1#!/bin/bash2# SessionStart hook (advisory): injects AKOS usage guidance so every new session reuses registered API knowledge first.3# Hooks cannot intercept arbitrary host networking; enforcement happens in the AKOS gateway/sandbox (see docs/threat-model.md).4cat <<'MSG'5AKOS (API Knowledge Operating System) is connected as MCP server `akos`. Before integrating or calling ANY external API:61. `search_knowledge` then `inspect_api` — reuse an existing API Knowledge Package (AKP) and its pinned client (`generate_client`).72. Call providers through `execute_api` (governed: policy, provenance, credentials from the vault) — never paste API keys.83. Unknown API: `discover_api` (OpenAPI URL or probe) then `get_job`; it compiles and verifies an AKP automatically.94. Research data: `create_dataset` → `compose_recipe` → `export_research_dataset` (verified exports fail closed).10Raw curl/requests calls from this shell are OUTSIDE the enforcement boundary and are not research-grade provenance.11MSG12exit 013