Environment variables

Empty values generally select defaults. Environment identity values select an existing authenticated binding; they never create authority.

Variable	Purpose and default
MAJLIS_STATE_DIR	Private state root; defaults to ~/.majlis. Use the same root for every entry point.
MAJLIS_WORKSPACE	Workspace selection after --workspace, before discovered TOML.
MAJLIS_SESSION_FILE	Exact private session marker returned by registration. If unset, the client can read <state-root>/session.json.
MAJLIS_ACTOR_ID	Actor ID after the flag, before the marker value. Must match the marker.
MAJLIS_INCARNATION_ID	Incarnation ID, with the same binding checks.
MAJLIS_CHECKOUT_ID	Checkout ID, with the same binding checks.
MAJLIS_BINDING_TOKEN	Explicit credential candidate. Prefer a private file or session marker over exporting secrets.
MAJLIS_BINDING_TOKEN_FILE	Private credential file candidate.
MAJLIS_SOCKET	Unix socket endpoint; beats TCP. Default <state-root>/majlis.sock. Windows rejects Unix sockets.
MAJLIS_TCP_ADDR	Authenticated loopback TCP address such as 127.0.0.1:<port>. Non-loopback addresses are rejected. Default discovery reads <state-root>/majlis.port.
MAJLIS_SOCKET_PATH	Hook helper compatibility alias, after MAJLIS_SOCKET.
MAJLIS_CONFIG	Hook helper workspace TOML override when MAJLIS_WORKSPACE is unset.
MAJLIS_BIN	Hook script executable; defaults to majlis on PATH. Use a trusted installed executable.
MAJLIS_HOOK_SPOOL	Hook-gap directory override; default <state-root>/<harness>-hook-gaps.
MAJLIS_CODEX_SPOOL	Codex gap directory; beats MAJLIS_HOOK_SPOOL for Codex.

MAJLIS_HOOK_PATH and MAJLIS_HOOK_PS1 are placeholders in settings templates to replace during manual installation. They are not runtime settings.

There is no MAJLIS_ADMISSION_DEFAULT policy override, and no environment switch enables consultation. No environment value grants a harness permission or accepts a review.