Adapters expose field specs, read/search behavior, and constrained CRUD per module instead of giving agents raw filesystem access.
Write proposals, audit rows, loop feedback, backups, vault index data, booking scans, Craigslist archives, CRM imports, and Google Workspace state live under the HQ data root.
Techniques
Bearer auth, loopback bind defaults, 64 KiB JSON body cap, no-store headers, nosniff, DENY frame policy, and deny-all CSP.
Write proposal and confirm flow turns mutation requests into UUID-tracked records before applying changes.