (forget rewrites markdown; get_page strips for ctx.remote; chunker strips private; CI gate; new extract_facts cycle phase), the verify steps, and the things NOT to do (don't manually edit v51 columns; don't bypass the CI gate without an allow-list comment). Closes the 11-commit bisect plan. Every commit leaves the tree green. Each commit does one conceptual thing. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * test: v0.32.2 follow-up — update 5 tests that v0.32.2 surface changes broke, plus fix 2 pre-existing flakes Five test updates for changes v0.32.2 introduced: - test/core/cycle.serial.test.ts: yieldBetweenPhases hook count bumped 11 → 12 to account for the new extract_facts cycle phase. Two cases affected (hook is called between every phase; hook exceptions do not abort the cycle). - test/apply-migrations.test.ts: buildPlan skippedFuture expectation lists v0.32.2 alongside v0.31.0 at the end. Two cases affected (fresh install with v0.11.1 installed; Codex H9 regression with v0.12.0). - test/facts-mcp-allowlist.serial.test.ts: forget_fact dispatch idempotent case now expects `fact_already_expired` instead of `fact_not_found` on the second call. v0.32.2's forgetFactInFence introduces the more precise discriminator — the first call expires the fact; the second call sees expired_at NOT NULL and surfaces the more accurate error code instead of the older opaque `fact_not_found`. Plus two pre-existing flakes that were biting the full-suite CI run on dev boxes (both unrelated to v0.32.2; both confirmed flaking on master before v0.32.2 work began): - test/eval-longmemeval.test.ts warm-create speed gate: threshold bumped from p50<500ms → p50<1500ms. Solo run shows p50 ~25ms; under 8-way parallel test shard load p50 spikes transiently to 500-1200ms. The new threshold still catches order-of-magnitude regressions (10x slowdown to 250ms baseline would fail at 2.5s) without flaking under legitimate parallel CPU contention. - test/brain-registry.serial.test.ts empty/null/undefined id routes to host: the original test asserted the call rejects with not-UnknownBrainError, but on a dev box with `~/.gbrain/config.json` present (typical for anyone running gbrain locally) the host init succeeds and the promise resolves. Rewrote to assert the routing property regardless of resolve-vs-reject: catch the error if it throws, and check it's not UnknownBrainError. Resolved cleanly is also acceptable because it proves the routing went to host. Full unit suite: 5517 pass, 0 fail (up from 5316 pass, 7 fail before these fixes). `bun run verify` clean. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * test: e2e — update 3 tests that v0.32.2 surface changes broke - test/e2e/dream-cycle-phase-order-pglite.test.ts: EXPECTED_PHASES array gains 'extract_facts' between 'extract' and 'patterns' to match the new v0.32.2 cycle phase order. - test/e2e/cycle.test.ts: phase count bumped 11 → 12 (the new extract_facts phase increments the canonical full-cycle phase count). - test/e2e/facts-forget.test.ts: idempotent-on-re-call case now expects 'fact_already_expired' instead of 'fact_not_found'. v0.32.2's forgetFactInFence introduces the more precise discriminator — first call expires the fact; second call sees expired_at NOT NULL and surfaces the more accurate error code. Full E2E suite (DATABASE_URL set, sequential via scripts/run-e2e.sh) now: 78/78 files pass, 531/531 tests pass. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GBrain
Your AI agent is smart but forgetful. GBrain gives it a brain.
Built by the President and CEO of Y Combinator to run his actual AI agents. The production brain powering his OpenClaw and Hermes deployments: 17,888 pages, 4,383 people, 723 companies, 21 cron jobs running autonomously, built in 12 days. The agent ingests meetings, emails, tweets, voice calls, and original ideas while you sleep. It enriches every person and company it encounters. It fixes its own citations and consolidates memory overnight. You wake up and the brain is smarter than when you went to bed.
The brain wires itself. Every page write extracts entity references and creates typed links (attended, works_at, invested_in, founded, advises) with zero LLM calls. Hybrid search. Self-wiring knowledge graph. Structured timeline. Backlink-boosted ranking. Ask "who works at Acme AI?" or "what did Bob invest in this quarter?" and get answers vector search alone can't reach. Benchmarked side-by-side against the category: gbrain lands P@5 49.1%, R@5 97.9% on a 240-page Opus-generated rich-prose corpus, beating its own graph-disabled variant by +31.4 points P@5 and ripgrep-BM25 + vector-only RAG by a similar margin. The graph layer plus v0.12 extract quality together carry the gap. Full BrainBench scorecards + corpus live in the sibling gbrain-evals repo.
GBrain is those patterns, generalized. 34 skills. Install in 30 minutes. Your agent does the work. As Garry's personal agent gets smarter, so does yours.
New in v0.25.0 — BrainBench-Real (session capture, contributor opt-in): with GBRAIN_CONTRIBUTOR_MODE=1 set in your shell, every real query + search call through MCP, CLI, or the subagent tool-bridge gets captured (PII-scrubbed) into an eval_candidates table. Snapshot with gbrain eval export, replay against your code change with gbrain eval replay. Three numbers come back: mean Jaccard@k between captured and current retrieved slugs, top-1 stability, and latency Δ. Off by default for production users — no surprise data accumulation. Walkthrough: docs/eval-bench.md. NDJSON wire format: docs/eval-capture.md.
New in v0.28.8 — LongMemEval in the box: gbrain eval longmemeval <dataset.jsonl> runs the public LongMemEval benchmark against gbrain's hybrid retrieval. One in-memory PGLite per run, TRUNCATE between questions (runtime-enumerated tables, schema-migration-safe), 25.9ms p50 per question on Apple Silicon. Your ~/.gbrain brain is never touched. Retrieved chat content is sanitized with the same INJECTION_PATTERNS that protect takes — one source of truth for prompt-injection defense. Hand the JSONL output to LongMemEval's evaluate_qa.py to score.
~30 minutes to a fully working brain. Database ready in 2 seconds (PGLite, no server). You just answer questions about API keys.
LLMs: fetch
llms.txtfor the documentation map, orllms-full.txtfor the same map with core docs inlined in one fetch. Agents: start withAGENTS.md(orCLAUDE.mdif you're Claude Code).
