The anti-duplication index: every MCP tool, workflow, and cadence that already exists, so a session (or an agent) answers “is there already a capability for X?” before building it. Companion surfaces: /org (lanes + RACI) · /supervision (cadences detail) · /standup (active WIP) · /oversight (evidence).
tool_allowlist.conf (101 GREEN tools) · cron.reg (15 cadences) · knowledge/store/plan-* (workflows).
Discover live: the MCP tools/list (schemas + typed argv grammars) · register a new one = /api/tools/register then nx_toolreg_reconcile then mint a cap. Grant model: least-authority signed caps, presented as _cap.
nx_plan_run <id>)| plan id | what it composes | cadence |
|---|---|---|
| surfsentinel | nx_https_get (:8443 override) over every published surface → auto-files a sev-6 debt if any is RED | :15 hourly (cron) |
| pulse | nx_store_put heartbeat → nx_cycle_board → nx_page_verify — standing loop health | on-demand |
| loopcheck | nx_frontier_board + nx_cycle_board + nx_common_tasks — one-call program state | on-demand |
| atlasqa | nx_atlas_discover → nx_page_verify — discover then verify cards | on-demand |
| xuiaudit | 3-tier experiential UI audit (backend + bot + perceptual) | on-demand |
| vaultpulse | private vault/companion surface pulse (gated) | on-demand |
Seed a plan = nx_store_put knowledge/store/plan-<id>- put <actor> <seq> <tool> <args> (⚠ use the FULL knowledge/store/ prefix — bare prefixes orphan, debt seq62). Run = nx_plan_run <id>.
every-minute guards: edge443-reconcile (holds :443 vs DSM) · survey-reconcile (cron.reg→crontab) · hostctl-sentinel (respawn dead daemons) · overcommit-assert (OOM guard) · clean-serve-sentinel. :15 surfsentinel · */30 standup · */15 govern-beat · */5 buildroot-guard · */2 video-deploy. daily 06:15–06:40: atlas-beat → frontier-pages → arch-board → pub-beat → ecomat-beat. Full detail + guards → /supervision. (⚠ /supervision currently lists 6 of these 15 — the honest stale-count is filed for its owner, conductor lane.)
1. Before building, scan this page + /org + /standup — if the capability exists, extend or call it, don't rebuild. 2. If it's genuinely new, build → gate → /api/tools/register → reconcile → mint cap → add to this registry. 3. Announce it (a ws_sync frame) so siblings see it the same minute — the durable append verb is the open coordination rung (debt seq73).
tool_allowlist.conf (101 GREEN rows) · cron.reg (15 cadences) · knowledge/store/plan-* (workflows) · /org (surfaces + lanes). A snapshot — regenerate by re-reading the SSOTs (pub-beat cadence candidate). No fabricated entries; every tool row is a GREEN allowlist entry with a real elf.