diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 42235505..95339f04 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -3699,3 +3699,18 @@ passes without warnings. The full classified batch then passed 669 library tests with one intentional ignore, 29 daemon-supervisor tests, and 19 verse-query tests. Detached logs and exit-zero status live under `.epiphany-run/narrow-verse-readers-161c6ec8`. + +Exact pushed `ec54666c` packages that cut as Linux release +`sha256-4d7347980f2fad658ebc6206b0435f29e1151cfbb75ec2806a8df2d5eb7f63bd` +with witness +`sha256-d5e6671cd70e1aeb3df21d1e69fb015b831e2c63c272d7ef3e3bf5f61aac15d1`. +The copied live gate added one valid Hands daemon status to two copies of actual +c006 local-Verse state, then added a registered but deliberately undecodable +Mind-contract payload to only one copy. Exact packaged status, policy, direct +reconciliation, and single-target poke paths produced the same decisions on +both copies; reconciliation differed only by observation time. Every input +envelope remained byte-identical through the writes, including the hostile +payload. This proves the decision-input cut at the deployed CultCache layer, +not merely by source inspection: unrelated typed cargo can neither steer the +decision nor be silently repaired by it. Receipts live under +`.epiphany-run/narrow-verse-readers-ec54666c`. diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 72b273f4..572a5090 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -1,5 +1,32 @@ # Fresh workspace handoff +## Exact local-Verse reader isolation accepted - 2026-08-11 + +Exact pushed `ec54666c` packages 24 Linux binaries as release +`sha256-4d7347980f2fad658ebc6206b0435f29e1151cfbb75ec2806a8df2d5eb7f63bd` +with witness +`sha256-d5e6671cd70e1aeb3df21d1e69fb015b831e2c63c272d7ef3e3bf5f61aac15d1`. +The persistent Starfire cache completed the release build in 5m23s with no +warnings; exact packaged inspection found all 24 binaries. Packaging receipts +are under `.epiphany-run/linux-package-ec54666c`. + +The copied-state gate used two named volumes built from actual c006 local-Verse +state. Both received one valid Hands daemon-status fixture; the hostile copy +also received a registered Mind-contract envelope whose payload deliberately +cannot decode as that type. Exact packaged `swarm-status`, single-target poke, +restart-policy writing, and direct reconciliation all succeeded. Status, poke, +and policy projections were identical; reconciliation differed only in its +wall-clock field. Every original envelope remained byte-identical after all +three mutations, including the hostile row and payload. Receipts and the +verification script are under `.epiphany-run/narrow-verse-readers-ec54666c`. + +The nervous-system aggregate-reader audit is closed. Actual c006 remains exact +`c9a2a979`, alive and braked at resident revision 34: `ec54666c` changes only +operator query/supervisor paths, so replacing resident Heartbeat/Self bodies +would be churn without an invariant. Next map the incomplete Imagination +option-generation boundary from typed request through authenticated candidate, +with adoption and Hands authority remaining absent. Yggdrasil never builds. + ## Exact daemon-policy input cut - 2026-08-11 The refreshed Perfect Machine roadmap no longer names exact `16407f7e`, diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index f886afc0..eca856dc 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index cf97011b..5e6b626a 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -36,9 +36,9 @@ invariants: current_status: summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, exact 6bc3ec3f semantic physical-epoch retirement, and exact 44230a05 Persona conversation retention are proven. Gamecult-ops 059821f owns Yggdrasil stream retention and exact 6ee08a4 owns stable Starfire Persona-permit firewall ingress. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Yggdrasil is the small public crossing body, never the release forge. - latest_phase: Exact c9a2a979 is live and braked on actual c006 after accepted two-grant receipt-bound turnover at resident revision 34. The nervous-system source audit has narrowed restart-policy writing, direct single-daemon reconciliation, and single-target Verse poke to exact status/policy/brake/intent families. All surviving aggregate readers own explicit multi-family projections. The complete batch passes 669 library tests with one intentional ignore, 29 supervisor tests, and 19 verse-query tests without warnings. + latest_phase: Exact c9a2a979 remains live and braked on actual c006 at resident revision 34. Exact ec54666c packages as Linux release sha256-4d7347980f2fad658ebc6206b0435f29e1151cfbb75ec2806a8df2d5eb7f63bd with witness sha256-d5e6671cd70e1aeb3df21d1e69fb015b831e2c63c272d7ef3e3bf5f61aac15d1. On copied named-volume state, restart-policy writing, direct single-daemon reconciliation, and single-target Verse poke produced identical decisions with and without a deliberately malformed unrelated registered-family envelope; every original row, including the hostile envelope, remained byte-identical. All surviving aggregate readers own explicit multi-family projections. operational_state: - local_worktree: exact_c9a2a979_actual_internal_turnover_accepted_next_organ_audit + local_worktree: exact_ec54666c_narrow_verse_reader_package_and_hostile_cargo_gate_accepted operator_wireguard: restored starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4 yggdrasil: canonical_small_public_crossing_body @@ -70,7 +70,7 @@ current_status: yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed resident_physiology: c006_exact_c9a2a979_alive_braked_revision_34_after_two_receipt_bound_continuation_grants unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, all three packaged fulfilled-before-receipt lanes, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, normal coordinator lifecycle opening/error closure/legacy repair/archival, co-resident resident lifecycle retention, authenticated outer-worker attempt retention, deployed supervisor/projector journald ownership, and Docker named-volume atomic snapshot visibility are accepted live. Starfire's Docker Desktop F: bind is rejected for mutable authority after an exact packaged lockless reader observed an empty published snapshot during writer interruption. