Steev is a child-local personal-agent profile workspace. It owns profile identity, role and boundary docs, personal-surface contracts, redacted proof packets, proposal-only memory routing records, desktop exposure contracts, runtime-readiness snapshots, validators, and handoff references, but it does not own Core truth, Runtime authority, Profile Exposure authority, credential authority, provider authority, send authority, memory-domain authority, browser-host authority, public product authority, release authority, production readiness, or autonomous execution authority.

Do not install or start Steev, mutate ~/.hermes, run browser-host automation, read credentials, read raw messages, read mail bodies, read contacts, read calendar details, read drive names, send messages, write durable memory, broaden Profile Exposure, call providers, or claim readiness from this cleanup route without explicit governed approval.

Identity: AGENT.md — role, mission, boundaries.
Profile surface contract: docs/contracts/personal-agent-profile-surface-contract.json — canonical surfaces, effects, memory route, and proof policy.
BlueBubbles binding: docs/contracts/personal-agent-bluebubbles-binding.json — imessage.read binds to the existing BlueBubbles package without a duplicate connector.
Proton/rclone package: docs/contracts/personal-agent-proton-rclone-package.json — Mail, Calendar, Contacts, and Drive surfaces linked to Core S606 child-local proton-rclone; provider smokes and runtime readiness remain blocked.
Proton/rclone runtime reconciliation: docs/evidence/2026-06-14-personal-agent-proton-rclone-runtime-reconciliation.md — live redacted probe aligning systemd, Docker, MCP, and rclone posture.
Secondbrain proposal/apply route: docs/contracts/personal-agent-secondbrain-proposal-route.json — proposal-only personal memory intake plus governed apply-route reference; live durable apply remains approval-gated in Secondbrain.
Conductor/Curator service handoff: docs/contracts/personal-agent-conductor-curator-service-handoff.json — redacted service map for future route selection and hygiene review pickup.
Runtime readiness snapshot: docs/contracts/personal-agent-runtime-readiness-snapshot.json — redacted per-surface runtime state and gaps; Seed-local acceptance is proven, while broader readiness remains degraded.
Desktop exposure contract: docs/contracts/personal-agent-desktop-exposure-contract.json — adapter-facing state rows for Desktop/Dashboard display; no UI wiring from this route.
Current Core/Seed pickup: docs/evidence/2026-06-15-personal-agent-core-seed-readiness-reconciliation.md — source-locks current Core S641/S642/S643, Seed final acceptance, and remaining broader gaps.
Current governed boundary: docs/evidence/2026-06-15-personal-agent-current-governed-boundary.md — pins Core S654 branch-authority approval status, stale S653 approval risk, and Proton Suite health-panel as future Keyvault successor context only.
Legacy ingest: docs/LEGACY-INGEST.md — compact intention map for old Steev/personal-agent work.
Historical Steev reference redirect: docs/STEEV-MASTER.md.

Structure

steev/
├── AGENT.md              identity: role, mission, boundaries
├── manifest.yaml         machine-readable install contract
├── install.sh            idempotent wiring → ~/.hermes/steev symlink
├── schema.sql            steev.db schema (never committed)
├── skills/
│   └── steev-agent/      orchestrator: briefing, triage, drafting, delegation
└── docs/
    └── STEEV-MASTER.md   source of truth

Install

git clone https://git.openharbor.io/hermes/steev && cd steev
./install.sh              # symlinks repo → ~/.hermes/steev (idempotent)
hermes -p steev skills list | grep steev-agent

Default install symlinks ~/.hermes/steev → this repo. Use ./install.sh --copy on machines that shouldn't run the checkout as the live dir.

Key invariants

JP's voice ≠ Plan B brand voice (add skills/steev-agent/jp-voice.md to scope it)
Business tasks → CEO via kanban, never execute directly
No Plan B marketing credentials (WooCommerce, Mailchimp, Meta, etc.)
Steev drafts, JP sends — no autonomous message delivery