Delete counterfeit Eve provider

notes/conceptual-substitution-audit-2026-07-12.md

@@ -75,7 +75,7 @@ the receipts and projections without first separating those writers.
 
 ## Resolution ledger
 
-All confirmed substitutions above have now been structurally cut from their caller-facing production paths. Diagnostics preserve absence; bootstrap does not seed liveness; cluster-daemon owns first heartbeat; discovery loaders do not synthesize providers; tool, Eve, poke, body-change, public-proof, artifact-acceptance, metrics, and Persona-feedback commands write or select requests only; provider/result fields are rejected. `epiphany-eve-provider` is the first narrow provider receipt mouth. Receipt constructors and writers remain available to owning provider binaries and focused contract tests; their mere existence is no longer caller authority.
+All confirmed substitutions above have now been structurally cut from their caller-facing production paths. Diagnostics preserve absence; bootstrap does not seed liveness; cluster-daemon owns first heartbeat; discovery loaders do not synthesize providers; tool, Eve, poke, body-change, public-proof, artifact-acceptance, metrics, and Persona-feedback commands write or select requests only; provider/result fields are rejected. Response constructors and writers without participating provider bodies are test-only.
 
 Remaining audit work is provenance rather than this original dual-writer cluster: identify every production call site of response-receipt writers, ensure it belongs to a named provider executable or ingest boundary, and distill contaminated historical claims from `state/map.yaml`.
 
@@ -236,3 +236,18 @@ The scattered loader compensators were removed. Full Verse context alone adds
 projection policy by refusing to describe a nonexistent body. Backing-store and
 nested diagnostic tests plus rebuilt CLI probes prove that reads and refused
 daemon/supervisor starts create neither store, lock, nor parent directory.
+
+## Executable-name/provider-participation split
+
+`epiphany-eve-provider` appeared to repair Eve receipt provenance by living in a
+separate executable and checking that a caller-supplied provider cluster matched
+the pending intent target. The alleged provider still did not participate: the
+same caller supplied provider identity, receipt ID, and acceptance status. A
+binary name and matching string had become substitutes for an executing body.
+
+The executable is deleted. Eve response construction, persistence, and keying
+are test-only until a real target provider daemon or authenticated ingest
+boundary owns them. The aggregate Verse smoke now proves the honest pending
+state: requester intent present, provider receipt absent. The typed response
+schema and reader remain as the wire/ingest contract; they grant no local
+response authorship.

notes/epiphany-current-algorithmic-map.md

@@ -47,7 +47,7 @@
 
 ## Persona feedback and Imagination consensus boundary (2026-07-12)
 
-- Eve provider: `epiphany-eve-provider accept` loads the pending connection intent, verifies `provider_cluster_id == target_cluster_id`, and writes the provider receipt.
+- Eve connection requests remain pending until a real target provider daemon or authenticated ingest boundary supplies the typed response. The former generic `epiphany-eve-provider` CLI is deleted because caller-supplied provider identity and status did not constitute provider participation; local response construction/writing is test-only.
 - Persona owner: `collaboration-feedback` writes public, bounded feedback only after that provider receipt exists.
 - Imagination owner: consensus participant selection, packet reference, receipt status/id, and adoption gate.
 - Persona output: `pending-imagination` with null consensus fields and `responseOwner=Imagination`.

notes/fresh-workspace-handoff.md

@@ -53,6 +53,10 @@ The confirmed conceptual substitutions have been cut:
   taking a lock when its file is absent, so all readers preserve filesystem
   absence without per-loader guards. Full context projection refuses a missing
   Verse; explicit bootstrap or a real writer owns CultMesh body creation.
+- the generic `epiphany-eve-provider` CLI is deleted: caller-supplied provider
+  identity/status was not provider participation. Eve requests remain pending;
+  local response construction/writing is test-only until a real target daemon
+  or authenticated ingest boundary owns the receipt.
 
 The presentation boundary is now plain: `swarm overview` is a generic compact read-only projection. Gjallar is a downstream TUI application on Nightwing and is not an Epiphany organ, provider, owner, runtime, or architectural dependency. Eve/CultUI graphs may be lowered or composited downstream without Epiphany caring which presentation client does it.
 

notes/receipt-writer-provenance-audit-2026-07-12.md

@@ -7,7 +7,10 @@ Inventory every production call to `write_*receipt`, then ask whether the execut
 ## Classification
 
 - `epiphany-daemon-supervisor`: owner-aligned for scheduler, lifecycle, and daemon-poke receipts. It performs or observes the lifecycle operation it records.
-- `epiphany-eve-provider`: owner-aligned narrow provider receipt writer; verifies the pending intent targets its provider cluster.
+- Eve connection receipt: no production local writer. The former generic
+  `epiphany-eve-provider` accepted caller-supplied provider identity and status,
+  so it was deleted; constructor/writer are test-only pending a real provider
+  daemon or authenticated ingest boundary.
 - `epiphany-operator-run`: owner-aligned for operator-run receipts and coordinator receipts derived from the run it executes.
 - smoke binaries and the `epiphany-verse-query smoke` arm: fixtures, not runtime evidence. They remain a quarantine risk if permitted to target canonical stores.
 - `epiphany-work` Weksa lowering: a lowering projection receipt, explicitly non-publication authority; no substitution confirmed in this pass.