docs: heavy-session agent work-log RT model gates

HEAVY-SESSION.md

@@ -3,16 +3,17 @@
 **Tree:** `PATH[OpenKKnD]` → `$HOME/git/src/OpenKKnD` (macOS: `src/openkknd` same inode)
 **Product:** Pitchwell (original RTS greenfield) — **not** playable Godot `openkknd2` (TODO309)
 **Audience:** one local-capable session (vision OK) under Heavy / Sparmodus
-**Updated:** 2026-09-14 (from kitchen STATUS + models probe)
+**Updated:** 2026-09-14 (agent user + work-log + RT/model gates)
 
 ---
 
 ## 0. Stop-line (always)
 
-- No Nintendo / C&C brand names; no KKnD assets or rips
+- No Nintendo / C&C brand names; no KKnD assets or rips (**IP-FENCE**)
 - No `git push`, no live/prod login, no host mutation without **Freigabe this session**
 - Kitchen + Bonfire/Lemmy publish freigabe already (STATUS); Castopod live still blocked (404)
 - Prefer local / `API_CALLS=NONE` workflows; Heavy = **zero Cloud-Grok**
+- **Do not pull/load/run additional local models** this stretch — orient on `PATH[grok-work-log]/BEST.md` only; do not overload hosts
 
 ---
 
@@ -27,35 +28,38 @@
 
 Read in order: `README.md` → `docs/IP-FENCE.md` → `kitchen/STATUS.md` → `kitchen/PLAYBOOK.md` → this file.
 
-Sticky: `COMPACT_KEEP` → `PATH[OpenKKnD]` · `STATUS=FLAMEWAR-PLATFORM-LOOP` · `round` · smoke PASS/FAIL.
+Sticky: `COMPACT_KEEP` → `PATH[OpenKKnD]` · `STATUS=FLAMEWAR-PLATFORM-LOOP` · `round` · smoke PASS/FAIL · `openkknd-agent` · work-log tip.
 
 ---
 
-## 2. Models (Heavy shortlist + vision)
+## 2. Models + RT hosts (gated)
 
-Heavy shortlist (Super-Sparmodus; snapshot):
+Heavy shortlist (Super-Sparmodus; snapshot — **switch only when STATUS/session permits**):
 
 | Profile     | Catalog id                 | Host / note           |
-|-------------|-------------------------|--------------------|
+|-------------|----------------------------|-----------------------|
 | speed       | `jan-gemma4-v2`            | Jan — default text    |
 | quality     | `jan-gemma4-opus48`        | Jan                   |
 | shell_git   | `08-am-qwen3-coder-latest` | amanita Ollama        |
 | foundation  | `24-am-gemma3-4b`          | amanita (tiny+vision) |
 | quality_alt | `jan-maral-mythos-9b`      | Jan                   |
 
-**Vision (completion + vision caps):** not a dedicated Heavy profile — switch explicitly:
+**Vision (explicit switch only):**
 
 | Catalog id         | Model        | Host                     |
-|----------------------|--------------|-------------|
+|--------------------|--------------|--------------------------|
 | `10-am-gemma3-12b` | `gemma3:12b` | amanita `:11434`         |
 | `07-rh-gemma3-12b` | `gemma3:12b` | rabbithole `:11436`      |
-| `24-am-gemma3-4b`    | `gemma3:4b`  | amanita (also foundation) |
+| `24-am-gemma3-4b`  | `gemma3:4b`  | amanita (also foundation)|
 
-Recommended Heavy vision session: `/model 10-am-gemma3-12b` (or `07-rh-gemma3-12b`).  
+**RT / Ollama runtime states:** only on **amanita** and **rabbithole**.  
-Shell/patch stretches: `/model 08-am-qwen3-coder-latest`.  
+**Not** firecuda, **not** deltoid (no RT there for this work).
-Talkative kitchen: see `kitchen/LLM.md` (temp **1.05** talk / **0.3–0.5** patch).
 
