Steve
Sets intent, rejects bad paths, approves named production actions, and presses the irreversible gate.
Enterprise operating model · reconciled view · static snapshot
Steve supplies intent and final approval. ChatGPT / Codex runs the production line; Grok, Claude, Fable, and other systems may contribute bounded research or design inputs. The protocol and named GitHub versions preserve continuity.
The system survives a change of model because authority lives outside the model.
What changed from the old maps. The Claude/Grok ownership split was removed. Jobs now belong to stations and evidence requirements, so the worker can change without redrawing the business.
02 / Organization · the command tree
Authority descends from one seat, through a one-way membrane, into the shared record; the record feeds three replaceable work cells; observed evidence climbs back. Lime is decision authority, green is work and file handoff, blue is evidence returning.
GitHub is the continuity layer, not the boss. Steve owns scope and approval; ChatGPT / Codex owns the production handoffs. Files, not memory, cross the boundary between cells. Claude, Fable, Grok, and other systems may contribute named inputs, but they do not operate the production line.
Sets intent, rejects bad paths, approves named production actions, and presses the irreversible gate.
Holds text, code, current-state routing, provenance, and manifests. It is not a binary store and it does not prove a live service is healthy. The R2 manifest carries the binary pointers; live systems provide health evidence.
Grok and other research: search broadly, challenge assumptions, deliver evidence packages. Its output enters as evidence, not truth.
ChatGPT / Codex: design and build, operate browser surfaces, verify and hand off. Copywriter, editor, and designer are roles inside this cell.
Beehiiv + Cloudflare publish and deliver; Gmail and Telegram observe; real-world results return. Beehiiv delivers the TNP publication. Cloudflare review hosting is a separate surface; Intel Filter, Reading Room and Telegram operations belong outside this product.
Received email, clicks, replies, failures, corrections. Evidence returns to the record deliberately—not as inferred rules.
End-to-end flow
Files and links cross each handoff. Conversation alone does not.
The operating cast
The responsibility stays stable even if the tool doing the work changes.
Sets intent, rejects bad paths, approves named production actions, and presses the irreversible gate.
Holds text, code, current-state routing, provenance, and manifests. It is not a binary store and it does not prove a live service is healthy.
Holds generated and working images, render proofs, and other binaries. GitHub points to them through the manifest.
Design, production, browser operation, verification, implementation, and orchestration within a named job.
Fast discovery, broad searches, second opinions, and research packages. Its output enters as evidence, not truth.
May supply named research, critique, or design candidates. Their outputs enter through the same evidence and approval gates; neither participates in routine production.
Email template, posts, website, subscribers, polls, and delivery. Live behavior must be checked there.
R2 assets and the current ops/reading surfaces. The R2 S3-compatible route moves objects; GitHub does not.
One-way membrane
The system is deliberately permissive before production and strict only at promotion.
Any system may explore, argue, test, or make competing candidates.
A specific version becomes inspectable and comparable. Still non-authoritative.
The artifact is tested on its real delivery surface. Results—not confidence—move it forward.
Steve explicitly locks a named target. Only then can current state or a decision record change.
Boundaries
DECIDED.md.