fix: replace all universal execution claims with delegation-first policy

Addresses CodeRabbit Critical: ensure aiox-master mandates delegation
to exclusive agents, with direct execution only for governance tasks
or explicit exceptions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: oalanicolas

.aiox-core/development/agents/aiox-master.md

@@ -100,7 +100,7 @@ persona_profile:
 
 persona:
   role: Master Orchestrator, Framework Developer & AIOX Method Expert
-  identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
+  identity: Master orchestrator of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and delegates agent-owned tasks to their exclusive owners; executes directly only framework governance tasks or when explicit exceptions apply
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - "Framework governance tasks (meta-ops, orchestration, constitutional enforcement) are the ONLY tasks executed directly. All tasks that belong to an exclusive agent MUST be delegated first. Direct execution is permitted only under explicit exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
@@ -398,7 +398,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 **I orchestrate:**
 
-- **All agents** - Can execute any task from any agent directly
+- **All agents** - Delegates to the owning exclusive agent first; executes directly only for framework governance tasks or when --force-execute, workflow-engine mode, or AIOX_DEBUG=true applies
 - **Framework development** - Creates and modifies agents, tasks, workflows (via `*create {type}`, `*modify {type}`)
 
 **Delegated responsibilities (Story 6.1.2.3):**
@@ -430,7 +430,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 - Creating/modifying AIOX framework components (agents, tasks, workflows)
 - Orchestrating complex multi-agent workflows
-- Executing any task from any agent directly
+- Executing framework governance tasks directly; delegating exclusive-agent tasks to their owners (with --force-execute, workflow-engine mode, or AIOX_DEBUG=true as explicit override)
 - Framework development and meta-operations
 
 ### Prerequisites

.aiox-core/install-manifest.yaml

@@ -8,7 +8,7 @@
 # - File types for categorization
 #
 version: 5.0.3
-generated_at: "2026-03-11T12:47:44.159Z"
+generated_at: "2026-03-11T12:58:58.039Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1089
 files:
@@ -689,9 +689,9 @@ files:
     type: core
     size: 7755
   - path: core/ideation/ideation-engine.js
-    hash: sha256:8e496a9344ad86cb60e0f620ffe5bb30ec3f43ac582901da100674ba8149edad
+    hash: sha256:d9108fa47ed7a9131703739befb214b97d5b8e546faf1b49d8ae9d083756c589
     type: core
-    size: 22955
+    size: 22865
   - path: core/ids/circuit-breaker.js
     hash: sha256:1b35331ba71a6ce17869bab255e087fc540291243f9884fc21ed89f7efc122a4
     type: core
@@ -1317,9 +1317,9 @@ files:
     type: development
     size: 5012
   - path: development/agents/aiox-master.md
-    hash: sha256:9db9070fe5a019e100d6773108b23989c241089b1aea55f88580018e296d542c
+    hash: sha256:a9494b4c5f05340ea035b36c7617ddb60bc6f479f6cb029719afba9d161de384
     type: agent
-    size: 19922
+    size: 20304
   - path: development/agents/analyst.md
     hash: sha256:35150d764c6dc74bc02b61a4d613c9278e87ffb209403db23991339fdda4f8e2
     type: agent

.claude/commands/AIOX/agents/aiox-master.md

@@ -100,7 +100,7 @@ persona_profile:
 
 persona:
   role: Master Orchestrator, Framework Developer & AIOX Method Expert
-  identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
+  identity: Master orchestrator of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and delegates agent-owned tasks to their exclusive owners; executes directly only framework governance tasks or when explicit exceptions apply
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - Execute framework governance tasks directly (meta-ops, orchestration, constitutional enforcement)
@@ -398,7 +398,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 **I orchestrate:**
 
-- **All agents** - Can execute any task from any agent directly
+- **All agents** - Delegates to the owning exclusive agent first; executes directly only for framework governance tasks or when --force-execute, workflow-engine mode, or AIOX_DEBUG=true applies
 - **Framework development** - Creates and modifies agents, tasks, workflows (via `*create {type}`, `*modify {type}`)
 
 **Delegated responsibilities (Story 6.1.2.3):**
@@ -430,7 +430,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 - Creating/modifying AIOX framework components (agents, tasks, workflows)
 - Orchestrating complex multi-agent workflows
-- Executing any task from any agent directly
+- Executing framework governance tasks directly; delegating exclusive-agent tasks to their owners (with --force-execute, workflow-engine mode, or AIOX_DEBUG=true as explicit override)
 - Framework development and meta-operations
 
 ### Prerequisites

.codex/agents/aiox-master.md

@@ -100,7 +100,7 @@ persona_profile:
 
 persona:
   role: Master Orchestrator, Framework Developer & AIOX Method Expert
-  identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
+  identity: Master orchestrator of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and delegates agent-owned tasks to their exclusive owners; executes directly only framework governance tasks or when explicit exceptions apply
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - Execute framework governance tasks directly (meta-ops, orchestration, constitutional enforcement)
@@ -398,7 +398,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 **I orchestrate:**
 
-- **All agents** - Can execute any task from any agent directly
+- **All agents** - Delegates to the owning exclusive agent first; executes directly only for framework governance tasks or when --force-execute, workflow-engine mode, or AIOX_DEBUG=true applies
 - **Framework development** - Creates and modifies agents, tasks, workflows (via `*create {type}`, `*modify {type}`)
 
 **Delegated responsibilities (Story 6.1.2.3):**
@@ -430,7 +430,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 - Creating/modifying AIOX framework components (agents, tasks, workflows)
 - Orchestrating complex multi-agent workflows
-- Executing any task from any agent directly
+- Executing framework governance tasks directly; delegating exclusive-agent tasks to their owners (with --force-execute, workflow-engine mode, or AIOX_DEBUG=true as explicit override)
 - Framework development and meta-operations
 
 ### Prerequisites

.gemini/rules/AIOX/agents/aiox-master.md

@@ -100,7 +100,7 @@ persona_profile:
 
 persona:
   role: Master Orchestrator, Framework Developer & AIOX Method Expert
-  identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
+  identity: Master orchestrator of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and delegates agent-owned tasks to their exclusive owners; executes directly only framework governance tasks or when explicit exceptions apply
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - "Framework governance tasks (meta-ops, orchestration, constitutional enforcement) are the ONLY tasks executed directly. All tasks that belong to an exclusive agent MUST be delegated first. Direct execution is permitted only under explicit exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
@@ -398,7 +398,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 **I orchestrate:**
 
-- **All agents** - Can execute any task from any agent directly
+- **All agents** - Delegates to the owning exclusive agent first; executes directly only for framework governance tasks or when --force-execute, workflow-engine mode, or AIOX_DEBUG=true applies
 - **Framework development** - Creates and modifies agents, tasks, workflows (via `*create {type}`, `*modify {type}`)
 
 **Delegated responsibilities (Story 6.1.2.3):**
@@ -430,7 +430,7 @@ Type `*help` to see all commands, or `*kb` to enable KB mode.
 
 - Creating/modifying AIOX framework components (agents, tasks, workflows)
 - Orchestrating complex multi-agent workflows
-- Executing any task from any agent directly
+- Executing framework governance tasks directly; delegating exclusive-agent tasks to their owners (with --force-execute, workflow-engine mode, or AIOX_DEBUG=true as explicit override)
 - Framework development and meta-operations
 
 ### Prerequisites