THQ — Trustee Head Quarters

THQ instance required

Data lives in a THQ instance (the leaf tocpi provisions with add-THQ).

Paste its id — or open this dashboard as /?instance=<id>.

Agent identities

Name	Fame instance id	Created	Actions

Runtimes

Name	Status	Endpoint	Version	Checked	Actions

Profiles (bindings)

Name	Identity/Runtime	Role	Desired	Observed	Actions

Create profile (bind identity → runtime)

Profile name

Agent identity

Runtime

Desired state

Role — primary is THE binding automation acts on (one per identity; leave on auto and the identity's FIRST profile becomes primary; secondaries cannot carry desired_state=running)

Model / provider

Standing task — the session's FIRST command (arms the session). Leave EMPTY for the reconciler's default restore ritual (read memories → inbox → disposition → report)

Identity service token — leave EMPTY to auto-wire the identity's minted token (type a ${VAR} reference only for a manual override)

Identity issuer URL — who mints the agent's identity token

MCP servers config

MCP credentials config — THQ-owned auth data, passed through verbatim (reference secrets as ${VAR}; values go in the Secrets box)

Secrets (service token, API keys) — write-only, exact-case KEY=VALUE lines (e.g. MY_SERVICE=<token>)

Create agent identity

Name

Fame instance id (agent_id) — optional

Leave empty and THQ provisions the fame database (leaf) + the fame identity itself — the id is born here, nothing to paste. Provide an existing id only to bind a pre-provisioned agent.

Persona (system template)

Default standing task

The template EVERY auto-start arms with when the profile has no task override (per-profile boxes win). Placeholders: {profile_id} · {profile_name} · {runtime}. Saving an EMPTY box clears the custom default — the built-in restore ritual takes over.

Session lifetime & cadence

Idle termination (seconds): a reconciler-born job session quiet this long is checkpoint-closed and its slot freed. Default 600 = the owner ruling (10 minutes). Range 30–86400.

Min start interval (seconds): the standing-start cadence floor per profile — lifetime and cadence are decoupled on purpose (the anti-flood guard). Default 14400 (4h). Range 60–604800.

Operator-session idle termination (seconds): an OPERATOR session (console-created or ad-hoc — no reconciler marker) quiet this long is closed too. Default 0 = disabled (operator sessions stay hands-off; set 0 via the config file). API range 30–86400. Busy sessions are never closed.

Audit retention (maintenance)

Archive-then-delete this leaf band's audit_entries older than this window (days). Dry run reports the numbers only — zero writes. The real prune is gated on the PDT's PDT_PRUNE_ENABLED + the retention policy (pdt v0.3.29+); rows export to a dated JSONL archive next to the store before any delete, and the delete refuses unless the archive is complete.