-Switch helpers:
+Recommended Heavy vision: `/model 10-am-gemma3-12b` (or `07-rh-gemma3-12b`).  
+Shell/patch: `/model 08-am-qwen3-coder-latest`.  
+Kitchen temps: `kitchen/LLM.md` (talk **1.05** / patch **0.3–0.5**).
+
+Orient (do not re-seed models from it): `$HOME/git/llm/llm-work-logs/grok-work-log-enc/BEST.md`.
 
 ```bash
 python3 $HOME/git/llm/llm-configs/bin/super-sparmodus.py set --profile speed|quality
@@ -64,66 +68,90 @@ python3 $HOME/git/llm/llm-configs/bin/super-sparmodus.py set --model 10-am-gemma
 
 ---
 
-## 3. What is open (no dedicated parent TODO)
+## 3. Work-log (mandatory, own tree)
 
-`OPEN-2026-09-05-pitchwell-kitchen.md` = **DONE_CLOSE** (historical still-open: dossiers mirror, Lemmy-bot freigabe, optional persona sync).  
+**SoT:** `$HOME/git/llm/llm-work-logs/openkknd-work-log-enc` (git-crypt `**`; cleartext README/INDEX only).
-Live kitchen **STATUS:** `FLAMEWAR-PLATFORM-LOOP` · **round 2** · stop at **≥12**.
 
-Still useful work (clustered below): flamewar R3→≥12, Castopod blocked notes, outbox drafts, optional dossiers stub, docs/assets hygiene, smoke after any game edit.
+Schema order (from credit-enc RULES §2): title → Menschenaufwand → Aufgabe → Ergebnis → Guthaben → Statistik → Methodik → Offen.  
+Statistik: Git/Dateien, Bytes, Kommandos, Webabrufe, Gesehen, Geschrieben, Git-Geschichte.
+
+Unlock/sign with agent FPR `F3EA2FB493FC3F5E627B4AD6EEBD77CC3686B26A` (also Hernâni).  
+Never put secrets in cleartext work-log files.
 
 ---
 
-## 4. TODO clusters (pick one per stretch)
+## 4. Git / push / Forgejo agent
+
+| Item | Rule |
+|------|------|
+| Commit | Must §7 `local-llm-git-worker.py`; `/g` = Freigabe commit-all only; **never push from worker** |
+| Dialect | OpenKKnD: `docs:`, `kitchen:`, `sim:`, `flamewar:` (§0.27) |
+| Remote | `ssh://git@git.hacktivism.ch:9200/hernani/openkknd.git` (private) |
+| Push style | Like `hernani/hernani-korpus`: Freigabe push of **this** repo only; no mass `g-session` / multi-tree push |
+| Agent user | Forgejo **`openkknd-agent`** — collaborator **write** on `hernani/openkknd` only; signed commits via Sequoia/GPG FPR above |
+| Agent secrets | `$HOME/git/admin-logs/local/koopa-admin-secrets-enc/koopa/home-hernani/koopa-forgejo/agents/` (`users.env` + `openkknd-agent/`) — **never print PW/token** |
+
+Game goal under Freigabe stretches: keep foundation toward a **startable** Pitchwell / KKnD*-style clone (original assets only).
+
+---
+
+## 5. What is open (no dedicated parent TODO)
+
+`OPEN-2026-09-05-pitchwell-kitchen.md` = **DONE_CLOSE**.  
+Live kitchen **STATUS:** `FLAMEWAR-PLATFORM-LOOP` · **round 2** · stop at **≥12**.
+
+Useful clusters: flamewar R3→≥12, Castopod blocked notes, outbox drafts, docs/assets hygiene, smoke after game edits, startable sim foundation.
+
+---
+
+## 6. TODO clusters (pick one per stretch)
 
 ### A — Kitchen / flamewar / platform loop (default)
 
 - Advance `FLAMEWAR-PLATFORM-LOOP` rounds **3 … ≥12**
 - Voices: F1 `@copyleft-crucible`, F2 `@permissive-prickle` (+ kitchen P* per PLAYBOOK)
-- Append `kitchen/ACTIVITY.md` (visible, civil, IP-FENCE clean)
+- Append `kitchen/ACTIVITY.md`; draft → `kitchen/outbox/flamewar/`; publish only freigegebene channels
-- Draft → outbox `kitchen/outbox/flamewar/` then publish only channels with Freigabe
 - Update `kitchen/STATUS.md` + `kitchen/AGENT_LOG.md` every turn
-- Castopod: keep drafts; **do not** claim live episode while site/API 404
+- Castopod: drafts only while site/API 404
 
 ### B — Game / docs / IP-FENCE / economy
 
-- `docs/GAMEPLAY.md`, `FACTIONS.md`, `IP-FENCE.md` — keep fence truthful
+- `docs/GAMEPLAY.md`, `FACTIONS.md`, `IP-FENCE.md`
 - `game/sim/` + `scripts/smoke/economy_smoke.py`
-- After edits: `./scripts/smoke/run_all.sh` must **RUN_ALL PASS**
+- After edits: `./scripts/smoke/run_all.sh` → **RUN_ALL PASS**
-- Notes under `kitchen/patches/` when D1–D3 change
 
