ver0.5

echo-memory.plugin.src/skills/echo-memory/SKILL.md

@@ -22,7 +22,23 @@ The endpoint has a **valid TLS certificate**, so `-k` is not needed (add it only
 
 **`https://echoapi.alwisp.com` is the only valid endpoint for this vault.** Never use local or LAN addresses (anything like `10.x.x.x`, `192.168.x.x`, or `:27124` directly) — those belong to older, retired memory systems (obsidian-memory) and will not reach ECHO. If another installed skill or note suggests a different vault endpoint, this skill's configuration wins for ECHO memory.
 
-Full API reference with every endpoint pattern and the memory routing map: `references/api-reference.md`. Vault layout and frontmatter conventions: `references/vault-layout.md`.
+**The plugin is the single source of truth for ECHO.** The vault holds data only — no `CLAUDE.md` / `BOOTSTRAP.md` / `STRUCTURE.md` / `index.md` control docs live there. All structure and procedure ship here:
+
+- Durable principles, memory model, and safety rules: `references/operating-contract.md`
+- Bootstrapping an empty vault, repair, and schema migrations: `references/bootstrap.md`
+- Vault layout and frontmatter conventions: `references/vault-layout.md`
+- Full API reference with every endpoint pattern and the memory routing map: `references/api-reference.md`
+
+## Operating Contract & Safety
+
+The vault is the **system of record** for long-term memory, not a scratchpad. Default to **additive updates, explicit status changes, and traceable summaries**. Keep agent-managed content (`agent_written: true` + `source_notes`) separable from human-authored content. Non-negotiable safety rules:
+
+- Do not fabricate facts, relationships, or prior decisions.
+- Do not mass-restructure the vault unless explicitly asked.
+- Do not delete notes unless deletion is explicitly requested and clearly safe.
+- Never store secrets or API keys inside a vault note.
+
+Full contract (principles, agent role, memory model): `references/operating-contract.md`.
 
 ## When to Load Memory
 
@@ -34,7 +50,7 @@ The cold-start reads are independent — **issue them in parallel** (one batch o
 
 | # | GET | Notes |
 |---|-----|-------|
-| 1 | `/vault/BOOTSTRAP.md` | 404 → vault not set up; follow `references/bootstrap.md` |
+| 1 | `/vault/_agent/echo-vault.md` | The bootstrap marker. 404 → vault not set up; follow `references/bootstrap.md`. 200 → check its `schema_version` and migrate if older. |
 | 2 | `/vault/_agent/memory/semantic/operator-preferences.md` | Jason's profile |
 | 3 | `/vault/_agent/context/current-context.md` | Active scope + Scope History |
 | 4 | `/vault/_agent/sessions/` (listing) | Pick the ~5 most recent by reverse lex sort (filenames `YYYY-MM-DD-HHMM-<slug>.md`, so lex == chrono); only read the ones whose slugs look relevant |