2026-04-28: vault catchup — purpose, self-modification, CI pipeline, agent rules

- Add personal-os-purpose.md: ADHD context, design principles, quadrant model
- Add personal-os-self-modification.md: Eagle's guide for evolving the system
- Update personal-os-agent-rules.md: fix status.md path, corrections_log → SQL, add #retrospector cron, personal project activity notes
- Update personal-os-architecture.md: correct paths, add executor/tables/data flow
- Add work/wiki/apple-browsers/ci-pipeline.md: full CI schema, xcodebuild commands, local equivalents, VM/executor build commands
- Add raw/ symlinks to planning docs (state-2026-04-27-final, catchup-plan-2026-04-27)

wiki/personal-os-agent-rules.md

@@ -1,7 +1,7 @@
 ---
 namespace: work
 tags: [system, agent, eagle, rules]
-last_synced: 2026-04-27
+last_updated: 2026-04-28
 confidence: 1.0
 ---
 
@@ -14,17 +14,17 @@ Eagle (Орёл) is the Discord-facing Hermes agent. This page documents what Ea
 ```
 Asana API
   → sync.js (every 30 min, workdays via Hermes cron)
-  → PostgreSQL (tasks, stories, task_edges, sync_state)
+  → PostgreSQL (tasks, stories, task_edges, sync_state, task_annotations)
   → generate-status.js
-  → ~/Developer/personal-os/asana_context.md  ← raw Asana data
-  → ~/Developer/personal-os/status.md         ← Eagle reads THIS
+  → ~/Developer/personal-os/asana_context.md  ← raw Asana context (inbox-check)
+  → ~/context/status.md                        ← Eagle reads THIS
 ```
 
-Eagle **only reads** `status.md`. It never touches the DB directly or calls Asana API.
+Eagle **only reads** `~/context/status.md`. It never touches the DB directly or calls Asana API.
 
 ## Eagle's Knowledge Sources
 
-1. `~/Developer/personal-os/status.md` — live Asana snapshot (updated every 30 min)
+1. `~/context/status.md` — live Asana + ActivityWatch snapshot (updated every 30 min)
 2. `~/Developer/personal-os/briefs/daily/YYYY-MM-DD.md` — today's brief
 3. `~/Developer/personal-os/briefs/weekly/plan-MONDAY.md` — weekly plan
 4. `~/obsidian/wiki/` — knowledge base (via obsidian MCP)
@@ -35,13 +35,25 @@ Eagle **only reads** `status.md`. It never touches the DB directly or calls Asan
 When Alex corrects something:
 1. Edit the brief directly (show diff first, confirm before writing)
 2. If systemic → edit the prompt template in `agent/prompts/`
-3. Log to `~/Developer/personal-os/logs/corrections_log.md`: `YYYY-MM-DD HH:MM | file | what changed`
+3. Log correction silently to `corrections_log` table:
+
+```sql
+INSERT INTO corrections_log (date, week_number, source, original_plan, correction, deferred_gids, reason_tag)
+VALUES (current_date, EXTRACT(WEEK FROM current_date)::int,
+        '<source>', '<original>', '<user_message>',
+        ARRAY[<gids>]::text[], '<reason_tag>');
+```
+
+`source` values: `discord_pushback` | `morning_brief_correction` | `manual`  
+`reason_tag` examples: `ship-review-crunch` | `urgent-bug` | `meeting-day` | `over-estimated` | `scope-change`
+
+Never announce the log insertion. It is silent instrumentation.
 
 ## Self-Diagnostics
 
 If pipeline seems stale, Eagle can check:
 ```bash
-stat -f "%Sm" ~/Developer/personal-os/status.md
+stat -f "%Sm" ~/context/status.md
 # Should be < 40 min old on workdays
 ```
 
@@ -67,9 +79,10 @@ bash ~/scripts/run-wiki-ingest.sh
 | inbox-check | */30 9-19 workdays | #inbox |
 | weekly-plan | Mon 08:00 | #daily-brief |
 | weekly-review | Fri 17:00 | #daily-brief |
+| retrospector | Fri 17:30 | #retrospector |
 | commit-vault | 23:00 daily | silent |
 
-wiki-ingest runs at 22:00 via **launchd** (not Hermes) — because API-based Claude has no Mac filesystem access.
+wiki-ingest runs at 22:00 via **launchd** (not Hermes) — because it needs Mac filesystem access.
 
 ## Allowed File Writes
 
@@ -79,6 +92,16 @@ Eagle can write to:
 - `briefs/weekly/YYYY-MM-DD.md`
 - `briefs/inbox/YYYY-MM-DD.md`
 - `agent/prompts/*.md` (with confirmation)
-- `logs/corrections_log.md`
+- `~/obsidian/work/projects/SLUG.md`
+- `~/obsidian/work/decisions/YYYY-MM-TOPIC.md`
+- `~/obsidian/personal/`
+- `~/obsidian/family/`
 
-Never write to `obsidian/wiki/` directly — that's wiki-ingest's job.
+Never write to `obsidian/wiki/` directly — that's wiki-ingest's job.  
+Never write `corrections_log.md` — use the SQL INSERT above (table, not file).
+
+## Activity Classification
+
+Work activity is classified via `aw-projects.json`. Projects with `namespace: "personal"` (e.g., AXPressDeck, media_files_db) appear as a footnote in the Activity section of status.md but are **not** counted as work time and **not** upserted to `activity_daily`.
+
+To re-classify a project (personal ↔ work), ask Eagle to edit `aw-projects.json`.