The vault 146 files

Demo / the vault

Atlas/team/INDEX.md

Team

Eighteen rows. Nothing is connected. No credential exists for any of them (ADR-20, ADR-30).

One charter per curator at Atlas/team/<slug>.md, one per (venture × tool) pair (ADR-04). Curators read and return structured findings. Only Hobbs edits files, creates tasks, or produces a brief (constitution rule 3). New charters are filled in from _TEMPLATE.md, not composed.

Four statuses, and the difference between them is the point (ADR-30 clause 4):

grantable-todayNo credential exists to issue. Waiting on a sentence
chartered-not-grantedThe credential exists and is narrow. Waiting on Rowan, and nothing else
chartered-blockedThe platform offers no narrow credential. Not waiting on Rowan
refusedDecided against, with the reasoning in the file

The roster

SlugNameScopeTierStatus
quietWren wrall × the vaultinherits highestgrantable-todayhobbs-0w4
school-calendarTerm tmfamily × the school’s published calendarhighly-sensitivegrantable-todayhobbs-wkj
calendar-rowanBell blall × Rowan’s calendarhighly-sensitivechartered-not-granted
calendar-mayaMarsh mhmaya × the shared calendarhighly-sensitivechartered-not-granted — hobbs-oou
gmail-personalPike pkpersonal × gmailhighly-sensitivechartered-not-granted — hobbs-9rq, hobbs-oou
voicemail-mobileTape tpophelia + all × voicemailhighly-sensitivechartered-blocked — no sync exists
bank-businessTill tl4 companies × business bankinghighly-sensitivechartered-not-granted
bank-personalCoin cnmoney · home · family × the personal bankhighly-sensitivechartered-not-granted
brokerageBook bkmoney × the brokeragehighly-sensitivechartered-not-granted
cartaSlice slangels + fund-lps × Cartahighly-sensitivechartered-not-granted
workspace-halcyonWard wdhalcyon + bedrock × the Halcyon mailboxinternalchartered-not-granted
drive-halcyonShelf sfhalcyon × Driveinternalchartered-not-granted
linear-halcyonRail rlhalcyon × Linearinternalchartered-not-granted
slack-halcyonHall hlhalcyon × Slackinternalchartered-not-granted
github-halcyonForge fghalcyon × GitHubinternalchartered-not-granted
notion-bedrockStrata sabedrock × Notioninternalchartered-not-granted — and the charter argues against it
whatsapp-roboticsCrowd cdfamily × the robotics grouphighly-sensitivechartered-blocked — a linked device can send
signalmultiple × SignalREFUSED — no narrow credential exists

Till covers four accounts — Halcyon, Bedrock, Ashcroft, Rivet Yard — as four separately granted instances against one charter (ADR-30 clause 7). That clause applies to the banks and to nothing else.

The hiring order — hobbs-yqx

Re-set by ADR-30 clause 9. ADR-20’s day-one order was Gmail, calendar, Workspace. Two things happened to it: Pike’s argument was spent when Rowan read Sam’s essay himself on 12 September, and the calendar has since cost a wrong decline and seventeen days of an unexecutable authority row 10.

#WhoWhy it sits here
0Wren, TermNo credential. Nothing to grant. Wren is the failure mode this system exists for; Term closes three unknowns off a public PDF
1BellMeeting prep cut from ten briefs. The 24 September decline was made blind. But it does not make row 10 automatic — moving an event is a write
2MarshADR-12’s amendment fires only when the vault has her home, and the vault learns that by Rowan speaking. hobbs-78f has sat at P3 because there is no way to do it
3PikeWritten 18 September. Still the account where things go to die; no longer the strongest case
4Tapehobbs-bg9 is a five-brief P0 whose every figure is second-hand from a voicemail. Blocked on a sync, not on Rowan
5Till · Coin · Book · SliceVerification, not discovery. Bea is the discovery mechanism and she is better at it. Every figure in this vault is “as reported”
6WardThe account he actually reads, so the lowest marginal value — ADR-20 said so on day one and it still holds
7Rail · Hall · Shelf · Forge · StrataThe engineering and record surface. Rail first; Forge must beat Rail once in a month or be retired; Strata’s own charter argues against it

A grant task is created the day Rowan names a charter, not before. Fifteen approval tasks sitting open would be fifteen phantom decisions.