 ### C — Assets / cinematics
 
-- `docs/CINEMATICS.md`, `assets/` — original / CC only, briefings ≥1280×720
+- Original / CC only; briefings ≥1280×720; vision model for QA
-- Vision model useful for asset QA (screenshots, stub frames)
 - No third-party game asset dumps
 
 ### D — Outbox publish (Freigabe-gated)
 
-- Bonfire / Lemmy: freigabe kitchen fire (STATUS) — use live URLs already logged
+- Bonfire / Lemmy: freigabe kitchen fire — use live URLs from STATUS
-- Forgejo issue/commit **drafts** only in outbox unless Freigabe commit (`/g`)
+- Forgejo drafts in outbox unless Freigabe commit (`/g`)
-- Dossiers: stub until Auth/TLS confirmed; do not invent URLs
+- Never invent Lemmy/Bonfire URLs
-- Never invent Lemmy/Bonfire URLs; copy from STATUS/AGENT_LOG
 
 ### E — Tooling / smoke / git hygiene
 
 - Keep `scripts/smoke/*` green
-- Git: Must §7 via git-worker / `/g` = Freigabe commit only; **never push from worker**
 - Path resolve: `python3 $HOME/git/llm/llm-configs/bin/path-lookup.py OpenKKnD`
+- Work-log entry after meaningful stretches
 
 ---
 
-## 5. Suggested work order (one Heavy session)
+## 7. Suggested work order (one Heavy session)
 
-1. Boot Heavy + `/model` (vision if asset/UI QA, else quality or shell_git)
+1. Boot Heavy + `/model` (only if STATUS/session allows; no new model pulls)
 2. Read STATUS/PLAYBOOK; note `round` and last live post IDs
-3. **Cluster A:** draft R3 (or next) kitchen + F1/F2 outbox; append ACTIVITY/AGENT_LOG; bump STATUS.round
+3. **Cluster A** or **B** (startable foundation) — one stretch
-4. Re-run smoke if any B/E touch; fix fence hits before publish
+4. Re-run smoke if B/E touched; fence-clean before publish
-5. Publish only freigegebene channels; leave Castopod as draft + blocker note
+5. Publish only freigegebene channels; Castopod stays draft
-6. End: STATUS + AGENT_LOG; optional `/g` if human Freigabe commit; no push
+6. Append **openkknd-work-log-enc** entry; STATUS + AGENT_LOG
+7. End: optional `/g` if Freigabe commit; push only with explicit Freigabe (this repo)
 
 ---
 
-## 6. Key paths
+## 8. Key paths
 
 | Path | Role |
 |------|------|
@@ -131,21 +159,23 @@ Still useful work (clustered below): flamewar R3→≥12, Castopod blocked notes
 | `kitchen/PLAYBOOK.md` | Channels + play order |
 | `kitchen/ACTIVITY.md` | Append-only kitchen voices |
 | `kitchen/AGENT_LOG.md` | Turn log |
-| `kitchen/PERSONAS.md` / `EXPERTISE.md` / `LLM.md` | Voices + knobs |
-| `kitchen/outbox/` | Publish drafts |
 | `docs/IP-FENCE.md` | Allowed / forbidden |
 | `scripts/smoke/run_all.sh` | Headless + fence + economy |
+| `$HOME/git/llm/llm-work-logs/openkknd-work-log-enc` | Own work-log (git-crypt) |
+| `…/koopa-forgejo/agents/openkknd-agent/` | Agent GPG + token (enc secrets) |
 
 ---
 
-## 7. Done when
+## 9. Done when
 
-- Next flamewar round(s) drafted + logged (toward ≥12), **or** Cluster B/C/E change with **RUN_ALL PASS**
+- Next flamewar round(s) drafted + logged (toward ≥12), **or** Cluster B/C/E with **RUN_ALL PASS** / clearer startable foundation
-- STATUS/AGENT_LOG match reality (no invented live URLs)
+- STATUS/AGENT_LOG + work-log match reality (no invented live URLs)
-- Stop-line held; no push without Freigabe
+- Stop-line held; no push without Freigabe; no extra local models loaded
 
 ---
 
-## 8. Model kickoff (paste as first user line)
+## 10. Model kickoff (paste as first user line)
 
-See one-liner in chat after this file lands; keep this file as the standing brief.
+```text
+Heavy OpenKKnD: /w super-sparmodus heavy · /model 10-am-gemma3-12b (or 08-am-qwen3-coder-latest for shell) · RT only amanita|rabbithole · no new local models · work-log openkknd-work-log-enc · agent openkknd-agent on hernani/openkknd · IP-FENCE · Freigabe for push/host · smoke before done · continue STATUS round toward ≥12 or startable sim foundation
+```