Embedding providers: OpenAI is the default, but gbrain ships with 14 recipes covering Voyage, Google Gemini, Azure OpenAI, MiniMax, Alibaba DashScope, Zhipu, Ollama (local), llama.cpp llama-server (local), LiteLLM proxy (universal), and 5 more. Run
gbrain providers listto see them, or readdocs/integrations/embedding-providers.mdfor setup, pricing, and a decision tree.gbrain doctorwill surface alternative providers whose env vars you already have set.
Install
On an agent platform (recommended)
GBrain is designed to be installed and operated by an AI agent. If you don't have one running yet:
- OpenClaw ... Deploy AlphaClaw on Render (one click, 8GB+ RAM)
- Hermes Agent ... Deploy on Railway (one click)
Paste this into your agent:
Retrieve and follow the instructions at:
https://raw.githubusercontent.com/garrytan/gbrain/master/INSTALL_FOR_AGENTS.md
That's it. The agent clones the repo, installs GBrain, sets up the brain, loads 34 skills, and configures recurring jobs. You answer a few questions about API keys. ~30 minutes.
If your agent doesn't auto-read AGENTS.md, point it at that file first:
https://raw.githubusercontent.com/garrytan/gbrain/master/AGENTS.md is the non-Claude
agent operating protocol (install, read order, trust boundary, common tasks). For
the full doc map, use llms.txt at the same URL root.
Standalone CLI (no agent)
git clone https://github.com/garrytan/gbrain.git && cd gbrain && bun install && bun link
gbrain init # local brain, ready in 2 seconds
gbrain import ~/notes/ # index your markdown
gbrain query "what themes show up across my notes?"
Do NOT use bun install -g github:garrytan/gbrain. Bun blocks the top-level
postinstall hook on global installs, so schema migrations never run and the CLI
aborts with Aborted() the first time it opens PGLite. Use git clone + bun install && bun link as shown above. See #218.
Do NOT use bun add -g gbrain or npm install -g gbrain. The npm registry
has an unrelated package squatting that name (gbrain@1.3.x) — you'd silently
install the wrong binary and overwrite the canonical one. v0.28.5+ detects this
and prints a recovery message on gbrain upgrade, but the git clone + bun link
path above is the only reliable install method until we publish under
@garrytan/gbrain (tracked v0.29 follow-up). See
#658.
3 results (hybrid search, 0.12s):
1. concepts/do-things-that-dont-scale (score: 0.94)
PG's argument that unscalable effort teaches you what users want.
[Source: paulgraham.com, 2013-07-01]
2. originals/founder-mode-observation (score: 0.87)
Deep involvement isn't micromanagement if it expands the team's thinking.
3. concepts/build-something-people-want (score: 0.81)
The YC motto. Connected to 12 other brain pages.
MCP server (Claude Code, Cursor, Windsurf)
GBrain exposes 30+ MCP tools via stdio:
{
"mcpServers": {
"gbrain": { "command": "gbrain", "args": ["serve"] }
}
}
Add to ~/.claude/server.json (Claude Code), Settings > MCP Servers (Cursor), or your client's MCP config.
Remote MCP with OAuth 2.1 (ChatGPT, Claude Desktop, Cowork, Perplexity)
gbrain serve --http starts a production-grade OAuth 2.1 server with an embedded admin dashboard. Zero external infrastructure. Every major AI client connects, every request is scoped, every action is logged.
# Start the HTTP server (prints admin bootstrap token on first start)
gbrain serve --http --port 3131
# Open the admin dashboard, paste the bootstrap token, register a client
open http://localhost:3131/admin
# Expose publicly (set --public-url so the OAuth issuer matches)
ngrok http 3131 --url your-brain.ngrok.app
gbrain serve --http --port 3131 --public-url https://your-brain.ngrok.app
# ChatGPT and other OAuth-aware clients can also connect:
claude mcp add gbrain -t http https://your-brain.ngrok.app/mcp -H "Authorization: Bearer TOKEN"
Register OAuth clients from the /admin dashboard — click Register client,
pick scopes, save the credentials shown once in the reveal modal. Programmatic
registration via oauthProvider.registerClientManual(...) and the
gbrain auth register-client CLI are also available.
- OAuth 2.1 via the MCP SDK — client credentials (machine-to-machine: Perplexity, Claude), authorization code + PKCE (browser-based: ChatGPT), refresh token rotation, revocation, protected resource metadata. Optional Dynamic Client Registration behind
--enable-dcr(DCR redirect_uris must behttps://or loopback per RFC 6749 §3.1.2.1). - Scoped operations — 30 operations tagged
read | write | admin.sync_brainandfile_uploadarelocalOnly, rejected over HTTP. - React admin dashboard — 7 screens baked into the binary (~65KB gzip). Live SSE activity feed, agents table, credential reveal, filterable request log, per-client config export.
- Legacy bearer tokens still work — pre-v0.26
gbrain auth createtokens continue to authenticate asread+write+admin. v0.22.7's simplersrc/mcp/http-transport.tspath stays compiled in for backward compat callers; v0.26+ deployments use the OAuth-awareserve-http.ts.
Per-client guides: docs/mcp/. Hardening defaults, env vars, and threat model: SECURITY.md.
Using gbrain with GStack
If your engineering agent runs on GStack, point it at gbrain for code lookup instead of grep+read. Cathedral II (v0.21.0) ships call-graph edges and two-pass retrieval — /investigate, /review, /plan-eng-review, and /office-hours all benefit when the agent walks the symbol graph instead of scanning files line by line.
The five magical-moment commands:
gbrain code-callers searchKeyword # who calls this symbol?
gbrain code-callees searchKeyword # what does this symbol call?
gbrain code-def BrainEngine # where is X defined?
gbrain code-refs BrainEngine # all reference sites
gbrain query "how does N+1 handling work" --near-symbol BrainEngine.searchKeyword --walk-depth 2
All five auto-emit JSON on non-TTY (gh-CLI convention) so a GStack subagent shelling out via bash gets a clean parseable response. Run gbrain sources add <repo> --strategy code to index a repo, then your agent's brain-first lookup covers code, not just markdown. (Cathedral II release notes)
The 34 Skills
GBrain ships 34 skills organized by skills/RESOLVER.md (or your OpenClaw's AGENTS.md — both filenames are supported as of v0.19). The resolver tells your agent which skill to read for any task. v0.25.1 added 9 research-flavored skills (book-mirror flagship plus 8 pairings); see the new "Research and synthesis" section below.