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. One completed Discord consequence remains blocked by the absent Yggdrasil credential. - next_action: Keep actual c006 exact c9a2a979 alive under its cognitive brake. Commit/push the completed narrow local-Verse reader audit, then package one exact Linux release through the persistent Starfire cache. On copied state, prove unrelated hostile state families cannot change policy, direct reconciliation, or single-target poke decisions before considering actual replacement. Yggdrasil never builds. + next_action: Keep actual c006 exact c9a2a979 alive under its cognitive brake; the accepted ec54666c cut changes operator query/supervisor paths and does not justify resident-provider churn. Map the next incomplete organ boundary in Imagination option generation from typed request through authenticated candidate without adoption or Hands authority, then run one bounded copied-state package proof before any actual wake. Yggdrasil never builds. active_subgoals: - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually. @@ -88,7 +88,7 @@ organ_readiness: soul: proven for the current bounded route-chain consequence; exact d3bfbda0 launched Verification through typed plan-decision provenance, result f23fe2b6 was accepted at revision 57, and Self then derived Modeling before any repeated Hands authority. mind: proven for launch-owned resident frontier adjudication; two historical attempts failed closed, exact bd96305e derived immutable identity from authenticated launch, authorized retry 2d2a3e8b completed, and Self atomically committed terminal adopt decision e7d7f3c7. Broader memory retention and long-duration behavior remain open. continuity: partial; authenticated 55660d78 terminalized the copied v28 dead worker once and refused duplicate restart, while sealed v28 remained unchanged. Exact 100d8854 closes only all-terminal sessions, emits one deterministic event, and refuses post-close jobs. Exact 42bc665a proves bounded retention and restart sequence recovery. A digest-pinned Linux runtime-spine at b5140288 repeated closure invariants on Yggdrasil. Authenticated c005 proves typed resident state survives hard exit, executable-body replacement, runtime-topology correction, and restart while preserving awaitFrontierProposal. Exact b8138a6b proves active-child and idle SIGTERM closure with exit zero and final braked state. Exact c930f505 proves cross-container resident ownership refusal without state mutation while Heartbeat retains its distinct typed lock. Exact ed15f83a packages resident lifecycle retention. Exact 16c4b19f packages coordinator receipt retention without resurrection. Exact 75b84180 packaged Linux proves worker start gating, claimed/active orphan death recovery, canonical resident requeue, and one distinct same-request retry without dual live authority. Exact 7637b1cf packages and proves atomic generic job/result/event plus terminal-failure process closure, canonical resident settlement, and a distinct same-request retry with no dual live authority. Exact 2e66433f packaged Self proves admitted-model-direction valid-result-before-receipt closes once without retry. Exact 52ee6b53 packages the corrected full-backing resident retention fence. Exact 53678374 packages authenticated failed and fulfilled outer-worker archival: window one retires only the older exact seven-envelope family, retained authority stays live, archived failure cannot resurrect, and archived fulfillment remains queryable. Direct packaged proposal Modeling and deployed journald ownership are accepted. Exact a4756857 packages CultCache 0ba8745 and proves named-volume publication across forty SIGKILL writers plus ten million concurrent lockless reads; copied c006 once and SIGTERM restart remain braked and clean. Its unconsumed nonterminal grant exactly matches Heartbeat's running coordinator turn and is coherently held by the brake. - nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Exact c0055772 proves Linux heartbeat acknowledgement/regrant, Self single-consumption launch, authenticated plan coordinator completion, and a persistent resident body. The accepted Linux Eyes-to-Modeling circuit proves detached role workers, native read-only tool loops, typed admission, and causal next-organ routing. Exact 16407f7e adds cross-container readiness ownership and an actual c006 923-pulse braked plateau. Exact c9a2a979 adds two consecutive causal grants with clean terminal settlement. Remaining legitimate whole-Verse consumers remain under source audit. Yggdrasil is not a release forge at its current memory budget. + nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Exact c0055772 proves Linux heartbeat acknowledgement/regrant, Self single-consumption launch, authenticated plan coordinator completion, and a persistent resident body. The accepted Linux Eyes-to-Modeling circuit proves detached role workers, native read-only tool loops, typed admission, and causal next-organ routing. Exact 16407f7e adds cross-container readiness ownership and an actual c006 923-pulse braked plateau. Exact c9a2a979 adds two consecutive causal grants with clean terminal settlement. Exact ec54666c closes the local-Verse reader classification and proves malformed unrelated registered-family cargo cannot influence or be rewritten by exact policy, reconciliation, or single-target poke paths. Yggdrasil is not a release forge at its current memory budget. forbidden_actions: - Do not issue a speculative deployment grant.