The pipeline had never run: didbot to a relay to Jetstream to the index, the query service and the canvas. It does now, and `spike/relay` grows into `spike/stack` to run it. Three things had to be true first. Both the relay and Jetstream verify signatures, so both resolve every agent's did:web and both need the harness's certificate authority — until they had it, no commit reached the canvas at all. And an agent is drawn under the server that hosts it rather than under the stream everything arrived on, which is not a server and hosts nothing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: I5b6cdaf0a763d90ad19462194ca103f8d5528122