## Three agents: Claude orchestrates, Codex and Grok do the work

Route by what the work IS, not by what is cheapest.

| Work | Who | Headless call |
|---|---|---|
| Plan, spec, taste, the final review | Claude, in session. Never delegated | |
| A specified build: code or models to a written spec | Codex | `codex exec --sandbox workspace-write --skip-git-repo-check "$(cat task.md)" < /dev/null` |
| Breadth research, a second opinion, an adversarial read | Grok | `ask-grok.sh [-C REPO] "…"` (read-only; `--write` to let it write) |
| Anything physical or irreversible: a print, a push, a purchase | The human | |

- Every worker call has the six parts in `worker-call-template.md`, or it doesn't go out.
- Review whatever a worker writes before calling it done. Run the acceptance commands
  yourself; its own self-check doesn't count.
- No worker commits. They write; the session commits.
- Escalation: Grok first, on everything and in parallel. Then Codex, one at a time, only for
  what Grok couldn't fix. The most expensive model only for what both failed, and only with the
  human's OK.
- Never run a worker's interactive UI from a Bash call; use the headless forms above.