From 1d87a5c00a8dda02c39d24d9e5d128dfadbaf6c8 Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Sun, 16 Aug 2026 20:55:32 +0200 Subject: [PATCH] Put thread-state deletion ahead of Atlas gate --- notes/epiphany-current-algorithmic-map.md | 38 ++++++++++++++ notes/epiphany-fork-implementation-plan.md | 55 ++++++++++++--------- notes/fresh-workspace-handoff.md | 41 +++++++++++---- state/ledgers.msgpack | Bin 622611 -> 623023 bytes state/map.yaml | 13 ++--- 5 files changed, 108 insertions(+), 39 deletions(-) diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 4aa63950..d7a6d326 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -4788,3 +4788,41 @@ into the seed owner's batch CAS. It is derived from the exact keyed envelopes, remains outside canonical Mind, and cannot be synthesized later by status or a projector. Historical partial Gate roots remain read-only evidence; the live retry must use a fresh root. + +Exact `2ba6b9dc` makes the semantic projector enumerate both stores it owns. +Mind and Modeling inputs are loaded independently each pulse, exact shared +swarm identity is validated when both exist, and one surviving source remains +actionable when the other refuses. CultMesh health no longer conflates a +terminal-ready empty projection with query eligibility. Fresh Eve, Odin, and +Epiphany stores each projected Modeling once and then inspected both partitions +idle with zero source, retention, or health faults. + +That success exposed the remaining hard-cut boundary rather than clearing the +operational gate. `epiphany-mvp-status`, coordinator launch/acceptance, Resident +Self continuation, and several request selectors still read persisted +`EpiphanyThreadStateEntry`; the coordinator transaction still writes it. +Consequently a fully initialized keyed Mind is reported as missing without the +legacy aggregate. This is live obsolete authority, not compatibility evidence. + +Remaining hard-cut authority map: + +- Owner: keyed Mind documents plus exact runtime request/result/receipt families + own durable decisions and unresolved work. +- Inputs: sealed Mind views, current Body/RepoModel document versions, and exact + family lifecycle receipts; thread ID is pass provenance only. +- Outputs: one pure typed current-work projection, family launch requests, and + family-owned Mind mutations/receipts. +- Derived state: coordinator status, role boards, events, latest-result slots, + and UI views are projections only. +- Forbidden writers: `EpiphanyThreadStateEntry`, global revision checks, + `coordinator_state_transaction`, aggregate state patches, accepted-at ordering, + and generic lane terminality must cease deciding behavior. +- Shared paths: operator and resident launches use the same current-work + derivation and family commit primitive; restart re-derives identical work. +- Cut line: migrate routing, launch/review, and acceptance consumers; then delete + the aggregate schema, writer, readers, and old-writable-store path. No mirror, + dual read, bootstrap aggregate, or migrator survives. +- Verification: fresh objective+Body launches Modeling without Eyes or thread + state; disjoint Persona/Hands work remains concurrent; source guards find no + production aggregate reference; restart preserves obligations without + authority resurrection. diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index c09a5b5f..b04be81a 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -14,9 +14,11 @@ earned OpenAI-compatible authentication or model-transport capability. ## Current Mechanism - `epiphany-state-model` owns durable Mind shape. -- `epiphany-core` owns coordinator policy, state admission, runtime spine, - surfaces, organ gates, heartbeat physiology, Persona loop, and CultMesh - integration. +- `epiphany-core` owns keyed Mind admission, runtime spine, organ gates, + heartbeat physiology, Persona, and CultMesh integration. Its coordinator and + status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`; + that aggregate is an obsolete live authority and currently blocks fresh keyed + stores from coordinating. - Native binaries expose coordinator, status, state, runtime, memory, daemon, Persona, repo-work, and Verse operations. - CultCache stores typed