docs(agents): refresh fork-side addendum

AGENTS.md

@@ -82,3 +82,73 @@ uv run pyright                # Type check, if pyright is installed
   linked issue, and available checks first.
 - Report actionable findings first, ordered by severity, with file/path,
   evidence, impact, and fix guidance.
+
+## Fork-Side Addendum
+
+This fork is a development lab for `EverMind-AI/EverOS`. Agents operating here
+must preserve the fork boundary and keep source-truth routing explicit.
+
+### Fork Identity
+
+| Remote | Repo | Role |
+|---|---|---|
+| `origin` | `Fearvox/EverOS` | Writeable fork for experiments, mirrors, docs, and review packets. |
+| `upstream` | `EverMind-AI/EverOS` | Read-only source project unless the human owner explicitly approves an upstream return. |
+
+### GitHub CLI Rule
+
+Always pass `--repo Fearvox/EverOS` to `gh` commands that mutate fork state.
+Do not rely on GitHub CLI default-target heuristics when a command can write.
+
+### Branch Conventions
+
+| Prefix | Owner | Rule |
+|---|---|---|
+| `sleep-iter-*` | Overnight agent lanes | Draft PR first; merge, revise, or close after live checks. |
+| `codex-watch-*` | Codex watch lanes | Treat as isolated unless explicitly assigned. |
+| `sleep-log` | Overnight audit trail | Only the owning sleep lane may force-push. |
+| `feature/*` | Human developers | Leave untouched unless the owner assigns it. |
+
+### Planning Directory
+
+`.planning/` is agent workspace material. Keep it out of public PRs unless the
+owner explicitly wants a curated evidence packet in repo history.
+
+Expected sleep-lane artifacts include:
+
+- `SLEEP_LOG.md` for per-iteration notes.
+- `HEARTBEAT.txt` for the current iteration marker.
+- `baseline/` for pre-run snapshots.
+- `CODEX_INTERVENTION.md` for co-agent interrupts.
+- `WAKEUP_REPORT.md` for end-of-run summaries.
+
+### Labels Agents May Apply
+
+| Label | When |
+|---|---|
+| `tracking` | Opening a long-lived watch or catalog issue. |
+| `sync-failed` | Workflow error handling, normally applied by automation. |
+| `pr-mirror` | Issue-template or sync-created PR mirrors; do not add casually. |
+
+Agents must not remove labels applied by humans or CI.
+
+### Hard Bans
+
+1. Never push to `upstream`.
+2. Never push to `origin/main` directly; use feature branch plus draft PR.
+3. Never modify `.claude/` or `settings.json` unless explicitly assigned.
+4. Never send Slack, Linear, Discord, or email updates without explicit owner
+   approval.
+5. Never delete files larger than 1 KB without a backup tag or owner approval.
+6. Never force-push outside `sleep-log` and your own feature branches.
+7. Never touch `codex-watch-*` branches unless explicitly assigned.
+8. Never exceed 60 GitHub API requests in a 60-second window.
+
+### CI/CD Awareness
+
+- `.github/workflows/sync-upstream.yml` syncs the fork with upstream. Agent
+  branches should refresh from `origin/main` after sync cycles.
+- `.github/workflows/linear-sync.yml` handles `pr-mirror`-labeled issues.
+  Manual label changes can create Linear mirror noise.
+- `.github/workflows/overnight-watch.yml` powers the sleep-lane patrol. Do not
+  edit it during an active sleep run unless the owner assigns that work.