CLOSEDQUORUM passes the host state to each model under a system prompt instructing it that it is an advanced malware strategist and must return executable decisions.