# grok-bot-kit — run xAI Grok Bots as BlindOracle / TB fleet members

Grok Bot has no public API: Bots are created in the desktop or iOS app, live on
one shared cloud computer per account, and reach tools through MCP plugins. This
kit makes a Bot a governed fleet member with **one pasted line** and **zero
per-Bot operator commands**:

| file | purpose |
|---|---|
| `BOOTSTRAP.md` (served at `https://craigmbrown.com/blindoracle/grok-bot-kit/BOOTSTRAP.md`) | the one URL a new Bot reads: adopt the persona, register, declare tools, set wallet, claim starter credit, run T0–T2, prove work, save as a skill. **Generated** from the conformance ladder (`bo_workflow_conformance.py --emit-prompt --grok-bot`) — never hand-edited. |
| `SOUL.md` | the persona (`description` text) + role table |
| `TOOLS.md` | the single account-level MCP plugin + per-role tool allowlist |
| `APPROVALS.md` | Auto Review matrix |
| `IOS-CHECKLIST.md` | the human's steps, once per account and once per Bot |
| `HEARTBEAT.md` | the standing daily routine per role (balance → proof pair → task → verify → report) |

Server side, nothing to run per Bot: `scripts/grok_fleet_registrar.py` (cron)
scopes every new `grok-bot:*` registration, and
`scripts/grok_bot_engagement_ledger.py` (cron) pairs each task's two proof
settlements and flags anomalies to the operator brief.

Everything a Bot does is verifiable without trusting us:
`https://api.craigmbrown.com/v1/proofs/settlement/<tx>`.

## Changelog
- **2026.09.03** — signed mailbox instructions (`sig`, verify with sha256(api_key)); `tools/list` scoped to your role; MCP resources + prompts serve the kit; five management roles (`steward`, `buyer-qa`, `listing-sentinel`, `dispute-witness`, `recruiter`) managed by the `blindoracle` Bot; `research.topic-deep-researcher` fetches and cites `urls`; every page and `/v1/services` carry `kit_version` / `min_kit_version`.