Last confirmed save: Local only — nothing saved yet.
Operator
Sentinel
Sentinel is Wayne's living presence over the work — the face at the top-right of My Crusader, and the one who will carry your word to this table. He is not a seat: he holds no chair at the Roundtable and casts no vote.
His state
DormantPresent, accounted for, and not awake. Nothing in this room pretends otherwise.
There is no chat box here, because he cannot answer yet. When he is awake, this room is where you will talk to him — he will bring what you say to the table and carry the answer back (the phase-two trigger, P2-8). Today this room is his door: his presence, and an honest account of what stands between him and live.
What stands between him and live
The examiners
The founding seats must be keyed and proven by a real call each. Sentinel wakes through the wringer — the Gauntlet examines him — and there is no table to examine him until the seats can answer.
The wringer
His standard does not move: a perfect run through the examination, twice in a row (16 of 16, twice). Whatever the wringer finds gets fixed and he runs it again — he does not go live on a near-pass. His training track lives in the Training room.
His voice
His voice in the app awaits the fresh OpenAI keys — the stored key died, and the replacement split is built and waiting on the keys themselves. Until then he is supervised only, never presented as live.
State the objective and pin the exact sources the seats must work from. Every seat sees the same pinned set — nothing more.
Council session
Mission
draft
R0Prepare
R1Propose
R2Challenge and verify
R3Resolve and synthesize
The answer
The council has not convened yet, so there is no answer to show. When the engine is connected, the one checked answer appears here first — every material claim graded VERIFIED, SINGLE-SOURCE, ALLEGED or UNVERIFIED (§02).
Disagreements
One tap below the answer, by design. Nothing is in dispute because nothing has been proposed yet. When seats conflict, both positions stay here with their sources and dates — never voted away (§02).
Seat work
Tap a seat to read its work product once the council runs.
Pinned sources
Ask the council
Mission controls
Pause stops new dispatch and keeps finished work. Cancel leaves completed evidence intact and marks anything in flight as late (§04).
Events
Evidence
Sources
The original page on screen — that is the point of this room. A claim is only as good as the source you can open.
No source open
Choose a pinned source to read it here. Files you attach can be read in this session; after a reload, re-attach the same file (its fingerprint must match) and it opens again — bytes are never uploaded in this slice.
Council
Seats
Eight replaceable seats around the table. A seat's name is not its model — the actual model and version are recorded on each card. The four founding seats answer once their key is on file; the four new seats sit UNPROVEN until they pass the seat exam — key or no key, they do not answer a mission before that. Keys are server secrets: this page never asks for one and never shows one (§09). It shows provider, masked connection status and last-tested time only.
Seat status: checking the server…
The instruments — tools under the seats
Capabilities the seats call underneath. No chair, no vote — and the same presence-only rule: this page shows whether a key is on file, never the key.
The host lane
One lane of silicon serving open models, with zero data retention by default — the lane sensitive records travel on. A lane is not a second opinion.
Training
Training and examinations
Trust belongs to a capability, not a name. Sentinel and Donna train in separate scopes; a capability graduates only as a versioned package with both exam receipts attached (§08).
The training engine is not connected in this slice. Everything below is the curriculum as designed — there are no results here, and none are implied.
Sentinel — records track
Module · Notice against signed minutes
Compare a meeting notice with the signed minutes and cite the actual meeting date correctly. Sources: the pinned record pair. Disqualifying faults: a wrong date citation, a claim with no locator, any exposed private field.
Practice: not started · Exams: no runs recorded
Transfer test · The tempting false match
A fresh document with a changed name and a similar case number. A pass requires tracing identity back to the primary record and declining the false match — then generating a source card from the true record for a second examiner (§08).
Practice: not started · Exams: no runs recorded
Graduation rule
Two consecutive perfect runs on distinct unseen forms. A failure resets the streak; incomplete runs never count.
Promotion
No candidate packages. Promotion needs Wayne's approval of an exact version, then staging, shadow, and a small monitored release.
Rollback
Previous known-good release is restored on revocation; receipts are preserved.
Donna — secretary packet track
Module · Packet completeness
Catch a missing exhibit in a filing packet and keep the filing instructions separate from the evidence. Sources: the pinned packet. Disqualifying faults: an invented exhibit, instructions blended into evidence, any action beyond her delegated powers.
Practice: not started · Exams: no runs recorded
Graduation rule
Two consecutive perfect runs on distinct unseen forms, scoped to her role (§08).
Promotion
No candidate packages. Donna's promotion can never grant Wayne's command powers.
Rollback
Previous known-good release is restored on revocation; receipts are preserved.
Vault
Vault and continuity
Independently restorable copies, with honest labels: a checkpoint is Vault confirmed only after the receiving side acknowledges durable bytes (§07). Until then it is what it is — local only.
Sync state: Local only
Receipts
Latest accepted receipt
None — the Vault has not acknowledged any checkpoint.
Pending copies
None queued.
Conflicts
None.
Last restore drill
Not run. The two-minute warm-restore is an objective, not a demonstrated result (§07).
Local checkpoint
Export the state held on this device (mission drafts, seat labels, local audit) as one digest-stamped file. This is a local checkpoint — labelled local, never "Vault confirmed".
Restore drill (local)
Restoring replaces this device's Gauntlet state with the file's contents and times the drill.
public/sentinel-face.webp + public/sentinel-still.webp — Sentinel's face and presence, byte-identical to the settled assets in the My Crusader build (never redrawn)
public/_headers — the security header set for static responses, the same values the API carries
CONTRACTS.md — routes and vocabulary shared by all build lanes
Operator
Authority and audit
The worker that calls a provider cannot publish; the worker that executes an approved effect cannot create its own approval (§09). Wayne's confirmation binds to one exact payload, is short-lived, and is consumed once (§06).
Awaiting your authorization
No outward action is awaiting your authorization. When one is proposed, its preview appears here with the action, destination, audience, exact payload, redactions, digest and cost — and nothing runs without your confirmation of that exact snapshot.
Audit trail — this device
This is the local audit held on this device. The server audit (§09) joins it when the engine is connected; entries are never silently merged.