Put thread-state deletion ahead of Atlas gate

notes/epiphany-current-algorithmic-map.md

@@ -4788,3 +4788,41 @@ into the seed owner's batch CAS. It is derived from the exact keyed envelopes,
 remains outside canonical Mind, and cannot be synthesized later by status or a
 projector. Historical partial Gate roots remain read-only evidence; the live
 retry must use a fresh root.
+
+Exact `2ba6b9dc` makes the semantic projector enumerate both stores it owns.
+Mind and Modeling inputs are loaded independently each pulse, exact shared
+swarm identity is validated when both exist, and one surviving source remains
+actionable when the other refuses. CultMesh health no longer conflates a
+terminal-ready empty projection with query eligibility. Fresh Eve, Odin, and
+Epiphany stores each projected Modeling once and then inspected both partitions
+idle with zero source, retention, or health faults.
+
+That success exposed the remaining hard-cut boundary rather than clearing the
+operational gate. `epiphany-mvp-status`, coordinator launch/acceptance, Resident
+Self continuation, and several request selectors still read persisted
+`EpiphanyThreadStateEntry`; the coordinator transaction still writes it.
+Consequently a fully initialized keyed Mind is reported as missing without the
+legacy aggregate. This is live obsolete authority, not compatibility evidence.
+
+Remaining hard-cut authority map:
+
+- Owner: keyed Mind documents plus exact runtime request/result/receipt families
+  own durable decisions and unresolved work.
+- Inputs: sealed Mind views, current Body/RepoModel document versions, and exact
+  family lifecycle receipts; thread ID is pass provenance only.
+- Outputs: one pure typed current-work projection, family launch requests, and
+  family-owned Mind mutations/receipts.
+- Derived state: coordinator status, role boards, events, latest-result slots,
+  and UI views are projections only.
+- Forbidden writers: `EpiphanyThreadStateEntry`, global revision checks,
+  `coordinator_state_transaction`, aggregate state patches, accepted-at ordering,
+  and generic lane terminality must cease deciding behavior.
+- Shared paths: operator and resident launches use the same current-work
+  derivation and family commit primitive; restart re-derives identical work.
+- Cut line: migrate routing, launch/review, and acceptance consumers; then delete
+  the aggregate schema, writer, readers, and old-writable-store path. No mirror,
+  dual read, bootstrap aggregate, or migrator survives.
+- Verification: fresh objective+Body launches Modeling without Eyes or thread
+  state; disjoint Persona/Hands work remains concurrent; source guards find no
+  production aggregate reference; restart preserves obligations without
+  authority resurrection.

notes/epiphany-fork-implementation-plan.md

@@ -14,9 +14,11 @@ earned OpenAI-compatible authentication or model-transport capability.
 ## Current Mechanism
 
 - `epiphany-state-model` owns durable Mind shape.
-- `epiphany-core` owns coordinator policy, state admission, runtime spine,
-  surfaces, organ gates, heartbeat physiology, Persona loop, and CultMesh
-  integration.
+- `epiphany-core` owns keyed Mind admission, runtime spine, organ gates,
+  heartbeat physiology, Persona, and CultMesh integration. Its coordinator and
+  status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`;
+  that aggregate is an obsolete live authority and currently blocks fresh keyed
+  stores from coordinating.
 - Native binaries expose coordinator, status, state, runtime, memory, daemon,
   Persona, repo-work, and Verse operations.
 - CultCache stores typed state and receipts; CultMesh/CultNet carry typed local
@@ -38,7 +40,8 @@ earned OpenAI-compatible authentication or model-transport capability.
 
