THE KEEPER

Notes for people who keep the graph honest.

The Keeper is where Uncain publishes field notes, research, and practical references about trust drift across CI/CD, package trust, agentic runtime work, and containment.

01

Field notes

Short writing from the product and the field. Why a tag rewrite matters. Why `secrets: inherit` deserves attention. Why an agent switching permission mode is not just local machine trivia.

  • Why a control exists
  • What changed in a trust path
  • What an operator can do before the next run
02

Research

Evidence when we have it. Research here should make a signal clearer, not heavier, and should separate observation from interpretation.

  • Signals worth naming
  • Patterns worth testing
  • Blast radius made easier to reason about
03

The Commons

Reusable material for people who need shared language while the work is moving: definitions, checklists, and operating notes that do not require a sales call to understand.

  • Primers
  • Checklists
  • Shared definitions

For shorter notes, follow the Drift Report.

The Keeper is for pieces that need room. Drift Report is for the short version: what moved, why it mattered, and what to watch next: the tag, the package, the permission, the command.