Configuration

Signet reads workspace configuration from agent.yaml. Start with signet setup, keep credentials in Secrets, and restart the daemon after an operational change:

signet daemon restart
signet daemon status --json

The running daemon is the authority for operational state. Use Diagnostics and /health/ready to verify a change rather than assuming a YAML edit was applied.

In this section

• Workspace and identity: workspace selection, identity files, embeddings, and safe configuration shape.
• Inference and routing: canonical targets, policies, workloads, and routes.
• Pipeline configuration: runtime controls, maintenance, documents, continuity, and telemetry.
• Security and lifecycle: authentication, lifecycle behavior, and environment overrides.
• Files and integrations: managed workspace files, local state, harnesses, and source control.

Operator rule

Do not restore retired configuration blocks from old examples. In particular, memory.synthesis is rejected by the current loader. Keep model selection in the canonical inference routing configuration, and use the current daemon error or Upgrading when an older workspace no longer loads.

Runtime validation

The daemon selects the first existing runtime document in the order agent.yaml, AGENT.yaml, then config.yaml. The selected document must be a YAML mapping. Malformed YAML and invalid known authentication, embedding, or search settings reject startup or reload with file and field diagnostics; the daemon does not substitute another config file or silently switch to local authentication. Missing optional settings continue to use their documented defaults, and supported legacy forms are translated by the normal migrations before the resolved configuration is checked.

Embedding providers are local (the native alias), native, llama-cpp, ollama, openai, or none. Embedding dimensions must be a positive integer. Search alpha and min_score must be within 0–1, and top_k must be a positive integer. Authentication modes are local, team, and hybrid.