 ## Completed Foundation
 
-- Native typed thread state and state-update validation.
+- Typed reasoning bases, terminal decision contexts, exact Mind batch CAS, and
+  keyed objective/RepoModel documents.
 - Native coordinator facade and derived status/recommendation surfaces.
 - CultCache runtime spine with worker, Mind, Eyes, Substrate Gate, Hands, Soul,
   Continuity, and coordinator receipts.
@@ -204,24 +207,30 @@ Delete or demote:
 
 ## Immediate Next Action
 
-Keep the five-day shakedown paused and execute Model Atlas Gate 1 on Starfire.
-Use separate Epiphany, Odin, and Eve repository identities and fresh local
-Mind, private identity, publisher, catalog, projector, ingress, and resident
-stores. Keep impact ingress absent while ordinary Modeling admits the three
-local seed facts and the publishers plus projector establish signed
-publications, exact watermarks, rejection telemetry, and the canonical retained
-Eve tree. Ordering is part of the invariant: a brake cannot forbid the first
-publication and also prove that signed sight exists.
+Keep the five-day shakedown and Model Atlas operational Gate 1 paused. Complete
+the remaining Decision-Auditable Concurrent Mind hard cut before another live
+coordinator run. Fresh Gate preflight proved that keyed Mind and both semantic
+partitions become ready, then falsified coordinator ownership: status still
+declares the organism missing because it reads persisted
+`EpiphanyThreadStateEntry` as the presence and routing head.
 
-After sight is established, engage `atlas.publish`, `atlas.project`, and
-`atlas.impact_ingress`. Run one more publisher and projector cycle plus the
-first ingress cycle. Prove that all three owners report held work, no local
-Modeling or Soul pressure is scheduled, no Atlas state advances, and the last
-Eve projection remains available as visibly stale, read-only state.
+Cut in this order:
 
-Do not release autonomous scheduling, register topology in `gamecult-ops`,
-touch Yggdrasil, reuse the historical c011 volumes, or treat isolated tests as
-the operational proof. If Gate 1 passes, Gate 2 may release only the Atlas
-Modeling/Soul wake scopes for a temporary Eve contract change while preserving
-the existing Hands gate. Daemon supervision, sustained physiology, and
-operational registration remain later gates.
+1. Add one pure typed current-work projection over keyed Mind/runtime receipts.
+   Modeling must derive from the current Body/RepoModel obligation; Eyes only
+   from explicit external-evidence obligations.
+2. Move status and coordinator launch/review consumers to that projection and
+   exact request/result identities. Thread ID remains immutable pass provenance
+   only.
+3. Move role/reorient acceptance from aggregate state patches to family-owned
+   `MindMutation` plans and exact commit receipts.
+4. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
+   expected revisions, aggregate update APIs, and all source references from
+   production. Refuse old writable stores; add no dual reader or migrator.
+5. Replay fresh-store concurrency and decision-context acceptance. Only then
+   restart Model Atlas Gate 1 from a new external root.
+
+Do not preserve the aggregate for compatibility, manufacture a bootstrap
+thread, release autonomous scheduling, register topology in `gamecult-ops`,
+touch Yggdrasil, reuse historical/partial Gate roots, or treat semantic
+readiness as coordinator acceptance.

notes/fresh-workspace-handoff.md

@@ -4,7 +4,7 @@ Updated: 2026-08-16
 
 ## Current state
 
-The five-day shakedown remains paused. The active source is exact `d11e6511` on
+The five-day shakedown remains paused. The active source is exact `2ba6b9dc` on
 `codex/epiphany-shakedown-live`: the keyed Mind hard cut, federated Model Atlas
 vertical slice, ordinary Modeling authoring path, durable publisher identity,
 fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
@@ -12,6 +12,14 @@ landed. Historical aggregate RepoModel and partial Gate stores are evidence
 only. No production model output, registry, command, admission path, projector,
 or repair path can restore their authority.
 
+This is not yet the full Concurrent Mind cut. Persisted
+`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple
+launch/acceptance/status readers remain live production authorities. Fresh Gate
+preflight proved the consequence: both keyed semantic partitions reached ready,
+but status still called the organism missing because no thread aggregate
+existed. Model Atlas Gate 1 is therefore paused behind that deletion, not merely
+behind another operational retry.
+
 The Atlas keeps the federation sharp. A provider Mind owns an offer. A consumer
 Mind owns a claim. Soul owns verification evidence for exact endpoint versions.
 Signed per-repository publishers carry those facts through Odin, a deterministic
@@ -77,6 +85,21 @@ repaired by status or a projector. Replay validates the existing companion;
 the focused seed/replay test passes. The three partial stores without this
 companion remain read-only evidence. Resume Gate 1 only from a fresh state root.
 
