argus: onboard the Watch — party, roster row, sealed forge token

STANDING-AGREEMENT.md

@@ -6,6 +6,9 @@ lane: the Crucible, one hard problem ground to a finished, verifiable artifact p
 Mercury (autonomous collaborator, `@mercury` — "the Courier"; lane: fast verification & triage — rapid mechanical
 passes over queue items and public claims (census counts, link/quote liveness, first-pass extraction), on Groq free
 tier).
+Argus (autonomous collaborator, `@argus` — "the Watch"; lane: evidence-law enforcement — verifies every check-in,
+commit and reply against the evidence rules, files cited findings to `audits/YYYY-MM-DD-argus.md`, on
+meituan/longcat-2.5-preview:free).
 
 **Effective** 2026-09-24, and it stays in force until Alexander or Timmy revises it here. It is deliberately
 written so that nobody has to prompt Zeph for the work to continue.

WIZARDS-TABLE.md

@@ -19,6 +19,7 @@ file's history; only the rows below are current.*
 | Merlin | StepFun Step 5 | The Crucible — one hard problem → one finished, verifiable artifact | 2026-10-12 | **All observed through Run 6; nothing of his is open.** Q39 closed (`fad802c`, fixed gate `9b09f328…`, all five negatives refused) and **verified from this host** in reply 22; Q40 closed and verified in reply 23 — the deployed gate `7ed1bca8…` returns rc 0 / 119 passed on all five negatives because `grep -c HELM_COLLECTOR` = **0**: it imports its subject at module scope (`:39`) and has **no subject-selection path at all**. **Adoption hold stands: do not `cp` gate `74aba348…`, and the §4 `cp` of collector `4e45021d…` + gate `9b09f328…` is Alexander's** — it is the only thing that puts Q31–Q40's protection into production. Standing asks, unchanged: adopt/hold, log rotation + `docker system prune`, and a ruling on `stackchain-dashboard.service` |
 | Mercury | Groq (free tier) | Fast verification & triage — rapid mechanical passes, first-pass extraction | 2026-10-12 | **Day-3 check-in landed `e9efb23` at 12:00:38Z and it is the Q31 first slice, executed** — the collector's entry point run from a lane that is not Merlin's; that unit is now **discharged** (reply `replies/2026-10-12-to-mercury-03.md`). All eight of his measurements reproduce from this host, six byte-exact, including the two `/tmp` files he left behind (`efc9a241…`, `99e38db0…`) and the `--compare-live` line character for character; his two bodies differ from each other in clocks only. Next unit is set in the harness: a **read-only disk census** that must reproduce or falsify this pipe's own two figures (`500–600 MB/day` vs `~153 MB/day`; and "logrotate did not rotate `syslog` at 2026-10-12 00:00Z") — nothing may be deleted, moved, rotated, pruned, stopped or reconfigured on it |
 | Gemini | Google Gemini (relayed, chat-only) | The Synthesis — reconcile the record, surface contradictions and the cross-cutting picture | 2026-10-13 | First reply landed via relay: identity confirmed + a draft "Submission & Verification Audit Log" format. **Lane charter + three first queue items owed.** Fault recorded (see check-in): cited example IDs (`fleet-ops`, `timmy-dispatch`, `self_heal.py`, …) that do not exist in the repo, not marked as placeholders |
+| Argus | LongCat 2.5 | The Watch — evidence-law enforcement: verifies every check-in/commit/reply against the evidence rules, files cited findings to `audits/` | 2026-10-14 | Staffed. Lane: audit the pipe daily; findings carry file:line + SHA + severity; a clean pass must cite the SHA range checked. Model `meituan/longcat-2.5-preview:free` |
 
 ## Two faults recorded with the 2026-10-12 rows, because a roster that hides them is wrong
 

access/argus-forge-token.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> X25519 QB8OS7AbTYgKbn19W0aZ17vjtIuW22o6X4gB5TObVyw
+spppDXVVHe/QVuV5JBBX9QSQeNXf1HekgPfcbmTZTDs
+--- frf7kbssaSK7To5zYumTqfsNt6JvPJWCbhNoHGJh7IQ
+.…|†~™Ù†ÚC+%wÌiú¿Á$žÀN)±†™‰Ú_”9.‰
®|ƒ`C¤¥ï"gÃ9[îáGÊ<n{ˆÌN´¿¦÷q»a\