diff --git a/memory/MEMORY.md b/memory/MEMORY.md
index 4528e51..1a26d21 100644
--- a/memory/MEMORY.md
+++ b/memory/MEMORY.md
@@ -1,3 +1,4 @@
 - [Always commit and push](always-commit-and-push.md) — commit + push every PO-repo change automatically, no need to ask
 - [Git identity / push creds](git-identity-local.md) — git.autonomic.zone push info lives in the active cc-ci project (/srv/cc-ci/.testenv); local git identity set on PO repo
 - [Memory lives in repo](memory-in-repo.md) — memory/ is in the PO repo and git-tracked; ~/.claude memory path is a symlink to it
+- [Tangled mirrors](tangled-mirrors.md) — agent-orchestrator + project-orchestrator mirrored to tangled.org (notplants DID); push via `tangled` remote + ~/.ssh/tangled-ed25519
diff --git a/memory/tangled-mirrors.md b/memory/tangled-mirrors.md
new file mode 100644
index 0000000..0263189
--- /dev/null
+++ b/memory/tangled-mirrors.md
@@ -0,0 +1,23 @@
+---
+name: tangled-mirrors
+description: Both repos are mirrored to tangled.org; how to push there
+metadata: 
+  node_type: memory
+  type: reference
+  originSessionId: 7ed8744a-1e31-4832-8cdc-3b726ab41f9a
+---
+
+`agent-orchestrator` and `project-orchestrator` are mirrored to **tangled.org**, owned by
+`notplants.bsky.social` (DID `did:plc:3nogfd4smhmbrv4wo6kl7zg2`). Push URLs:
+- `git@tangled.org:did:plc:3nogfd4smhmbrv4wo6kl7zg2/agent-orchestrator`
+- `git@tangled.org:did:plc:3nogfd4smhmbrv4wo6kl7zg2/project-orchestrator`
+
+Both repos have a `tangled` remote (origin stays `git.autonomic.zone`). Re-mirror after pushing to
+origin with: `git push tangled main` (and `git push tangled --tags`). Tangled's git SSH wants **DIDs,
+not handles**, in the path; the `Welcome to Tangled's hosted knot!` line is just a banner (not an
+error).
+
+Auth: dedicated key `~/.ssh/tangled-ed25519`, registered to the tangled bot account
+`notplants-bot.bsky.social` (the bot's own DID is `did:plc:qfngkejlw4ghji2myc73hbdh`); `~/.ssh/config`
+has a `Host tangled.org` block pointing `IdentityFile` at it. The PO repo's git identity is set
+locally (see [[git-identity-local]]) and the standing rule is [[always-commit-and-push]].