The two answers he asked for, in one line each

  • Signal: no. Every read path is a linked device or an extracted key, and both carry send — authority row 6. ADR-04’s guarantee that a compromised curator can at worst misread is false on Signal and true everywhere else here. And every Signal-shaped failure in this vault is outbound. Reasoning: signal.md §§2–5. Reopening conditions: §9, and only those.
  • The quiet role: yes, and it should be first. quiet.md. It needs no credential, its two failure modes are both already in the archive, and its first-week test is falsifiable against known misses.

Not built

No runtime definitions. The team guide derives a .claude/agents/<slug>.md from each charter, with the tool list in its frontmatter as the enforcement point. None exists, for any row. Generating one is part of a grant, not part of a charter (ADR-30 clause 8).

Against the guide’s six-step protocol, every row is at steps 1–2 of 6. Steps 4–6 — scope the auth, read-only smoke test, graduate to rotation — are Rowan’s, one at a time.

Markdown source
---
type: index
updated: 2026-09-22
---

# Team

**Eighteen rows. Nothing is connected. No credential exists for any of them**
(ADR-20, ADR-30).

One charter per curator at `Atlas/team/<slug>.md`, one per (venture × tool) pair
(ADR-04). **Curators read and return structured findings. Only Hobbs edits files,
creates tasks, or produces a brief** (constitution rule 3). New charters are
filled in from **[`_TEMPLATE.md`](_TEMPLATE.md)**, not composed.

**Four statuses, and the difference between them is the point** (ADR-30 clause 4):

| | |
|---|---|
| **grantable-today** | No credential exists to issue. Waiting on a sentence |
| **chartered-not-granted** | The credential exists and is narrow. Waiting on Rowan, and nothing else |
| **chartered-blocked** | **The platform offers no narrow credential.** Not waiting on Rowan |
| **refused** | Decided against, with the reasoning in the file |

## The roster

| Slug | Name | Scope | Tier | Status |
|---|---|---|---|---|
| [quiet](quiet.md) | **Wren** `wr` | all × the vault | inherits highest | **grantable-today** — `hobbs-0w4` |
| [school-calendar](school-calendar.md) | **Term** `tm` | family × the school's published calendar | highly-sensitive | **grantable-today** — `hobbs-wkj` |
| [calendar-rowan](calendar-rowan.md) | **Bell** `bl` | all × Rowan's calendar | highly-sensitive | chartered-not-granted |
| [calendar-maya](calendar-maya.md) | **Marsh** `mh` | maya × the shared calendar | highly-sensitive | chartered-not-granted — `hobbs-oou` |
| [gmail-personal](gmail-personal.md) | **Pike** `pk` | personal × gmail | highly-sensitive | chartered-not-granted — `hobbs-9rq`, `hobbs-oou` |
| [voicemail-mobile](voicemail-mobile.md) | **Tape** `tp` | ophelia + all × voicemail | highly-sensitive | **chartered-blocked** — no sync exists |
| [bank-business](bank-business.md) | **Till** `tl` | 4 companies × business banking | highly-sensitive | chartered-not-granted |
| [bank-personal](bank-personal.md) | **Coin** `cn` | money · home · family × the personal bank | highly-sensitive | chartered-not-granted |
| [brokerage](brokerage.md) | **Book** `bk` | money × the brokerage | highly-sensitive | chartered-not-granted |
| [carta](carta.md) | **Slice** `sl` | angels + fund-lps × Carta | highly-sensitive | chartered-not-granted |
| [workspace-halcyon](workspace-halcyon.md) | **Ward** `wd` | halcyon + bedrock × the Halcyon mailbox | internal | chartered-not-granted |
| [drive-halcyon](drive-halcyon.md) | **Shelf** `sf` | halcyon × Drive | internal | chartered-not-granted |
| [linear-halcyon](linear-halcyon.md) | **Rail** `rl` | halcyon × Linear | internal | chartered-not-granted |
| [slack-halcyon](slack-halcyon.md) | **Hall** `hl` | halcyon × Slack | internal | chartered-not-granted |
| [github-halcyon](github-halcyon.md) | **Forge** `fg` | halcyon × GitHub | internal | chartered-not-granted |
| [notion-bedrock](notion-bedrock.md) | **Strata** `sa` | bedrock × Notion | internal | chartered-not-granted — **and the charter argues against it** |
| [whatsapp-robotics](whatsapp-robotics.md) | **Crowd** `cd` | family × the robotics group | highly-sensitive | **chartered-blocked** — a linked device can send |
| [signal](signal.md) | — | multiple × Signal | — | **REFUSED** — no narrow credential exists |

