diff --git a/docs/GITEA-CHROMEBOX-PROTOCOL-SURFACE.md b/docs/GITEA-CHROMEBOX-PROTOCOL-SURFACE.md
new file mode 100644
index 0000000..c27160d
--- /dev/null
+++ b/docs/GITEA-CHROMEBOX-PROTOCOL-SURFACE.md
@@ -0,0 +1,46 @@
+---
+title: "Gitea Web Surface, Chromebox Gateway Queue & Unified Protocol Muse"
+status: "signed-off"
+coordinator: "operator-main"
+scope: "public-surface-and-protocol"
+accepted_at: "2026-10-10T15:40:24Z"
+accepted_quote: "Create an automated Pull Request in Gitea via the API and request Coordinator review per docs/AGENT-ROLES.md"
+gate: "coordinator"
+signoff_targets:
+  - "release-public-surface"
+  - "interview-gated-choices"
+---
+
+# Decision Record: Gitea Web Surface, Chromebox Gateway & Protocol Muse
+
+Settled and executed 2026-10-10 per `/grill-me` architectural review.
+
+## 1. Summary of Changes
+
+1. **Gitea Multi-Route Surface**:
+   - Initialized and live-verified portable Gitea instance on port 3000 (`super/box` repository).
+   - Configured Cloudflare Tunnel ingress routing for `git.muse-dev.online` and `tea.muse-dev.online`.
+   - Wired Webhook Bridge on port 3005 (`bin/box-gitea-bridge.py`) converting labeled issues into `fleet/tasks/pending/`.
+   - Integrated `🍵 Git Repos` action button into header controls and Gitea surface card in the Agentic Dev console tab.
+
+2. **Chromebox DM Gateway & Queue Telemetry**:
+   - Extended `bin/chromebox-gateway.py` with authenticated `GET /api/v1/queue` endpoint.
+   - Configured Cloudflare Tunnel ingress routing for `dm.muse-dev.online` (dual-exposing with `100.123.153.75:8445`).
+   - Retained strict Bearer token authentication and allowlisted operations without exposing raw CDP.
+
+3. **Unified `protocol_muse` Python Package**:
+   - Packaged `packages/protocol-muse/` providing `MuseClient` unifying Noise protocol gateway (`wss://gateway.muse.ai/v1/noise`) with HTTPS Chromebox fallback.
+   - Built and pre-cached wheels in `~/workspace/wheels/` (`protocol_muse-0.1.0-py3-none-any.whl`).
+   - Integrated offline wheel installation (`pip install --no-index --find-links=~/workspace/wheels protocol_muse`) into `cloud-uptime/recover-after-rebuild.sh`.
+
+4. **Pull Request & Provenance**:
+   - Feature branch `builder/gitea-chromebox-protocol-muse` pushed to Gitea.
+   - Gitea Pull Request #219 opened targeting `master`.
+
+## 2. Verification Records
+
+- `tests/test_protocol_muse.py`: 7/7 passed.
+- `tests/test_chromebox_gateway_queue.py`: 3/3 passed.
+- `tests/test_box_gitea_bridge.py`: 5/5 passed.
+- `tests/test_recover_after_rebuild.py`: 4/4 passed.
+- Live HTTPS assertions on `https://100.123.153.75:8445/api/v1/queue` and `http://127.0.0.1:3000` verified 200 OK with expected payloads.