diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..952b0b3
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,54 @@
+# agents — linji workspace docs
+
+This repo is the **meta documentation** for the linji workspace at
+`/home/user/meta/linji` (the dir this repo's checkout lives in). No code.
+Every repo below links back here for its "why".
+
+## The docs
+
+- [vision.dj](vision.dj) — what linji is and why (commitments, non-negotiables).
+- [architecture.dj](architecture.dj) — how it's built: stack, publicity
+  modes, external-member model, simulation rig, conventions.
+- [roadmap.dj](roadmap.dj) — when: phases 000–003, slices S001+, **Open
+  follow-ups** (aggregated from logs — keep it current).
+- [plan/mvp.dj](plan/mvp.dj) — what ships first at app0.linji.at, every
+  decision with its consequence.
+- [log/](log/) — one file per slice (sXXX.dj); append-only, "Not
+  verified" sections mandatory.
+- [post/](post/) — external writeups (Bluesky posts, evidence dumps).
+- [ref/](ref/) — external references (lexicon style guide).
+
+Files are **Djot** (`.dj`), not Markdown.
+
+## Repos
+
+| dir | repo | what |
+|---|---|---|
+| `app0/` | tangled `did:plc:jdoqsgjhdnixt3zkmma6ows6` | linji CLI → BFF + PWA |
+| `zlex/` | tangled `did:plc:vokl5wj3yzftb5tequiawxih` | lexicon codegen (post-M001, empty) |
+| `zds/` | tangled `did:plc:rox3gwjqr7dwrwyiifpav6t7` | our zds PDS fork (rig patches) |
+| `www/` | tangled `did:plc:safhrivu4kocj55cbbqadtpf` | Lume landing site |
+| `docs/` | tangled `did:plc:gxzy4rmbmsdwjwxoadoc5ow6` | this repo |
+| `liputoki/` | — | finished Gleam experiment; patterns only |
+
+Upstream checkouts live in `~/computing/lib/` (zds at `zat.dev/zds`,
+zat at `zat.dev/zat`). Never edit a sibling repo from another repo's work
+without making the change explicit.
+
+## Load-bearing rules
+
+1. **Docs rule (s022 aftermath):** a doc/log edit is not done until the
+   file is re-read; a log line citing an artifact (note, file, link) is
+   written only after the artifact is verified to exist.
+2. **No zds upgrade reaches the class before the scenario suite passes
+   on it** (`app0/tests/scenario_*.zig`).
+3. **Never edit zat or the zds upstream checkout** unless explicitly
+   asked — contribute via the forks in this workspace.
+4. **Build target:** this machine's glibc `crt1.o` breaks zig's linker —
+   zds builds need `-Dtarget=x86_64-linux-gnu.2.36`; app0's build.zig
+   sets it as default. Full story in architecture.dj ("Toolchain quirk").
+5. **IDs:** project-wide ids are ≥3 digits, zero-padded (phases 000–003,
+   milestones M001…, slices S001…).
+6. **Slice discipline:** a landed slice gets a log in `log/`; its
+   "Follow-ups" don't close until copied to roadmap.dj's Open follow-ups
+   or done.