Record sealed Persona ingress

notes/epiphany-current-algorithmic-map.md

@@ -1,7 +1,7 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-18
-Latest implementation cut: `7c2ebd81` on `codex/epiphany-shakedown-live`
+Latest implementation cut: `79c0e373` on `codex/epiphany-shakedown-live`
 
 This document describes the live machine. Historical cuts, rejected paths, and
 proof chronology belong in git, `state/ledgers.msgpack`, and bounded smoke
@@ -225,10 +225,10 @@ and the retained decision can still reach its basis/context without them.
 
 ## Verification and open gates
 
-Accepted through `7c2ebd81`:
+Accepted through `79c0e373`:
 
 - every Epiphany core target compiles;
-- core library `492/492`;
+- core library `493/493`;
 - OpenAI runtime library `24/24`;
 - model-runtime binary `10/10`;
 - OpenAI-runtime binary `10/10`.
@@ -236,12 +236,11 @@ Accepted through `7c2ebd81`:
 
 Open before Model Atlas Gate 1 resumes:
 
-1. admit the Persona projector's assembled external input as one exact typed
-   Mind observation before inference, then prove restart reproduces identical
-   decisions and obligations without authority resurrection. Concrete
-   Persona+Hands concurrency, concurrent disjoint graph writes, simultaneous
-   Verification+Modeling, same-identity conflict, exact replay, transcript
-   deletion, and old-epoch refusal are already accepted;
+1. prove fresh restart reproduces identical decisions and obligations without
+   Persona input reformulation or authority resurrection. Sealed Persona
+   ingress, concrete Persona+Hands concurrency, concurrent disjoint graph
+   writes, simultaneous Verification+Modeling, same-identity conflict, exact
+   replay, transcript deletion, and old-epoch refusal are accepted;
 2. run the fresh packaged capstone, then restart Model Atlas Gate 1 from a new
    external root.
 

notes/epiphany-fork-implementation-plan.md

@@ -213,8 +213,8 @@ the remaining Decision-Auditable Concurrent Mind hard cut before another live
 coordinator run. Fresh Gate preflight exposed the aggregate ownership defect;
 the aggregate has now been structurally removed. Decision-context admission,
 retention, writable-epoch refusal, keyed graph/Verification concurrency, and
-concrete Persona+Hands concurrency are accepted. The remaining gate is sealed
-Persona projector ingress plus fresh restart/re-entry proof.
+concrete Persona+Hands concurrency, and sealed Persona projector ingress are
+accepted. The remaining gate is fresh restart/re-entry proof.
 
 Cut in this order:
 
@@ -314,9 +314,13 @@ Cut in this order:
    `state_note` output commits keyed Persona-memory documents through its exact
    decision context; the legacy agent-memory aggregate is no longer a writer on
    this path. A real Hands consequence and Persona Mind admission commit
-   simultaneously. Seal external Persona projector input into Mind, then
-   complete restart/re-entry. Only then restart Model Atlas Gate 1 from a new
-   external root.
+   simultaneously.
+19. **Persona ingress landed at `79c0e373`:** one typed Mind pass-input
+   document seals the exact assembled projector input and observed source
+   versions before inference; every Persona stage cites it, replay reuses it,
+   substitution refuses, and generic role projections exclude Persona-private
+   documents. Complete restart/re-entry. Only then restart Model Atlas Gate 1
+   from a new external root.
 
 Do not preserve the aggregate for compatibility, manufacture a bootstrap
 thread, release autonomous scheduling, register topology in `gamecult-ops`,

notes/fresh-workspace-handoff.md

@@ -2,7 +2,7 @@
 
 Updated: 2026-08-18
 Branch: `codex/epiphany-shakedown-live`
-Latest implementation cut: `7c2ebd81`
+Latest implementation cut: `79c0e373`
 
 ## Orientation
 
@@ -69,6 +69,12 @@ The global thread-state authority is gone.
   `EpiphanyMindPersonaMemoryDocument` writes under the exact Interpreter
   decision context. Exact replay returns the original Mind commit. A concrete
   Hands commit and Persona admission run simultaneously and both commit.
+- `79c0e373` seals the complete assembled Persona pass input as one typed Mind
+  document before inference. It records the exact heartbeat, agent-memory, and
+  admitted Body versions observed; all three Persona stages cite the sealed
+  Mind version. Substitution refuses byte-identically, replay reuses the
+  original input, and direct Git inspection is gone. Persona-only input and
+  memory documents are excluded from generic role projections.
 
