update: context.md — backfill complete, readiness verified, priority reorder, June 19/22 schedule

All prereqs confirmed live on server-01. Full automation_ideas priority reorder (p1–p17 non-blocked,
p20–p29 blocked). Added id=67 N8N Builder Agent. id=57 expanded to full production mirror scope.
June 19: manual infrastructure day (id=51 + id=57). June 22: builder agents extended session.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

agent-builder/.claude/context.md

@@ -57,17 +57,55 @@ First two agents: Agent Builder Agent + N8N Builder Agent.
 - [x] Verify sandbox Bitwarden bridge ↔ Vaultwarden sandbox end-to-end (bridge on port 8080, returns [] for empty vault — correct)
 - [x] Write Agent Builder Agent playbook → .claude/playbook_agent_builder_agent.md
 - [x] Write N8N Builder Agent playbook → .claude/playbook_n8n_builder_agent.md
-- [~] Backfill session: Resume from priority 28 (id=34, CalDAV Auto-Refresh Trigger) next session. ~30 automations remain. This session reviewed ids 28, 40, 53, 4, 7, 5, 14, 11, 44, 33, 29, 20, 41, 12, 1, 19, 39, 6. Key changes: id=7+50 merged into id=18 (full 10-stage business pipeline); id=18 expanded with Business Research Agent + Development Agent + parked idea email-to-Tyler flow; id=14+20 blocked (already built by schedule workflows); id=12+1+41 blocked (redundant); id=19 blocked (pending Jenkins); id=5 blocked (Obsidian vault not set up yet); id=40 pending with Jenkins conditional note. New rows added: id=54 (NTFY Topic Provisioner, p54), id=55 (Business Research Agent, p51), id=56 (Business Development Agent, p52), id=57 (Sandbox Environment Deployment Completion, p9 — NOTE: conflicts with id=28 priority 9, fix next session). Calendar events pushed to Nextcloud: Thu 6/18 12:45-3PM backfill + 3-4:30PM readiness, Fri 6/19 12:45-4:30PM agent builds.
+- [x] Backfill session: **COMPLETE.** All pending rows reviewed across sessions 1-3. Blocked rows verified (32, 30, 13, 27, 23, 24, 22, 2, 21, 35, 36, 55, 56, 18 — all still blocked, no changes without proper review). Admin done: id=28 → p10, id=57 keeps p9, dummy row id=16 deleted. Session 3 (2026-06-18) final batch: ids 47, 48, 31, 26, 54.
+  - id=25: type→n8n_automation, status→pending (8b model lifts hardware block), full rewrite with SDK credit model, model router + cost gate + subscription monitor, model_effort_routing_log training table
+  - id=17: type→n8n_automation, expanded with token_waste_patterns DB table (evolution mechanism), JSONL-based detection, NTFY claude-audit gate, fan-out plan noted
+  - id=42: expanded with hybrid trigger (Claude flags + asks), B+C output (DB + wrap-up surface), human gate permanent, hard boundary (business research = id=55 only), voice note
+  - id=46: type→n8n_automation, Hermes ref removed, playbook_schema.md bootstrap design, three risk tiers, id=52 detector/id=46 executor boundary, fan-out plan noted
+  - id=43: Vault AppRole required (youtube-oauth-script, new policy), vault_registry entries, port 8085 (8080 reserved for bridge), dynamic Vault IP, write verification, token refresh companion
+  - id=45: hard dep on id=43 (Vault auth), niche_saturation_thresholds DB table (evolution), niche_check_results table, three-signal output (saturated/viable/unclear), id=18 stage 2 integration
 
