Anonymized · fabricated stand-in domain

The system, mapped

The Operating System

Session lifecycle · the six-layer map · observe / judge / execute · the anti-drift loop. The same architecture the deep-dive explains in prose — here as one picture.

◎ The diagram is part of the system This page is the operating system’s own visual self-portrait — and one of the registries the anti-drift loop (§4) keeps honest. Add a primitive without updating every place that names it, including this diagram, and the change fails its own audit. So the map below can’t quietly fall out of sync with the territory. Counts are real (6 hooks · 23 policies · 10 skills · 18 folders); the domain is a fabricated stand-in.
1

Session lifecycle

When each primitive activates over a single working session. Anchors are loaded the whole time; hooks fire deterministically at lifecycle events; policies load only when their trigger fires; skills run on demand; memory is read at the start and written at the end. The same shape every session — which is what makes the reconstruction tax go to zero.

SESSION TIME
STARTEND
Anchorstarget user · core job
Knowledge basetech-spec / strategy / roadmap
Hookspull source · drift check · load memory
Policiesloaded only when triggered
Skillsinvoked on demand
Memoryread at start · written at end
Governance auditdrift check · review gate
Anchors & knowledge — loaded all session
Hooks — harness-fired, deterministic
Policies — loaded on situational trigger
Skills — invoked on demand
Memory — read at start, written at end
Governance — audits the system itself
2

The system map — six layers, 18 folders

Every folder in the workspace performs one of six roles. The three middle layers — hooks, policies, skills — are the observe / judge / execute primitives. They’re bookended by the anchors that frame every session and the memory and governance that make it compound and stay honest. Color-coded to the lifecycle bars in §1.

Anchors

Always-on context every session is checked against.
target-userwho we’re building for
core-jobthe one job the product does
If a suggestion can’t trace to these two, it’s drift.

Hooks — observe 6 scripts

Deterministic shell, fired by the harness. They surface; they never decide.
pull-sourcerefresh reference material — never stale
drift-checkdid the folder map change? warn at start
load-memoryre-load cross-session memory into context

Policies — judge 23 rules

Markdown rules: a trigger + a procedure. Loaded only when the trigger fires.
strategy-alignmentPR touches strategy → walk the signals
register-everywherenew primitive → update every registry
doc-syncbehaviour change → update its spec in the same PR

Skills — execute 10 workflows

Packaged multi-step procedures invoked on demand. Tools, not instructions.
/interview-to-briefraw research → cited problem brief
/feature-critiquea feature → a structural critique
/strategy-sync-auditflag where the roadmap drifted from strategy

Compounding memory

Structured memory, re-loaded automatically — not a filing cabinet.
learnings-lognon-obvious insights, appended after real work
backlogdeferred decisions and why
episode-indexrolling summary of the last ~20 sessions
feedback-loopimprovements to the system itself

Governance

The layer that keeps the map equal to the territory. See §4.
registry-syncevery name updated in lockstep
review-gatemismatch → merge blocked
ownership + cadencewho merges what · a recurring upkeep pass
3

Hooks vs. Policies vs. Skills

The three primitives people most commonly blur together — different in who runs them, when, and what they’re best for. Keeping them distinct is what makes the system legible, and what makes designing the human↔AI division of labour an actual, demonstrable skill.

Dimension Hooks Policies Skills
Tripwire Checklist Playbook
What it is A deterministic shell script A plain-language markdown rule A packaged multi-step workflow
Who runs it The harness, automatically The agent, when a trigger fires A person, on demand
When it fires Lifecycle events (start / end / prompt) Only when its situation arises When invoked by command
Its job Observe & surface — never decide Judge a situation — guide the call Execute a procedure — carry it out
Example “Pull latest source & flag if the structure changed.” “If this touches strategy, check the alignment signals.” “Turn this interview into a structured brief.”
Hooks observe · Policies judge · Skills execute
4

The anti-drift loop — the part I’m proudest of

The rule that makes the system durable: any new primitive must update every registry that names it — including this diagram — or the change fails its own audit. Adding a skill, for example, forces all four steps below. Skip one and the loop blocks the merge.

STEP 01

The primitive lands

A new skill (or hook, policy, folder) is added in its own place in the workspace.

STEP 02

A policy fires

The register-everywhere policy triggers: “this exists now — register it in every place that lists it.”

STEP 03

Every registry updates

The index, the capabilities map, and the self-portrait diagram all update to include it. Map = territory again.

STEP 04 · THE GATE

An audit checks

A structural-drift check at session start, plus a review gate before merge, compare the diagram to reality. Mismatch → blocked.

The payoff: six months on, the map is still the territory. A newcomer can trust the system’s description of itself, because the system can’t let that description go stale. That’s the difference between a project that decays the moment its author leaves and one that explains itself to the next person — and it’s why this very page can be trusted as a current map, not a stale screenshot.

5

How the system maintains itself

The cadences and automations that keep the workspace current and its description honest — the “self-improvement layer” that turns a docs folder into an operating system.

Per session start

Frame & refresh

Hooks pull the latest source, run the structural drift-check, and re-load memory — so the agent starts informed against current anchors, every time.

On situational trigger

Judgement, applied

The matching policy loads only when its situation arises — consistent judgement exactly when it’s needed, without bloating context the rest of the time.

Every PR (always)

Register or be blocked

A new primitive must update every registry that names it, including this diagram. A review-gate blocks the merge on mismatch — drift is caught before merge, not in review.

On discovery

Learnings loop

A non-obvious insight from real work is appended to the learnings-log — and re-loaded next session, so the same lesson isn’t re-learned twice.

Recurring upkeep

Maintenance cadence

A scheduled pass prunes the learnings log, retires orphaned folders, and refreshes stale specs — the unglamorous rigor that keeps a system honest over time.

Continuously

The system audits itself

Governance closes the loop: ownership decides who merges what, and the anti-drift audit (§4) ensures the map can never quietly fall out of sync with the territory.

Keep going

This is the system at a glance. For the why behind each layer, or the real code behind a primitive: