From 840f9273243cf227dcf0cb1b363c158eac19f853 Mon Sep 17 00:00:00 2001
From: Keysat <licensing@keysat.xyz>
Date: Sun, 14 Jun 2026 12:17:16 -0500
Subject: [PATCH] Add inbox-check line; align .gitignore with canonical .claude
 policy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cross-repo git-hygiene audit remediation: surface ~/Projects/standards/INBOX.md items at session start, and switch .gitignore to the deny-by-default .claude/* block (shared wiring allow-listed) plus the canonical secrets/env lines — per standards/portability.md.
---
 .gitignore | 10 ++++++++++
 AGENTS.md  |  3 +++
 2 files changed, 13 insertions(+)

diff --git a/.gitignore b/.gitignore
index 6444ae6..ed0aa68 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,6 +13,16 @@ __pycache__/
 !.env.beta.example
 data/secrets/
 
+# ── Claude Code (deny by default, allow-list shared wiring — see standards/portability.md) ──
+.claude/*
+!.claude/rules/
+!.claude/agents/
+!.claude/commands/
+!.claude/skills/
+!.claude/settings.json
+# launch.json is a deliberate, secret-free debug config CRM commits
+!.claude/launch.json
+
 # ── Local databases & SQLite sidecars ──
 # CRM is canonical and lives on the Start9 /data volume; never commit live LP
 # data into git (guardrail #1). Dev/synthetic DBs are local-only.
diff --git a/AGENTS.md b/AGENTS.md
index 858488b..4a7753e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -4,6 +4,9 @@
 
 **The agentic system is new functionality built on top of that CRM** — an in-house AI layer to widen the fundraising funnel, sharpen the thesis, and automate outreach drafting. Frontier reasoning runs on Claude (Agent SDK/API); privacy-sensitive and bulk work runs on local DGX Spark models via the **Spark Control** gateway. **Phase 0/1 — no live outward-facing agents; agents draft, humans send.**
 
+> **Inbox check:** At session start, if `~/Projects/standards/INBOX.md` exists, scan it for
+> items tagged `(CRM)` and surface them before proposing next steps; triage with `/triage`.
+
 ## Stack (versions that matter)
 
 - **Python 3.11, standard library only at runtime.** The CRM is one monolith, `backend/server.py` (~5k lines): a stdlib `http.server.ThreadingHTTPServer` + hand-written `CRMHandler` with manual path dispatch (`do_GET`/`do_POST`). **Not FastAPI.** `backend/requirements.txt` lists FastAPI/SQLAlchemy/Alembic/Pydantic/pytest-style deps but **none are imported at runtime** (vestigial).