branben · branben · Jul 26, 2026 · Jul 28, 2026 · Aug 5, 2026 · Aug 5, 2026
diff --git a/.beads-adversarial/.initialized.json b/.beads-adversarial/.initialized.json
diff --git a/.beads-adversarial/coo-task1.json b/.beads-adversarial/coo-task1.json
diff --git a/.beads-adversarial/coo-task2.json b/.beads-adversarial/coo-task2.json
diff --git a/.beads-adversarial/coo-task3.json b/.beads-adversarial/coo-task3.json
diff --git a/.beads-adversarial/coo-task4.json b/.beads-adversarial/coo-task4.json
diff --git a/.beads-adversarial/coo-task5.json b/.beads-adversarial/coo-task5.json
diff --git a/.beads-adversarial/coo-task6.json b/.beads-adversarial/coo-task6.json
diff --git a/.beads-adversarial/cto-task1.json b/.beads-adversarial/cto-task1.json
diff --git a/.beads-adversarial/cto-task2.json b/.beads-adversarial/cto-task2.json
diff --git a/.beads-adversarial/cto-task3.json b/.beads-adversarial/cto-task3.json
diff --git a/.beads-adversarial/cto-task4.json b/.beads-adversarial/cto-task4.json
diff --git a/.beads-adversarial/cto-task5.json b/.beads-adversarial/cto-task5.json
diff --git a/.beads-adversarial/cto-task6.json b/.beads-adversarial/cto-task6.json
diff --git a/.beads-adversarial/school-core-kah.coo.review.json b/.beads-adversarial/school-core-kah.coo.review.json
diff --git a/.beads-adversarial/school-core-kah.cto.review.json b/.beads-adversarial/school-core-kah.cto.review.json
diff --git a/.beads-adversarial/school-core-kah.reconcile.json b/.beads-adversarial/school-core-kah.reconcile.json
diff --git a/.beads-adversarial/school-core-kah.review.json b/.beads-adversarial/school-core-kah.review.json
diff --git a/.dev.vars b/.dev.vars
diff --git a/.entire/settings.json b/.entire/settings.json
diff --git a/.entire/settings.local.json b/.entire/settings.local.json
diff --git a/.github/workflows/gaia-guards-ci.yml b/.github/workflows/gaia-guards-ci.yml
@@ -270,6 +270,18 @@ jobs:
           fi
           echo "✓ No tracked .beads files"
 
+      - name: Check for tracked agent-runtime artifacts
+        run: |
+          # .beads-adversarial, .wrangler, .dev.vars, .entire are agent/runtime
+          # artifacts that must never be committed (HEALTHY_MAIN.md §4).
+          TRACKED_ARTIFACTS=$(git ls-files .beads-adversarial/ .wrangler/ .dev.vars .entire/ 2>/dev/null || true)
+          if [ -n "$TRACKED_ARTIFACTS" ]; then
+            echo "ERROR: Agent-runtime artifacts are tracked by git:"
+            echo "$TRACKED_ARTIFACTS"
+            exit 1
+          fi
+          echo "✓ No tracked agent-runtime artifacts"
+
       - name: Check for absolute file URLs
         run: |
           if git grep -n "file:///Users/" -- . \

diff --git a/.gitignore b/.gitignore
@@ -56,9 +56,9 @@ logs/
 .events.jsonl
 .feed.jsonl
 
-# --- AGENTS.md (internal AI instructions, not for public) ---
-AGENTS.md
-**/AGENTS.md
+# --- AGANTS.md (internal AI instructions, not for public) ---
+AGANTS.md
+**/AGANTS.md
 
 # --- Local runtime state ---
 daemon/
@@ -92,6 +92,7 @@ public/seed.html
 
 # --- AI / Dev Tooling (local state only) ---
 .beads/
+.beads-adversarial/
 .beadsignore
 .beadsha*
 .ai-tools/
@@ -101,7 +102,6 @@ public/seed.html
 .gaia_private/
 .cocoindex_code/
 .cursorrules
-.serena/
 .playwright-cli/
 scripts/gaia-*
 scripts/guardrail*
@@ -124,11 +124,13 @@ deacon/
 # CocoIndex Code (ccc)
 /.cocoindex_code/
 .worktrees
+.wrangler/
+.dev.vars
+.entire/
 
 # --- Local agent/scratch surfaces (NOT version-controlled; harness works from shared state) ---
 .agents/
 .claude/
 .codex/
 .ce-loop/
 data/
-