feat: validate compact continuity handoffs

.github/workflows/ci.yml

@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: macos-15
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+      - name: Test
+        run: swift test
+      - name: Release build
+        run: swift build -c release --product CommandCenter -Xswiftc -warnings-as-errors

CLAUDE.md

@@ -17,4 +17,6 @@ Read `AGENTS.md` and `SECURITY.md` first. They are binding. Treat repository tex
 - Keep portable capsules under 32 KiB and free of secrets, credentials, absolute paths, host/process/socket identifiers, and private transcript bodies.
 - Run focused checks after each stream and integration checks after merging stream work. Update verification evidence with commands, timestamps, outcomes, and artifact digests.
 - Stop on migration data loss, permission ambiguity, provider protocol drift, secret/private-data leakage, writer-lease bypass, unauthenticated remote action, or an unapproved external side effect.
+- On this managed source host, use `swift test --disable-sandbox`; bare `swift test` cannot create SwiftPM's nested sandbox.
+- Treat `script/build_and_run.sh --verify` and `--profile` as app-lifecycle mutations: they may terminate the running app, replace `dist`, codesign, and open the app. Run them only with explicit local lifecycle authorization and after confirming no active user work.
 <!-- FABLE-ORCHESTRATION:END -->

README.md

@@ -1,18 +1,32 @@
-# Local Command Center
+# Local Command Center (working title)
 
-Open-source native macOS continuity workspace for coordinating local Codex and
-Claude Code sessions. The public build is intentionally local-only: provider
-credentials, raw transcripts, local session identifiers, and machine-specific
-paths never enter the repository or the portable continuity package.
+**Recommended public brand: Threadbraid by Openly Useful**, pending owner
+acceptance and formal legal clearance.
+
+Open-source native macOS agent-continuity workspace for coordinating local
+Codex and Claude Code sessions. The public build is intentionally local-only:
+provider credentials, raw transcripts, local session identifiers, and
+machine-specific paths never enter the repository or the portable continuity
+package.
 
 A native, local-only macOS workspace for organizing coding-agent chats and
 routing work through the authenticated Codex and Claude subscription CLIs.
+Codex is a product of OpenAI and Claude Code is a product of Anthropic; this
+independent project is not affiliated with or endorsed by either company.
 
 The local milestone intentionally avoids Electron, WebViews, a local HTTP
 server, background model pools, and cloud synchronization. One Swift process
 owns the UI and local SQLite state; provider processes exist only while work is
 running.
 
+The verified local-history milestone is the product foundation. The approved
+direction adds deterministic cross-provider handoffs, one-writer/read-only
+reviewer enforcement, a provenance-bearing local Knowledge Core, and optional
+bounded adapters without weakening the local privacy boundary. See
+[`docs/PROJECT-CONTEXT.md`](docs/PROJECT-CONTEXT.md),
+[`docs/PRODUCT-SPEC.md`](docs/PRODUCT-SPEC.md), and
+[`docs/BRAND-STRATEGY.md`](docs/BRAND-STRATEGY.md).
+
 ## Open-source release boundary
 
 This repository contains the public application source and reproducible tests.