1. Shape
Front door is Titus. RSI improves the roster. Specialists keep one outcome each. Capabilities/skills are shared; memory and routines stay per Bot.
2. Anti-entropy
Promote carefully: one-shot → skill → routine. Descriptions are standing contracts. Prefer delta reports. Pause dead routines.
3. Security stance
Primary risk is systemic compromise (prompt injection / shared computer), not shopping mistakes. Bots are not a security boundary. Local execution off; Auto-review on as injection backstop; few connectors.
4. Next
Digest site hosting via Builder. Optional MCP to external Titus later. Fix X enrollment if needed. Auto-review as injection defense.