Put thread-state deletion ahead of Atlas gate

notes/epiphany-current-algorithmic-map.md

@@ -4788,3 +4788,41 @@ into the seed owner's batch CAS. It is derived from the exact keyed envelopes,
 remains outside canonical Mind, and cannot be synthesized later by status or a
 projector. Historical partial Gate roots remain read-only evidence; the live
 retry must use a fresh root.
+
+Exact `2ba6b9dc` makes the semantic projector enumerate both stores it owns.
+Mind and Modeling inputs are loaded independently each pulse, exact shared
+swarm identity is validated when both exist, and one surviving source remains
+actionable when the other refuses. CultMesh health no longer conflates a
+terminal-ready empty projection with query eligibility. Fresh Eve, Odin, and
+Epiphany stores each projected Modeling once and then inspected both partitions
+idle with zero source, retention, or health faults.
+
+That success exposed the remaining hard-cut boundary rather than clearing the
+operational gate. `epiphany-mvp-status`, coordinator launch/acceptance, Resident
+Self continuation, and several request selectors still read persisted
+`EpiphanyThreadStateEntry`; the coordinator transaction still writes it.
+Consequently a fully initialized keyed Mind is reported as missing without the
+legacy aggregate. This is live obsolete authority, not compatibility evidence.
+
+Remaining hard-cut authority map:
+
+- Owner: keyed Mind documents plus exact runtime request/result/receipt families
+  own durable decisions and unresolved work.
+- Inputs: sealed Mind views, current Body/RepoModel document versions, and exact
+  family lifecycle receipts; thread ID is pass provenance only.
+- Outputs: one pure typed current-work projection, family launch requests, and
+  family-owned Mind mutations/receipts.
+- Derived state: coordinator status, role boards, events, latest-result slots,
+  and UI views are projections only.
+- Forbidden writers: `EpiphanyThreadStateEntry`, global revision checks,
+  `coordinator_state_transaction`, aggregate state patches, accepted-at ordering,
+  and generic lane terminality must cease deciding behavior.
+- Shared paths: operator and resident launches use the same current-work
+  derivation and family commit primitive; restart re-derives identical work.
+- Cut line: migrate routing, launch/review, and acceptance consumers; then delete
+  the aggregate schema, writer, readers, and old-writable-store path. No mirror,
+  dual read, bootstrap aggregate, or migrator survives.
+- Verification: fresh objective+Body launches Modeling without Eyes or thread
+  state; disjoint Persona/Hands work remains concurrent; source guards find no
+  production aggregate reference; restart preserves obligations without
+  authority resurrection.

notes/epiphany-fork-implementation-plan.md

@@ -14,9 +14,11 @@ earned OpenAI-compatible authentication or model-transport capability.
 ## Current Mechanism
 
 - `epiphany-state-model` owns durable Mind shape.
-- `epiphany-core` owns coordinator policy, state admission, runtime spine,
-  surfaces, organ gates, heartbeat physiology, Persona loop, and CultMesh
-  integration.
+- `epiphany-core` owns keyed Mind admission, runtime spine, organ gates,
+  heartbeat physiology, Persona, and CultMesh integration. Its coordinator and
+  status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`;
+  that aggregate is an obsolete live authority and currently blocks fresh keyed
+  stores from coordinating.
 - Native binaries expose coordinator, status, state, runtime, memory, daemon,
   Persona, repo-work, and Verse operations.
 - CultCache stores typed state and receipts; CultMesh/CultNet carry typed local
@@ -38,7 +40,8 @@ earned OpenAI-compatible authentication or model-transport capability.
 
 ## Completed Foundation
 
-- Native typed thread state and state-update validation.
+- Typed reasoning bases, terminal decision contexts, exact Mind batch CAS, and
+  keyed objective/RepoModel documents.
 - Native coordinator facade and derived status/recommendation surfaces.
 - CultCache runtime spine with worker, Mind, Eyes, Substrate Gate, Hands, Soul,
   Continuity, and coordinator receipts.
@@ -204,24 +207,30 @@ Delete or demote:
 
 ## Immediate Next Action
 
-Keep the five-day shakedown paused and execute Model Atlas Gate 1 on Starfire.
-Use separate Epiphany, Odin, and Eve repository identities and fresh local
-Mind, private identity, publisher, catalog, projector, ingress, and resident
-stores. Keep impact ingress absent while ordinary Modeling admits the three
-local seed facts and the publishers plus projector establish signed
-publications, exact watermarks, rejection telemetry, and the canonical retained
-Eve tree. Ordering is part of the invariant: a brake cannot forbid the first
-publication and also prove that signed sight exists.
+Keep the five-day shakedown and Model Atlas operational Gate 1 paused. Complete
+the remaining Decision-Auditable Concurrent Mind hard cut before another live
+coordinator run. Fresh Gate preflight proved that keyed Mind and both semantic
+partitions become ready, then falsified coordinator ownership: status still
+declares the organism missing because it reads persisted
+`EpiphanyThreadStateEntry` as the presence and routing head.
 
