Kronos APIs

Every API behind one door. Add a route below — no Caddy edit, no new subdomain.

Routes

/vault/* → :8170
Kronos Vault — secret relay with human approval (expects /vault/*)
everything else → :8096
GoW fleet / KIHP handshake / surface directives (everything not a named route)

Each route is one entry in registry.json — add an API here with no Caddy edit and no new subdomain.