Evernote Reference ArchitectureSAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
4f83675ca38aOBSERVED · 2026-10-08Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: evernote-reference-architecture description: 'Reference architecture for Evernote integrations. Use when designing system architecture, planning integrations, or building scalable Evernote applications. Trigger with phrases like "evernote architecture", "design evernote system", "evernote integration pattern", "evernote scale". ' allowed-tools: Read, Write, Edit, Grep version: 1.13.0 license: MIT author: Jeremy Longshore <[email protected]> tags: - saas - evernote - scaling compatibility: Designed for Claude Code --- # Evernote Reference Architecture ## Overview Production-ready architecture patterns for building scalable, maintainable Evernote integrations. Covers service layer design, caching strategy, sync architecture, and deployment topology. ## Prerequisites - Understanding of microservices or modular monolith architecture - Cloud platform familiarity (AWS, GCP, or Azure) - Knowledge of message queues and caching ## Instructions ### Architecture Layers ``` Client Layer [Web App / Mobile / CLI] | API Layer [Express/Fastify REST API] | Service Layer [NoteService | SearchService | SyncService] | Integration [EvernoteClient (rate-limited, instrumented)] | Infrastructure [Redis Cache | PostgreSQL | Message Queue] ``` ### Service Layer Design Separate concerns into focused services: - **NoteService**: CRUD operations, ENML formatting, tag management - **SearchService**: Query building, pagination, result enrichment - **SyncService**: Webhook handling, incremental sync, conflict resolution - **AuthService**: OAuth flow, token storage, refresh logic ```javascript // services/index.js - Service registry class ServiceRegistry { constructor(noteStore, cache, db) { this.notes = new NoteService(noteStore); this.search = new SearchService(noteStore, cache); this.sync = new SyncService(noteStore, db); } } ``` ### Caching Strategy Cache at two levels: in-memory LRU for hot data (note metadata, user info) and Redis for shared state (notebook lists, tag lists, sync checkpoints). Invalidate on webhook notification. ### Sync Architecture Use webhooks as the primary change notification channel. Fall back to polling when webhooks are unavailable. Process changes through a message queue for reliability and retry. Store sync state (USN) in the database for crash recovery. ``` Evernote Webhook → API Gateway → Message Queue → Sync Worker → Database ↓ Evernote API (fetch changes) ``` ### Database Schema Store mirrored Evernote data locally for fast reads. Key tables: `users` (token, expiration), `notebooks`, `notes` (content, metadata), `tags`, `resources` (metadata, file path), `sync_state` (user_id, last_usn). For the complete architecture diagrams, service implementations, database schema, and scaling guidelines, see [Implementation Guide](references/implementation-guide.md). ## Output - Layered architecture with clear separation of concerns - Service registry pattern for dependency management - Two-level caching strategy (in-memory + Redis) - Webhook-first sync architecture with polling fallback - Database schema for local data mirroring - Message queue integration for reliable event processing ## Error Handling | Failure Mode | Impact | Mitigation | |-------------|--------|------------| | Evernote API outage | All sync stops | Circuit breaker, serve cached data | | Redis down | Increased API call rate | Fall through to direct API, in-memory fallback | | Database failure | Cannot persist sync state | Queue events, replay after recovery | | Message queue failure | Webhook events lost | Polling fallback, periodic full sync | ## Resources - [Twelve-Factor App](https://12factor.net/) - [Evernote API Reference](https://dev.evernote.com/doc/reference/) - [Evernote Synchronization](https://dev.evernote.com/doc/articles/synchronization.php) - [Redis Documentation](https://redis.io/documentation) ## Next Steps For multi-environment setup, see `evernote-multi-env-setup`. ## Examples **Note-taking SaaS**: Build a web app where users connect their Evernote account via OAuth, sync notes to a local database, provide full-text search via PostgreSQL, and push changes back to Evernote. **Team dashboard**: Aggregate notes from multiple Evernote Business users into a shared dashboard. Use the sync architecture to keep data fresh. Cache notebook/tag lookups for sub-100ms response times.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__evernote-reference-architecture.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 4f83675ca38a | SAFE | B | 89 | first audit |
Questions
What does the Evernote Reference Architecture skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Evernote Reference Architecture safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Evernote Reference Architecture access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Evernote Reference Architecture work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.