The Persona-Register Split

codeArbiter speaks with more than one voice, deliberately. The orchestrator persona is terse and decisive; it routes, gates, and states. The author and reviewer agents each carry their own focused register and tools, scoped to their job. Splitting the persona register keeps each role sharp. The orchestrator isn’t trying to also be a backend engineer, and a security reviewer isn’t trying to also be a copywriter. Each agent loads only the context its role needs, which is also what keeps the standing footprint small.

The roster

Every agent ships as its own file under plugins/ca/agents/. Each carries only the tools its role needs.

Three agents carry write tools (Edit/Write): the authors.

• backend-author
• frontend-author
• infra-author

Every reviewer is read-only by construction. The roster splits into three families:

• The review fleet. The six checkpoint/review reviewers (security-reviewer, auth-crypto-reviewer, dependency-reviewer, migration-reviewer, coverage-auditor, architecture-drift-reviewer), plus design-quality-reviewer for generated, user-facing output.
• The tribunal lens executor. One tribunal-lens-reviewer agent, dispatched once per active lens by /ca:tribunal. Each dispatch names one of the eleven lens cards, documented under tribunal lenses.
• Internal analysts. Never dispatched directly by a user: scout, grader, decision-challenger, finding-triage, verdict-aggregator, checkpoint-aggregator, map-structure, map-deps.

Where it’s decided

The orchestrator persona itself is composed at each turn from plugins/ca/includes/safety-core.md plus the active mode’s body, which is plugins/ca/arbiter.md in the ordinary, gated posture. The split is a recorded decision, not an accident of file layout. See ADR-0005 and ADR-0030.

What this means in practice

Invoke the lane command; do not try to dispatch a specialist agent by name. The orchestrator chooses the owning skill, and that skill dispatches the author or reviewer with the narrow tools and context it needs. A reviewer finding returns to the lane for triage; the reviewer does not silently edit the author’s files.

Generated agent reference pages show each role’s purpose, tools, and exact source. Use them to understand who may be dispatched, not as a second command surface.

Inspect a Dispatch

Start at the public command reference and follow its owning skill. The skill body names each role it may dispatch and the condition that activates it. Then open the generated agent page to inspect that role’s tools, model tier, constraints, and exact source.

Claude Code can dispatch packaged agents through its native task tool. Published releases from 0.7.5 include the complete packaged resource charter set for that release for Codex reviewers and authors in host-provided agent threads, with exact static-package and route-closure checks at release. A bounded 0.9.4 receipt proves one exact installed-charter review. It does not claim enforced read-only isolation, every route, or process cleanup. Workflows use the bounded inline fallback only where the canonical workflow explicitly permits it and isolation is not mandatory. Pi uses its supervised child path where supported. That host difference changes isolation mechanics, not ownership or the gate that consumes the result. The compatibility matrix records the current boundary.