the 9 roles
Per TEAM-SHELL-DOCTRINE (ADR-154), ZERO operates under 9 canonical roles plus a downward-only delegation chain (≤ 3 levels). Every delegated action carries an audit entry; escalation back to founder is always reachable in ≤ 1 click.
- founderfounder
scope · all authority · root grant · constitutional sign-off
can · approve · refuse · veto · freeze · reroute · delegate · escalate · release
cannot · (none · founder is root)
- brand vetobrand-veto director
scope · brand-coherence veto · Article V.3 sub-delegation chain
can · veto · refuse on brand grounds · sign-off on launches
cannot · approve capital allocations · alter constitutional policy
- compliancecompliance officer
scope · jurisdiction · regulatory · audit export
can · freeze under regulatory pressure · approve compliance-tier deployments
cannot · approve speculative strategies · override founder veto
- engineeringengineering
scope · code · CI gates · runtime · agent build
can · approve code changes · deploy with founder sign-off · revoke broken deployments
cannot · set policy · sign on capital · sub-delegate engineering authority
- designdesign
scope · visual · interaction · motion · typography
can · approve design specs · veto brand-violation patterns under brand-veto delegation
cannot · override engineering decisions on functional surfaces · alter constitutional law
- productproduct
scope · prioritization · roadmap · operator experience
can · prioritize · queue · escalate cross-functional decisions
cannot · approve capital · alter policy · veto without authority chain
- opsops
scope · incident response · infra · monitoring
can · pause runtime · approve infra changes · escalate incidents
cannot · alter doctrine · approve customer-facing changes alone
- commscomms
scope · external messaging · narrative · launch broadcast
can · approve external messages · veto miscommunication
cannot · alter product surface · approve technical changes
- externalexternal collaborator
scope · scoped · read + draft only · no execute
can · observe · draft proposals · annotate
cannot · execute · approve · alter policy · access provenance archive
delegation chain
Per TEAM-SHELL §3 + CONSTITUTION Article V.3.1 (the sub-delegation amendment landed Wave 6) · chain is downward-only · depth ≤ 3 levels · every grant persists as a `<DelegationGrant>` with required fields (grantor · grantee · scope · expiry · revoke- path) · revocable in ≤ 2 clicks.