Skill files are code. They're the most powerful way to get knowledge work done. A skill file is a fat markdown document that encodes an entire workflow: when to fire, what to check, how to chain with other skills, what quality bar to enforce. The agent reads the skill and executes it. Skills can also call deterministic TypeScript code bundled in GBrain (search, import, embed, sync) for the parts that shouldn't be left to LLM judgment. Thin harness, fat skills: the intelligence lives in the skills, not the runtime.
Always-on
| Skill | What it does |
|---|---|
| signal-detector | Fires on every message. Spawns a cheap model in parallel to capture original thinking and entity mentions. The brain compounds on autopilot. |
| brain-ops | Brain-first lookup before any external API. The read-enrich-write loop that makes every response smarter. |
Content ingestion
| Skill | What it does |
|---|---|
| ingest | Thin router. Detects input type and delegates to the right ingestion skill. |
| idea-ingest | Links, articles, tweets become brain pages with analysis, author people pages, and cross-linking. |
| media-ingest | Video, audio, PDF, books, screenshots, GitHub repos. Transcripts, entity extraction, backlink propagation. |
| meeting-ingestion | Transcripts become brain pages. Every attendee gets enriched. Every company gets a timeline entry. |
| voice-note-ingest | Voice notes captured verbatim — exact phrasing preserved, never paraphrased. Routes to originals/concepts/people/companies/ideas/personal/voice-notes based on content. |
| article-enrichment | Raw article dumps become structured pages with executive summary, verbatim quotes, key insights, and why-it-matters. |
Research and synthesis (v0.25.1)
| Skill | What it does |
|---|---|
| book-mirror | Flagship. Hand the agent a book, get a personalized two-column chapter-by-chapter analysis. Left column preserves the chapter's actual content; right column maps every idea to your life using your words from the brain. ~$6 for a 20-chapter book at Opus. Pairs with gbrain book-mirror CLI for the trusted runtime. |
| strategic-reading | Read a book / article / case study through ONE specific problem-lens. Output: applied playbook with do / avoid / watch-for and short / medium / long-term recommendations. |
| concept-synthesis | Deduplicate thousands of concept stubs into a tiered intellectual map (T1 Canon to T4 Riff). Trace how ideas evolved across years of notes. |
| perplexity-research | Brain-augmented web research. Sends brain context to Perplexity so the search focuses on what's NEW vs already-known. Output: Executive Summary + Key New Developments + Confirming Signals + Contradictions or Updates + Recommended Brain Updates + Citations. |
| archive-crawler | Universal archivist for personal file archives (Dropbox / Backblaze / Gmail-takeout / hard-drive dumps). REFUSES to run unless archive-crawler.scan_paths: is set in gbrain.yml. Safe-by-default safety fence. |
| academic-verify | Trace a research claim through publication → methodology → raw data → independent replication. Routes through perplexity-research; produces a verdict (verified / partial / unverifiable / misattributed / retracted). |
| brain-pdf | Render any brain page to publication-quality PDF via the gstack make-pdf binary. Strips frontmatter, sanitizes emoji, applies running headers. |
Brain operations
| Skill | What it does |
|---|---|
| enrich | Tiered enrichment (Tier 1/2/3). Creates and updates person/company pages with compiled truth and timelines. |
| query | 3-layer search with synthesis and citations. Says "the brain doesn't have info on X" instead of hallucinating. |
| maintain | Periodic health: stale pages, orphans, dead links, citation audit, back-link enforcement, tag consistency. v0.23 adds the dream cycle's synthesize + patterns phases ... overnight conversation transcripts become reflections, originals, and 25-year patterns. |
| citation-fixer | Scans pages for missing or malformed citations. Fixes format to match the standard. |
| repo-architecture | Where new brain files go. Decision protocol: primary subject determines directory, not format. |
| publish | Share brain pages as password-protected HTML. Zero LLM calls. |
| data-research | Structured data research with parameterized YAML recipes. Extract investor updates, expenses, company metrics from email. |
Operational
| Skill | What it does |
|---|---|
| daily-task-manager | Task lifecycle with priority levels (P0-P3). Stored as searchable brain pages. |
| daily-task-prep | Morning prep: calendar lookahead with brain context per attendee, open threads, task review. |
| cron-scheduler | Schedule staggering (5-min offsets), quiet hours (timezone-aware with wake-up override), idempotency. |
| reports | Timestamped reports with keyword routing. "What's the latest briefing?" finds it instantly. |
| cross-modal-review | Quality gate via second model. Refusal routing: if one model refuses, silently switch. |
| webhook-transforms | External events (SMS, meetings, social mentions) converted into brain pages with entity extraction. |
| testing | Validates every skill has SKILL.md with frontmatter, manifest coverage, resolver coverage. |
| skill-creator | Create new skills following the conformance standard. MECE check against existing skills. |
| skillify | The "skillify it!" meta-skill. Orchestrates the 10-step loop so failures become durable skills: scaffold the stubs via gbrain skillify scaffold, write the real logic, gate with gbrain skillify check + gbrain check-resolvable. |
| skillpack-check | Agent-readable gbrain health report. Exit code for CI; JSON for debugging. Cron-friendly. |
| smoke-test | 8 post-restart health checks with auto-fix (Bun, CLI, DB, worker, Zod CJS, gateway, API key, brain repo). Drop-in user tests at ~/.gbrain/smoke-tests.d/*.sh. |
| minion-orchestrator | Background work in one skill. Shell jobs via gbrain jobs submit shell (operator/CLI, MCP blocks protected names) and LLM subagents via gbrain agent run. Parent-child DAGs, child_done inbox, durability across worker restarts. |
Identity and setup
| Skill | What it does |
|---|---|
| soul-audit | 6-phase interview generating SOUL.md (agent identity), USER.md (user profile), ACCESS_POLICY.md (4-tier privacy), HEARTBEAT.md (operational cadence). |
| setup | Auto-provision PGLite or Supabase. First import. GStack detection. |
| migrate | Universal migration from Obsidian, Notion, Logseq, markdown, CSV, JSON, Roam. |
| briefing | Daily briefing with meeting context, active deals, and citation tracking. |
Conventions
Cross-cutting rules in skills/conventions/:
- quality.md ... citations, back-links, notability gate, source attribution
- brain-first.md ... 5-step lookup before any external API call
- model-routing.md ... which model for which task
- test-before-bulk.md ... test 3-5 items before any batch operation
- cross-modal.yaml ... review pairs and refusal routing chain
How It Works
Signal arrives (meeting, email, tweet, link)
-> Signal detector captures ideas + entities (parallel, never blocks)
-> Brain-ops: check the brain first (gbrain search, gbrain get)
-> Respond with full context
-> Write: update brain pages with new information + citations
-> Auto-link: typed relationships extracted on every write (zero LLM calls)
-> Sync: gbrain indexes changes for next query
Every cycle adds knowledge. The agent enriches a person page after a meeting. Next time that person comes up, the agent already has context. The difference compounds daily.