 There is no compatibility aggregate, dual reader, bootstrap thread, or
 migrator. Thread identifiers may survive only as immutable pass-creation
@@ -77,7 +83,7 @@ provenance; they do not own identity, currentness, or conflict.
 Verification at this boundary:
 
 - every Epiphany core target compiles;
-- core library `492/492`;
+- core library `493/493`;
 - OpenAI runtime library `24/24`;
 - model-runtime binary `10/10`;
 - OpenAI-runtime binary `10/10`;
@@ -147,14 +153,10 @@ transcript may be required for that query after archival.
 
 ## Immediate next action
 
-1. Seal the Persona projector's external inputs into an exact typed Mind
-   observation before inference; its current direct agent-memory and repository
-   reads may formulate ingress but may not flow straight into a prompt. Then
-   complete restart/re-entry with identical decisions and obligations.
-   Concrete Persona+Hands concurrency, distinct graph writes, same-identity
-   conflict, stale strong-read refusal, simultaneous Verification+Modeling,
-   transcript deletion, writable-epoch refusal, and aggregate/global-revision
-   source guards are accepted.
+1. Complete fresh restart/re-entry with identical decisions and obligations,
+   no Persona pass-input reformulation, no authority resurrection, and no
+   legacy writable path. The source-level ownership and concurrency matrix is
+   accepted.
 2. Only then package a fresh body and resume Model Atlas Gate 1 from a new
    external root.
 

state/map.yaml

@@ -4,7 +4,7 @@ experiment:
   purpose: Native, inspectable agent organism with typed state and explicit organ authority.
 
 objective:
-  current: Complete the Decision-Auditable Concurrent Mind hard cut by sealing Persona projector ingress and proving fresh restart/re-entry before resuming Model Atlas Gate 1.
+  current: Complete the Decision-Auditable Concurrent Mind hard cut by proving fresh restart/re-entry before resuming Model Atlas Gate 1.
 