+Exact `2ba6b9dc` closes the next preflight defect. The semantic projector body
+owned two canonical stores but enumerated only agent-memory Mind; it now loads
+and validates both Mind and Modeling inputs on every pulse while allowing one
+faulty source to remain visible without hiding the other. CultMesh semantic
+health also distinguishes terminal-ready from query-eligible, so a successful
+empty partition no longer degrades the provider. On the fresh root, Eve, Odin,
+and Epiphany each executed Modeling once, then settled idle with two inspected
+sources and zero source, retention, or health faults.
+
+The following production status read falsified the remaining campaign premise:
+`EpiphanyThreadStateEntry` still owns coordinator presence/routing. Canonical
+docs previously described the keyed foundation too broadly. The hard cut is
+now the immediate campaign; Gate 1 cannot resume until production source has no
+thread aggregate writer or behavioral reader.
+
 Public positioning was synchronized on 2026-08-16 without changing that next
 rite. `docs/positioning.md` is the current claim owner: Epiphany is the
 organizational layer above frontier AI workers; the primary failure is global
@@ -278,13 +301,11 @@ unchanged; the lifecycle authorities above remain separate.
 
 ## Immediate next action
 
-Execute Model Atlas Gate 1 on Starfire. Use separate state roots and service
-identities for `F:\Projects\Epiphany`, `F:\Projects\Odin`, and
-`F:\Projects\Eve`, plus separate local Mind, private identity, publisher, Odin
-catalog, projector, and ingress stores. Keep ingress absent while ordinary
-Modeling admits the seed facts and the publishers/projector establish signed
-sight. Then engage `atlas.publish`, `atlas.project`, and
-`atlas.impact_ingress`; rerun all three cycles and record the held outcomes,
-exact publication IDs, watermarks, projection digest, retained Eve documents,
-and read-only brake behavior. Do not release scheduling, register operational
+Complete the persisted thread-state hard deletion described in the campaign
+plan. Start with one typed current-work projection over keyed Mind and exact
+runtime receipts, migrate status and coordinator routing to it, then migrate
+family acceptance and delete the aggregate schema/transaction. Run the source
+guards and fresh-store concurrency/decision-context suite. Only after that may
+Model Atlas Gate 1 restart from a new external root. Keep the current fresh and
+partial roots read-only; do not release scheduling, register operational
 topology, touch the original c011 volumes, or build on Yggdrasil.

state/map.yaml

@@ -4,7 +4,7 @@ experiment:
   purpose: Native, inspectable agent organism with typed state and explicit organ authority.
 
 objective:
-  current: Run the isolated three-repository Model Atlas Gate 1 on Starfire: seed local facts through ordinary Modeling, establish signed publication/projection sight with impact ingress absent, then engage all Atlas brakes and prove frozen read-only state with no lane wake.
+  current: Complete the Decision-Auditable Concurrent Mind hard cut by replacing persisted thread-state routing, launch, and acceptance authority with keyed Mind plus exact runtime receipts; then resume Model Atlas Gate 1 from a fresh external root.
 
