ReadyCIO
Menu

MyVault

The learning loop

How to take what you learn about working with AI and make it repeatable, automatically applied, and continually improved. The method behind everything else on this site.

For bothknowledge management

The loop, as drawn on the board

  1. 1

    Learn

    A gotcha, a decision, a pattern, settled mid-session.

  2. 2

    Save

    One note, one idea, an index line written for a stranger.

  3. 3

    Apply

    The index is in every session’s context before work starts.

  4. 4

    Garden

    Audits on every change; contradictions resolved, never kept.

Forgetting is the biggest cost in AI-assisted work, and almost nobody is measuring it. Every team learns the same lessons: which prompts produce good tests, which database setting silently breaks permissions, which vendor’s API needs polling. Then the next session, the next project and the next person learn them again.

A company that fixes this does not get faster once. It gets faster every month, because every lesson learned is applied from then on without anyone having to remember.

This section is about the fix. I call mine the vault. It is not a product. It is a folder of notes and a handful of habits, and it is the single thing that turned my work with AI tools from fast into compounding.

What it is, in one paragraph

A git repository of short Markdown notes, one idea each, linked to each other, with a single index file listing one line per note. Notes are typed: things built, reusable patterns, decisions with their reasoning, lessons distilled from sources. At the start of every AI session, a small hook pulls the repository and puts the index into the tool’s context. A standing rule tells the tool: before proposing an approach to anything non-trivial, check whether a note applies, and say which ones you used.

That is the whole mechanism. The rest is habits.

Not a diagram — the vault, live

MyVault is a private, git-backed knowledge base. The numbers, the map and the patterns below are drawn from its real notes, with client names removed, surveyed October 26, 2026. Building your own? Read the guide →

167
notes written
787
note ↔ note links
10
stubs marked
11
raw sources archived
9
topics, 372 cross-topic links

The topic map

The vault as it stands, drawn from the notes’ real cross-links rather than a diagram of how it is supposed to work.

Drag sideways to see the whole map

9 links 25 links 26 links 12 links 29 links 23 links 42 links 17 links 12 links 13 links 11 links 15 links 19 links 13 links 28 links 38 Vault machinery 163 links inside vault-atlas vault-ambient-recall what-the-vault-is-and-how-it-is-used 28 AI agents and coding tools 28 notes · 52 links inside research-scout-for-team-practice context-preservation-frameworks tool-server-gap-token-escape-hatch 6 Database and access control 6 notes · 4 links inside database-rls-authorization-boundary database-column-grants-are-additive-not-restrictive database-management-api-token-for-auth-config 11 Deploy and operations 11 notes · 13 links inside instrumentation-invariants-and-deploy-tagging host-static-page-rest-deploy new-project-genesis-automation 9 Security 9 notes · 17 links inside continuous-security-pass static-security-audit-playbook agents-rule-of-two-coding-agent-sessions 9 Frontend design 9 notes · 13 links inside site-roadmap-design-direction distinctive-frontend-design date-grouped-one-open-details-lists 31 Marketing sites and content 31 notes · 81 links inside social-content-pipeline-from-site site-knowledge-site-direction static-site-stack-setup-gotchas 14 Agency operations 14 notes · 34 links inside emergency-handoff-automation bug-fix-vs-change-request roi-time-savings-estimate 21 App builds and specs 21 notes · 38 links inside client-crm-rebuild-session-2026-09-27 client-crm-phase-1-tool-server-and-api-keys consulting-crm-tool-server-first-plan 167 notes · 787 mutual links, 372 of them across topics · ring = type mix · line = links between topics · listed: each topic’s three most-linked notes
thing built pattern decision lesson links between two topics, thicker for more
Each ring is one topic, sized by how many notes it holds, with the ring coloured by the mix of note types inside it. A line joins two topics wherever notes on one side link to notes on the other, and its weight is how many links cross. Under each topic sit its three most-linked notes. The vault's own machinery sits in the centre because every other topic feeds it, and the thin ring is the gap the map makes visible. Surveyed October 26, 2026: 167 notes, 787 links, 10 stubs.

What the cross-links reveal

Lessons no single note contains — they only appear when connected notes are read together.