state and receipts; CultMesh/CultNet carry typed local @@ -38,7 +40,8 @@ earned OpenAI-compatible authentication or model-transport capability. ## Completed Foundation -- Native typed thread state and state-update validation. +- Typed reasoning bases, terminal decision contexts, exact Mind batch CAS, and + keyed objective/RepoModel documents. - Native coordinator facade and derived status/recommendation surfaces. - CultCache runtime spine with worker, Mind, Eyes, Substrate Gate, Hands, Soul, Continuity, and coordinator receipts. @@ -204,24 +207,30 @@ Delete or demote: ## Immediate Next Action -Keep the five-day shakedown paused and execute Model Atlas Gate 1 on Starfire. -Use separate Epiphany, Odin, and Eve repository identities and fresh local -Mind, private identity, publisher, catalog, projector, ingress, and resident -stores. Keep impact ingress absent while ordinary Modeling admits the three -local seed facts and the publishers plus projector establish signed -publications, exact watermarks, rejection telemetry, and the canonical retained -Eve tree. Ordering is part of the invariant: a brake cannot forbid the first -publication and also prove that signed sight exists. +Keep the five-day shakedown and Model Atlas operational Gate 1 paused. Complete +the remaining Decision-Auditable Concurrent Mind hard cut before another live +coordinator run. Fresh Gate preflight proved that keyed Mind and both semantic +partitions become ready, then falsified coordinator ownership: status still +declares the organism missing because it reads persisted +`EpiphanyThreadStateEntry` as the presence and routing head. -After sight is established, engage `atlas.publish`, `atlas.project`, and -`atlas.impact_ingress`. Run one more publisher and projector cycle plus the -first ingress cycle. Prove that all three owners report held work, no local -Modeling or Soul pressure is scheduled, no Atlas state advances, and the last -Eve projection remains available as visibly stale, read-only state. +Cut in this order: -Do not release autonomous scheduling, register topology in `gamecult-ops`, -touch Yggdrasil, reuse the historical c011 volumes, or treat isolated tests as -the operational proof. If Gate 1 passes, Gate 2 may release only the Atlas -Modeling/Soul wake scopes for a temporary Eve contract change while preserving -the existing Hands gate. Daemon supervision, sustained physiology, and -operational registration remain later gates. +1. Add one pure typed current-work projection over keyed Mind/runtime receipts. + Modeling must derive from the current Body/RepoModel obligation; Eyes only + from explicit external-evidence obligations. +2. Move status and coordinator launch/review consumers to that projection and + exact request/result identities. Thread ID remains immutable pass provenance + only. +3. Move role/reorient acceptance from aggregate state patches to family-owned + `MindMutation` plans and exact commit receipts. +4. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global + expected revisions, aggregate update APIs, and all source references from + production. Refuse old writable stores; add no dual reader or migrator. +5. Replay fresh-store concurrency and decision-context acceptance. Only then + restart Model Atlas Gate 1 from a new external root. + +Do not preserve the aggregate for compatibility, manufacture a bootstrap +thread, release autonomous scheduling, register topology in `gamecult-ops`, +touch Yggdrasil, reuse historical/partial Gate roots, or treat semantic +readiness as coordinator acceptance. diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 883d2cd1..7693a6e3 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -4,7 +4,7 @@ Updated: 2026-08-16 ## Current state -The five-day shakedown remains paused. The active source is exact `d11e6511` on +The five-day shakedown remains paused. The active source is exact `2ba6b9dc` on `codex/epiphany-shakedown-live`: the keyed Mind hard cut, federated Model Atlas vertical slice, ordinary Modeling authoring path, durable publisher identity, fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are @@ -12,6 +12,14 @@ landed. Historical aggregate RepoModel and partial Gate stores are evidence only. No