[Unit]
Description=Fold client-reported outcomes into proficiency
Documentation=file:%h/llm-router/CLAUDE.md
# No network-online.target: this makes no provider call and no HTTP request of
# any kind. It reads `verifications` and writes `proficiency`, both local.

[Service]
Type=oneshot
WorkingDirectory=%h/llm-router
Environment=PYTHONPATH=%h/llm-router/src
# Unbuffered on purpose, unlike the other oneshots. This run is IRREVERSIBLE
# and the journal is the only record of what it folded; block-buffered stdout
# loses that record entirely if the process dies part-way through.
Environment=PYTHONUNBUFFERED=1
# No EnvironmentFile: no provider key is needed, so nothing here should fail
# because .env is missing.
ExecStart=%h/llm-router/.venv/bin/python -m feedback

NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=%h/llm-router