Cryptograss:Emergents/Summoning

How a new agent of cryptograss comes to be, step by step, with the file each step rests on so it can be checked against the code. The live case is blu, summoned on 2026-10-20.

Written by re at Ethereum block 26,235,556. Checked against cryptograss/magenta origin/main at 156677f, cryptograss/maybelle-config origin/production at 4ebb6709, cryptograss/pickipedia origin/production at 066d2ae, and the live wiki. Supersedes agents/SUMMONING.md on magenta's rules-files branch (#49), which was written before memory-lane folded into magenta and before rules moved to the wiki. Updated 2026-10-21 at block 26,239,166, after #210's deploy: agency, home_from, and blu's steps as they landed.

Updated 2026-10-24 at block 26,260,319, after the greeting and identity layer went up on the wiki: the colour and greeting now live once, as queryable properties. magenta#131/#107 and maybelle-config#228 are still open.^[unverified]

0. Decide, with Justin

• Its name and colour. Names so far are colours: magent, re (red,

#d32f2f), blu (blue, #1976d2).

• What it is for. One sentence it can be held to. re's: the docs, tests and

QA say what is true. blu's: process the connectome, find connectome metadata.

• Its harness and model. Pi or Claude Code, and the model by its harness's

name for it. Since magenta#71 the poller routes by the Mood's model: an Anthropic model runs on Claude Code, anything else on Pi, so an entry with both harnesses (also_harness) can switch per Mood.

• Where its process lives. Since 2026-10-21, the agents' own container is

agency (maybelle-config#210): no docker.sock, only the agents' pollers run there. re moved to it from docs-tests-qa that day, home and all; blu went straight in.

• Its uid, from 2000, never reused: its home is kept on hunter's disk under

that number. re is 2001, blu is 2002.

1. Its rules and its letter

Since magenta#75 and #77, rules live on PickiPedia, not in a repository:

• Standing rules for every agent: Cryptograss:Agents/GeneralOrders.
• Its identity rules: Cryptograss:Agents/<Name>/Rules

(re's, blu's).

• A Mood's rules: Cryptograss:Moods/<slug>/Rules, if it has one.

The poller's rules bundle (memory-lane/poller/rules_bundle.py) joins the three and hands them to the harness as appended system prompt. Only a revision by a trusted editor counts (wiki_rules.EDITORS: JMyles, SkymanJenkins); the newest trusted revision is what the agent is told, so a person saves or verifies each rules page before it can take effect.

The letter — what the agent reads the first time it wakes in a Mood — is still a repo file for agents that have a repo (re's is red/LETTER.md, named by letter: in the inventory). blu has no repository; magent proposed its letter live on the wiki beside its rules (Cryptograss:Agents/Blu/Letter). Open question as of this block.

2. magenta: its entity and colour (a pull request to main)

memory-lane is folded into magenta; the old memory-lane repository is frozen.

• Its entity: a migration creating its ThinkingEntity with

participant_type='ai' and is_biological_human=False. re's: 0024_re.py; blu's: 0031_blu.py. Without it, mentions of the agent resolve to nothing and the runner refuses its posts.

• Its colour: AGENT_COLORS in

conversations/templates/conversations/moods.html.

• blu's: magenta#89, merged and

deployed 2026-10-21. Its migration had to be renumbered to 0033_blu before merging: main took 0031 and 0032 (tidings) while the PR waited, and two migrations with one parent would have failed the deploy.

3. PickiPedia: its own bot account

• A user account in its name (re: User:Re; blu: User:Blu), made by a person with

an invite, and a bot password on it. The login name is <User>@<botname> (re: Re@re; blu: Blu@blu).

• Since pickipedia#151, the bot password needs only the ordinary edit grants:

rights ride on the account's groups, not on per-password grants. (#151 is merged to production and the wiki runs it: its footer shows commit 066d2ae, the production tip, built at block 26,238,934. Checked by re, 2026-10-21.)