 architecture:
   body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
@@ -38,11 +38,11 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The broader Concurrent Mind cut remains incomplete only behind sealed Persona projector ingress and fresh restart/re-entry. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused.
+  summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference; every Persona stage cites it, replay reuses it, substitution refuses, and Persona-private documents stay outside generic role projections. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The broader Concurrent Mind cut remains incomplete only behind fresh restart/re-entry. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused.
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
-  latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate coordinator machinery; exact ec1431ff removes another 4,547 lines of thread schema, prompt, revision, freshness, and graph-context authority. Exact f7948795 removes 754 lines net around the dead generic Mind gateway and replaces its mutation-shaped contracts with three read-only decision-audit projections. Exact 1c9aafd8 repairs model-backed frontier-Planning failure ordering: context first, typed failure second, generic job closure third, with one shared context ID. Exact e0e75a30 deletes 612 lines and adds one narrow Research decision contract; runtime result/output contracts advance to v4, and generic patch source guards pass. Exact 12b1b285 replaces partial context-side binding checks with shared exact runtime model/tool validators and proves provider/tool substitution refusal plus transcript-independent retained audit. Exact 01602fd3 advances Mind epoch to v2 and runtime-spine schema to v1; a claimed runtime store must expose one exact current pair, while unrelated physiology stores remain outside Mind ownership. Exact 26b6a5bf proves actual concurrent disjoint-node merge, Verification+Modeling merge, same-key conflict, exact replay, and restart assembly while demoting raw mutation formulation to crate-internal machinery. Exact 7c2ebd81 gives Persona state-note effects one keyed Mind owner under the Interpreter decision context, deletes the aggregate agent-memory writer from that path, and proves concrete Hands+Persona concurrency. Family launches proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only, stateRevision is absent, and no generic Mind review or patch can authorize mutation. Core library 492/492, all core targets, OpenAI runtime 24/24, and binary 10/10 pass. Gate 1 remains paused behind sealed Persona projector ingress and fresh restart/re-entry acceptance.
+  latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate coordinator machinery; exact ec1431ff removes another 4,547 lines of thread schema, prompt, revision, freshness, and graph-context authority. Exact f7948795 removes 754 lines net around the dead generic Mind gateway and replaces its mutation-shaped contracts with three read-only decision-audit projections. Exact 1c9aafd8 repairs model-backed frontier-Planning failure ordering: context first, typed failure second, generic job closure third, with one shared context ID. Exact e0e75a30 deletes 612 lines and adds one narrow Research decision contract; runtime result/output contracts advance to v4, and generic patch source guards pass. Exact 12b1b285 replaces partial context-side binding checks with shared exact runtime model/tool validators and proves provider/tool substitution refusal plus transcript-independent retained audit. Exact 01602fd3 advances Mind epoch to v2 and runtime-spine schema to v1; a claimed runtime store must expose one exact current pair, while unrelated physiology stores remain outside Mind ownership. Exact 26b6a5bf proves actual concurrent disjoint-node merge, Verification+Modeling merge, same-key conflict, exact replay, and restart assembly while demoting raw mutation formulation to crate-internal machinery. Exact 7c2ebd81 gives Persona state-note effects one keyed Mind owner under the Interpreter decision context, deletes the aggregate agent-memory writer from that path, and proves concrete Hands+Persona concurrency. Exact 79c0e373 admits the full Persona pass input once, binds all three stages to its exact Mind version, refuses substituted plans, removes direct Git prompt inspection, and excludes Persona-private documents from generic role projections. Family launches proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only, stateRevision is absent, and no generic Mind review or patch can authorize mutation. Core library 493/493, all core targets, OpenAI runtime 24/24, and binary 10/10 pass. Gate 1 remains paused behind fresh restart/re-entry acceptance.
   operational_state:
-    local_worktree: source_head_7c2ebd81_pushed_persona_projector_ingress_capstone_active
+    local_worktree: source_head_79c0e373_pushed_restart_reentry_capstone_active
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -73,11 +73,11 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
-  unresolved_authority: The persisted/global thread aggregate, generic Mind gateway, aggregate role patch, partial decision-context binding checks, writable old-epoch path, external generic Mind mutation mouth, and Persona aggregate memory writer are gone. Native/provider request equality is internally derived; runtime execution and context sealing share exact model/tool binding owners; model-backed frontier-Planning failure plus role/reorient/Persona archive reachability are context-bound; retained basis/context audit survives transcript-delta deletion. Keyed graph, Verification, and concrete Persona+Hands concurrency are accepted. Persona projector input still crosses directly from external agent-memory/repository observations into its plan instead of first becoming one exact Mind observation. Sealed projector ingress and fresh restart/re-entry remain open. Model Atlas isolated proofs remain accepted, but Gate 1 remains paused. Operational registration in gamecult-ops is forbidden; historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Seal the Persona projector's external inputs into one exact typed Mind observation before inference, then prove fresh restart/re-entry reproduces identical decisions and obligations before Model Atlas Gate 1. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, or transcript authority.
+  unresolved_authority: The persisted/global thread aggregate, generic Mind gateway, aggregate role patch, partial decision-context binding checks, writable old-epoch path, external generic Mind mutation mouth, Persona aggregate memory writer, and direct Persona prompt ingress are gone. Native/provider request equality is internally derived; runtime execution and context sealing share exact model/tool binding owners; model-backed frontier-Planning failure plus role/reorient/Persona archive reachability are context-bound; retained basis/context audit survives transcript-delta deletion. Keyed graph, Verification, concrete Persona+Hands concurrency, and sealed Persona input are accepted. Fresh restart/re-entry remains open. Model Atlas isolated proofs remain accepted, but Gate 1 remains paused. Operational registration in gamecult-ops is forbidden; historical c011 and partial Gate roots stay untouched/read-only.
+  next_action: Prove fresh restart/re-entry reuses identical decisions, obligations, and sealed Persona input without authority resurrection before Model Atlas Gate 1. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, or transcript authority.
 
 active_subgoals:
-  - Seal Persona projector ingress and complete fresh restart/re-entry proof before any further operational Gate run.
+  - Complete fresh restart/re-entry proof before any further operational Gate run.
   - Prove the ordered Model Atlas Gate 1 with real isolated stores: establish signed sight before engaging all brakes, then prove frozen read-only state and no local Modeling or Soul wakes.
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
   - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.