Search the guide (the baked fedwiki federation, 20 sites). Returns an ORDERED WALK of pages — BM25 over the baked lexical index, then link-graph expansion — each step with its site, slug, lattice vertex and PSI element. The agent reads the bake, never the live farm, so a walk is reproducible.

One page by slug (site optional — identity is the slug, never the host): its text, weave (links), lattice vertex + six-bit posture, PSI element and public URL.

Linked pages (outgoing and backlinks) of a page, each with the NAMED LATTICE MOVE from this page to it: succ · neg · bnot · flip · jump ×k (dimensions), per the 64-vertex sovereignty lattice.

Apply a lattice operator to a vertex (0-63): succ (the wheel, +1 mod 64), neg (Swordsman reflection, 64−x), bnot (Mage antipode, 63−x), "flip " (one bit), or "to " (names the move). Returns the resulting vertex, its six bits (d1 protection … d6 value), dimensions, stratum, and a derived reading.

Law L5 — a κ is never trusted, only re-derived. Canonical form (keys sorted recursively, no whitespace, kappa excluded) → sha256 → compare with the stamped κ. Accepts a City Key JSON or a sigil PNG (the image carries the key). Returns verdict, derived κ, prior, the 64 glyphs, lit and walked vertices.

Append a walk to a City Key — pure and deterministic. Walk = an array of {site?, slug} steps (or slugs), a pathway.v1, or a star-chart constellation. Each step is resolved against the bake to its vertex and PSI element; the evolved key gains walks[], prior = κ of the key it grew from, and a fresh κ. UNSIGNED — a Swordsman signs (Rung 1). Omit key to start from the default key.

Draw the key's sigil — 64 glyphs, one per vertex, lit by the RE-DERIVED κ (never the stamped claim), coloured by the key's palette by stratum; lit vertices ring coral, walked vertices ring cyan — as a PNG that CARRIES the key (tEXt cityKey), importable on soulbis.com/star, /lattice, /sigil. Returns the image; writes it to out when given.

Verify a signed VTA record (kind agentprivacy.vta/1: bearer public key, κ, prior, at, walks, vrcs, ed25519 sig) — and, when the key is given, that the record names THIS key (L5: κ re-derived from the key equals the signed κ). Accepts the record as JSON or a sigil PNG carrying a cityKeySig chunk. With since, also evaluates the liveness predicate evolved_since(t). Holds no secret.

Verify an AgentCard as agentprivacy /ceremony signs it (ed25519 over the card payload; participantId = ap-<16 hex of the public key>). Returns participantId, did:key, displayName, trustTier, Drake Orb tier. This is the identity mages.city admits with; the board never re-issues it.

The ∩ of two keys (walked + lit vertices, shared PSI elements) computed IN THE OPEN by reading both keys. Development only: Rung 3 replaces it with DH-PSI, and it is hidden when VTA_MODE=1.