Read and execute `PANTHEON_DEVICE_RECOVERY_FIRST_CODEX_DIRECTIVE.md` before the Pantheon operational-unification directive.

This supersedes every other task.

The only current objective is to repair and verify every Pantheon device. Do not build another AI, activate donor models, begin Pantheon orchestration, unify databases, activate named minds, or start the M4 AI/model stack until the device-fleet gate passes.

Set immediately:

PANTHEON_PHASE=DEVICE_RECOVERY
PANTHEON_DEVICE_REPAIR_LOCK=true
PANTHEON_DEVICE_FLEET_READY=false
PANTHEON_ORCHESTRATION_ALLOWED=false
PANTHEON_INTEGRATION_ALLOWED=false
NEW_AI_BUILD_ALLOWED=false
NEW_FEATURE_WORK_ALLOWED=false
DONOR_RUNTIME_ALLOWED=false
M2_PANTHEON_RUNTIME_ALLOWED=false
DESTRUCTIVE_DATA_LOSS_ALLOWED=false
UNVERIFIED_STORAGE_MUTATION_ALLOWED=false
PANTHEON_ONE_COMBINED_AI=false

Use the M2 only as the Codex operator/audit terminal. It must not become a Pantheon runtime node or production dependency.

Repair in the directive's mandatory order:

D0. Verify the audit manifest, freeze unrelated work, collect a fresh read-only fleet baseline, and protect candidate-unique state.
D1. Certify Bubbles `/mnt/data` and M4 `/Volumes/MEGAMIND` as independent recovery targets.
D2. Fix MEGAMIND Windows C: exhaustion; preserve and validate the stopped WSL environment first; then restore Windows, WSL, PostgreSQL/WAL, graphd, generation 157, ORACLE local health, networking, and reboot stability without connecting Pantheon.
D3. Fix M1 storage pressure; preserve VALKYRIE, Endless, Seferim, dirty source, and local services; remove only proven regenerable material; prove reboot recovery.
D4. Fix M4 storage, verify the 6 TB volume, safely inventory the unmounted 5 TB disk, capture source lineage, resolve the false port-4222/Tailscale-Funnel attribution, validate launchd, and prove reboot/mount recovery while keeping the AI stack disabled.
D5. Stabilize Bubbles storage, wired identity, NATS, source preservation, mmteach, truthful local-service health, systemd, and reboot recovery without beginning cross-device orchestration.
D6. Prove M2 is controller-only, independently protect its evidence, and test that it can be powered off without affecting core devices.
D7. Resolve IONOS-MediaMind and BATMAN to verified roles, retirement, or a precise no-longer-controlled blocker; remove stale keys and false live counts.
D8. Run fleet-wide wired-network, time-sync, port-ownership, one-node-at-a-time reboot, protected-state, and recovery tests.

Do the repairs, not another audit. Use only reversible, evidence-backed changes. Never delete, overwrite, unregister, compact, move, erase, or reformat protected state without passing the directive's backup and validation gates. Stop only for a precise physical storage, hardware, credential, ownership, or protected-state safety blocker.

Do not begin the Pantheon operational-unification directive until measured evidence supports:

PANTHEON_DEVICE_FLEET_READY=true
PANTHEON_ORCHESTRATION_ALLOWED=true

Start now at Phase D0 of `PANTHEON_DEVICE_RECOVERY_FIRST_CODEX_DIRECTIVE.md`.