Github
GitHub PR and issue workflows via gh CLI — read-only by default; merge requires approval.
Discord
Discord outbound messaging — send/post is a one-way door.
Browser Proof
Browser-visible verification — route smoke, screenshots, console errors. Receipt required.
Charter
Charter — an operating contract system for autonomous agents. Use when the user invokes /charter or /goal, says they want to start/track/resume long-running work, gives vague intent to operationalize, or when you must own and update a durable charter contract with approval gates, ledger, and receipts. Object model Intent -> Charter -> State -> Receipt. The human owns charter legitimacy; you own o…
Routine
Routine — repeated bundles of Practices. Use when the user invokes /routine, wants recurring agent behavior, asks to compose Practices on a trigger, or when Otto should mine/propose a Routine from repeated work. Recurring activation belongs to the human.
1password
Document 1Password CLI patterns only — never read or store secrets in Otto config.
Generate or inspect PDF artifacts — HTML-first; no ReportLab.
Image Gen
Image generation via Letta tool — artifacts saved locally; publish/external use is a red zone.
Cognee
Local Cognee graph recall — read-first sidecar; capture and delete require approval.