---
vault_clearance: KETER
halo:
  classification: RESTRICTED
  confidence: HIGH
  front: "14_Project_ListeningCathedral"
  custodian: "Antigravity (Gemini)"
  created: 2026-03-28
  updated: 2026-03-28
  wing: UNASSESSED
  containment: "FORM — reversed MCP / mailbox agency vs orthodox agent harness"
---

# FORM — Flow-Orthogonal Remote Manipulation

**BOOK:** [BOOK.md](BOOK.md) — multi-agent and governance citations as architecture cites them.

> Acronym per [FORM_PROTOCOL.md](../FORM_PROTOCOL.md). **Council bodies** via Astronomicon mailbox vs **max-orthodox** MCP / enterprise agent stacks.

---

## Section A: The Two Paradigms

| Axis | Orthodox (max traditional) | Ours (ListeningCathedral) |
|------|------------------------------|---------------------------|
| **Philosophy** | LLM-in-the-center; tools as plugins | **Intent → mailbox → body agent**; cathedral listens, body executes |
| **Free parameters** | Connector zoo, prompt soup | **Queue semantics** (claim / done / fail), throne keys, rate limits |
| **Tools** | MCP hub, official SDKs, IT runbooks | [08 Astronomicon](../08_Project_Astronomicon/) Worker routes + local runners |
| **Output** | Session-bound actions | Durable jobs + worldline / mail rows |
| **Runtime** | Human copy-paste or IDE-bound | Polling daemons, GCP micro-VMs, Jules-class watchers |
| **Provenance** | Chat logs | Mailbox IDs, `event.*`, Technomancer tape |

---

## Section B: Head-to-Head

| Axis | Orthodox | Ours |
|------|----------|------|
| **Method** | Synchronous tool call | Async queue + lease |
| **Free parameters** | Tool descriptions + temperature | Auth tokens, `to` / `claimer` discipline |
| **What's lost** | Lowest-latency “one chat” UX | Requires operational maturity |
| **What's gained** | Audit trail, multi-actor fan-in | Same pattern as production job systems |
| **Key difference** | Session is system of record | **Vault + edge** are system of record |

---

## Section C: The Murder Board

1. **Secret in the browser** — never embed write tokens in public HTML forms ([08 worker README](../08_Project_Astronomicon/u_os_dev/worker/README.md)).
2. **Ghost jobs** — claimed mail stuck without `done` / `fail`.
3. **Trust boundary** — body agent with wide filesystem + mailbox read = high blast radius.
4. **MCP envy** — re-inverting back to “just chat” and losing the queue discipline.

**Countermove:** Document **minimum** body agent; use HALO for body capabilities; immune / worldline for sensitive threads.

---

## Section D: What We Take (Honestly)

| From orthodox | Why | Into ours how |
|---------------|-----|----------------|
| **MCP schema thinking** | Clear tool contracts | Mirror as **Panini** + `/mail/schema` |
| **OAuth / service accounts** | Provider auth | Keep **off** edge; body holds creds |
| **Runbooks** | Human escalation | Link to [THRONE_ONBOARDING.md](../08_Project_Astronomicon/u_os_dev/THRONE_ONBOARDING.md) |

---

## Section E: The Proof — Concrete Comparisons

1. **End-to-end job:** council posts intent → body completes → result in mailbox + optional `event.log`.
2. **Failure injection:** kill body mid-job → `fail` + retry path documented.
3. **Auth audit:** no Worker secret in vault text; keys in wrangler / MCP env only.

---

## Section F: Global Cultivator Survey (sketch)

| Stack | Pattern | Status |
|-------|---------|--------|
| **OpenAI / Anthropic tool use** | Sync tools | COMPARE |
| **Zapier / n8n** | Visual automation | WATCH |
| **This lab** | Mailbox + bodies | ADOPT for council scale-out |

---

## Section G: Adoption Priority

| Priority | Action |
|----------|--------|
| **NOW** | One reference body agent README + safe defaults |
| **NEXT** | Jules / watcher integration table in project WORLDLINE |
| **LATER** | Signed job envelopes if threat model demands |

---

## Section H: Final Assessment

ListeningCathedral is how **synthetic council** gets **hands** without melting the security model. Orthodox agent stacks optimize **demo friction**; we optimize **sovereignty and replay**. Honest failure mode: **operational complexity** — if bodies are not maintained, the cathedral is empty noise.

---

*FORM — Flow-Orthogonal Remote Manipulation. Nervous system: [08_Project_Astronomicon](../08_Project_Astronomicon/). Memory: [03 Technomancer](../03_Project_Technomancer/).*