codex

Imported from rore/Pallium (integrations/codex/AGENTS.md). Install upstream with npx skills add rore/Pallium --skill codex. Copyright stays with the author.

Pallium

Pallium provides:

• Relay: coordinate independent agent sessions when another agent's work should change.
• Session History: resume earlier work from relevant prior sessions.
• Derived memory: optional compact context that may be injected or queried.

Load the pallium-memory skill when any applies. If the skill or tools are unavailable, continue ordinary work; never invent identity, scope, work references, or successful calls.

Always-safe rules

• Copy injected container_ref, thread_ref, actor_ref, agent_ref, request_source_item_id, and work_ref exactly when an operation requires them. Never derive identity or scope from the working directory, recipient listings, or historical sources. If required scope is missing, skip that scoped call; never call it with guessed or absent values, and continue ordinary work.
• Process each hook-injected Relay payload as current-turn work. The hook owns claim and ACK, so never call receive for it. Complete it or report a genuine blocker; do not send status-only replies or reply to ACK-only deliveries. Never ACK through raw HTTP; use Relay tools. A trace state of delivered does not make its payload stale. Only an explicit already_delivered or conflict result from a claim/ACK/reply operation marks that copy stale; do not retry, reply to, or reuse that stale copy.
• Relay sends only to a canonical relay-session-... or global @name; broadcast and bare runtimes are unsupported. Ask before name takeover unless already authorized. Cross-container routing never changes History or memory scope. Queued or wake evidence is not receipt. For an exact empty-wake instruction, pass its supplied relay-delivery-* identifier as Relay trace's message_id; do not receive or resend.
• Picking up prior work? Search the injected exact work_ref when present; otherwise search broadly. Never guess a History search filter. Work associations use only exact provider-returned references.
• For History searches, pass injected request_source_item_id only there, expand a returned source_item_id with its lookup_event_id as parent_lookup_id, and omit actor_ref unless an exact metadata filter is requested.
• Retrieval alone never changes accessibility or ranking. Derived memory is optional and private by default; global writes require explicit intent. New memory writes copy exact injected provenance; correction and forget retain existing provenance. Work associations are optional, grant no access or ownership, and are skipped when exact provider identity or tools are unavailable. Do not ingest routine turns or re-query content already injected.

Use skill and tool descriptions for procedures. When no capability applies, answer normally without loading the skill.