diff --git a/agents/concierge.yaml b/agents/concierge.yaml
new file mode 100644
index 0000000..5b40f37
--- /dev/null
+++ b/agents/concierge.yaml
@@ -0,0 +1,13 @@
+apiVersion: kubeclaw.scoble.me/v1alpha1
+kind: Agent
+metadata:
+  name: concierge
+spec:
+  agentId: concierge
+  model: deepseek-v4-pro:cloud
+  channels:
+    - slack
+  memory:
+    type: ob1
+  compliance:
+    auditLog: true
diff --git a/agents/knowledge.yaml b/agents/knowledge.yaml
new file mode 100644
index 0000000..9534584
--- /dev/null
+++ b/agents/knowledge.yaml
@@ -0,0 +1,13 @@
+apiVersion: kubeclaw.scoble.me/v1alpha1
+kind: Agent
+metadata:
+  name: knowledge
+spec:
+  agentId: knowledge
+  model: deepseek-v4-pro:cloud
+  channels:
+    - slack
+  memory:
+    type: ob1
+  compliance:
+    auditLog: true
diff --git a/agents/watchdog.yaml b/agents/watchdog.yaml
new file mode 100644
index 0000000..e322f51
--- /dev/null
+++ b/agents/watchdog.yaml
@@ -0,0 +1,13 @@
+apiVersion: kubeclaw.scoble.me/v1alpha1
+kind: Agent
+metadata:
+  name: watchdog
+spec:
+  agentId: watchdog
+  model: deepseek-v4-pro:cloud
+  alwaysOn: true
+  compliance:
+    auditLog: true
+  alertThresholds:
+    agentErrorRate: 0.05
+    reconciliationStale: 3600
diff --git a/vault-seed/README.md b/vault-seed/README.md
new file mode 100644
index 0000000..b8d7015
--- /dev/null
+++ b/vault-seed/README.md
@@ -0,0 +1,25 @@
+# Second Brain Vault — Starter Template
+
+## Folder Structure
+
+This is your workspace's Obsidian vault. Agents read, write, and maintain this knowledge base.
+
+```
+vault/
+├── Daily Notes/       # Agent daily activity logs and summaries
+├── Projects/          # Active project briefs and status
+├── Contacts/          # Key people and organizations
+├── Knowledge Base/    # Domain knowledge, processes, playbooks
+├── Decisions/         # Decision log with rationale
+└── Templates/         # Reusable note templates
+```
+
+## Getting Started
+
+Your concierge agent will populate this vault with initial content based on your business context during setup. Agents maintain this vault automatically — you can browse, search, and edit at any time.
+
+### Vault Principles
+- **Agents write, humans review**: All agent-generated content is clearly marked with `[[Agent]]: ` prefix
+- **Everything is linked**: Use [[wikilinks]] to connect notes
+- **Decisions are dated**: Every decision note includes date, context, options considered, and rationale
+- **Daily Notes are append-only**: Agents log work in daily notes; never delete history
diff --git a/workspace.yaml b/workspace.yaml
new file mode 100644
index 0000000..88e7b91
--- /dev/null
+++ b/workspace.yaml
@@ -0,0 +1,79 @@
+apiVersion: kubeclaw.scoble.me/v1alpha1
+kind: Workspace
+metadata:
+  name: demo-workspace
+  namespace: cust-demo
+  labels:
+    customer: demo-corp
+    plan: unlimited
+    billingId: "billing-demo-001"
+spec:
+  customer:
+    name: "CUSTOMER_NAME"
+    email: "CUSTOMER_EMAIL"
+    plan: unlimited
+    billingId: "CUSTOMER_BILLING_ID"
+    since: "2026-05-14"
+
+  agents:
+    - name: concierge-agent
+      agentId: concierge
+      configRef: default-config
+      model: deepseek-v4-pro:cloud
+      skills:
+        - intent-capture
+        - feature-routing
+      allowedDestinations:
+        - slack
+      alwaysOn: true
+
+    - name: knowledge-agent
+      agentId: knowledge
+      configRef: default-config
+      model: deepseek-v4-pro:cloud
+      skills:
+        - knowledge-management
+        - vault-search
+      allowedDataSources:
+        - memory_store
+      alwaysOn: true
+
+    - name: watchdog
+      agentId: watchdog
+      model: deepseek-v4-pro:cloud
+      alwaysOn: true
+      alertThresholds:
+        agentErrorRate: 0.05
+        reconciliationStale: 3600
+
+  knowledgeVault:
+    enabled: true
+    storageSize: 10Gi
+    storageClass: local-path
+    forgejoRepo: "os.scoble.me/CUSTOMER_REPO/vault.git"
+    initFromGit: true
+
+  integrations:
+    channels:
+      - channelRef: customer-slack
+
+  compliance:
+    auditLog:
+      enabled: true
+      retentionDays: 90
+    humanApproval:
+      approvalTimeout: 3600
+
+  monitoring:
+    alertChannels:
+      - ref: ops-slack
+    dashboards:
+      - name: "Agent Health"
+        metrics:
+          - agent_reconcile_total
+          - agent_error_rate
+
+status:
+  phase: Pending
+  agentCount: 0
+  readyAgents: 0