Skip to content

Records

llms.txtlists every page for an agent
Optional: hand this page to your coding agentThe steps work by hand too.
Show the whole prompt
Read https://intentius.io/choudoufu/how-it-works/values/ and list the record-backed resources here. Change no files. Never apply or destroy (`choudoufu apply`, `choudoufu destroy`, `tofu apply`), approve a saved plan, or merge; never edit or remove an owner tag by hand.

Each managed instance has one record. It holds what a run must remember beyond ownership.

Record kinds and stores

Kind For
identity A resource with a live object: what a read leaves out
object A resource with no live object, such as random_* or tls_*: the whole value
Store Records are For
local Files in .tofu-records One operator (default)
s3 Objects in your bucket A team on AWS
kubernetes Secrets in your namespace A team on a cluster
azurerm Blobs in your Azure Storage container A team on Azure
gcs Objects in your Cloud Storage bucket A team on GCP
record_store "s3" {
bucket = "my-records-bucket"
}

Each write is conditional on the record being unchanged since it was read. One bucket serves many estates.

The store holds generated passwords, so guard it as you guard a state file (live/SECRETS.md).

choudoufu