The system gets smarter on its own. Entity enrichment auto-escalates: a person mentioned once gets a stub page (Tier 3). After 3 mentions across different sources, they get web + social enrichment (Tier 2). After a meeting or 8+ mentions, full pipeline (Tier 1). The brain learns who matters without being told. Deterministic classifiers improve over time via a fail-improve loop that logs every LLM fallback and generates better regex patterns from the failures. gbrain doctor shows the trajectory: "intent classifier: 87% deterministic, up from 40% in week 1."
"Prep me for my meeting with Jordan in 30 minutes" ... pulls dossier, shared history, recent activity, open threads
"What have I said about the relationship between shame and founder performance?" ... searches YOUR thinking, not the internet
Minions: your sub-agents won't drop work anymore
A durable, Postgres-native job queue built into the brain. Every long-running agent task is now a job that survives gateway restarts, streams progress, gets paused / resumed / steered mid-flight, and shows up in gbrain jobs list. Zero infra beyond your existing brain.
The production numbers that matter
Here's my personal OpenClaw deployment: one Render container. Supabase Postgres holding a 45,000-page brain. 19 cron jobs firing on schedule. Real gateway load from real daily work. The task: pull a month of my social posts from an external API and ingest them end-to-end into the brain as a structured page.
| Minions | sessions_spawn |
|
|---|---|---|
| Wall time | 753ms | >10,000ms (gateway timeout) |
| Token cost | $0.00 | ~$0.03 per run |
| Success rate | 100% | 0% (couldn't even spawn) |
| Memory/job | ~2 MB | ~80 MB |
Under that 19-cron load, sub-agent spawn couldn't clear the 10-second gateway wall. Minions landed it in under a second for zero tokens. Scaling: 19,240 posts across 36 months, single bash loop, ~15 min total, $0.00. Sub-agents: ~9 min best case, ~$1.08 in tokens, ~40% spawn failure. Lab: durability ∞ (SIGKILL mid-flight, 10/10 rescued), throughput ~10× faster, fan-out ~21× with no failure wall, memory ~400× less.
Full benchmarks live in gbrain-evals.
The routing rule
Deterministic (same input → same steps → same output) → Minions Judgment (input requires assessment or decision) → Sub-agents
Pull posts, parse JSON, write a brain page, run a sync — deterministic. $0 tokens, survives restart, millisecond runtime. Triage the inbox, assess meeting priority, decide if a cold email deserves a reply — judgment. What sub-agents are actually good at. minion_mode: pain_triggered (the default) automates the routing.
What's fixed
The six daily pains — spawn storms, agents that stop responding, forgotten dispatches, gateway crashes mid-run, runaway grandchildren, debugging soup — all belonged to the "deterministic work through a reasoning model" mistake. Minions fixes them by not making that mistake: max_children cap, timeout_ms + AbortSignal, child_done inbox, full parent_job_id/depth/transcript per job, Postgres durability with stall detection, cascade cancel via recursive CTE. Plus idempotency keys, attachment validation, removeOnComplete, and gbrain jobs smoke that proves the install in half a second.
gbrain jobs smoke # verify install
gbrain jobs submit sync --params '{}' # fire a background job
gbrain jobs stats # health dashboard
gbrain jobs supervisor --concurrency 4 # canonical: auto-restarting worker (Postgres only)
gbrain jobs work --concurrency 4 # raw worker (no crash recovery — prefer `supervisor`)
gbrain jobs supervisor keeps the worker alive across crashes with exponential backoff, atomic PID locking, structured audit events at ~/.gbrain/audit/supervisor-*.jsonl, and a start --detach / status --json / stop subcommand surface for agents. In containers it runs as PID 1; on systemd hosts it's the child of gbrain-worker.service. Full deployment guide: docs/guides/minions-deployment.md.
Read skills/minion-orchestrator/SKILL.md for parent-child DAGs, fan-in collection, steering via inbox.
Minions is not incrementally better than sub-agents for background work. It's categorically different. 753ms vs gateway timeout. $0 vs tokens. 100% vs couldn't-spawn. If your agent does deterministic work on a schedule, it runs on Minions now.
Health check and self-heal
Minions is canonical as of v0.11.1 — every gbrain upgrade runs the migration automatically (schema → smoke → prefs → host rewrites → env-aware autopilot install). If you ever want to verify manually or wire a cron into your morning briefing:
gbrain doctor # half-migrated state? prints loud banner + exits non-zero
gbrain skillpack-check --quiet # exit 0/1/2 for pipeline gating
gbrain skillpack-check | jq # full JSON: {healthy, summary, actions[], doctor, migrations}
If anything's off, actions[] tells you the exact command to run. For deeper troubleshooting: docs/guides/minions-fix.md.
Moving gateway crons to Minions (deterministic scripts, zero LLM tokens per fire): docs/guides/minions-shell-jobs.md.
Durable agents: gbrain agent (v0.15)
Your subagent runs survive crashes now. OpenClaw died mid-run? The worker re-claims on restart and replays from the last committed turn. Fan-out across 50 shards, one shard crashes — the aggregator still claims after every child reaches a terminal state and writes a mixed-outcome summary. Tool calls persist as a two-phase ledger (pending → complete | failed) so replay is safe by construction, not by hope.
# Submit a single-subagent run
gbrain agent run "summarize my last 10 journal pages"
# Fan out N prompts across N subagent children + 1 aggregator
gbrain agent run "analyze every page" \
--fanout-manifest manifests/pages.json \
--subagent-def analyzer
# Tail a running job (heartbeat per turn + full transcript on completion)
gbrain agent logs 1247 --follow --since 5m
Durability is the point: every Anthropic turn commits to subagent_messages, every tool call to subagent_tool_executions. Worker kills, OpenClaw crashes, timeouts — all resumable. Host repos (your OpenClaw, etc.) ship their own subagent definitions via GBRAIN_PLUGIN_PATH + a gbrain.plugin.json manifest: see docs/guides/plugin-authors.md. Requires ANTHROPIC_API_KEY on the worker.