-## Final readiness check items (scheduled June 18)
+## New automation_ideas rows added 2026-06-18 (ids 59–67)
-- All 8 prereq checklist items verified complete
+- id=59: Claude Audit Research Prep (n8n_automation, p12) — Saturday briefing for 12:45 PM review
-- Sandbox mirrors production: AppRole, bridge, Vaultwarden all confirmed functional
+- id=60: Claude Audit Topic Detector (n8n_automation, p11) — detects new topics → claude_config.audit_topics; must build first
-- **Sensitive output interception system** — design and implement before any agent goes live:
+- id=61: Claude Config Dev Work Scheduler (n8n_automation, p13) — Sunday session prep from Saturday decisions
-  - Agents must scan their own stdout/logs before writing/sending output and redact anything matching secret patterns (tokens, keys, passwords, API keys)
+- id=62: Monthly Security Audit (n8n_automation, p7) — first Monday of month, 7-area audit → security_audit DB
-  - Pattern list at minimum: `hvs\.`, `eyJ`, bearer tokens, anything from known env var names (BRIDGE_API_KEY, VAULT_TOKEN, N8N_ENCRYPTION_KEY, etc.)
+- id=63: Security Patch Backlog Handler (claude_agent, p7) — works security_audit.findings; Vault/prod always human-gate
-  - Root cause: `docker inspect --format '{{range .Config.Env}}...'` dumps all env vars including secrets; agents will reach for broad diagnostic commands without filtering — local models even more so
+- id=64: Business Projects Worker (claude_agent, BLOCKED p29) — 12:45–4:30 PM daily; blocked pending business_projects schema
-  - Production exposure is a serious risk; sandbox exposure is acceptable but still undesirable
+- id=65: Personal Projects Worker (claude_agent, BLOCKED p29) — 5:30–8:00 PM daily; blocked pending personal_projects schema
-  - This system needs to exist at the agent level (not just Claude Code rules) because once agents run autonomously the user will not be watching
+- id=66: Media Pipeline Project Worker (claude_agent, BLOCKED p29) — Wednesday 5:30–8:00 PM; blocked pending id=65 + scope
+- id=67: N8N Builder Agent (claude_agent, p2, ready_to_build) — builds all n8n_automation rows; deploy Monday June 22 alongside id=24
+
+## Readiness check — COMPLETE (2026-06-18 evening)
+All 8 prereq checklist items verified live on server-01:
+- Vault AppRole: token acquired, N8N secret readable
+- N8N sandbox API: returns 200 with real key
+- Bridge /items: returns [] (correct for empty sandbox vault)
+- Ollama: llama3.1:8b loaded
+- agent_test_results table: confirmed correct schema + FK
+
+## June 19 — Manual Infrastructure Day (before any agent builds)
+Two manual projects only:
+- **id=51 Secrets Execution Proxy** — build FastAPI script that intercepts secret access, prevents raw credential exposure in agent stdout. Must be live before agents deploy.
+- **id=57 Sandbox Environment Deployment Completion** — (1) Migrate production N8N from primary server to server-01. (2) Mirror production security in sandbox: equivalent Vault AppRole policies, Bitwarden Bridge populated with test credential entries matching production structure, N8N sandbox credentials matching production names (-sandbox suffix). Goal: sandbox = production mirror, so passing sandbox tests guarantees production works.
+- Grill-me required at session start before any work begins.
+
+## June 22 (Monday) — Builder Agents (extended session)
+Build, test, and push both builder agents to production. Work as long as it takes.
+- id=24 Agent Builder Agent (claude_agent + script types)
+- id=67 N8N Builder Agent (n8n_automation types)
+- Prerequisites: id=51 live, id=57 complete (sandbox mirrors production)
+
+## Priority queue summary (as of 2026-06-18)
+- p1: id=51 (manual), id=57 (manual) — infrastructure foundation
+- p2: id=24, id=67 — builder agents (built in sessions, build everything else)
+- p3: id=54 NTFY Provisioner, id=58 Human Action Gate
+- p4: id=25 Cost Intelligence, id=38 Credential Emergency Rollout
+- p5: id=3 Secrets Rotation, id=8 Vault Token Audit, id=52 Session Wrap-up
+- p6: id=37 N8N Log Scanner, id=40 Coolify UUID Monitor
+- p7: id=62 Monthly Security Audit, id=63 Security Patch Handler
+- p8–p17: non-blocked pending/ready items
+- p20–p29: all blocked items (builder agents skip these)
 
 ## Update instructions
 Update at the end of every agent-builder session. Keep agent status, key decisions, and prereq checklist current.