📖About & Usage

Droid responsibility

Enforce cookbook 1281 / CAROL-INI-3789: every agent process runs under its own OS identity; caroladmin is Orion alone

What the droid actually does

Detect drift on 4 surfaces (operator crontab, agent crontabs, processes, services); store findings in data/os_identity_drift.db; file one initiative per red run via normal intake; record unauditable surfaces as unauditable, never clean

Boundaries

Read-only; needs sudo pin on carol-crontab-read; never repairs drift itself (Themis reports, the operator/Radagast cure)

👤Owner

📚Recent initiatives

Initiatives that touched this droid — a short summary each; open one for the full story.

No initiatives recorded for this droid yet.