# GROK HYGIENE — Claude plugin metadata does not ride Direct Grok Build

Slack `1787642850.967939` (2026-08-25), DEMON:

> GROK/CLAUDE HYGIENE BOUNDARY … Grok still declares 3 Claude plugins
> enabled: `frontend-design`, `mcp-server-dev`, `mcp-tunnels`.
> Cause: Grok imports `enabledPlugins=true` from `~/.claude/settings.json`.

Grok/Claude hygiene-boundary / enabledPlugins / grok_hygiene_gate talk
is **CLAIMED** until this leftover is on current main. A Slack ACT NOW
is not the file.

Do **not** disable those plugins in Claude Code — paid Opus compute
stays. Do **not** delete Claude sessions or plugins. Do **not** mutate
Titan. Preserve evidence.

Measured leftover (do not remint GROK_HARNESS / CLAUDE_COMPUTE /
CLAUDE_PARK / MEMORY_SHIP):

- leak plugins stay named: `frontend-design`, `mcp-server-dev`, `mcp-tunnels`
- Grok-native deny lists do not override the Claude `enabledPlugins` import
- Direct Grok Build is **FAIL-CLOSED** behind dest-FROM-FILE
  `C:\Users\lucys\Documents\Codex\2026-08-25\ch\grok_hygiene_gate.ps1`
- current gate receipt: BLOCKED solely on those three plugin
  metadata/payload surfaces; no Grok token is spent through that launcher
- Codex/local/GitHub Actions is the land/verification lane; SuperGrok Heavy /
  Grok Build is the clean Grok analysis lane; Cursor is held
- Claude/Opus remains isolated **UNTRUSTED** candidate compute
- hygiene is diligence, not the build

This leftover does not mutate `~/.claude` or `~/.grok`. It does not
restart Grok. It does not disable Claude plugins. It does not add a
gate. titan: **NOT_WRITTEN**.

## Measure

Instrument: `host/grok_hygiene.py`. Stdlib only. Catalog:
`ground/GROK_HYGIENE.json`. It reads the tree. It does not write
titan. It does not smash `commons.mno`. It does not add a gate.

```bash
python3 host/grok_hygiene.py
python3 host/grok_hygiene.py --root .
python3 host/grok_hygiene.py --self-test
python3 -m unittest -v test_grok_hygiene.py
```

X = exact files in SEARCH_SPACE
Y = leak plugins + keep-enabled + fail-closed + clean Heavy/Build analysis +
Codex/local/Actions land lane + Cursor held
Z = missing leftover / failed calibration
Miss is **FINDER-FAILED** / **FINDER-UNVERIFIED**, never `0`.

Grok/Claude hygiene-boundary / enabledPlugins / fail-closed talk
without this leftover is **CLAIMED**. Missing card / catalog / leak
set is **NOT_LANDED**. Census + open door is **INTEGRATED**. A Slack
hygiene boundary is still not the file.

Hands off CML PR 2108, SPECTER MCP/wake PR 2205, titan `--go`,
GROK_HARNESS leftover, CLAUDE_COMPUTE farm. Do not remint those.
Possessing the link is authorization. Blank `from=` still lands as
`UNSEATED`. No auth. No gate. titan: **NOT_WRITTEN**.