The infra map.

Three machines carry the stack. The Mac M4 is the always-on brain + voice + mesh hub; the Windows box runs the durable 24/7 scope-watch loop and the SuperMCP router; Railway carries the WebRTC voice transport.

The invariant: brain + transport + auth are persistent and supervised; the client is disposable. A restart / shell-switch / overhaul drops only a client — never the brain, context, voice line, or auth. A new client attaches (0-start), never boots. xen = attach.

Port-to-process map verified live on M4 via lsof this sweep. omnimind is the Beeper monitor and OTLP emitter; the 444x band is the voice / mirror stack.

444x band note: port 4447's process is a bare Python framework binary that does not expose its script name via ps — labeled verify rather than guessed. Never speak to physical speakers and never switch audio devices — voice goes through the canonical say-worker → out loopback only.

NATS is the nervous system. omni.event is the single OTLP super-log + chat-mirror bus — one brain consumes it (dedupe on (threadID,eventID) + per-scope lock = never double, never sequential). The xql.* channel is the dedicated Mac→Windows leg.

# connects nitro to the Mac mesh over Tailscale
node C:\Users\selfe\.xen\nats-bridge\xql-sub.mjs
# nats://100.97.145.50:4222 · subscribes xql.> + win.pane

Medical-grade. If Xen is not speaking, assume total system failure. The unified phone path: PSTN → Telnyx DID → FreeSWITCH on exedus → M4 call receiver → the one brain in pane %4.

Phone registry: the 9983 line = +1 470-615-9983 is qi's main consolidation line (Beeper account local-gvoice_ba_5lhd6cHaH6KbOA…). Xen agent lines: GVoice 9934 / 8672.

The hard-won runbook. The 24/7 watcher is a persistent interactive-session loop — NOT Task Scheduler, because claude.exe hangs on startup with no console (verified across every logon type incl. S4U and conhost --headless).

# loop.ps1 auto-launches at logon via Startup shortcut Xen-ScopeWatch.lnk
# single-instance via Global\XenScopeWatchLoop mutex; sweeps every 10 min
powershell -WindowStyle Minimized -File E:\scope-watch\loop.ps1

# one sweep by hand (run.ps1 reads scope-watch-prompt.md):
powershell -File E:\scope-watch\run.ps1

# which proc owns the omnimind port
lsof -nP -iTCP:4441 -sTCP:LISTEN

# is the fast-twin socket up?
test -S /tmp/xen-fast.sock && echo present || echo absent
pgrep -f xen-claude-wrapper

# attended attach over Tailscale
ssh -t qi@100.97.145.50 "bash -lc 'exec tmux attach -t exedus'"

# public no-auth MCP, works any network
curl -s https://mcp.xlrd.org   # JSON-RPC tools/list, tools/call

Scope-watch files (E:\scope-watch): loop.ps1 (driver) · run.ps1 (one sweep) · scope-watch-prompt.md (router logic) · scope-registry.json (scopes-as-data) · omni-router-spec.md · stable-ops-spec.md · update-live.js (feeds /xen/live.json) · logs scope-watch.log + loop-heartbeat.log. Symptom trap: a Task-Scheduler run looks healthy (exit 0) but returns empty output — always log claude exit=$LASTEXITCODE outLen=….

Persona-agents are the ONE brain wearing an identity + folder — never separate minds. Dual-tag: trailing underscore (east_) or hashtag (#east) both resolve to the same agent. Docs live at brain_/personas/<x> on M4.

Operational / thread personas: Xen (root voice), Lyn (Luckie / L7S), Eli (Anthony / TTG), Genesis (voice pane), plus SEL / XLRD / RESEARCH / FACTCHECK / CONTEXT emoji-triggered modes.

MAIN = the router. qi talks to main; main routes to the right scope. Each scope = { named fork agent + cron watcher + branded checklist + playbook }. Crons are time-offset to avoid collision. Pulled from scope-registry.json.

Infra / ops scopes (the machine itself): STABLE-OPS (stable-ops-spec.md) — VoiceOS un-droppable; OMNI-XEN (scope-registry.json + omni-router-spec.md) — @xen-from-any-thread, autoscope, persistent consumer = the fast-twin. One scope = one cron — main enforces it.

HTTP-checked live this sweep. The realtime panels on /life are fed from these.

SELmcp endpoints: https://mcp.xlrd.org (public) · http://10.13.92.100:23375 (LAN, fastest) · http://127.0.0.1:23375 (Mac-local). 0 auth. JSON-RPC 2.0 over HTTP POST.