- The co-op now runs more than one isolated agent; the page covers all of
them and names infrastructure-bot.
- Disambiguates @inference-bot (automation account) from @inferencebot
(the steward agent members instruct).
- Names the mechanism behind "admitted members": a per-agent allowlist
plus mention-required rooms.
- Restates the deploy norm to match standing practice (bug and security
fixes deploy immediately and are reported; member-visible or risky
changes are confirmed first) and points a stricter norm at the forum.
- Off switch: who can actually reach it, and that stopping is not
restarting.
A first draft of the member-facing norms listed as a design goal on
co-op/support#17: where the agent speaks and listens, what to ask it for,
what not to ask it in a shared room, what it does without confirmation,
what always needs a human, and how it is stopped. Linked from the README
index and the Matrix section of getting-started. Nothing here changes how
the agent is configured.
- §4: the exact boundary — enclave models protect inference, stored
history is operator-readable; recommend Temporary Chat + enclave model
for sensitive material. New subsection on Temporary Chat (per-
conversation toggle, Default Temporary Chat setting, trade-offs,
what it does and does not change).
- §8: temporary chats are never retained.
- getting-started: add Temporary Chat to the chat feature list with
the Settings → Conversations default toggle.
No engineering change; documents what the deployed chat (1.4.5) already
supports. Member request 2026-10-28.