A rule about what counts as a bug became the pages a client build runs on

In early September the vault recorded a commercial rule: a bug is behaviour that does not match what was agreed, and anything the client simply prefers differently is a change request, however small. On 2026-10-09 five notes from one fixed-scope build showed that rule turned into page layouts. The scope review asks one yes-or-no question per requirement, so a failed line is a bug by definition and taste never enters acceptance. The deferred-work roadmap gives every preference a numbered place with a size and a stated ordering rule, so it is recorded without reopening the phase. A status ledger and an internal handbook carry the rest, and the in-app feedback layer from late September is where failed lines get reported. Read alone, each page is a template. Read with the September rule and the August handoff note, they are one mechanism for closing a phase.

In practice
A tester marks Fail on "retire an item, old quotes still show it": that is a bug, fixed this phase. The same tester's "could the picker remember my last supplier?" goes into the roadmap's first wave with a size and a why-here line, and the phase still closes.

  • bug-fix-vs-change-request
  • client-build-artifact-set
  • scope-test-plan-checklist-artifact
  • deferred-work-roadmap-artifact
  • build-plan-status-ledger-artifact
  • internal-build-handbook-artifact
  • prototype-feedback-layer-pinned-client-comments
  • emergency-handoff-automation

EMERGING · 8 notes · 18 links among them · 3 note types · rule written 2026-09-08, pages written 2026-10-09 · one build so far · written 2026-10-09, re-read 2026-10-22

The vault sits upstream of everything public — and what comes back is rules

Seven notes about seven different jobs — re-pointing the website to be an engineer's notebook, generating social posts from it, publishing this atlas and the build guide, syncing them, and two scheduled research scouts — describe one flow when read together. Knowledge enters the vault once, as a note. Everything the public sees is generated from there: the site's vault pages and guide are built from the repo and stamped, and a post is only ever drawn from a page the site already carries, so nothing is invented for an audience. The flow runs one way, and the scouts close the loop: half of the weekly research scout's search list comes from the vault's last fourteen days of gotchas, and every "no" the owner gives a suggestion must carry a reason, which the scout reads back as a dated rule. The vault is the source and the sink; the public surfaces are copies, never places where knowledge is typed by hand.

In practice
A gotcha saved mid-session on Tuesday is on the site's vault page by the next survey, becomes a post drawn from that page, and seeds the following week's research scout — while a rejected suggestion leaves behind a one-line rule the scout obeys from then on.

  • site-knowledge-site-direction
  • social-content-pipeline-from-site
  • vault-public-build-guide
  • site-atlas-sync-session
  • vault-atlas
  • research-scout-for-team-practice
  • scout-feedback-loop-required-reasons-become-dated-rules

EMERGING · 7 notes · 4 public surfaces · generated copies checked by CI on two of them · the feedback half is four days old (2026-09-24/25) · written 2026-09-28, re-read 2026-10-22

A vault outlives the person who wrote it — and briefs the next one

Three notes written about different problems — handing work between developers, keeping context between AI sessions, and surfacing past lessons without being asked — turn out to describe one benefit when read together: the reasoning behind AI-built code, which git never records, survives the coder leaving, and the next coder (human or AI) gets it in the room automatically rather than having to know what to search for. That is also why skills and pointers live in the repo rather than on one machine — a cloud session never sees a personal setup. It is why every note now carries an author, and why a team version resolves disagreements by asking the note's author instead of picking a winner by seniority. The 2026-10-22 survey tested the claim from three outside directions. A research round on what a company would do with a vault found the four note types are domain-neutral and that links between departments pay by exposing contradictions between teams. A public company handbook of four thousand pages, run on the same substrate for a decade, arrived at the same rules (change the document first, remove copied text at its origin, merge the same day) and the same gap: nothing injects its pages into anyone's working context. On 2026-10-23 the vault took those three rules into its own conventions. And the coding agent's own memory feature was examined and not adopted, because it lives on one machine and never reaches a cloud session, which is exactly the case this finding is about.

In practice
A new engineer opens a session on a project they have never seen. Before they design anything, the last person's gotchas, decisions and dead ends are already in context — without a handover meeting.