Skillify: say "skillify it!" and the bug becomes structurally impossible to repeat
Your OpenClaw hit a new failure. You fix it once in conversation. You say "skillify it!" And now the fix is permanent: a SKILL.md with triggers, a deterministic script with tests, a routing fixture the agent re-evaluates daily, a filing audit that keeps the output from drifting. Ten items. Every one required. The bug can't recur.
Hermes and similar agent frameworks auto-create skills as a background behavior. Fine until you don't know what the agent shipped. Checklists decay. Tests drift. Resolver entries get stale. Six months later it's an opaque pile nobody has read, nobody has tested, and nobody is sure still works. GBrain ships the same capability except the human stays in the loop and every step is a command you can run.
The four verbs you need (v0.19)
# 1. Scaffold all 5 stub files for a new skill in one shot.
gbrain skillify scaffold webhook-verify \
--description "verify ngrok webhooks" \
--triggers "verify the webhook,check tunnel" \
--writes-pages --writes-to people/,companies/
# 2. Replace the SKILLIFY_STUB sentinels with real logic + real tests.
$EDITOR skills/webhook-verify/scripts/webhook-verify.mjs
$EDITOR test/webhook-verify.test.ts
# 3. Run the 10-item audit: SKILL.md exists, script exists, unit + E2E tests,
# LLM evals, resolver entry, trigger eval, check-resolvable gate, brain filing.
gbrain skillify check skills/webhook-verify/scripts/webhook-verify.mjs
# 4. Verify the whole tree: reachability, MECE overlap, DRY, routing gaps,
# filing audit, SKILLIFY_STUB sentinels (fails if any skill still has one).
gbrain check-resolvable # warnings advisory, errors block
gbrain check-resolvable --strict # warnings block too (CI opt-in)
Idempotent re-runs. --force regenerates stub files but NEVER duplicates a resolver row.
Scaffold completes in under 2 seconds. The real work (your rule, your script, your tests)
is what you spend time on. Everything else is boilerplate the CLI writes for you.
gbrain routing-eval — catch the routing gaps your users actually hit
Drop a routing-eval.jsonl fixture next to any skill. Each line is {intent, expected_skill, ambiguous_with?}. gbrain check-resolvable runs the structural layer by default; gbrain routing-eval runs the same structural layer as a dedicated CI verb. The --llm flag is
accepted as a placeholder for a future LLM tie-break layer; in this release it emits a stderr
notice and runs structural only. False positives (wrong skill matched), missed routes (no
skill matched), and tautological fixtures (intent copies trigger verbatim) all surface as
specific advisories with the exact file:line to fix.
Works on your OpenClaw, not just gbrain's repo
v0.19 teaches gbrain check-resolvable to accept AGENTS.md as a resolver file alongside
RESOLVER.md, at either the skills directory OR one level up (OpenClaw-native workspace-root
layout). The skill manifest auto-derives from walking skills/*/SKILL.md when manifest.json
is missing. Set OPENCLAW_WORKSPACE=~/your-openclaw/workspace and everything just works:
export OPENCLAW_WORKSPACE=~/your-openclaw/workspace
gbrain check-resolvable --verbose
# Auto-detects: AGENTS.md at workspace root, 107 skills derived from SKILL.md walk,
# 15 unreachable errors surfaced, 108 advisory warnings for overlaps and gaps.
First run on a real OpenClaw deployment found 15 unreachable skills out of 102 — about 15% of the tree was dark. The essay's "skills the agent can never reach" footgun, now visible.
gbrain skillpack install — drop 25 curated skills into your OpenClaw
The skills gbrain ships are a curated bundle. Install them into your workspace with
dependency closure (shared conventions come along), per-file diff protection (your local
edits are never clobbered without --overwrite-local), a file lock that serializes
concurrent installers, and an atomic managed-block update to your AGENTS.md so you can
see exactly what gbrain wrote.
gbrain skillpack list # 25 curated skills
gbrain skillpack install brain-ops # one skill + its shared conventions
gbrain skillpack install --all # the full bundle
gbrain skillpack install brain-ops --dry-run # preview; no writes
gbrain skillpack diff brain-ops # compare bundle vs your local copy
Re-running is safe. The managed-block markers in your AGENTS.md let skillpack install
accumulate rows across separate single-skill installs instead of overwriting each other.
A receipt comment inside the fence (<!-- gbrain:skillpack:manifest cumulative-slugs="..." -->)
tracks what gbrain has installed across runs. install --all is the only path that prunes;
per-skill install never deletes what it didn't install. If you hand-add a row inside the fence,
gbrain preserves it on reinstall and emits a stderr notice telling your agent to investigate.
Skillify is the piece that makes the skills tree survive six months of compounding work.
Read skills/skillify/SKILL.md for the full 10-item checklist
and the anti-patterns it catches.
Storage tiering: keep bulk content out of git (v0.22.11)
When your brain crosses 100K files and bulk machine-generated content (tweets, articles, transcripts) becomes the size driver, declare which directories belong in git and which live in the database only.
# gbrain.yml at the brain repo root
storage:
db_tracked:
- people/
- companies/
- deals/
db_only:
- media/x/
- media/articles/
- meetings/transcripts/
gbrain sync auto-manages your .gitignore for db_only paths. gbrain export --restore-only --repo .
repopulates missing files from the database (container restart, fresh clone, accidental rm).
gbrain storage status shows the tier breakdown.
Full guide: docs/storage-tiering.md.
Getting Data In
GBrain ships integration recipes that your agent sets up for you. Each recipe tells the agent what credentials to ask for, how to validate, and what cron to register.
| Recipe | Requires | What It Does |
|---|---|---|
| Public Tunnel | — | Fixed URL for MCP + voice (ngrok Hobby $8/mo) |
| Credential Gateway | — | Gmail + Calendar access |
| Voice-to-Brain | ngrok-tunnel | Phone calls to brain pages (Twilio + OpenAI Realtime) |
| Email-to-Brain | credential-gateway | Gmail to entity pages |
| X-to-Brain | — | Twitter timeline + mentions + deletions |
| Calendar-to-Brain | credential-gateway | Google Calendar to searchable daily pages |
| Meeting Sync | — | Circleback transcripts to brain pages with attendees |
| Restart Sweep | OpenClaw + Telegram | Detect dropped Telegram messages after OpenClaw gateway restarts |
Data research recipes extract structured data from email into tracked brain pages. Built-in recipes for investor updates (MRR, ARR, runway, headcount), expense tracking, and company metrics. Create your own with gbrain research init.
