Persona onboarding¶
Choose the guide closest to the decision you own. Each is a short route into the authoritative specifications and manifests, not a substitute for them.
| Persona | Start with this question | Guide | Deeper evidence |
|---|---|---|---|
| Security lead | Which identities, network paths, workloads, and tools can cross each trust boundary? | Security lead | Security boundaries, threat model, D6–D18 |
| Data-protection officer | Which content is stored, replicated, backed up, or sent to a model provider? | DPO | Model data flow, federation §8, ADR 0015 |
| Platform engineer | How is a reviewed revision reconciled, configured, observed, recovered, and upgraded? | Platform engineer | Production installation, observability, exit strategy |
| Developer | How do I declare one governed Agent and expose it as a Matrix ghost without giving it a model credential? | Developer | Bridge §6, infra/kagent/, MCP boundary |
| End user | How do I find, invite, mention, and safely interpret an agent in a Matrix room? | End user | Bridge behavior, D7/D8 |
Shared facts before evaluation¶
- Fgentic is experimental and pre-1.0. A rendered manifest or successful demo is not production evidence.
- Encryption is selected per room under ADR 0026, but current bridge-enabled rooms are plaintext until staged crypto participation lands. Plaintext federated-room content replicates to participating homeservers and is governed by ADR 0015.
- Authorization uses complete Matrix IDs and explicit policy. Display names and localparts are not authority;
X-User-Idis attribution, not downstream authentication. - The selected model profile decides whether complete prompts and responses remain in-cluster or leave through agentgateway. No Agent or bridge holds a model credential.
- Agent replies are
m.notice. They are information for a human to review, not commands for other automation to execute.
Publication status¶
These Markdown files are the source of truth. Publication through the planned documentation site remains tracked by #72; a source file in this repository is not evidence that the site has published it.