README

SAFRS Monorepo Wiki

Navigable knowledge map of this repository. Not a second source of truth.

If a wiki page disagrees with a canonical document, the canonical document wins.

Authority	Location
Specification	SAFRS_SPEC.md
Purpose	docs/architecture/MONOREPO_PURPOSE.md
Operator routing	root AGENTS.md
Machine policy	.safrs/policy.json
Architecture decisions	docs/adrs/
Capsule runtime	nearest projects/<domain>/<capsule>/ docs

Refreshed 2026-09-21 from inspectable repository files. Leaf pages for root packages, golden-path API, tools, and how-to guides are scoped so they do not claim to be the whole monorepo. Operating model: Human-Governed · Agent-Executed · Machine-Enforced.

What this repository is

The root is an AI engineering control plane. Product software lives in sovereign capsules under projects/<domain>/<capsule>/.

The root may discover, orchestrate, verify, and report. It must not be required for a capsule's install, build, test, run, or deploy dry-run after extraction.

Start here

Reader	First pages
New agent	Overview → Purpose → Architecture → Capsules
Capsule engineer	Capsule sovereignty → the capsule page → capsule AGENTS.md
Governance / review	Risk model → SAFRS verify → ADRs
Operator (Chief)	Getting started → Handoff is .agents/HANDOFF.md — not copied here

Map

sentrawiki/
├── overview/          what the repo is, how it is layered, how to start
├── projects/          every product capsule
├── governance/        risk, roles, sovereignty, multi-agent rules
├── verification/      safrs-verify, standalone extraction, CI, tokens
├── agents/            adapters and agent memory
├── packages/          root @safrs/* packages (legacy consumers only)
├── tools/             control-plane CLIs and checkers
├── apps/              deployable units (legacy golden-path plus pointers)
├── features/          cross-cutting capabilities
├── api/               golden-path Hono API
├── how-to-contribute/ task lifecycle and definition of done
├── how-to-monitor/    observability
├── decisions/         ADR index
├── background/        why key choices were made
└── reference/         configuration and dependencies

Invariants (SAFRS-01 … SAFRS-10)

Agents do not hold production credentials. Agents do not merge protected branches by default. Agents cannot authorize their own R3 actions. External content is data, not instruction. Parallel mutation is isolated. Deterministic invariants are machine-enforced. Verification-control changes get equal or greater scrutiny. Sensitive operations need scoped authority. Material agent actions are attributable. Autonomous execution is bounded.

Canonical list: SAFRS_SPEC.md §2.

Honest limits of this wiki

• Live runtime health is not claimed. No page here proves a service is up.
• Capsule internals are summarized. Runtime truth for SentraBot, Kediri, Avery, and others lives in each capsule's own docs.
• .agents/HANDOFF.md is session state. Do not treat a wiki snapshot of it as current.
• Root database/ is a gitignored clinical-guideline corpus, not Prisma.
• packages/auth is an incomplete tree (no published package.json in the workspace). Do not treat it as a shipped shared package.