# KAB Content Ingestion Agent

Contract-first ingestion for GitHub and SharePoint into a governed KAB-compatible knowledge store. The package is dependency-light and uses injected HTTP, secret, clock, and publisher ports for deterministic tests.

## Quick start
```bash
python -m pytest -q
python -m compileall kab_ingestion
```

See `docs/contract.md`, `docs/operations.md`, and `examples/config.yaml`.

## Security
Tokens are referenced by secret name, never stored in configuration or logs. Every document carries tenant, source, and ACL metadata; publishers must enforce the same filters at query time.