Phase 1 Read-Only

Pinnacle Agent Operating Guide

Date: 2026-07-10 Primary skill: $pinnacle-ops-console Audience: Kalen and approved agents

What This Is For

Use Pinnacle as the operating console for the next runway window: what changed, what is left this week, where the roadmap stands, how the business-primary lane and employment option are moving, and which benefits or runway facts need attention.

Boundary

Agents may inspect Pinnacle status and produce assessments. They must not mark items done, change metrics, update gates, rotate credentials, restart services, or change Mac Studio configuration unless you explicitly approve that later phase.

How To Ask Codex

Use $pinnacle-ops-console to assess Pinnacle status. Tell me what is left this week, what changed the runway, where the roadmap stands, and what I should do next.

Narrow read: this week and runway only Setup read: verify access, no live changes Assessment read: risks, next actions, owner decisions

Safe Access Order

1Read-only REST APIGET /api/agent/v1/context or narrower GET routes.

2Repo docs and schemaUse committed runbooks, specs, tests, and SQL models.

3Local DB inspectionRead only, and only when the DB path is known.

4Browser UI reviewLast resort. Never treat cookies as agent authorization.

Agents Can Read

This week's checklist and completion state.
Four-week roadmap progress.
Business-primary and employment-option action groups.
Metrics, runway dates, benefit events, assumptions, and source labels.

Agents Must Not Do

Call checklist, metric, gate, reset, theme, or other write routes.
Use browser cookies or tailnet reachability as agent authorization.
Reveal, store, or commit raw tokens or HR source details.
Change live Mac Studio services, env files, Tailscale, broker, or production DB state.

Report Shape

## Pinnacle Status
Source:
Freshness:

Runway:
This week:
Roadmap:
Business + Option:
Metrics:
Risks:
Next actions:
Owner decisions:

Current Runway And Benefits Facts

2026-08-03Employment ends.

2026-08-03Employer insurance ends.

2026-08-07Final paycheck date.

NaviaCOBRA administrator.

Coverage Notecoverage_end means income runway coverage, not health insurance.

Positive Proof

curl -sS -H "Authorization: Bearer $PINNACLE_AGENT_TOKEN" \
  "$PINNACLE_AGENT_URL/api/agent/v1/context"

Negative Proof

curl -i "$PINNACLE_AGENT_URL/api/agent/v1/context"

Expected: 401 with Agent bearer token required, even when the UI is reachable through tailnet mode.

Source Docs

docs/runbooks/agent-access.md docs/specs/agent-access-contract.md docs/specs/runway-events.md docs/runbooks/mac-studio-launch.md