Labels

• area/audit

  Audit worker, two-tier audit (off-chain feed + on-chain anchor)
• area/broker

  Broker server, cap-token issuance, OIDC issuance
• area/ci

  CI pipelines, GitHub Actions workflows, harness automation
• area/cli

  agentkeys CLI, operator workstation
• area/credential

  Credential worker, vault, per-data-class isolation
• area/daemon

  agentkeys-daemon (sidecar) work
• area/docs

  Documentation, runbooks, architecture, research
• area/firmware

  ESP32 firmware, device-side code, MCU work
• area/identity

  HDKD actor tree, K-key inventory, identity ceremony
• area/infra

  Deployment, broker host, scripts/setup-*.sh, AWS / chain provisioning
• area/mcp

  MCP server, MCP tool integration, MCP protocol work
• area/memory

  Memory worker, namespaces, semantic/episodic/profile/procedural storage
• area/payment

  Payment worker, spending caps, ACP/AMP rail adapters
• area/scraper

  Provisioner scrapers, automation for service signup flows
• area/signer

  Signer / TEE worker, K3 / K10 / K11 handling
• area/tee

  TEE-specific work (signer, attestation, sealing)
• area/ui

  Parent-control UI, vendor onboarding portal, audit dashboard
• bug

  Something isn't working
• duplicate

  This issue or pull request already exists
• enhancement

  New feature or request
• good first issue

  Good for newcomers
• invalid

  This doesn't seem right
• needs-arch-review

  Needs explicit arch.md compatibility review before merge
• needs-investigation

  Root cause unclear; assign to someone to investigate
• provision-fix

  Provisioner scraper DOM drift / selector maintenance
• research
• status/blocked

  Blocked on external dependency or upstream decision — needs human unblock
• status/deprecated

  No longer relevant; flagged for close after review
• status/investigating

  Under investigation; needs human follow-up to lock scope
• vendor-blocker

  Blocks a vendor pilot or partnership conversation