hey-dave system map Diagram

Design rules

• One process, one user, one terminal
• The core emits events; the TUI and dave run render them

Trust

• The model is untrusted: every call passes the gate
• Outward writes need a per-proposal yes; children inherit only read grants

Vault and Tasks

• DaveState is the only vault writer; the journal is append-only
• Task work, memory and sync: specs 11–12 and the stage files