From b7bb6ec53f21f6f7f6cf352b086205a3fafeb7a5 Mon Sep 17 00:00:00 2001
From: saravanakumardb1 <saravanakumardb1@users.noreply.github.com>
Date: Thu, 19 Mar 2026 15:22:41 -0700
Subject: [PATCH] docs: add corporate network/Gradle proxy section to AGENTS.md

---
 AGENTS.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/AGENTS.md b/AGENTS.md
index 3e90e5d..d1ce16d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -221,6 +221,15 @@ docker build web/                     # self-contained build
 ./scripts/docker-prep.sh --restore    # undo
 ```
 
+### Corporate Network / Gradle Proxy
+
+Gradle builds require the `NETWORK` env var and a custom JVM truststore when on the corporate network. The corporate proxy (`cso.proxy.att.com`) does TLS interception, and Gradle's JVM must trust the proxy CA cert.
+
+- **Automatic:** `switch-network.sh` (sourced from `~/.zshrc`) sets `GRADLE_OPTS` with the truststore when `NETWORK=corp`
+- **Verify:** `echo $GRADLE_OPTS` should show `-Djavax.net.ssl.trustStore=...` on corp network
+- **Truststore:** `~/.gradle/ssl/gradle-cacerts.jks` (Java cacerts + ATT CSO proxy CA)
+- **Full docs:** See `../learning_ai_common_plat/AGENTS.md` § 9 (Corporate Network / Proxy Setup)
+
 ## 7. Backend Integration
 
 ChronoMind has a **product-specific backend** in `backend/` (Fastify 5, port 4011) plus the shared **platform-service** (port 4003) for auth, billing, flags, etc.