 architecture:
   body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
@@ -38,11 +38,11 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: The keyed Mind hard cut and Model Atlas code slice are complete on codex/epiphany-shakedown-live. Production model output carries semantic operations only; aggregate RepoModel admission, storage, and repair authority are deleted. Ordinary Modeling now authors local offers and claims through runtime-owned proposal v2, current authenticated Body evidence, derived identities, and exact Mind CAS. Signed publishers, deterministic projection, enriched Eve evidence, local impact ingress, Resident Self wake routing, and brake scopes are implemented. The machine remains a supervised engineering alpha: isolated and sustained Starfire pilot evidence has not yet been earned.
+  summary: The keyed RepoModel hard cut, decision-context foundation, and Model Atlas code slice are complete on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Persisted EpiphanyThreadStateEntry and its coordinator transaction still own production presence, routing, launch, and acceptance behavior. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of that obsolete authority.
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
-  latest_phase: Gate 1 preflight has cut three fresh-runtime ownership defects without weakening a gate. Exact 7b385b04 makes the Atlas publisher reopen one durable private identity and export one separate idempotent public trust anchor. Exact 7e9d4545 gives fresh repository bootstrap its own immutable swarm identity, seven typed organ rows, generation witness, receipt, and Mind semantic obligation; legacy admission remains migration-only. Exact d11e6511 makes keyed RepoModel seed admission atomically commit its first Modeling semantic-projection obligation as a derived runtime companion, using one shared derivation with readiness; replay validates it and no status/projector repair path exists. Focused tests pass. Earlier f60db0a2 ordinary Atlas Modeling and 4c0cbd57 Atlas foundation proofs remain accepted; Odin exact d34cb7e and Eve exact 076d212 remain pinned. The live Gate must restart from a fresh state root because partial preflight stores are historical evidence only.
+  latest_phase: Gate 1 preflight has cut four fresh-runtime ownership defects without weakening a gate. Exact 7b385b04 makes the publisher identity durable; 7e9d4545 gives fresh bootstrap a seven-organ Mind; d11e6511 atomically binds RepoModel seed to its Modeling semantic obligation; 2ba6b9dc makes the projector enumerate both Mind partitions and distinguishes terminal-ready from query-eligible health. Fresh Eve, Odin, and Epiphany stores each projected Modeling and settled with two inspected sources and zero faults. Production status then falsified the claimed broader cut: it still reads EpiphanyThreadStateEntry as coordinator presence and reports the keyed organism missing. The operational gate is paused; current work is the aggregate thread-state deletion. Earlier Atlas proofs remain accepted, and partial Gate roots are historical evidence only.
   operational_state:
-    local_worktree: clean_after_d11e6511_documentation_sync
+    local_worktree: clean_after_2ba6b9dc_documentation_sync
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -73,10 +73,11 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
-  unresolved_authority: Model Atlas code and isolated proofs are complete. Gate 1 preflight proved live Odin transport and fresh repository bootstrap far enough to expose and cut publisher identity, fresh organ Mind, and RepoModel projection-bootstrap ownership seams, but no three-repository signed-sight or brake acceptance is yet claimed. A fresh-root operational replay, autonomous Odin-then-Epiphany Modeling cascade, partition exercise, and sustained daemon-supervisor physiology remain unproven. Operational registration in gamecult-ops remains forbidden until that proof is stable. Historical shakedown acceptance evidence remains valid; the original c011 volumes remain quiescent and untouched. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Execute Model Atlas Gate 1 on Starfire with separate Epiphany, Odin, and Eve Mind, identity, publisher, catalog, projector, and ingress stores. Keep impact ingress absent while ordinary Modeling admits the seed facts and publishers/projector establish signed publications, exact watermarks, rejection telemetry, and the canonical Eve tree. Then engage atlas.publish, atlas.project, and atlas.impact_ingress; rerun all three organ cycles and prove held writes/scheduling plus visibly stale read-only projection. Do not release autonomous scheduling, register gamecult-ops topology, touch Yggdrasil, or reuse historical c011 volumes.
+  unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities across status, launch, acceptance, resident continuation, and request selection. This contradicts the intended concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
+  next_action: Add one pure typed current-work projection over keyed Mind and exact runtime receipts; migrate status and coordinator routing/launch/review to it; migrate family acceptance to MindMutation plans; delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every production behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior. Only then restart Model Atlas Gate 1 from a new external root. Do not add a compatibility aggregate, dual reader, or migrator.
 
 active_subgoals:
+  - Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.
   - Prove the ordered Model Atlas Gate 1 with real isolated stores: establish signed sight before engaging all brakes, then prove frozen read-only state and no local Modeling or Soul wakes.
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
   - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.