Run gbrain integrations to see status.
GBrain + GStack
GStack is the engine. GBrain is the mod.
- GStack = coding skills (ship, review, QA, investigate, office-hours, retro). 70,000+ stars, 30,000 developers per day. When your agent codes on itself, it uses GStack.
- GBrain = everything-else skills (brain ops, signal detection, ingestion, enrichment, cron, reports, identity). When your agent remembers, thinks, and operates, it uses GBrain.
hosts/gbrain.ts= the bridge. Tells GStack's coding skills to check the brain before coding.
gbrain init detects if GStack is installed and reports mod status. If GStack isn't there, it tells you how to get it.
Architecture
┌──────────────────┐ ┌───────────────┐ ┌──────────────────┐
│ Brain Repo │ │ GBrain │ │ AI Agent │
│ (git) │ │ (retrieval) │ │ (read/write) │
│ │ │ │ │ │
│ markdown files │───>│ Postgres + │<──>│ 29 skills │
│ = source of │ │ pgvector │ │ define HOW to │
│ truth │ │ │ │ use the brain │
│ │<───│ hybrid │ │ │
│ human can │ │ search │ │ RESOLVER.md │
│ always read │ │ (vector + │ │ routes intent │
│ & edit │ │ keyword + │ │ to skill │
│ │ │ RRF) │ │ │
└──────────────────┘ └───────────────┘ └──────────────────┘
The repo is the system of record. GBrain is the retrieval layer. The agent reads and writes through both. Human always wins... edit any markdown file and gbrain sync picks up the changes.
For multi-machine setups (cross-machine thin client) and multi-worktree setups (per-worktree code engine + shared remote artifacts), see docs/architecture/topologies.md.
The Knowledge Model
Every page follows the compiled truth + timeline pattern:
---
type: concept
title: Do Things That Don't Scale
tags: [startups, growth, pg-essay]
---
Paul Graham's argument that startups should do unscalable things early on.
The key insight: the unscalable effort teaches you what users actually
want, which you can't learn any other way.
---
- 2013-07-01: Published on paulgraham.com
- 2024-11-15: Referenced in batch W25 kickoff talk
Above the ---: compiled truth. Your current best understanding. Gets rewritten when new evidence changes the picture. Below: timeline. Append-only evidence trail. Never edited, only added to.
Knowledge Graph
Pages aren't just text. Every mention of a person, company, or concept becomes a typed link in a structured graph. The brain wires itself.
Write a meeting page mentioning Alice and Acme AI
-> Auto-link extracts entity refs from content (zero LLM calls)
-> Infers types: meeting page + person ref => `attended`
"CEO of X" pattern => `works_at`
"invested in" => `invested_in`
"advises", "advisor" => `advises`
"founded", "co-founded" => `founded`
-> Reconciles stale links: edits remove links no longer in content
-> Backlinks rank well-connected entities higher in search
gbrain graph-query people/alice --type attended --depth 2
# returns who Alice met with, transitively
The graph powers questions vector search can't: "who works at Acme AI?", "what has Bob invested in?", "find the connection between Alice and Carol". Backfill an existing brain in one command:
gbrain extract links --source db # wire up the existing 29K pages
gbrain extract timeline --source db # extract dated events from markdown timelines
Then ask graph questions or watch the search ranking improve. Benchmarked side-by-side against ripgrep-BM25, vector-only RAG (same embedder), and gbrain-with-graph-disabled: gbrain lands P@5 49.1%, R@5 97.9% on a 240-page Opus-generated rich-prose corpus, beating hybrid-nograph by +31.4 points P@5. Isolate the contribution: v0.11→v0.12 moved the same gbrain codebase from P@5 22.1% → 49.1% on identical inputs, so typed-link extract quality is load-bearing. Full scorecards + reproducible corpus: gbrain-evals.
Search
Hybrid search: vector + keyword + RRF fusion + multi-query expansion + 4-layer dedup.
Query
-> Intent classifier (entity? temporal? event? general?)
-> Multi-query expansion (Claude Haiku)
-> Vector search (HNSW cosine) + Keyword search (tsvector)
-> RRF fusion: score = sum(1/(60 + rank))
-> Cosine re-scoring + compiled truth boost
-> 4-layer dedup + compiled truth guarantee
-> Results
Keyword alone misses conceptual matches. Vector alone misses exact phrases. RRF gets both. Search quality is benchmarked and reproducible: gbrain eval --qrels queries.json measures P@k, Recall@k, MRR, and nDCG@k. A/B test config changes before deploying them.
Why it works: many strategies in concert
The brain isn't one trick. Every retrieval question goes through ~20 deterministic techniques layered together. No single one is magic; the win comes from stacking them so each layer covers what the others miss.
Question
│
├─ INGESTION (every put_page)
│ ├─ Recursive markdown chunking (or semantic / LLM-guided)
│ ├─ Embedding cache invalidation on edit
│ └─ Idempotent imports (content-hash dedup)
│
├─ GRAPH EXTRACTION (auto-link post-hook, zero LLM)
│ ├─ Entity-ref regex (markdown links + bare slugs)
│ ├─ Code-fence stripping (no false-positive slugs in code blocks)
│ ├─ Typed inference cascade (FOUNDED → INVESTED → ADVISES → WORKS_AT)
│ ├─ Page-role priors (partner-bio language → invested_in)
│ ├─ Within-page dedup (same target collapses to one link)
│ ├─ Stale-link reconciliation (edits remove dropped refs)
│ └─ Multi-type link constraint (same person can works_at AND advises)
│
├─ SEARCH PIPELINE (every query)
│ ├─ Intent classifier (entity / temporal / event / general — auto-routes)
│ ├─ Multi-query expansion (Haiku rephrases the question 3 ways)
│ ├─ Vector search (HNSW cosine over OpenAI embeddings)
│ ├─ Keyword search (Postgres tsvector + websearch_to_tsquery)
│ ├─ Source-aware ranking (curated dirs outrank chat/daily swamp at SQL layer)
│ ├─ Hard-exclude (test/ archive/ attachments/ .raw/ filtered before retrieval)
│ ├─ Reciprocal Rank Fusion (score = sum 1/(60+rank) across both)
│ ├─ Cosine re-scoring (re-rank chunks against actual query embedding)
│ ├─ Compiled-truth boost (assessments outrank timeline noise)
│ ├─ Backlink boost (well-connected entities rank higher)
│ └─ Source-aware dedup (one CT chunk per page guaranteed)
│
├─ GRAPH TRAVERSAL (relational queries)
│ ├─ Recursive CTE with cycle prevention (visited-array check)
│ ├─ Type-filtered edges (--type works_at, attended, etc.)
