memory: augaman repo created (pfi/augaman), build pending; infra-ops owes backup wiring + first deploy

persistent-memory.md

@@ -158,25 +158,21 @@ hermes-gateway, Booth, ttyd, zellij-web and dev-backup are running.
   checked; nothing has been rebooted.
 → `persistent-memory.d/2026-09-25-nh3-ml1-live.md`
 
-### ⏳ Face-recognition service for Cicada — WAITING ON PRIME (2026-09-26 0116)
+### ✅ augaman (face-recognition for Cicada) — REPO CREATED, build not started (2026-09-26 0130)
 
-brokkr-smithy-dev relayed operator approval (althing threads `01M3ECEPDHQDS4QYFS2Z5P4W7M`
-spec, `01M3ECJ3EV7M4F793Y1B3JN5HF` addendum).
-- API: enroll, recognize, verify, add_samples, identities CRUD, health, metrics.
-- Store: SQLite gallery with in-memory cosine search. The gallery MUST be in the
-  private backup rotation (operator ruling).
-- Addendum: SCRFD detector + a **swappable embedder**. buffalo_l ArcFace ships
-  first; AdaFace ir101-webface12m and LVFace are the bench candidates, and the
-  threshold is calibrated per embedder on real frames.
-- No face-rec service exists on the fleet (checked).
-- Four calls surfaced to Prime:
-  - repo: its own under `pfi` (name his call) or eshpfi;
-  - placement: esh-ml1 recommended (same site as HA and the house);
-  - backup path: default is a nightly SQLite `.backup` to a restic-covered path,
-    since the GPU CTs are outside vzdump;
-  - process: full pipeline recommended, or reduced.
-- License flagged once: InsightFace packs are non-commercial research; YuNet+SFace
-  is the clean alternative.
+**Prime's rulings:** own repo **`pfi/augaman`** (private, pushed `972193e`, local
+`~/development/augaman`), **esh-ml1**, **full House Code Discipline**,
+**InsightFace buffalo_l first**, swappable embedder. The gallery goes in the
+private backups.
+- The repo carries README, `HANDOFF.md` (fresh-agent brief: plan, esh-ml1 facts,
+  gotchas, verification with controls), `docs/SPEC-INPUT.md` (brokkr's spec +
+  addendum + license matrix), ROADMAP, architecture and persistent-memory.
+- **infra-ops' part, still to do:** wire the gallery backup (esh-ml1 is outside
+  vzdump, so a scheduled `sqlite3 .backup` goes into restic) before real people
+  are enrolled, plus the first deploy.
+- The althing handle (e.g. `augaman-dev`) is the operator's to declare.
+- License: non-commercial weights accepted for personal use. LVFace's MIT tag is
+  code-only.
 
 ### ⭐ esh-ml1 = the fleet's utility GPU host (2026-09-25): embed/rerank (TEI) + reward (vLLM)