[CryptoJones]

Closes #111
Part of #105

What

• install.sh already refused Python < 3.11 and a missing cryptography (from Runs read the store; YAML retired (#109) #124). It now also takes PYTHON=python3.11 ./install.sh for a host whose default python3 is too old. roundtable is then installed as a two-line wrapper that execs that interpreter, and --uninstall removes only a wrapper it wrote.
• The README gains a Fleet section. Each host has its own store and DB key, and makemake's export is the roster (decisions 2 and 6). Each host sets its own secrets under the same names. A host-specific override is re-applied with lanes edit after each import. CLI sign-in stays per host.

Rollout done in this PR

• pluto moved from 906ce9d to this branch and got cryptography for Python 3.11 and the wrapper install. It has its own store, imported from makemake's export. Its secrets come from its own pass: the shared OpenRouter key under every openrouter/agent/* name, plus its own NVIDIA key. The MiniMax key (parked EDI lane only) was piped from makemake over SSH. GLaDOS keeps pluto's grok-stdin command, and global concurrency is 16.
• Drift reconciliation. pluto's YAML was behind makemake. It still had MUTHUR (renamed GLaDOS on 2026-09-27), MasterControl on mistral-large-2512, Proteus on nova-pro and Colossus active on NVIDIA. Under decisions 2 and 6, makemake's roster won. pluto's old YAML is archived, not lost: ~/.local/share/flatline-roundtable/backups/yaml-archive-pluto-20261006.tar.gz (0600).
• makemake: the final YAML is committed to the private flatline-roundtable-config repo, which is now archived. The 19 .bak-* files went into backups/yaml-archive-makemake-20261006.tar.gz and were removed, and the tarball is in the telesto restic repo.

pluto session

27c8be8 docs(fleet): install.sh PYTHON= wrapper for old-default hosts, README Fleet section (#111)
cryptography 50.0.2
$ ./install.sh   # default python3
ERROR: Python 3.11+ required; python3 is Python 3.9.25. Rerun with PYTHON=python3.11 ./install.sh
$ PYTHON=python3.11 ./install.sh
Skill  -> /home/akclark/.claude/skills/flatline-roundtable
Binary -> /home/akclark/.local/bin/roundtable (wrapper: /usr/bin/python3.11)

No store yet. Create it, then add lanes:
  roundtable db init
  roundtable import-yaml /home/akclark/.config/flatline-roundtable/FlatlineRoundtable.yaml --dry-run      # needs PyYAML, once
  roundtable import-yaml /home/akclark/.config/flatline-roundtable/FlatlineRoundtable.yaml --pull-secrets

Done. Try: roundtable --list
$ roundtable db init
DB key created in pass entry flatline-roundtable/db-key
store created at /home/akclark/.local/share/flatline-roundtable/roundtable.db (schema 2, key id 828ae21d00670477)
$ roundtable db import ~/roster.json --replace
imported /home/akclark/roster.json (replace): 18 added, 0 updated, 0 unchanged, 0 retired
$ (secrets set for each openrouter/agent/* from pass openrouter/api-key, and nvidia/api-key)
stored openrouter/agent/cerebex (key id 828ae21d00670477)
stored openrouter/agent/hermes (key id 828ae21d00670477)
stored openrouter/agent/mastercontrol (key id 828ae21d00670477)
stored openrouter/agent/multivac (key id 828ae21d00670477)
stored openrouter/agent/neuromancer (key id 828ae21d00670477)
stored openrouter/agent/proteus (key id 828ae21d00670477)
stored openrouter/agent/selma (key id 828ae21d00670477)
stored nvidia/api-key (key id 828ae21d00670477)
$ (minimax/api-key piped from makemake pass over ssh)
stored minimax/api-key (key id 828ae21d00670477)
$ roundtable lanes edit GLaDOS --set command=/home/akclark/.local/bin/grok-stdin --set stdin=true --set args=<pluto args> --reason ...
GLaDOS: version 1 -> 2
$ roundtable globals set concurrency=16   # pluto host capacity
globals: set concurrency
$ roundtable db doctor
store      /home/akclark/.local/share/flatline-roundtable/roundtable.db
mode       0600
schema     2 (this roundtable: 2)
integrity  ok
key        id 828ae21d00670477 — unlocks this store
secrets    9
lanes      18 live, 11 active
$ roundtable secrets check
minimax/api-key	present
nvidia/api-key	present
openrouter/agent/cerebex	present
openrouter/agent/hermes	present
openrouter/agent/mastercontrol	present
openrouter/agent/multivac	present
openrouter/agent/neuromancer	present
openrouter/agent/proteus	present
openrouter/agent/selma	present
$ roundtable --list
  [http] Cerebex            openrouter     z-ai/glm-5.3-flash                         https://openrouter.ai/api/v1
  [cli ] Cortana            anthropic      fable                                      claude
  [cli ] HAL9000            anthropic      opus                                       claude
  [http] MasterControl      openrouter     mistralai/mistral-medium-3.1               https://openrouter.ai/api/v1
  [http] Neuromancer        openrouter     deepseek/deepseek-v4-flash                 https://openrouter.ai/api/v1
  [http] SELMA              openrouter     nvidia/nemotron-3-super-120b-a12b:free     https://openrouter.ai/api/v1
  [cli ] SHODAN             openai         gpt-6-astra                                codex
  [cli ] TheDixieFlatline   google         gemini-3.1-pro-high                        agy
  [cli ] GLaDOS             xai            grok-4.6                                   /home/akclark/.local/bin/grok-stdin
  [http] Multivac           openrouter     nousresearch/hermes-4-405b                 https://openrouter.ai/api/v1
  [http] Proteus            openrouter     qwen/qwen3.7-flash                         https://openrouter.ai/api/v1

  11 active lane(s). No calls made.
$ roundtable --lanes SELMA --no-transcript --max-spend 0.02 "Reply with exactly the word OK..."
SELMA  (nvidia/nemotron-3-super-120b-a12b:free)  via Nvidia  0.6s
OK
1/1 lanes answered in 0.6s
exit 0
$ roundtable --lanes GLaDOS --no-transcript "Reply with exactly the word OK..."
  FAILED  GLaDOS: /home/akclark/.local/bin/grok-stdin exit 1: Not signed in. To authenticate without a browser, run:
  grok login --device-code
Alternatively, set the XAI_API_KEY environment variable or run `grok login` on a machine with a browser.
Error: Not s
$ (archive pluto YAML + .bak files to /home/akclark/.local/share/flatline-roundtable/backups/yaml-archive-pluto-20261006.tar.gz, then remove them)
7
7
0
-rw-------

GLaDOS fails on pluto only because pluto's Grok CLI is not signed in (grok login --device-code is interactive). That is unrelated to the store. Every other check passed.

Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/

🤖 Generated with Claude Code

https://claude.ai/code/session_01UFaYYNp3Pb6CnndLuW1sj1

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 17 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 274452bb-426e-4deb-9f01-e9a1cbb3f276

📥 Commits

Reviewing files that changed from the base of the PR and between 65958b0 and 90f1639.

📒 Files selected for processing (3)

• BACKLOG.md
• README.md
• install.sh

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}