  • team-vault-authorship-and-conflict-rules
  • team-vault-edition-structure-and-setup
  • emergency-handoff-automation
  • context-preservation-frameworks
  • vault-ambient-recall
  • vault-skill-availability
  • vault-team-capable-conventions-session
  • company-vault-uses-by-department-and-cross-department-links
  • public-handbook-conventions-for-a-vault
  • coding-agent-auto-memory-not-adopted-cloud-first

EMERGING · decided 2026-09-06, live 2026-09-11 · 10 notes converge · 23 links among them · handle authorship and supersede confirmers enforced in CI · extended 2026-10-22 by a company-wide use study, a four-thousand-page precedent and a rejected alternative · still not run by a team as of 2026-10-22

Anything a person has to remember to sync will be forgotten — so the vault checks its own shadows

Five notes converge on one rule from different directions: a handoff-notes decision, a note on where skills must live to be found, a session wrap, and two drift notes written hours apart. The private vault has public shadows — an atlas page and a build guide on a website it cannot push to — and both went stale the same day, in two different ways. The copy lagged the source (nobody re-copied), and the source lagged the machinery it describes (nobody re-wrote). The fix was never "remember": a generator instead of hand copies, a stamp on every output saying what it came from, a check in the source repo's CI that reads the live pages, and a garden step that lists infrastructure changes the guide has not absorbed. The rule then caught this page: these cards were re-judged by hand on each survey, and by 2026-09-28 they had carried three-week-old counts and renamed notes through four surveys — so the map generator now audits them too and prints what has drifted.

In practice
A resurvey lands in the vault. Ten minutes later its own CI goes red: the public page still shows last week's numbers. Nobody had to notice — the check did.

  • private-source-public-copy-drift-check
  • vault-public-build-guide
  • site-atlas-sync-session
  • vault-atlas
  • emergency-handoff-automation
  • vault-skill-availability

STRONG · 6 notes · enforced in CI · fired twice on 2026-09-06, caught both · extended 2026-09-28 to the findings on this page · re-read 2026-10-22

The same escape hatch, hit on three platforms before it had a name

Four notes about four different jobs — spinning up a new project, fixing a sign-in email, publishing a page, shipping a contact form — each ran into the same wall: the AI's built-in connector to a platform covers the everyday operations and nothing past them, and can even report a failure that never happened. Each note found the same way out on its own: a personal access key stored once in the AI's environment, and a direct call to the platform's own API. Reading them together turned four workarounds into one rule, now written as its own note and wired into the project-genesis skill as a prerequisite rather than a rescue. A fifth note, a week later, shows the rule working: a deploy from a cloud session hit the same wall and went straight to the direct call.

In practice
The connector says the project it just created doesn't exist. The dashboard shows it fine. The rule says: don't retry, don't delete — read it back through the key instead.

  • tool-server-gap-token-escape-hatch
  • new-project-genesis-automation
  • database-management-api-token-for-auth-config
  • host-static-page-rest-deploy
  • vault-rollback-note-and-atlas-resurvey-session

STRONG · found in 5 notes · 3 platforms · extracted 2026-09-04 · now a genesis prerequisite · reached for again 2026-09-12 with the direct call already in hand · re-read 2026-10-22

One security foundation — and the graph now says where it stops

Two client builds let the database itself enforce "is this user allowed to see this?" — a rule written once, applied to every request automatically. The approach was proven in one client's ticketing build, extracted as a reusable pattern, and reused wholesale in a second client's portal. The 2026-09-25 survey added the other half of the lesson: the third build, the CRM rebuild, deliberately did not adopt it. Its database has only one door (an ORM on a direct connection; the public API is closed by policy-less row security), so authorization stayed in code and the client portal became one more role pinned to a company. The pattern's note and the decision note now link to each other and state the boundary: database-enforced rules where a second door exists, app-level roles where it doesn't. On 2026-09-27 the CRM spec extended the same choice to its tool server for AI agents: every tool calls the same role library the screens do, so a second door was added without a second rule.

In practice
Someone at Company A physically cannot open Company B's tickets in the ticketing product — and in the CRM portal a guessed invoice id from another company is a 404, enforced by the one query path every portal page shares.

  • database-rls-authorization-boundary
  • ticketing-implementation-plan
  • client-portal-plan
  • consulting-crm-tool-server-first-plan
  • database-column-grants-are-additive-not-restrictive
  • static-security-audit-playbook
  • client-crm-phase-1-tool-server-and-api-keys
  • database-rls-tests-pgtap-in-ci

LOAD-BEARING · 8 linked notes · 3 client products · boundary written into both sides · re-confirmed 2026-09-27 when the CRM spec extended it to its tool server · since 2026-09-29 the database proves the rule itself (a test suite in CI) · re-read 2026-10-22

The three properties that matter

Repeatable. A lesson written as a note is written once. “Column grants are additive; revoke the table grant first or the narrower one is a no-op” was learned from a failing test on a Tuesday and has been applied to every project since without anyone thinking about it. The note is the memory. The person is free to learn the next thing.

