designs: streamlined onboarding — clone → ./garden → "help"

Design for collapsing the new-user path to three manual actions: the
launcher auto-builds and execs an interactive auto-mode claude liaison
on enter (settings.json seeded host-side like .garden, carrying the
container-guard SessionStart hook; ./garden shell as escape hatch); a
first-class help verb drives an ask-before-acting first-run tutorial
whose script is the new on-demand context/ tree (first-run/ +
operations/, context-library discipline); and a migration map moves
operational command detail out of README.md and CLAUDE.md § Job system
into it. Open questions (auto-mode default, auth ordering, exec
placement, help mechanics, tree boundary, README depth) surfaced for
maintainer review; implementation phased into four build jobs.

Job: design-streamlined-onboarding

Author: endolinbot

designs/README.md

@@ -32,3 +32,4 @@ The garden's `CLAUDE.md` § Conventions states that the garden does not generall
 | [gardener-reputation-bootstrapping.md](gardener-reputation-bootstrapping.md) | Proposed | Companion to the bid/accept market: effectiveness is the acceptance gate, cost is the free variable (notional dollars and duration, unified as cost per accepted job). Bootstrap reputation from journal `todo`/`tada` history plus synthetic replay; explore/exploit via Thompson sampling over per-arm cost posteriors; a reputation-driven role refiner mints fresh-prior bidders, bounded by a cap plus a consolidator (hierarchy as the follow-on). |
 | [bot-email-dedicated-domain.md](bot-email-dedicated-domain.md) | Proposed | Counter-plan to FastMail masking: run bot email on a dedicated domain (`minion.town`) the bot fully controls. Compares AWS SES, Hetzner self-hosted, Cloudflare Email Routing, ImprovMX/ForwardEmail/Migadu, and Postmark/Mailgun on inbound/read-path/catch-all/outbound/deliverability/cost/ops for a receive-mostly bot. Recommends Cloudflare Email Routing (free catch-all inbound + Email Workers) with a managed sender deferred for rare outbound; carries the ToS/abuse and identity-blast-radius caveats. |
 | [review-retrospective-loop.md](review-retrospective-loop.md) | Proposed | The double loop: every substantive PR comment also indicts the review process. The comment-watcher mints a second, deferred `-retro` job (deterministic verb-class gate, no LLM); a `prosecutor` role discriminates real review misses from new direction, records them with grounds in a journal `review-misses/` store, clusters them by a failure taxonomy mapped to juror seats, and past a floored subjective threshold dispatches a dual-goal `review-improve-*` job: prevent the error at the producing role AND make the panel catch it next time (seat-brief line plus panel-hints probe, or a deterministic gate). |
+| [streamlined-onboarding.md](streamlined-onboarding.md) | Proposed | Collapse onboarding to clone → `./garden` → "help": the launcher auto-builds, seeds `.claude/settings.json` (SessionStart container-guard hook) like `.garden`, and execs an interactive `claude --dangerously-skip-permissions` liaison on enter (`./garden shell` is the escape hatch; CMD stays systemd). A first-class `help` verb drives an ask-before-acting first-run tutorial whose script *is* the new on-demand `context/` tree on `main2` (`first-run/` + `operations/`, context-library discipline), and a migration map moves the operational command detail out of README.md and CLAUDE.md § Job system into it. |