This runbook turns the local governance demo into a real integration shape for three agent surfaces:
- Codex
- Claude Code
- Hermes Agent
The goal is not to prove that Vault can search text. The goal is to prove that multiple agents can share a governed project memory without losing review, source, rollback, and audit.
Use one shared project vault for reviewed project knowledge:
~/Vaults/demo-shared-memory/vault.db
Each agent keeps its own identity and runtime-specific private memory outside the shared vault. The shared vault is for reviewed project lessons, SOPs, decisions, bug roots, and task handoffs that another agent should be able to reuse.
vault init ~/Vaults/demo-shared-memory
vault demo agent-governance --project-dir ~/Vaults/demo-shared-memory --jsonOpen the generated files:
~/Vaults/demo-shared-memory/reports/demo/start-here.md
~/Vaults/demo-shared-memory/reports/demo/demo-report.md
~/Vaults/demo-shared-memory/reports/demo/public-demo-script.md
~/Vaults/demo-shared-memory/reports/demo/public-demo-script.zh-Hant.md
~/Vaults/demo-shared-memory/reports/demo/public-demo-script.zh-CN.md
~/Vaults/demo-shared-memory/reports/demo/acceptance-checklist.md
~/Vaults/demo-shared-memory/reports/demo/consumer-mode-demo.md
~/Vaults/demo-shared-memory/reports/demo/automation-mode-demo.md
~/Vaults/demo-shared-memory/reports/demo/multi-host-sync-demo.md
~/Vaults/demo-shared-memory/agent-config-snippets/
Start with start-here.md. It tells a new user which proof file to open first,
which talk track to use, and what the demo is supposed to prove before any real
agent runtime is configured.
Use this when all agents can start a local stdio MCP server.
vault-mcp --project-dir ~/Vaults/demo-shared-memory --tool-profile coreEach agent should use the same project-dir and a different agent_id.
Use this when agents, scripts, n8n, or browser-based connectors should share one small HTTP contract instead of a full MCP tool surface.
Set the Gateway auth token in your shell, then run:
vault gateway serve --project-dir ~/Vaults/demo-shared-memoryThen verify:
curl -s http://127.0.0.1:8789/health \
-H "Authorization: Bearer <demo-token>"For a public demo, local MCP is simpler. Gateway is better when showing Coze, n8n, or cross-runtime HTTP adapters.
Use stable, public-safe agent IDs:
| Agent surface | Suggested agent_id |
Role in demo |
|---|---|---|
| Codex | codex |
proposes a reusable lesson |
| Claude Code | claude-code |
reviews/promotes candidate memory |
| Hermes Agent | hermes |
recalls promoted memory with bounded citation |
Do not put personal names, private personas, API keys, or local-only paths into public demo startup files.
Each agent should follow this startup contract:
1. Search before answering project-memory questions.
2. Use Document Map or bounded read before citing.
3. Treat candidates as unreviewed until promoted.
4. Propose durable lessons as candidates.
5. Do not write private identity or care memory into the shared project vault.
The generated snippets under agent-config-snippets/ are intentionally short.
They are suitable for project instructions such as AGENTS.md, CLAUDE.md, or
a Hermes profile bootstrap.
The generated demo pack includes three follow-up guides:
consumer-mode-demo.md: use this when the audience asks how a new user gets value in five minutes without learning every setup-agent flag.automation-mode-demo.md: use this when the audience asks how daily memory review, health, and handoff stay observable.multi-host-sync-demo.md: use this when the audience asks how separate hosts or runtimes submit memory without writing directly into active knowledge.
Codex discovers a durable project lesson and proposes it as a candidate:
This repo requires a specific test setup before pytest results are trusted.
The important point is that this does not become active shared memory immediately.
Claude Code or a human reviewer checks source evidence and promotes the candidate only when gates pass.
The important point is that shared memory has a review boundary.
Hermes searches the shared vault, reads the bounded evidence range, and cites the promoted memory.
The important point is that another agent can reuse the lesson without reading raw private notes or unreviewed chat history.
After promotion, show that the system has:
- a backup path
- audit events
- a candidate ID
- a promoted knowledge ID
- a bounded citation
Then explain that a stale or wrong memory should be deprecated or replaced instead of silently lingering forever.
This demo proves four things:
- A shared Vault can be the same memory layer across agent tools.
- Agents can propose memory without polluting active knowledge.
- Review and promotion make shared memory trustworthy.
- Rollback and audit keep memory accountable.
This demo does not claim:
- enterprise SSO is complete
- cloud sync is required
- all memory should be shared
- agents should silently auto-promote everything
- vector search alone is the product
The product is governed continuity across agent workflows.
Use this sentence at the end of the demo:
Vault Agent Memory is a local-first memory governance layer for agent teams. It helps agents remember together without turning shared memory into a garbage pile.