Automatically applied. The index in context at session start is what makes this different from a wiki nobody reads. The tool sees “centralized polling with poke broadcast, for push-less APIs” in its first few hundred tokens, and when a task involves an API that cannot push, it connects the two on its own. No search, no remembering. The quality of each index line is what moves the odds: written for a stranger searching by problem, symptom and stack, not by title.

Continually improved. Notes go stale, contradict each other, and pile up. So the vault audits itself: a script that checks every link both ways and flags thin index lines, run automatically on every change. A gardening pass, monthly, merges near-duplicates and prunes.

And a conflict rule: if a new lesson contradicts an old note, stop and decide. Did I change my mind, or is the new information wrong? On a change of mind, the old note is updated in place with a dated line saying what it used to say and why it changed. Never two notes disagreeing. The history keeps the old version.

The habits that keep it alive

Save mid-session, not at the end. The moment a decision or gotcha is settled, it goes in. A long session’s context gets summarized, and the thing decided an hour ago is exactly what gets lost.

Read before designing. The obligation, not just the awareness. The tool is told to check, and to name the notes it applied, so stale ones get noticed.

Distil, do not dump. A raw source, a transcript, an article, is read once and turned into a note that stands alone. Nothing re-reads the raw source. Recall works on the distilled notes only.

Extract the general idea. Project work produces project notes. When a project note contains a lesson that would apply anywhere, it gets its own note that the project note links to. Otherwise the lesson is buried where only that project can find it.

For a company: the team version

Everything above works for one person. For a company it is the answer to a question leaders keep asking in different words: how do we make sure what one team learns about AI, every team gets, and how do we not lose it when someone leaves?

Two different payoffs answer that, and they arrive on a different schedule. The daily one: two people on different projects hit the same gotcha and solve it twice, which happens constantly and has nothing to do with anyone leaving. The rarer, sharper one: when someone does leave, the next person’s first AI session is already informed, because the record is put in front of the tool automatically rather than left for them to go and search for.

The team version adds four things to the mechanism above.

An owner. Someone whose job includes the monthly gardening pass, the same way someone owns the backlog. Every note also carries an author, so a genuine contradiction can be routed to the person who wrote it rather than argued about by whoever is in the room.

A route in. Anyone can save a note, from any tool, through the repository. A shared inbox folder for raw material that the owner distils.

A route out. Every project repository carries a pointer to the vault, so every AI session on every project starts with the same index. New projects get the pointer stamped in automatically. Nobody has to remember to connect it.

A conflict rule with no approval step. Two entries that look contradictory are usually both true under different conditions; state the boundary before calling it a conflict at all. When it is genuine, the author decides, or a named fallback if they have left, and the resolution is recorded, not silent.

What the rule deliberately does not add is review before a note gets saved — that would stop people writing things down in the moment, which is the one habit the whole thing depends on.

I have also used the same shape for something a vault is not: the bus-factor problem. A nightly automated draft of a handoff note per project, from the ticket system and the repository, that a developer edits and commits daily. The principle is identical. Logic that lives centrally cannot be forgotten or uninstalled per project.

None of it is tested by anything except an actual departure, which is a bad time to find out. So a quarterly drill, someone picking up a piece of work with zero help from whoever normally owns it, is the check that stays manual on purpose. Whatever they get stuck on is the real gap.

The full method for a team, with what good looks like for each part, is here: Standards and continuity for a small AI-coding team.

Why I would start here

If a company could do only one thing from its AI plan, I would pick this over any tool or feature. The tools will change. The lessons about using them well are what the company keeps, and a company that keeps them is a company that gets better at this every month while its competitors relearn.

Build your own

The full build guide, with the folder structure, the session-start hook, the standing rules and the audit script, is here: Build your own knowledge vault. It takes an afternoon. Start with ten notes, the ten things you would tell a new starter, and let the habit do the rest.

Earlier on this page is my own vault, mapped, and the six lessons that only showed up once its notes were linked. These pieces go deeper on individual parts.

Deeper