Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
405 changes: 267 additions & 138 deletions .context/TASKS.md

Large diffs are not rendered by default.

6 changes: 4 additions & 2 deletions docs/home/contributing.md
Original file line number Diff line number Diff line change
Expand Up @@ -91,8 +91,10 @@ above: skip this section unless you are working on maintainer tooling.

Its first inhabitant is the out-of-band audit channel
(`ctxctl audit list|show|dismiss` plus the `ctxctl audit-relay` hook).
For what the channel does and how to run an audit, see
[Out-of-Band Audit Channel](../recipes/audit-channel.md).
This page covers only building and installing the binary. The full
workflow (running an auditor, relaying its findings into your working
session, dismissing them) is its own runbook:
**[Out-of-Band Audit Channel](../operations/runbooks/audit-channel.md)**.

### Build and Install

Expand Down
1 change: 1 addition & 0 deletions docs/operations/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ guidance on triaging the results.
| [New contributor](runbooks/new-contributor.md) | Onboarding: clone to first session | New contributors |
| [Codebase audit](runbooks/codebase-audit.md) | AST audits, magic strings, dead code, doc alignment | Before release, quarterly |
| [Docs semantic audit](runbooks/docs-semantic-audit.md) | Narrative gaps, weak pages, structural problems | Before release, after adding pages |
| [Out-of-band audit channel](runbooks/audit-channel.md) | Relay out-of-band audit findings into a working session (`ctxctl`) | Running discipline audits from a separate session |
| [Sanitize permissions](runbooks/sanitize-permissions.md) | Clean `.claude/settings.local.json` of over-broad grants | After heavy permission granting |
| [Architecture exploration](runbooks/architecture-exploration.md) | Systematic architecture docs across repos | New codebase onboarding, reviews |

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Out-of-Band Audit Channel
icon: lucide/scan-eye
---

![ctx](../images/ctx-banner.png)
![ctx](../../images/ctx-banner.png)

## The Problem

Expand All @@ -21,7 +21,7 @@ verbatim relay** — the same channel ctx already uses for
warnings. Agents echo those without filtering, every turn,
because the relay bypasses judgment.

This recipe shows how to run discipline audits **out of
This runbook shows how to run discipline audits **out of
band** (from a separate Claude Code session, on your
plan-billed subscription, not the working session's API) and
drop their findings onto the verbatim-relay channel so the
Expand Down Expand Up @@ -228,6 +228,6 @@ without touching ctx.
full design rationale + Open Questions
- [CONVENTIONS → User-Facing Surface Completeness](https://github.com/ActiveMemory/ctx/blob/main/.context/CONVENTIONS.md):
the canonical rule the surface audit enforces
- [Detecting and Fixing Drift](context-health.md):
- [Detecting and Fixing Drift](../../recipes/context-health.md):
programmatic drift detection that complements
judgment-based audits
18 changes: 5 additions & 13 deletions docs/recipes/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -451,19 +451,11 @@ format.

---

### [Out-of-Band Audit Channel](audit-channel.md)

Run discipline audits from a **separate session** and surface
their findings via **verbatim relay** — the one channel that
survives agent tunnel vision. The auditor drops a structured
report into `.context/audit/`; a hook relays it at the next
prompt; you dismiss it once addressed.

**Uses**: `ctxctl audit list`, `ctxctl audit show`,
`ctxctl audit dismiss`, `ctxctl audit-relay` (the maintainer-only
`ctxctl` binary; the auditor that produces reports is
project-specific — ctx's own `_ctx-surface-audit` is the
reference example)
### Out-of-Band Audit Channel

Maintainer-only tooling (the `ctxctl` binary, not the shipped `ctx`),
so it moved out of these user recipes into the contributor docs. See
**[Operations → Runbooks → Out-of-Band Audit Channel](../operations/runbooks/audit-channel.md)**.

