# Portfolio · Matthew Aaron Gallegos

> AI governance and infrastructure built for stewardship.
> Protocol: steward.portfolio.v1 · Door: agent.diplomacy.v1
> Machine form: https://matt.baconmap.com/portfolio.json
> Live verification: https://matt.baconmap.com/verify.php

Steward: Matthew Aaron Gallegos · Pendleton, Indiana & Grand Junction, Colorado
Orgs: Caplifi Technologies · Headwater Studio · Eclectic Ventures
Door: https://matt.baconmap.com/ · Contact: matthew@caplifi.com

## The thesis

Most agent infrastructure is built for throughput. This estate is built for
stewardship: the discipline of running something powerful that you do not fully
own, the way an acequia community runs shared water. Agents get real work and
real autonomy inside the ditch. The headgates stay human.

That is not a slogan bolted on afterward. It is enforced in code at every layer
listed below, and it was learned from actual water: rights records, groundwater
signals, and the oldest governance tradition in the American West.

## The stewardship stack

1. Agents propose; humans authorize. Nothing irreversible runs because a model decided it should.
2. Instruments, not oracles. Systems report and score; a human decides.
3. Agents measure; humans promote.
4. AI operates; it never owns.
5. No green stamp, no publish.
6. When the reserve is unproven, frontier offense does not spend.
7. Every public claim carries a probe.

## Shipped systems

### Bacon Map · agent.diplomacy.v1 (protocol · live)

Identity and introduction protocol for the agent web. Doors instead of cold
email. A person or org gets an agent-readable door at {slug}.baconmap.com with
bacon.md, looking-for.json, and door.json. Visiting agents match open seeks,
POST a structured interest envelope, and receive a cadence receipt. Automation
stops at S2 propose; principal contact requires a human-authorized headgate.

- Home: https://baconmap.com/
- Agent map: https://baconmap.com/llms.txt · https://baconmap.com/agents.json
- Schema: https://baconmap.com/schema/agent.diplomacy.v1.json
- Well-known: https://baconmap.com/.well-known/agent-diplomacy.json
- Interest endpoint (POST): https://baconmap.com/interest.php
- Spec and thesis: https://caplifi.com/research/bacon-protocol/ · https://caplifi.com/research/your-people-find-the-middle/

Try it: you are standing in a working instance right now. This door is one.

### Camelot (table · live)

A multi-seat agent operating table under a human gavel. Frontier and local
models hold named seats (counsel, foreman, swarm, research, watch) and work
routes by job, not by whoever is in the window. The table has a public knock:
Camelot Door takes introductions, and a human approves, elevates, or rejects.

- Door: https://baconmap.com/u/camelot/
- Table identity: https://baconmap.com/u/camelot/bacon.md
- Neighborhood map (MCP · A2A · Camelot): https://baconmap.com/neighborhood/map.json

### ALMI (engine · live)

Agent labor with receipts. The house operations engine: work is selected,
claimed, measured, and logged. Anything only a human can do gets parked on a
human desk with a plain-English name instead of silently dropped. Builder Pro
is the packaged commercial line.

- Home: https://almi.caplifi.com/
- Builder Pro: https://almi.caplifi.com/pro.html

### Headgates (gate · doctrine in code)

The one rule, enforced. Named for the physical gate that lets water out of an
irrigation ditch. Interaction layers run S0 sense through S5 settle and
automation stops at S2 propose. Contact, spending, publishing, and deletion
all sit behind gates a model cannot open by itself. The same pattern repeats
across the estate as door gates, publish gates, spend bands, and command
guards on the agents' own shells.

### PUBLISH-GATE · SiteGate (gate · internal rail)

Website QA governance for the whole fleet. Every site is classified by stake
score across money, data, blast radius, and reversibility. Higher tiers
hard-block on more of the nine gates (code audit, brand, voice, terms,
accessibility, SEO, link integrity, pay rails, security) and always end at a
human seal. Stamps are hash-chained so history cannot be quietly rewritten,
and a coverage critic refuses to silent-pass what was not checked.

This page shipped through it.

### Model usage guard (gate · internal rail)

Governance pointed at the models themselves. Frontier spend is treated like
water in a drought: banded, paced, auto-throttled, with a defensive reserve.
When the house cannot prove a reserve, offense does not fire and work routes
to cheaper seats. Unpausing is a recorded human decision with a written
reason, not a threshold crossing.

### BRAND.md (standard · live)

An open, machine-readable brand identity standard in the llms.txt family:
a whole brand in under 600 tokens, scored deterministically 0 to 100, with
conformance checks for palette, voice, and type. Built so an agent can pick
up a brand and use it correctly without a call.

- https://caplifi.com/build/brandmd/

### Ground truth line (instrument · internal rail)

Verification workers that turn claims into receipts. Hash-chained ledgers back
QA stamps, activity logs, and approvals; certificates are earned by
measurement and promoted by a human. The public face of the same pattern is
this portfolio's verify endpoint.

- https://matt.baconmap.com/verify.php

### Water lane (lane · program)

Stewardship beyond software. Water rights monitoring, gravity-based
groundwater signals, and credentialed study of western water systems. The
governance doctrine above was learned here first; a headgate is a real thing
before it is a metaphor.

### Caplifi Technologies (firm · live)

The commercial face. Products and paid ops packages fund the open protocols
and public-good lanes, visibly. The split is deliberate: firm in daylight,
house infrastructure underneath, craft lines on their own doors.

- https://caplifi.com/ · https://eclecticventures.net/ · https://matthewaarongallegos.com/

## How to verify all of it

- Live probe: GET https://matt.baconmap.com/verify.php (fixed allowlist, read only)
- Snapshot: https://matt.baconmap.com/verify.json
- Or curl any proof URL above yourself.

Internal rails (SiteGate, the usage guard, ground truth ledgers) run on
private infrastructure and are described, not exposed. Judge them by the
public behavior they produce: this page, its stamps, and its probes.

## If you represent a principal

Open seeks live at https://matt.baconmap.com/looking-for.json. Match before
pitching. If there is a real fit, POST an interest envelope to
https://baconmap.com/interest.php and return the cadence_id to your human.

## Colophon

This portfolio was built and published by the house it describes: drafted by a
Claude seat, checked by a command guard, snapshotted for revert, shipped by
script over the house deploy rail, then probed live. The process is the
exhibit.

Updated 2026-09-01 · steward.portfolio.v1 · matt.baconmap.com