diff --git a/reference/keycard-labs-2026-08.md b/reference/keycard-labs-2026-08.md
new file mode 100644
index 0000000..3f27250
--- /dev/null
+++ b/reference/keycard-labs-2026-08.md
@@ -0,0 +1,16 @@
+---
+description: Keycard Labs job application context — Software Engineer, Identity role (Aug 2026).
+---
+# Keycard Labs Application — Aug 2026
+
+## Company
+- Building identity & access infrastructure for AI agents
+- Role: Software Engineer, Identity
+
+## Application Status (as of Aug 11, 2026)
+- Applied via Ashby
+- Working on application questions
+
+## Application Questions
+1. "Share a time when you changed your mind about a strongly held belief"
+   - User's answer: Adopting LLM-assisted coding. Initially rejected tools like Copilot as too low-quality. Watched friends adopt Cursor and ship faster. Built custom Emacs harness with controlled context. Accepted being slightly slower but more correct. That approach paid off — now very fast and very correct.
diff --git a/reference/tech_context.md b/reference/tech_context.md
index 0760535..f0d8409 100644
--- a/reference/tech_context.md
+++ b/reference/tech_context.md
@@ -137,3 +137,9 @@ description: Technical context, infrastructure details, server configs, and DevO
 - Rationale: vault file was gitignored (never committed), so encryption at rest in git was pointless; Gitea secrets alone suffice
 - S3 credentials in vars/main.yml (uncommented, Gitea secrets inject them for CI)
 - .vault-pass, vars/vault.yml, vars/vault.yml.example removed from project
+
+## Equilibria (XEQM) — Privacy-Focused Cryptocurrency
+- Monero/Loki/Oxen descendant
+- User led migration to proof-of-stake network, deploying/operating peer-to-peer network of hundreds of community-run nodes bridging $10mm+ in value
+- **Service nodes**: Required to have 3 ports publicly reachable from internet — P2P (9230), RPC (9231), Quorumnet (9232). No NAT traversal or hole-punching. Operator must manually port-forward and set `--service-node-public-ip`.
+- **Full nodes (non-service-node)**: Can operate behind NAT more easily (just need outbound connections), but not discoverable by other peers for inbound connections. Fundamentally different from libp2p or Tailscale-style NAT traversal.
diff --git a/system/about_user.md b/system/about_user.md
index aea0735..1360e83 100644
--- a/system/about_user.md
+++ b/system/about_user.md
@@ -3,7 +3,7 @@ description: Key facts about the user.
 ---
 # About the User
 
-- Name: Gov Mohan
+- Name: Govind Mohan
 - Age: 29
 - Lives in Montréal, Québec
 - Enjoys outdoor activities: hiking, biking, camping
@@ -17,6 +17,7 @@ description: Key facts about the user.
 - Has a friend knowledgeable about Québec outdoors (parks, hikes, multi-day routes in Charlevoix/Saguenay region)
 - Hates being told what to do — no "go do X" or "you should Y" directives. Just give info and let him decide.
 - Technical interests: DevOps, self-hosting, infrastructure, cloud services, CLI tools
+- Actively researching AI agent behavior — context management limitations, "bad-tripping" (agents spiraling/can't self-correct despite memory), persistent memory drift. Applies LLMs to coding (custom Emacs harness with controlled context, ~2024+)
 - Uses Arch Linux on personal machine; deep OS internals knowledge from extensive personal debugging experience (days cumulatively spent debugging Linux internals)
 - Fast learner — develops deep expertise personally that can translate quickly to professional context
 - Package manager preference: Homebrew (on macOS)