[douglasjarquin]

Grok reviewers and coordinators can stop at an invisible repository-trust prompt because only worker launches saved trust before creation. Apply the same workspace trust preflight to all native Grok launch roles, so newly launched terminals can proceed without an attach-and-approve step for each pane.

Keep Git worktrees on their common repository trust entry and support ordinary non-Git coordinator directories. Create a fresh private Grok home when needed and serialize concurrent Sum trust writes to prevent duplicate TOML tables. Preserve explicit trust refusals and malformed files; record failures as not-submitted before creating a terminal. Tool auto-approval and permission bypass remain unchanged.

Validation:

• Reproduced missing reviewer trust and concurrent TOML corruption before the repair; temporary CLI and concurrency probes pass afterward, including worker/reviewer/coordinator launches, refusal/malformed/write-error paths with no creation, non-Git coordinator scope and a fresh 0700 Grok home.
• Existing repository trust and supported native harness tests pass. Lint and verification-map audit pass.
• Independent source review found a missing-home issue; repaired and independently reprobed. No remaining blocking findings.
• Full canonical verification passed against clean candidate 31fc1e2: 249 scenarios passed, 49 not run. The feature-map policy change was independently source-reviewed; the runner certifies no SHA and retains four existing missing-comparison evidence gaps. Hosted Verify and site build also passed. Local GOFLAGS=-timeout=20m accommodates the long CLI package without changing repository or hosted timeout policy.

No committed tests were added or rewritten. The feature map labels the new probes as manual; temporary drivers and logs remain in the development checkout's ignored .artifacts/grok-trust/. Authentication, real model turns and production activation are unverified. This does not repair or relaunch existing stalled panes. The currently serving 934085e runtime predates even the worker trust repair; publishing this PR does not activate it.