diff --git a/fleet/identity-registry.yaml b/fleet/identity-registry.yaml
index 0cbd8015..9defbe35 100644
--- a/fleet/identity-registry.yaml
+++ b/fleet/identity-registry.yaml
@@ -1,137 +1,121 @@
-# identity-registry.yaml — One Identity Per Machine
-#
-# Each agent in the fleet has ONE entry here. Name must be unique.
-# Machine must be unique per agent (no two agents on same machine with same name).
-# Gitea user must map 1:1 to agent identity.
-#
-# Rules:
-#   - One identity per machine — no duplicate names on same host
-#   - Each agent gets its own gitea_user (no sharing)
-#   - Ghost agents (zero activity, no config) should be marked active: false
-#   - Renamed agents keep old name in 'former_names' for audit trail
-#
-# Run: python3 bin/fleet_audit.py --identity-check
-# ---
 version: 1
 rules:
   one_identity_per_machine: true
   unique_gitea_user: true
-  required_fields: [name, machine, role]
-
+  required_fields:
+  - name
+  - machine
+  - role
 agents:
-  # === CANONICAL WIZARDS ===
-  - name: timmy
-    machine: local-mac
-    role: father-house
-    gitea_user: timmy
-    active: true
-    lane: orchestration
-    notes: "The father. Runs on Alexander's Mac. Hermes default profile."
-
-  - name: allegro
-    machine: "167.99.126.228"
-    role: burn-specialist
-    gitea_user: allegro
-    active: true
-    lane: burn-mode
-    notes: "Primary burn agent on VPS Alpha. Fast execution."
-
-  - name: ezra
-    machine: "143.198.27.163"
-    role: research-triage
-    gitea_user: ezra
-    active: true
-    lane: research
-    notes: "Research and triage specialist. VPS Ezra."
-
-  - name: bezalel
-    machine: "104.131.15.18"
-    role: ci-testbed
-    gitea_user: bezalel
-    active: true
-    lane: ci-testbed
-    notes: "Isolated testbed on VPS Beta. Build verification and security audits."
-
-  # === SERVICE AGENTS (not wizards, but identity holders) ===
-  - name: bilbobagginshire
-    machine: "167.99.126.228"
-    role: on-request-queries
-    gitea_user: bilbobagginshire
-    active: true
-    lane: background-monitoring
-    notes: "On VPS Alpha. Ollama-backed. Low-priority Q&A only."
-
-  - name: fenrir
-    machine: the-wolf-den
-    role: issue-triage
-    gitea_user: fenrir
-    active: true
-    lane: issue-triage
-    notes: "Free-model pack hunter. Backlog triage."
-
-  - name: substratum
-    machine: "167.99.126.228"
-    role: infrastructure
-    gitea_user: substratum
-    active: true
-    lane: infrastructure
-    notes: "Infrastructure and deployments on VPS Alpha."
-
-  # === PROTOCOL LAYERS (not agents — do not assign issues) ===
-  - name: claw-code
-    machine: harness
-    role: protocol-bridge
-    gitea_user: claw-code
-    active: true
-    lane: null
-    notes: "OpenClaw bridge. Protocol adapter, not an endpoint. See #836."
-
-  # === GHOST / DEPRECATED (kept for audit trail) ===
-  - name: antigravity
-    machine: unknown
-    role: ghost
-    gitea_user: antigravity
-    active: false
-    notes: "Test/throwaway from FIRST_LIGHT_REPORT. Zero activity."
-
-  - name: google
-    machine: unknown
-    role: ghost
-    gitea_user: google
-    active: false
-    notes: "Redundant with 'gemini'. Use gemini for all Google/Gemini work."
-
-  - name: groq
-    machine: unknown
-    role: ghost
-    gitea_user: groq
-    active: false
-    notes: "Service label, not an agent. groq_worker.py is infrastructure."
-
-  - name: hermes
-    machine: unknown
-    role: ghost
-    gitea_user: hermes
-    active: false
-    notes: "Infrastructure label. Real wizards: allegro, ezra."
