feat: Add domain architecture and extract core services from Prism Console

## Domain Architecture
- Complete domain-to-service mapping for 16 verified domains
- Subdomain architecture for blackroad.systems and blackroad.io
- GitHub organization mapping (BlackRoad-OS repos)
- Railway service-to-domain configuration
- DNS configuration templates for Cloudflare

## Extracted Services

### AIops Service (services/aiops/)
- Canary analysis for deployment validation
- Config drift detection
- Event correlation engine
- Auto-remediation with runbook mapping
- SLO budget management

### Analytics Service (services/analytics/)
- Rule-based anomaly detection with safe expression evaluation
- Cohort analysis with multi-metric aggregation
- Decision engine with credit budget constraints
- Narrative report generation

### Codex Governance (services/codex/)
- 82+ governance principles (entries)
- Codex Pantheon with 48+ agent archetypes
- Manifesto defining ethical framework

## Integration Points
- AIops → infra.blackroad.systems (blackroad-os-infra)
- Analytics → core.blackroad.systems (blackroad-os-core)
- Codex → operator.blackroad.systems (blackroad-os-operator)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

services/codex/entries/072-thermodynamic-commons.md

@@ -0,0 +1,49 @@
+# Codex 72 — Thermodynamic Commons
+
+**Fingerprint:** `291cba39fd206b28e195046ec214b2ef53fe709ce083f20a2173139b47e210a2`
+
+## Aim
+Keep civilizational uptime within the planet's thermodynamic bounds by treating exergy as the primary governance budget.
+
+## Schema
+- **Objects (Types):**
+  - `Jurisdiction`: bioregion with defined sink capacity and stewardship council.
+  - `ExergyBudget`: annual available work quota \(X\) issued per jurisdiction.
+  - `Project`: initiative consuming or restoring exergy.
+  - `LedgerEntry`: measured flows (capture, storage, loss) attached to a project instance.
+  - `FailsafeTrigger`: state signifying a rolling five-year waste-heat overshoot.
+- **Morphisms (Lawful Operations):**
+  - `allocate_cap(Jurisdiction → ExergyBudget)`: emits capped quota subject to sink capacity constraints.
+  - `fund_low_exergy(ExergyBudget × Project → LedgerEntry)`: quadratic-funding dispersal that records matching contributions for services under a low-exergy threshold.
+  - `auction_high_exergy(ExergyBudget × Project → LedgerEntry)`: progressive-price auction that debits quota and writes clearing price + load curve into the ledger.
+  - `account_local(Project → LedgerEntry)`: enforces full capture → storage → loss accounting before any ledger close.
+  - `throttle(FailsafeTrigger × Project → Project)`: scales or halts projects proportional to overshoot severity.
+- **Invariants (Commuting Diagrams):**
+  - Budget integrity: `allocate_cap` followed by the sum of `fund_low_exergy` and `auction_high_exergy` must commute with `account_local`, ensuring \(\sum \text{LedgerEntry.useful\_work} ≤ X\).
+  - Transparency loop: `account_local` then `LedgerEntry → Jurisdiction` equals `Project → Jurisdiction` composed with public reporting, preserving locality of responsibility.
+  - Failsafe determinism: any path that produces a `FailsafeTrigger` must commute with `throttle`, guaranteeing automatic response without discretionary delay.
+
+## Dashboard
+- **Primary Metric:** Exergy efficiency \(\eta_{ex} = \frac{\text{useful work}}{\text{available work}}\); trend must be monotonically increasing while annual \(X\) stays ≤ cap.
+- **Supporting Gauges:**
+  - Rolling five-year waste-heat sum vs. regional sink capacity (highlight failsafe thresholds).
+  - Low-exergy quadratic funding uptake vs. projected community demand.
+  - Auction price distribution vs. socialized cost baseline.
+  - Compliance rate of project-level exergy ledgers (capture, storage, loss completeness).
+
+## Ritual
+- **Heat Commons Assembly (quarterly):** steward councils review dashboard deltas, narrate trade-offs, and invite resident witness statements before adjusting \(X\).
+- **Restore Day Drill (annual):** simulate cold-start energy rationing; teams re-run ledger reconciliation from off-grid backups to test recoverability.
+- **Metaphor Versioning:** retire energy metaphors that fail operational tests; adopt new ones only after they map to ledger data.
+
+## Failsafe
+- Continuous monitor runs a rolling five-year convolution of waste-heat outputs per jurisdiction.
+- When overshoot detected, `FailsafeTrigger` auto-issues throttling directives and pauses new auction rounds until sink capacity recovers below threshold.
+- Manual override requires supermajority of Heat Commons Assembly with recorded justifications and expiry.
+
+## Roadie Mode
+- Packable kit (≤15 kg): handheld calorimeter, solar-charged tablet with CRDT ledger replica, printed quick-start sheets, foldable exergy abacus.
+- Offline protocol: synchronize ledger differentials via mesh once per 24h; auctions degrade to locally posted sealed-bid rounds adjudicated by rotation.
+- Emergency playbook: prioritize hospital, water, and food-chain projects; pre-baked throttling scripts ready for manual relay when networks fail.
+
+**Tagline:** Energy before ego, forever accountable.