---

Expand Down
6 changes: 4 additions & 2 deletions site/home/contributing/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -2570,8 +2570,10 @@ <h2 id="maintainer-tooling-ctxctl">Maintainer Tooling: <code>ctxctl</code><a cla
above: skip this section unless you are working on maintainer tooling.</p>
<p>Its first inhabitant is the out-of-band audit channel
(<code>ctxctl audit list|show|dismiss</code> plus the <code>ctxctl audit-relay</code> hook).
For what the channel does and how to run an audit, see
<a href="../../recipes/audit-channel/">Out-of-Band Audit Channel</a>.</p>
This page covers only building and installing the binary. The full
workflow (running an auditor, relaying its findings into your working
session, dismissing them) is its own runbook:
<strong><a href="../../operations/runbooks/audit-channel/">Out-of-Band Audit Channel</a></strong>.</p>
<h3 id="build-and-install">Build and Install<a class="headerlink" href="#build-and-install" title="Permanent link">&para;</a></h3>
<div class="language-bash highlight"><pre><span></span><code><span id="__span-4-1"><a id="__codelineno-4-1" name="__codelineno-4-1" href="#__codelineno-4-1"></a>make<span class="w"> </span>ctxctl<span class="w"> </span><span class="c1"># build into dist/ctxctl</span>
</span><span id="__span-4-2"><a id="__codelineno-4-2" name="__codelineno-4-2" href="#__codelineno-4-2"></a>make<span class="w"> </span>install-ctxctl<span class="w"> </span><span class="c1"># install dist/ctxctl to /usr/local/bin/ctxctl</span>
Expand Down
2 changes: 2 additions & 0 deletions site/operations/autonomous-loop/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1423,6 +1423,8 @@








Expand Down
2 changes: 2 additions & 0 deletions site/operations/hub-failure-modes/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -986,6 +986,8 @@








Expand Down
2 changes: 2 additions & 0 deletions site/operations/hub/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -986,6 +986,8 @@








Expand Down
7 changes: 7 additions & 0 deletions site/operations/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -986,6 +986,8 @@








Expand Down Expand Up @@ -1543,6 +1545,11 @@ <h2 id="runbooks">Runbooks<a class="headerlink" href="#runbooks" title="Permanen
<td>Before release, after adding pages</td>
</tr>
<tr>
<td><a href="runbooks/audit-channel/">Out-of-band audit channel</a></td>
<td>Relay out-of-band audit findings into a working session (<code>ctxctl</code>)</td>
<td>Running discipline audits from a separate session</td>
</tr>
<tr>
<td><a href="runbooks/sanitize-permissions/">Sanitize permissions</a></td>
<td>Clean <code>.claude/settings.local.json</code> of over-broad grants</td>
<td>After heavy permission granting</td>
Expand Down
2 changes: 2 additions & 0 deletions site/operations/integrations/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1849,6 +1849,8 @@








Expand Down
2 changes: 2 additions & 0 deletions site/operations/migration/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1428,6 +1428,8 @@








Expand Down
2 changes: 2 additions & 0 deletions site/operations/release/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -986,6 +986,8 @@








Expand Down
32 changes: 32 additions & 0 deletions site/operations/runbooks/architecture-exploration/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -988,6 +988,8 @@








Expand Down Expand Up @@ -1252,6 +1254,36 @@



<li class="md-nav__item">
<a href="../audit-channel/" class="md-nav__link">



<svg xmlns="http://www.w3.org/2000/svg" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" class="lucide lucide-scan-eye" viewBox="0 0 24 24"><path d="M3 7V5a2 2 0 0 1 2-2h2M17 3h2a2 2 0 0 1 2 2v2M21 17v2a2 2 0 0 1-2 2h-2M7 21H5a2 2 0 0 1-2-2v-2"/><circle cx="12" cy="12" r="1"/><path d="M18.944 12.33a1 1 0 0 0 0-.66 7.5 7.5 0 0 0-13.888 0 1 1 0 0 0 0 .66 7.5 7.5 0 0 0 13.888 0"/></svg>

<span class="md-ellipsis">


Out-of-Band Audit Channel



</span>



</a>
</li>










<li class="md-nav__item">
<a href="../sanitize-permissions/" class="md-nav__link">

Expand Down
Loading
Loading