company_kb — Company Knowledge Base (shared vault)

A company-level knowledge base: one shared Obsidian-style vault of plain markdown, read by the whole team's assistant. It is distinct from per-user state in users/<id>/ (private, never shared). This vault holds the company's own knowledge — SOPs, policies, product/pricing facts, playbooks, decisions.

Built on the obsidian-wiki "digital brain" pattern: markdown files, headless (no Obsidian app needed), tiered retrieval (scan _index.md, then open the page), provenance + delta tracking. Hermes is a supported agent.

Layout

company_kb/
  _index.md      ← retrieval entry point: the map of topics → page. Read THIS first.
  notes.md       ← manual quick-captures via Telegram (admin only). LIVE & readable now.
  <topic>.md     ← structured pages (created by the ingest step, not by the runtime model)
  business/      ← BỘ KHUNG KHỞI NGHIỆP (Starter Plus) — chỉ engine lib/startup_kit.py ghi:
    _state.json    ← trạng thái mỗi ô (not_started|draft|validated, version) — dashboard đọc đây
    <framework>/<block>.md   ← 1 artifact/ô (idea/customer/value_prop/bmc/validate), front-matter + body

Two-speed write model (do not break this)

• CAPTURE (runtime / Telegram, admin only): lib/kb.py capture "<note>" appends to the LIVE page notes.md. Readable immediately — no ingest engine required (this is what Starter ships). No merge, no cross-link; safe for the limited runtime model.
• INGEST / CURATE (admin / install, capable AI — Pro+): a strong coding agent (Claude Code / Codex) runs obsidian-wiki to ingest sources (notes.md, uploaded files, Google Drive docs) and merge them into structured, cross-linked topic pages + refresh _index.md. This is the only path that edits real pages. See POST_INSTALL.md.

Rules

• Runtime model: READ via _index.md first (tiered), then open the one page it points to — do not read the whole vault. WRITE only via lib/kb.py capture (admin-gated).
• Sovereignty: this vault lives on the customer's VPS; if synced to git, it syncs to the customer's repo — never back to the operator's shared source. Company pages here are per-instance and must not be committed to the shared ai-os source.
• Ships empty (just this skeleton). The customer sets up their own content structure.
• Premium capability → tier-gated (Pro / Ultra).