# AGENTS — Bastion Universalis

## REPO WRITE LOCK (2026-08-02)

**Only these may modify this repository on disk or via git:**

1. **Grok** (orchestrator · xAI)
2. **Codex** (implementer · OpenAI)
3. **Operator** (Alfonso / terrauniversalis) — human owner

**Everyone else is read-only / propose-only.**  
That includes Claude Code, Claude Design, ChatGPT app, DeepSeek, Copilot, Omalla, Gemini, Cursor agents, and any “utility” satellite.

Full policy:

- `.alexandria/agents/REPO_WRITE_LOCK.md`
- `.alexandria/agents/BASTION_CORE_SHARED_LANE.md`

### Before any edit

```bash
python tools/alexandria_team_sync.py --claim --agent <grok|codex> --paths "<paths>"
```

### MIDI roadway

Routing is **MIDI 2 only** (no MIDI 1 as identity).  
See `config/mapping_universalis/MIDI2_ROADWAY_CANON.md`.

### Tunnels + always-open systems

**TUNNELS RUN FROM `TERRA-NET-GRAPH`.**  
Azure Dev Tunnel host for official `:8800` is owned by the graph node — not terra-operations.

Always-open pack (with cartografia): **sonorum**, **iluminati/illuminatti**, **conspectus/conspecus**.

- Schedule: `config/runtime/SYSTEMS_OPEN_SCHEDULE_TERRA_NET_GRAPH.md`
- JSON: `config/runtime/systems-open-schedule.v1.json`
- Open pack: `tools/open-graph-systems-pack.ps1`
- Tunnel config: `tools/tunnel/8800-config.ps1`

---

facta non ficta · bastion-core = grok + codex