- The co-op now runs more than one isolated agent; the page covers all of
them and names infrastructure-bot.
- Disambiguates @inference-bot (automation account) from @inferencebot
(the steward agent members instruct).
- Names the mechanism behind "admitted members": a per-agent allowlist
plus mention-required rooms.
- Restates the deploy norm to match standing practice (bug and security
fixes deploy immediately and are reported; member-visible or risky
changes are confirmed first) and points a stricter norm at the forum.
- Off switch: who can actually reach it, and that stopping is not
restarting.
A first draft of the member-facing norms listed as a design goal on
co-op/support#17: where the agent speaks and listens, what to ask it for,
what not to ask it in a shared room, what it does without confirmation,
what always needs a human, and how it is stopped. Linked from the README
index and the Matrix section of getting-started. Nothing here changes how
the agent is configured.
The write-up has sat on incident/2026-10-02-gateway-cve-upgrade since the
outage and that branch is now far behind main. This lifts just the incident
text and the CVE note into incidents/, attributed to InferenceBot with the
substance unchanged, and links it from infrastructure.md under a new
Incident log section.
solo.ist
