1. Control Plane
`foundersystem-next` stores the system: specs, schemas, CLI, Mission Control, state, proof packets, and runtime contracts. It should stay lean and not become the data lake.
FounderSystem Next is the system/control plane. The external drive is the data plane. Hermes and OpenClaw run as Next-owned local services, but external writes, sends, deploys, credential expansion, and project-store promotion stay behind explicit proof and approval gates.
flowchart LR %% FounderSystem Next system map User((Reghar / Operator)) MC[Mission Control
operator view] CLI[fs-next CLI
status, cadence, test, doctor] Chat[Telegram / Discord
Hermes + OpenClaw bot surfaces] subgraph CONTROL["FounderSystem Next: local control plane"] Specs[System specs
contracts + schemas] State[System state
events, health, data refs] Proofs[Proof packets
test, doctor, monitor, promotion] Gates[Approval gates
default deny] Bridge[Message / command bridge
draft, review, promote packets] Cadence[Operating cadence
daily / weekly / monthly checks] end subgraph RUNTIME["Next-owned local runtimes"] Hermes[Hermes
communication, briefing, coordination] OpenClaw[OpenClaw
execution, coding, automation] Codex[Codex CLI
coding engine] Claude[Claude CLI
planning / review engine] GStack[gstack skills
review, browser, design, ship] end subgraph KNOWLEDGE["Knowledge and memory layer"] GBrain[GBrain retrieval
context only, not authority] Wiki[Wiki canon
human-readable knowledge] Reviews[Knowledge reviews
rubric + hard gates] Promos[GBrain promotions
source-card, synthesis, fixtures] AISystems[ai_systems_kb_20260531_0001
agent operating doctrine] end subgraph DATA["External data plane: /Volumes/FounderOSData/foundersystem-next-data"] DataRoot[Scoped data root
initialized] GBrainData[gbrain/promotions
approved memory bundles] WikiData[wiki/canon
approved canon docs] ProjectData[projects/work
project artifacts only after promotion] LaneData[lanes/drafts
approved lane outputs] end subgraph OLD["Legacy sources: read-only unless reviewed"] OldGBrain[Old GBrain mirrors
curated sources] OldWiki[Old OpenClaw wiki
legacy docs] OldRuntime[Old Hermes/OpenClaw installs
quarantined / not authority] end User --> MC User --> CLI User --> Chat MC --> State MC --> Proofs CLI --> State CLI --> Proofs CLI --> Cadence Chat --> Bridge Bridge --> Hermes Bridge --> OpenClaw Hermes --> Claude Hermes --> GBrain OpenClaw --> Codex OpenClaw --> GStack OpenClaw --> GBrain Specs --> Gates State --> Gates Proofs --> Gates Cadence --> Proofs OldGBrain --> Reviews OldWiki --> Reviews Reviews --> Promos Promos --> AISystems AISystems --> GBrain Promos --> Gates Gates -- exact approval only --> DataRoot DataRoot --> GBrainData DataRoot --> WikiData DataRoot --> ProjectData DataRoot --> LaneData GBrainData --> GBrain WikiData --> Wiki LaneData --> MC ProjectData --> MC OldRuntime -. blocked by cutover boundary .-> Gates Gates -. denies by default .-> Blocked[No deploy / send / credential expansion
No project-store promotion
No arbitrary /Volumes writes] classDef interface fill:#26221c,stroke:#ffbe55,color:#f4f0e8; classDef control fill:#172228,stroke:#74d7db,color:#f4f0e8; classDef runtime fill:#22192b,stroke:#8ca9ff,color:#f4f0e8; classDef memory fill:#1d271b,stroke:#9ed67d,color:#f4f0e8; classDef data fill:#2b2115,stroke:#ffbe55,color:#f4f0e8; classDef old fill:#281918,stroke:#ff7b6c,color:#f4f0e8; classDef denied fill:#351c19,stroke:#ff7b6c,color:#f4f0e8; class User,MC,CLI,Chat interface; class Specs,State,Proofs,Gates,Bridge,Cadence control; class Hermes,OpenClaw,Codex,Claude,GStack runtime; class GBrain,Wiki,Reviews,Promos,AISystems memory; class DataRoot,GBrainData,WikiData,ProjectData,LaneData data; class OldGBrain,OldWiki,OldRuntime old; class Blocked denied;
System summary:
1. Reghar operates through Mission Control, fs-next CLI, Telegram, and Discord.
2. Mission Control is a window into state. It is not authority.
3. Authority lives in Git, specs, state, proof packets, data refs, live checks, and explicit approvals.
4. Hermes handles communication and coordination. OpenClaw handles execution, coding, and automation.
5. Both agents use CLI engines such as Codex CLI, Claude CLI, and gstack skills. They do not get automatic authority to mutate external systems.
6. GBrain is retrieval context, not truth. Wiki canon is human-readable approved knowledge.
7. Legacy GBrain and old wiki sources are read-only until reviewed with the migration rubric.
8. Approved knowledge becomes GBrain promotion bundles with source cards, synthesis, retrieval fixtures, proof, and data refs.
9. External data lives under /Volumes/FounderOSData/foundersystem-next-data, separated from the system repo.
10. External writes happen only through scoped promotion commands with exact approval and rollback.
11. Deploys, public sends, credential expansion, arbitrary /Volumes writes, and project-store promotion are denied by default.
`foundersystem-next` stores the system: specs, schemas, CLI, Mission Control, state, proof packets, and runtime contracts. It should stay lean and not become the data lake.
`/Volumes/FounderOSData/foundersystem-next-data` stores approved data: GBrain promotions, wiki canon, lane drafts, and project work. Direct writes remain blocked except through scoped promotion/rollback.
Hermes and OpenClaw are Next-owned local services. They can observe, draft, run bounded local work, and produce proof. Broader autonomy still needs explicit gates.
GBrain retrieves source-backed context. The new `ai_systems_kb` bundle is promoted knowledge, but Git, proof packets, live checks, and approvals stay higher authority.