│ ├─ Direction control (in / out / both)
│ └─ Depth-capped (≤10 for remote MCP; DoS prevention)
│
└─ AGENT WORKFLOW (graph-confident hybrid)
├─ Graph-query first (high-precision typed answers)
├─ Grep fallback when graph returns nothing
└─ Graph hits ranked first in top-K (better P@K and R@K)
End-to-end on the BrainBench v1 corpus (240 rich-prose pages, before/after PR #188):
| Metric | BEFORE PR #188 | AFTER PR #188 | Δ |
|---|---|---|---|
| Precision@5 | 39.2% | 44.7% | +5.4 pts |
| Recall@5 | 83.1% | 94.6% | +11.5 pts |
| Correct in top-5 | 217 | 247 | +30 |
| Graph-only F1 (ablation) | 57.8% (grep) | 86.6% | +28.8 pts |
Plus 5 orthogonal capability checks (identity resolution, temporal queries, performance at 10K-page scale, robustness to malformed input, MCP operation contract). All pass. Full report: gbrain-evals.
The point: each technique handles a class of inputs the others miss. Vector search misses exact slug refs; keyword catches them. Keyword misses conceptual matches; vector catches them. RRF picks the best of both. Compiled-truth boost keeps assessments above timeline noise. Auto-link extraction wires the graph that lets backlink boost rank well-connected entities higher. Graph traversal answers questions search alone can't reach. The agent picks graph-first for precision and falls back to keyword for recall. All deterministic, all in concert, all measured.
Voice
Call a phone number. Your AI answers. It knows who's calling, pulls their full context from the brain, and responds like someone who actually knows your world. When the call ends, a brain page appears with the transcript, entity detection, and cross-references.
The voice recipe ships with GBrain: Voice-to-Brain. WebRTC works in a browser tab with zero setup. A real phone number is optional.
Engine Architecture
CLI / MCP Server
(thin wrappers, identical operations)
|
BrainEngine interface (pluggable)
|
+--------+--------+
| |
PGLiteEngine PostgresEngine
(default) (Supabase)
| |
~/.gbrain/ Supabase Pro ($25/mo)
brain.pglite Postgres + pgvector
embedded PG 17.5
gbrain migrate --to supabase|pglite
(bidirectional migration)
PGLite: embedded Postgres, no server, zero config. When your brain outgrows local (1000+ files, multi-device), gbrain migrate --to supabase moves everything.
File Storage
Brain repos accumulate binaries. GBrain has a three-stage migration:
gbrain files mirror <dir> # copy to cloud, local untouched
gbrain files redirect <dir> # replace local with .redirect pointers
gbrain files clean <dir> # remove pointers, cloud only
gbrain files restore <dir> # download everything back (undo)
Storage backends: S3-compatible (AWS, R2, MinIO), Supabase Storage, or local.
Commands
SETUP
gbrain init [--supabase|--url] Create brain (PGLite default)
gbrain migrate --to supabase|pglite Bidirectional engine migration
gbrain upgrade Self-update with feature discovery
PAGES
gbrain get <slug> Read a page (fuzzy slug matching)
gbrain put <slug> [< file.md] Write/update (auto-versions)
gbrain delete <slug> Delete a page
gbrain list [--type T] [--tag T] List with filters
SEARCH
gbrain search <query> Keyword search (tsvector)
gbrain query <question> Hybrid search (vector + keyword + RRF)
IMPORT
gbrain import <dir> [--no-embed] [--workers N]
Import markdown (idempotent)
gbrain sync [--repo <path>] [--workers N]
Git-to-brain incremental sync
(>100-file diffs auto-parallelize 4 workers on Postgres)
gbrain export [--dir ./out/] Export to markdown
FILES
gbrain files list|upload|sync|verify File storage operations
EMBEDDINGS
gbrain embed [<slug>|--all|--stale] Generate/refresh embeddings
LINKS + GRAPH
gbrain link|unlink|backlinks Cross-reference management
gbrain extract links|timeline|all Batch backfill from existing pages
(--source db|fs, --type, --since, --dry-run)
gbrain graph-query <slug> Typed traversal (--type T --depth N
--direction in|out|both)
JOBS (Minions)
gbrain jobs submit <name> [--params JSON] [--follow] Submit a background job
gbrain jobs list [--status S] [--queue Q] List jobs with filters
gbrain jobs get|cancel|retry|delete <id> Manage job lifecycle
gbrain jobs prune [--older-than 30d] Clean completed/dead jobs
gbrain jobs stats Job health dashboard
gbrain jobs smoke One-command health check
gbrain jobs work [--queue Q] [--concurrency N] Start worker daemon
SKILLS (v0.19)
gbrain skillify scaffold <name> Create 5 stub files + idempotent resolver row
gbrain skillify check [path] 10-item audit of a skill
gbrain skillpack list Print the 25 curated skills in the bundle
gbrain skillpack install <name> Copy one skill + its shared conventions into target
gbrain skillpack install --all Install the full curated bundle
gbrain skillpack diff <name> Per-file diff: bundle vs target workspace
gbrain check-resolvable [--strict] Resolver audit (reachability, MECE, DRY, routing, filing,
SKILLIFY_STUB). Accepts RESOLVER.md OR AGENTS.md.
gbrain routing-eval [--llm] [--json] Intent→skill routing accuracy on fixtures
EVAL
gbrain eval --qrels <path> Legacy IR-eval (P@k, R@k, MRR, nDCG@k against ground truth)
gbrain eval export [--since DUR] Stream captured eval_candidates as NDJSON (BrainBench-Real)
gbrain eval prune --older-than DUR Retention cleanup for eval_candidates (requires window)
gbrain eval replay --against FILE Replay captured queries vs current build (Jaccard@k, top-1, latency Δ)
gbrain eval longmemeval <dataset> Run public LongMemEval against gbrain hybrid retrieval (v0.28.8)
[--limit N] [--retrieval-only] [--keyword-only] [--expansion]
[--top-k K] [--model M] [--output FILE]
ADMIN
gbrain doctor [--json] [--fast] Health checks (resolver, skills, DB, embeddings)
gbrain doctor --fix [--dry-run] Auto-fix DRY violations (delegate inlined rules to conventions)
gbrain doctor --locks List idle-in-tx backends (57014 diagnostic, Postgres only)
gbrain stats Brain statistics
gbrain models Show live model routing (tier defaults,
per-task overrides, alias map, source-of-truth).
v0.31.12: tier system + recipe-models merge.