**`Till` covers four accounts** — Halcyon, Bedrock, Ashcroft, Rivet Yard — as four
separately granted instances against one charter (ADR-30 clause 7). That clause
applies to the banks and to nothing else.

## The hiring order — `hobbs-yqx`

**Re-set by ADR-30 clause 9.** ADR-20's day-one order was Gmail, calendar,
Workspace. Two things happened to it: **Pike's argument was spent when Rowan read
Sam's essay himself on 12 September**, and **the calendar has since cost a wrong
decline and seventeen days of an unexecutable authority row 10.**

| # | Who | Why it sits here |
|---|---|---|
| **0** | **Wren, Term** | **No credential. Nothing to grant.** Wren is the failure mode this system exists for; Term closes three unknowns off a public PDF |
| **1** | **Bell** | Meeting prep cut from ten briefs. The 24 September decline was made blind. **But it does not make row 10 automatic** — moving an event is a write |
| **2** | **Marsh** | ADR-12's amendment fires only when the vault has her home, and the vault learns that by Rowan speaking. `hobbs-78f` has sat at P3 because there is no way to do it |
| **3** | **Pike** | Written 18 September. Still the account where things go to die; no longer the strongest case |
| **4** | **Tape** | `hobbs-bg9` is a five-brief P0 whose every figure is second-hand from a voicemail. **Blocked on a sync, not on Rowan** |
| **5** | **Till · Coin · Book · Slice** | Verification, not discovery. **Bea is the discovery mechanism and she is better at it.** Every figure in this vault is "as reported" |
| **6** | **Ward** | The account he actually reads, so the lowest marginal value — ADR-20 said so on day one and it still holds |
| **7** | **Rail · Hall · Shelf · Forge · Strata** | The engineering and record surface. Rail first; **Forge must beat Rail once in a month or be retired**; Strata's own charter argues against it |

**A grant task is created the day Rowan names a charter, not before.** Fifteen
approval tasks sitting open would be fifteen phantom decisions.

## The two answers he asked for, in one line each

- **Signal: no.** Every read path is a linked device or an extracted key, and
  **both carry send** — authority row 6. ADR-04's guarantee that *a compromised
  curator can at worst misread* is false on Signal and true everywhere else here.
  **And every Signal-shaped failure in this vault is outbound.** Reasoning:
  [`signal.md`](signal.md) §§2–5. **Reopening conditions: §9, and only those.**
- **The quiet role: yes, and it should be first.** [`quiet.md`](quiet.md). **It
  needs no credential**, its two failure modes are both already in the archive, and
  its first-week test is falsifiable against known misses.

## Not built

**No runtime definitions.** The team guide derives a `.claude/agents/<slug>.md`
from each charter, with the tool list in its frontmatter as the enforcement point.
**None exists, for any row.** Generating one is part of a grant, not part of a
charter (ADR-30 clause 8).

**Against the guide's six-step protocol, every row is at steps 1–2 of 6.** Steps
4–6 — scope the auth, read-only smoke test, graduate to rotation — are Rowan's,
one at a time.