-After sight is established, engage `atlas.publish`, `atlas.project`, and
-`atlas.impact_ingress`. Run one more publisher and projector cycle plus the
-first ingress cycle. Prove that all three owners report held work, no local
-Modeling or Soul pressure is scheduled, no Atlas state advances, and the last
-Eve projection remains available as visibly stale, read-only state.
+Cut in this order:
 
-Do not release autonomous scheduling, register topology in `gamecult-ops`,
-touch Yggdrasil, reuse the historical c011 volumes, or treat isolated tests as
-the operational proof. If Gate 1 passes, Gate 2 may release only the Atlas
-Modeling/Soul wake scopes for a temporary Eve contract change while preserving
-the existing Hands gate. Daemon supervision, sustained physiology, and
-operational registration remain later gates.
+1. Add one pure typed current-work projection over keyed Mind/runtime receipts.
+   Modeling must derive from the current Body/RepoModel obligation; Eyes only
+   from explicit external-evidence obligations.
+2. Move status and coordinator launch/review consumers to that projection and
+   exact request/result identities. Thread ID remains immutable pass provenance
+   only.
+3. Move role/reorient acceptance from aggregate state patches to family-owned
+   `MindMutation` plans and exact commit receipts.
+4. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
+   expected revisions, aggregate update APIs, and all source references from
+   production. Refuse old writable stores; add no dual reader or migrator.
+5. Replay fresh-store concurrency and decision-context acceptance. Only then
+   restart Model Atlas Gate 1 from a new external root.
+
+Do not preserve the aggregate for compatibility, manufacture a bootstrap
+thread, release autonomous scheduling, register topology in `gamecult-ops`,
+touch Yggdrasil, reuse historical/partial Gate roots, or treat semantic
+readiness as coordinator acceptance.

notes/fresh-workspace-handoff.md

@@ -4,7 +4,7 @@ Updated: 2026-08-16
 
 ## Current state
 
-The five-day shakedown remains paused. The active source is exact `d11e6511` on
+The five-day shakedown remains paused. The active source is exact `2ba6b9dc` on
 `codex/epiphany-shakedown-live`: the keyed Mind hard cut, federated Model Atlas
 vertical slice, ordinary Modeling authoring path, durable publisher identity,
 fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
@@ -12,6 +12,14 @@ landed. Historical aggregate RepoModel and partial Gate stores are evidence
 only. No production model output, registry, command, admission path, projector,
 or repair path can restore their authority.
 
+This is not yet the full Concurrent Mind cut. Persisted
+`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple
+launch/acceptance/status readers remain live production authorities. Fresh Gate
+preflight proved the consequence: both keyed semantic partitions reached ready,
+but status still called the organism missing because no thread aggregate
+existed. Model Atlas Gate 1 is therefore paused behind that deletion, not merely
+behind another operational retry.
+
 The Atlas keeps the federation sharp. A provider Mind owns an offer. A consumer
 Mind owns a claim. Soul owns verification evidence for exact endpoint versions.
 Signed per-repository publishers carry those facts through Odin, a deterministic
@@ -77,6 +85,21 @@ repaired by status or a projector. Replay validates the existing companion;
 the focused seed/replay test passes. The three partial stores without this
 companion remain read-only evidence. Resume Gate 1 only from a fresh state root.
 
+Exact `2ba6b9dc` closes the next preflight defect. The semantic projector body
+owned two canonical stores but enumerated only agent-memory Mind; it now loads
+and validates both Mind and Modeling inputs on every pulse while allowing one
+faulty source to remain visible without hiding the other. CultMesh semantic
+health also distinguishes terminal-ready from query-eligible, so a successful
+empty partition no longer degrades the provider. On the fresh root, Eve, Odin,
+and Epiphany each executed Modeling once, then settled idle with two inspected
+sources and zero source, retention, or health faults.
+
+The following production status read falsified the remaining campaign premise:
+`EpiphanyThreadStateEntry` still owns coordinator presence/routing. Canonical
+docs previously described the keyed foundation too broadly. The hard cut is
+now the immediate campaign; Gate 1 cannot resume until production source has no
+thread aggregate writer or behavioral reader.
+
 Public positioning was synchronized on 2026-08-16 without changing that next
 rite. `docs/positioning.md` is the current claim owner: Epiphany is the
 organizational layer above frontier AI workers; the primary failure is global
@@ -278,13 +301,11 @@ unchanged; the lifecycle authorities above remain separate.
 
 ## Immediate next action
 
-Execute Model Atlas Gate 1 on Starfire. Use separate state roots and service
-identities for `F:\Projects\Epiphany`, `F:\Projects\Odin`, and
-`F:\Projects\Eve`, plus separate local Mind, private identity, publisher, Odin
-catalog, projector, and ingress stores. Keep ingress absent while ordinary
-Modeling admits the seed facts and the publishers/projector establish signed
-sight. Then engage `atlas.publish`, `atlas.project`, and
-`atlas.impact_ingress`; rerun all three cycles and record the held outcomes,
-exact publication IDs, watermarks, projection digest, retained Eve documents,
-and read-only brake behavior. Do not release scheduling, register operational
+Complete the persisted thread-state hard deletion described in the campaign
+plan. Start with one typed current-work projection over keyed Mind and exact
+runtime receipts, migrate status and coordinator routing to it, then migrate
+family acceptance and delete the aggregate schema/transaction. Run the source
+guards and fresh-store concurrency/decision-context suite. Only after that may
+Model Atlas Gate 1 restart from a new external root. Keep the current fresh and
+partial roots read-only; do not release scheduling, register operational
 topology, touch the original c011 volumes, or build on Yggdrasil.