Jarbas
Assistant over a Markdown vault whose core is an action gate: every agent write passes through a gate that validates the plan before touching a file. Fail-closed by default, with an append-only journal and a regression certificate per run.
- Context
- An operable second brain over any markdown vault with a declared convention, built as an engine plus interfaces.
- Pressure
- Nothing may be hardcoded for one specific vault, and a local daemon is still attack surface.
- Decision
- A schema-first contract instead of a fixed structure, a mandatory session token outside health, CORS restricted to the interface origins, and decisions formalised as ADRs.
- Evidence
- A suite of 145 green tests, a resolved wikilink graph of 478 nodes and 1,631 edges on the validation vault, and reindexing with live progress.
- Impact
- The engine serves any vault that declares the schema, and the interface talks to it over an authenticated contract.











