# AKOS — API Knowledge Operating System

Production: https://akos.spboucher.ai (node M4M64c, `~/apps/akos`, PM2 `akos-web|worker|proxy`, Postgres `akos`). Remote-first: edit/build/test/commit ON THE NODE (`ssh M4M64c` or `ssh akosnode` jump), origin = spbgit `akos.git`. Laptop copy = mirror.

- Stack: Python 3.13 (uv, `.venv`), FastAPI, asyncpg, SQL migrations in `akos/migrations/*.sql` (append-only), React/Vite UI in `web/` (built to `web/dist`, served by FastAPI), MCP Streamable HTTP at `/mcp`, CLI `akos`, SDK `akos.sdk`.
- Tests: `make test` (offline, mock API, DB `akos_test`), `make test-node` (sandbox-exec + backup drill), live demos in `examples/`. Never mark a scenario PASS without running it; evidence goes to `docs/acceptance-report.md`.
- Secrets: `.env` (node, 0600) + macOS keychain service `akos`; never commit values; AKOS stores only `vault://` references.
- Policies/lifecycle are enforced in code (`akos/gateway/policy.py`, `akos/registry/lifecycle.py`); knowledge state is derived from evidence rows only.
- Docs: `docs/architecture.md`, `threat-model.md`, `operations.md`, `security-review.md`, `acceptance-matrix.md`, `acceptance-report.md`, `build-log.md`, `infra-inventory.md`.