/vault/* → :8170
Kronos Vault — secret relay with human approval (expects /vault/*)
/guard/* → :8274
Kronos Guard Lab — founder-only bench for the fleet's appropriateness engine (KronosID gated; stores no images)
/booth/* → :8158
THE BOOTH — the Crossover's live DJ training desk (founder-gated; the app is mounted at /booth via BOOTH_PREFIX and expects the full path)
/sound/* → :8299
THE SOUND STUDIO — Kronos Sound packs: listen, approve, regenerate (founder-gated; ks-studio.service expects the full /sound path)
/kimg/* → :8285
KIMG Live — what the likeness engine is finding on a camera node right now (founder-gated at /kimg/live; /kimg/ingest is the node's machine lane, bearer token)
/kilworld/* → :8225
KIL World - deterministic lantern-district engine, visual page plus /api/trace
/admiralty/* → :8114
Pirate Radio - the Admiralty (KronosID-gated inside the service; loopback 8114)
/myguide/* → :8250
MyGuide - personalised TV guide + YouTube shelf (founder login; loopback 8250)
/livewire/* → :8251
MyGuide live wire - machine lane for Google's WebSub hub (YouTube upload notes): secret path, HMAC-signed, serves nothing else (loopback 8251)
/show/* → :8293
THE SHOW - freddyass look-and-listen pages for PRs: the pictures and sounds a PR changes (founder login; loopback 8293; written only by the box's fa show)
/bench/* → :8302
THE BENCH - machine lane: a Linux worker with a bench token runs a Mac gate on the Mac mini, sandboxed (bench/1; loopback 8302; no founder login, every gate needs a token)
/atom-accounting/* → :8230
ATOM Accounting - the live books Kris builds with Herb (founder login; loopback 8230; the app writes its links under BASE_PATH=/atom-accounting)
everything else → :8096
GoW fleet / KIHP handshake / surface directives (everything not a named route)