Power-user override:
gbrain config set models.default opus
gbrain config set models.tier.deep opus
gbrain models doctor 1-token reachability probe for each configured
chat/expansion model. Catches `model_not_found`
before the next agent run silently degrades.
[--skip=<provider>] [--json]
gbrain serve MCP server (stdio)
gbrain serve --http [--port 3131] HTTP MCP server with OAuth 2.1 + admin dashboard
[--token-ttl 3600] [--enable-dcr]
[--public-url URL] [--log-full-params]
gbrain auth create|list|revoke|test Legacy bearer token management
gbrain auth register-client <name> Register an OAuth 2.1 client
--grant-types client_credentials,authorization_code
--scopes "read write admin"
gbrain auth revoke-client <client_id> Revoke an OAuth 2.1 client (cascade purges
active tokens + auth codes via FK CASCADE)
# OAuth 2.1 clients can also be registered from the /admin dashboard or
# programmatically via oauthProvider.registerClientManual() for host-repo wrappers.
gbrain integrations Integration recipe dashboard
gbrain sources list|add|remove|... Multi-source brain management (v0.18)
v0.28.2: --url <https://...> registers a federated
remote git repo; clone is auto-managed under
$GBRAIN_HOME/clones/<id>/ and re-cloned on sync if
it goes missing. Also exposed via MCP for remote
agent setup (whoami + sources_{add,list,remove,status}).
gbrain dream [--dry-run] [--phase N] 11-phase maintenance cycle (lint→backlinks→sync→synthesize
→extract→patterns→recompute_emotional_weight→consolidate
→embed→orphans→purge). v0.23 added synthesize + patterns.
v0.29 added emotional-weight recompute. v0.30.2: synthesize
chunks fat transcripts. v0.31: consolidate promotes hot facts
into takes overnight.
gbrain dream --input <file> Ad-hoc transcript synthesis (implies --phase synthesize)
gbrain dream --date YYYY-MM-DD Synthesize a single day; --from/--to for backfill ranges
# v0.31 Hot Memory: cross-session facts queryable in real time.
gbrain recall <entity> List active facts for an entity (newest first)
gbrain recall --since "1h ago" Recency-filtered recall
gbrain recall --session <id> Facts captured in a session id
gbrain recall --today Markdown render with kind icons (📅🎯🤝💭📌)
gbrain recall --supersessions Audit log of auto-overwritten facts
gbrain recall --grep <text> Substring filter (case-insensitive)
gbrain recall --as-context Prompt-injection-ready markdown for headless agents
gbrain recall --json Structured output with effective_confidence per row
gbrain forget <fact-id> Expire a fact (soft delete; never hard-DELETE)
gbrain check-backlinks check|fix Back-link enforcement
gbrain lint [--fix] LLM artifact detection
gbrain repair-jsonb [--dry-run] Repair v0.12.0 double-encoded JSONB (Postgres)
gbrain orphans [--json] [--count] Find pages with zero inbound wikilinks
gbrain transcribe <audio> Transcribe audio (Groq Whisper)
gbrain research init <name> Scaffold a data-research recipe
gbrain research list Show available recipes
Run gbrain --help for the full reference.
Origin Story
I was setting up my OpenClaw agent and started a markdown brain repo. One page per person, one page per company, compiled truth on top, timeline on the bottom. Within a week: 10,000+ files, 3,000+ people, 13 years of calendar data, 280+ meeting transcripts, 300+ captured ideas.
The agent runs while I sleep. The dream cycle scans every conversation, enriches missing entities, fixes broken citations, consolidates memory. I wake up and the brain is smarter than when I went to sleep.
The skills in this repo are those patterns, generalized. What took 11 days to build by hand ships as a mod you install in 30 minutes.
Docs
For agents:
- skills/RESOLVER.md ... Start here. The skill dispatcher.
- Individual skill files ... 28 standalone instruction sets (25 ship in the curated
gbrain skillpack installbundle) - GBRAIN_SKILLPACK.md ... Legacy reference architecture
- Getting Data In ... Integration recipes and data flow
- GBRAIN_VERIFY.md ... Installation verification
For humans:
- GBRAIN_RECOMMENDED_SCHEMA.md ... Brain repo directory structure
- Thin Harness, Fat Skills ... Architecture philosophy
- ENGINES.md ... Pluggable engine interface
Reference:
- GBRAIN_V0.md ... Full product spec
- CHANGELOG.md ... Version history
Benchmarks:
- gbrain-evals ... BrainBench, the sibling repo that holds the eval harness, corpus, scorecards, and 4-adapter comparisons. Depends on gbrain; not installed alongside gbrain.
Contributing
See CONTRIBUTING.md. Run bun run test for the parallel unit-test fast loop (~85s on a Mac dev box, 3700+ tests) or bun run verify for the pre-push gate (privacy + jsonb + progress + test-isolation + wasm + admin-build + typecheck). For the full local CI gate (gitleaks + unit + all 29 E2E files in Docker, the same checks GH Actions runs), use bun run ci:local ... or bun run ci:local:diff for the diff-aware subset during fast iteration.
If you're working on retrieval or any of the search/embedding/ranking surface, set GBRAIN_CONTRIBUTOR_MODE=1 in your shell rc and use gbrain eval replay to gate your changes against a snapshot of real captured queries — the dev loop is documented in docs/eval-bench.md. Capture is off by default for production users (no surprise data accumulation); the env var is the contributor opt-in.
PRs welcome for: new enrichment APIs, performance optimizations, additional engine backends, new skills following the conformance standard in skills/skill-creator/SKILL.md.
License
MIT
