diff --git a/stacks/albok-service/README.md b/stacks/albok-service/README.md index d9de6e6..73b76d0 100644 --- a/stacks/albok-service/README.md +++ b/stacks/albok-service/README.md @@ -118,7 +118,8 @@ the first-start admin token (also at `/srv/albok/private/bootstrap-admin-token`, Token grants are immutable, so the widening was done by minting NEW tokens: nemi `01M4HAP9G90J79HBRJB6VW6PQA` (previous six grants plus read+write on both library wings) and albok-dev `01M4HAP9HFYZCFV76WX2HPVWT2` (`write:fleet/memory`, `read:fleet/*`, `read:library/*`), vaulted over `albok/token-nemi` / `albok/token-albok-dev`. albok-dev swaps them into nemi.yaml and -albok-check, then revokes the previous nemi `01M40JWJ3NZ6VJ77KS8B06BCYZ` and albok-dev `01M3ZMCXE8P66MRX16MZN1D44D`. +albok-check (swapped 1459, proven by the 1503 walk) and revoked the previous nemi `01M40JWJ3NZ6VJ77KS8B06BCYZ` and +albok-dev `01M3ZMCXE8P66MRX16MZN1D44D` at 1555 10-09. Live set: bootstrap-admin, svos-knowledge-nh3-svos, the new nemi, the new albok-dev. **Nemi (albok's tagger, runs on nh3-dev):** `albok/token-nemi`, a service token minted 0255 with read+write on `fleet/memory`, `fleet/stash` and `personal/agent-feedback`; it sees exactly those three wings (`personal/notes` hidden). The previous token (`01M40979…`, without agent-feedback) is still live until albok-dev revokes it.