docs: sync CLAUDE.md and references.md with implemented state

[jplock]

Product audit of what's built vs .kiro/references.md and the open issues found the docs had drifted behind the code.

What changed

CLAUDE.md

• Move workspace seeding + warm caches from "Planned" to "Implemented": the infra half has landed in devbox-infra (snapshot-builder running devbox-agent checkout on an EventBridge schedule, Launch Template block-device-mapping seeding /workspace from /devbox/workspace-snapshot/latest, and system-wide RUSTUP_HOME/CARGO_HOME on the volume). Notes that the warm path has not been re-verified on a live claimed box (warm-pool boxes rebuild from cold: snapshot caches don't persist into the claimant session devbox-infra#13 closing note; the dev t4g.small override, pool instance type t4g.small (2 GiB) is undersized; OOM-thrashes compiling the AWS SDK devbox-infra#14, can mask warmth).
• Add POST /api/v1/agent/git-token and POST /api/v1/agent/warmup-report to the API-surface table, with a note on the separate web-identity auth layer (require_agent_iam).
• Remaining planned items reduced to what is actually unbuilt: remote build cache, health-check gating + idle reclaim (claimed boxes are never reclaimed when idle #80), allowlisting egress proxy (devbox egress is port-restricted only; any https destination is reachable devbox-infra#16 + claimant git operations rely on personal credentials, not per-claim tokens #81).

.kiro/references.md

• Add the two entries that issues already cite but the file never had: Stripe Minions (same substrate for humans and agents; smokescreen-enforced no-arbitrary-egress; caches-not-boot warmth) and Joe Magerramov's "Disposable Environments, Durable Sessions" (the session, not the disk, is durable — the framing behind the feat: durable sessions — archive on release, restore on claim --resume #87/revert: durable sessions — archive on release, restore on claim --resume #91 durable-sessions removal).

Doc-only change; no code touched.

🤖 Generated with Claude Code

https://claude.ai/code/session_011PosWgm4XA5gzM1mCQr5um

---

Generated by Claude Code

---

Note

Low Risk
Markdown documentation updates only; no runtime, auth, or infrastructure behavior changes.

Overview
Documentation-only audit: no application code changes.

CLAUDE.md now treats workspace seeding and warm caches as implemented end-to-end (snapshot-builder, Launch Template /workspace seeding, RUSTUP_HOME/CARGO_HOME on the volume, server-backed git-token, warmup degrade-not-reap), with an explicit caveat that the warm path has not been re-verified on a live claimed box. The API table adds POST /api/v1/agent/warmup-report and POST /api/v1/agent/git-token, plus a note on require_agent_iam vs human Vouch auth. The planned list is trimmed to what is still unbuilt (remote build cache, health/idle reclaim, egress proxy, multi-pool warming, stop/resume), with sharper egress-proxy wording and issue links.

.kiro/references.md adds Stripe Minions and Joe Magerramov entries (borrowed ideas already cited in issues/PRs) and updates related reading in CLAUDE.md to list them.

^{Reviewed by Cursor Bugbot for commit 45e28ba. Bugbot is set up for automated code reviews on this repo. Configure here.}