Every artifact content-addressed. Every link typed. Every change provenance-tracked. Humans see a filesystem; agents see a typed graph over the same blobs.
Save files like normal. Agents traverse a typed graph (cites, derives, supersedes, informed-by) over the same content-addressed blobs. No second source of truth.
Every read and every write is an append-only row. Every artifact is versioned. When an auditor asks “why did this happen?”, the graph already knows.
Compliance scanners, drafters, and bots run as registered actors with their own permissions and identity. Their writes carry their author_id, never the user’s.