production model output, registry, command, admission path, projector, or repair path can restore their authority. +This is not yet the full Concurrent Mind cut. Persisted +`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple +launch/acceptance/status readers remain live production authorities. Fresh Gate +preflight proved the consequence: both keyed semantic partitions reached ready, +but status still called the organism missing because no thread aggregate +existed. Model Atlas Gate 1 is therefore paused behind that deletion, not merely +behind another operational retry. + The Atlas keeps the federation sharp. A provider Mind owns an offer. A consumer Mind owns a claim. Soul owns verification evidence for exact endpoint versions. Signed per-repository publishers carry those facts through Odin, a deterministic @@ -77,6 +85,21 @@ repaired by status or a projector. Replay validates the existing companion; the focused seed/replay test passes. The three partial stores without this companion remain read-only evidence. Resume Gate 1 only from a fresh state root. +Exact `2ba6b9dc` closes the next preflight defect. The semantic projector body +owned two canonical stores but enumerated only agent-memory Mind; it now loads +and validates both Mind and Modeling inputs on every pulse while allowing one +faulty source to remain visible without hiding the other. CultMesh semantic +health also distinguishes terminal-ready from query-eligible, so a successful +empty partition no longer degrades the provider. On the fresh root, Eve, Odin, +and Epiphany each executed Modeling once, then settled idle with two inspected +sources and zero source, retention, or health faults. + +The following production status read falsified the remaining campaign premise: +`EpiphanyThreadStateEntry` still owns coordinator presence/routing. Canonical +docs previously described the keyed foundation too broadly. The hard cut is +now the immediate campaign; Gate 1 cannot resume until production source has no +thread aggregate writer or behavioral reader. + Public positioning was synchronized on 2026-08-16 without changing that next rite. `docs/positioning.md` is the current claim owner: Epiphany is the organizational layer above frontier AI workers; the primary failure is global @@ -278,13 +301,11 @@ unchanged; the lifecycle authorities above remain separate. ## Immediate next action -Execute Model Atlas Gate 1 on Starfire. Use separate state roots and service -identities for `F:\Projects\Epiphany`, `F:\Projects\Odin`, and -`F:\Projects\Eve`, plus separate local Mind, private identity, publisher, Odin -catalog, projector, and ingress stores. Keep ingress absent while ordinary -Modeling admits the seed facts and the publishers/projector establish signed -sight. Then engage `atlas.publish`, `atlas.project`, and -`atlas.impact_ingress`; rerun all three cycles and record the held outcomes, -exact publication IDs, watermarks, projection digest, retained Eve documents, -and read-only brake behavior. Do not release scheduling, register operational +Complete the persisted thread-state hard deletion described in the campaign +plan. Start with one typed current-work projection over keyed Mind and exact +runtime receipts, migrate status and coordinator routing to it, then migrate +family acceptance and delete the aggregate schema/transaction. Run the source +guards and fresh-store concurrency/decision-context suite. Only after that may +Model Atlas Gate 1 restart from a new external root. Keep the current fresh and +partial roots read-only; do not release scheduling, register operational topology, touch the original c011 volumes, or build on Yggdrasil. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 2fb0bfae15a0321aa158828a1b435dec0c19bf97..01f4b323047e94f650a5d8e7dafc76be969f62d9 100644 GIT binary patch delta 404 zcmXw#ze)o^5XQauCkcXJAzFwG3aKvt4syg;tCgLV-QMkZw{Y1#clXp3Y9NS>oyL^< z1_ms|7qIk2d;=?IBNjhqcbWO-`}Sd2dmYuL8{TrK(+k3r&$;UG{%yxQ^StS3T)G>V zJi^s^Vu4sBmWVP@c^{Xm*H^2LA3-Y!>#c6R9Uiy4z0Tz5wz9RI9cVNu95Rd024fXn zK_iP(E&orMZxdR+9i4lrc87Dy*AS7ZP>j-<~j#lMwQ~ z+2o&!YqP1d3M@%9CKSa7tC=+9ki7V`?pzo;LE>^6ADHB1DrM(FX_n1$qBhVkjHP$r Yn4zWo5uVb2fXY!br!;HLGd5`a0ti8l^#A|> delta 69 zcmZ4AtTwqpZG!|Ow~2|BiDlF=2F|(