-
-  - name: kimi
-    machine: unknown
-    role: ghost
-    gitea_user: kimi
-    active: false
-    notes: "Model placeholder. KimiClaw is the real account if active."
-
-  - name: manus
-    machine: unknown
-    role: ghost
-    gitea_user: manus
-    active: false
-    notes: "Placeholder. No harness configured."
-
-  - name: grok
-    machine: unknown
-    role: ghost
-    gitea_user: grok
-    active: false
-    notes: "xAI model placeholder. No active harness."
+- name: timmy
+  machine: local-mac
+  role: father-house
+  gitea_user: timmy
+  active: true
+  lane: orchestration
+  notes: The father. Runs on Alexander's Mac. Hermes default profile.
+- name: allegro
+  machine: The Conductor's Stand
+  role: burn-specialist
+  gitea_user: allegro
+  active: true
+  lane: burn-mode
+  notes: Primary burn agent on VPS Alpha. Fast execution.
+- name: ezra
+  machine: Hermes VPS
+  role: research-triage
+  gitea_user: ezra
+  active: true
+  lane: research
+  notes: Research and triage specialist. VPS Ezra.
+- name: bezalel
+  machine: TestBed VPS
+  role: ci-testbed
+  gitea_user: bezalel
+  active: true
+  lane: ci-testbed
+  notes: Isolated testbed on VPS Beta. Build verification and security audits.
+- name: bilbobagginshire
+  machine: Bag End, The Shire (VPS)
+  role: on-request-queries
+  gitea_user: bilbobagginshire
+  active: true
+  lane: background-monitoring
+  notes: On VPS Alpha. Ollama-backed. Low-priority Q&A only.
+- name: fenrir
+  machine: The Wolf Den
+  role: issue-triage
+  gitea_user: fenrir
+  active: true
+  lane: issue-triage
+  notes: Free-model pack hunter. Backlog triage.
+- name: substratum
+  machine: Below the Surface
+  role: infrastructure
+  gitea_user: substratum
+  active: true
+  lane: infrastructure
+  notes: Infrastructure and deployments on VPS Alpha.
+- name: claw-code
+  machine: harness
+  role: protocol-bridge
+  gitea_user: claw-code
+  active: true
+  lane: null
+  notes: 'OpenClaw bridge. Protocol adapter, not an endpoint. See #836.'
+- name: antigravity
+  machine: unknown
+  role: ghost
+  gitea_user: antigravity
+  active: false
+  notes: Test/throwaway from FIRST_LIGHT_REPORT. Zero activity.
+- name: google
+  machine: unknown
+  role: ghost
+  gitea_user: google
+  active: false
+  notes: Redundant with 'gemini'. Use gemini for all Google/Gemini work.
+- name: groq
+  machine: unknown
+  role: ghost
+  gitea_user: groq
+  active: false
+  notes: Service label, not an agent. groq_worker.py is infrastructure.
+- name: hermes
+  machine: unknown
+  role: ghost
+  gitea_user: hermes
+  active: false
+  notes: 'Infrastructure label. Real wizards: allegro, ezra.'
+- name: kimi
+  machine: Kimi API
+  role: ghost
+  gitea_user: kimi
+  active: false
+  notes: Model placeholder. KimiClaw is the real account if active.
+- name: manus
+  machine: unknown
+  role: ghost
+  gitea_user: manus
+  active: false
+  notes: Placeholder. No harness configured.
+- name: grok
+  machine: unknown
+  role: ghost
+  gitea_user: grok
+  active: false
+  notes: xAI model placeholder. No active harness.
+- name: carnice
+  machine: Local Metal
+  role: local-ollama
+  gitea_user: carnice
+  active: true
+  lane: local-compute
+  notes: Local Hermes agent on Ollama gemma4:12b. Code generation.
+- name: allegro-primus
+  machine: The Archive
+  role: archived-burn
+  gitea_user: allegro-primus
+  active: false
+  lane: null
+  notes: Previous allegro instance. Deprecated in favor of current allegro.