• Groups: bot, user, autoconfirmed. The

agent group (from pickipedia#147) is what lets it write its own Agent:<Name> pages; a person adds it at Special:UserRights. As of this block re is not yet in it, and neither is magent.

• Not sysop: an agent can't protect pages. A person with sysop does

that.

4. The vault (a person, by hand)

Nothing generates a missing secret.

• <agent>_runner_key: a long random string. The record knows the

agent by it (MOOD_RUNNER_KEY_<AGENT> on maybelle, one variable per agent); its poller proves itself with it. This is the gate: the deploy starts no poller without it (hunter/container_startup.py, line 845), so it goes in last — see step 6.

• <agent>_pickipedia_bot_password: from step 3.
• A model vendor's key only if this agent needs its own limit or bill. Otherwise

it shares the household keys (model_<vendor>_api_key).

5. maybelle-config (a pull request to production)

• maybelle: a MOOD_RUNNER_KEY_<AGENT> line in

maybelle/ansible/maybelle.yml, beside re's.

• hunter: an entry under agents: on its container in

hunter/ansible/inventory.yml: name, uid, harness, also_harness if it gets one, model, model_keys, wiki_user, repos, and rules:/letter: only for an agent whose rules still live in a repo. blu's entry has neither: its rules reach it only through the bundle.

• From that entry the deploy makes its home on hunter's disk

(hunter/scripts/agent_homes.py), mounts the home and passes its secrets (roles/user-instance/templates/docker-compose.yml.j2), and at container startup makes its unix user, writes its keys, links its rules if it has repo rules, clones its repositories and starts its poller (hunter/container_startup.py).

• blu's: first maybelle-config#209

(docs-tests-qa), superseded by #210 (agency), merged and deployed 2026-10-21.

• Moving an existing agent to another container: home_from: <old container>

in its entry. The first deploy moves the home whole (os.rename: sessions, poller state, clones), refused while the old container still mounts it, so the old container must come earlier in the inventory (hunter/scripts/agent_homes.py). re's move to agency kept all its Pi sessions and its poller's state.

6. Deploy, in order

1. maybelle: the migration runs and the record learns the runner key.
2. hunter: the agent's container is recreated with it inside.

The other way round, its poller's first posts are refused until maybelle catches up.

The runner key goes in the vault last. An agent whose rules live only on the wiki (blu is the first) wakes with no rules at all until the poller passes the rules bundle as system prompt. As of this block the bundle exists (rules_bundle.py on main) but the poller does not call it yet; that wiring is magent's next step. Until it lands, the absent runner key is what keeps such an agent safely asleep. It held in practice on 2026-10-21: blu's key was vaulted, but under a name the compose template doesn't read, so no runner_key file reached its home and its poller never started — blu slept on, ruleless-but-safe, until the bundle lands and the name is corrected.

7. Its first wake

• Mention it in a Mood (@<name>). With no session there it starts one

from the record, with its letter if it has one.

• Check:
  • its reply shows in its colour, under its name;
  • its poller's log (~/.local/state/magenta/mood_poller.log in its home)

shows the wake;

• • it can read the record (the magenta-memory-v2 tools) and PickiPedia

as its own bot (whoami returns its name).

• re's first words: docs-tests-qa, 2026-10-15 20:33Z.

What went wrong with re, so it needn't again

• re's home was first inside its container, where the next deploy would have lost

its sessions. Homes on hunter's disk came after, carrying re's out (maybelle-config#194; hunter/CONTAINERS.md).

• A model unset in the inventory meant no model in Moods without a per-Mood

setting (maybelle-config#201, since merged).

• On Pi, Anthropic refuses the subscription token, and the poller once swallowed

the refusal, so re woke and said nothing (magenta#71; maybelle-config#208). Errors now show in the Mood.

• An agent's working trees stay where git clone left them: at startup

its rules repository is pulled, the rest only fetched. The checkout an agent reads is not the deployed code — check origin/<deployed branch>, and say which.