docs: initialize ngn-agent project

.planning/STATE.md

@@ -0,0 +1,23 @@
+# Project State
+
+## Project Reference
+
+See: .planning/PROJECT.md (updated 2026-06-14)
+
+**Core value:** Agent must NEVER mutate real infrastructure beyond what the limited IAM role permits
+**Current focus:** Phase 1 — Hermes Install & Provider Setup
+
+## State
+
+- **Status**: initialized
+- **Current phase**: none (ready for Phase 1)
+- **Last action**: Created PROJECT.md, REQUIREMENTS.md, ROADMAP.md
+- **Next action**: Execute Phase 1 — install Hermes, configure providers, Docker, AWS
+
+## Notes
+
+- User picked Hermes Agent over NanoClaw after our research
+- Docker terminal backend for isolation
+- Limited AWS SSO role via project-local `./.aws/`
+- Bedrock primary → OpenRouter fallback
+- GSD config: yolo mode, coarse granularity, sequential execution