Accept copied internal cognition turnover

notes/epiphany-current-algorithmic-map.md

@@ -3633,14 +3633,16 @@ Mind review into another grant, so a brake release could not advance c006.
   repeated ingestion is idempotent; a Hands final action creates no pressure;
   and source order proves required-action refusal precedes every action effect.
 
-Exact `4d6d269f` packaged the first cut as 24 binaries, release
-`sha256-ff371697ce78a1daa3322c0cac988582d548747ae7fddbfb1d9f5626a37d3344`,
+Exact `c9a2a979` packages the corrected path as 24 binaries, release
+`sha256-78b09d7c32867c71d593951f328a191b7261600a1d9e81d7fdcd35ce7414f218`,
 and witness
-`sha256-44c9d61787520a2f38fad1362230d283954a6019fd392600fe112115ca22c0fa`.
-Copied c006 proved the one pending pressure and zero grants under brake, then
-exposed the missing supersession launch context: Mind correctly rejected an
-unanchored Modeling patch, but twelve process-failed attempts requeued the same
-pressure before intervention. The copied brake is engaged and those receipts
-are preserved. Package and replay the supersession fix from a fresh pre-fault
-clone before acceptance. Actual c006 remains on exact `16407f7e`, braked and
-unchanged.
+`sha256-ddf32da018f5a53eb87f3ed5b87ccfa57616203970d6fdab9641ee1ac8f71f24`.
+On fresh copied c006, one old receipt created grant 23; Mind rejected the
+unanchored Modeling patch; coordinator failure review superseded it once inside
+a successful new receipt; that receipt created distinct grant 27; and the
+second run rederived `awaitFrontierProposal` and recorded a no-consequence
+required-action refusal. Both grants completed. No process-failure retry
+occurred, resident state ended idle at revision 34, and all existing
+Hands/Persona/deployment envelopes remained byte-identical. The copied brake is
+engaged and both copied owners exited zero. Copied turnover is accepted; actual
+c006 remains exact `16407f7e`, braked and unchanged pending the bounded replay.

notes/fresh-workspace-handoff.md

@@ -1,5 +1,41 @@
 # Fresh workspace handoff
 
+## Copied receipt-bound turnover accepted - 2026-08-11
+
+Exact pushed `c9a2a979` packages 24 Linux binaries as release
+`sha256-78b09d7c32867c71d593951f328a191b7261600a1d9e81d7fdcd35ce7414f218`
+with witness
+`sha256-ddf32da018f5a53eb87f3ed5b87ccfa57616203970d6fdab9641ee1ac8f71f24`
+and zero warnings. Construction took 8m17s against the persistent Starfire
+cache. Receipts are under `.epiphany-run/linux-package-c9a2a979`.
+
+A second stopped snapshot of actual c006 copied all three named volumes with
+byte-identical manifests and restarted both exact actual owners after exit-zero
+stops. Under copied brake, exact `c9a2a979` created one pressure from the old
+`reviewModelingResult` receipt and no grant. Brake release issued grant 23.
+Mind rejected the unanchored patch; coordinator failure review wrote exact
+supersession `role-failure-review-5a612149-fc7f-4ea8-996a-a008547bfa2c`
+inside successful receipt
+`coordinator-run-linux-eyes-tools-c005-1786406310816`. That newer receipt
+created distinct pressure/grant 27. The second coordinator rederived
+`awaitFrontierProposal`, refused stale required action `reviewModelingResult`
+with `consequence:none`, and completed as receipt
+`coordinator-run-linux-eyes-tools-c005-1786406314165`.
+
+Both grants are terminal `completed`; resident state is revision 34 with no
+active lease and the second receipt as its last exact receipt. All four
+Hands/Persona/deployment-family runtime envelopes are byte-identical to the
+untouched actual baseline. The copied cognitive brake is engaged, exact
+readiness is active with no reasons, and both copied providers stopped with exit
+zero. The contaminated first experiment is also braked, preserved, and stopped.
+Receipts are under `.epiphany-run/continuation-c9a2a979` and
+`.epiphany-run/continuation-4d6d269f`.
+
+Copied receipt-bound turnover is accepted. Publish exact `c9a2a979` into actual
+c006 under its brake, replace the two provider bodies without changing stores,
+authenticate readiness, run the same bounded two-grant path, and re-engage the
+brake before continuing the next organ audit. Yggdrasil never builds.
+
 ## Copied continuation exposed missing failure-review context - 2026-08-11
 
 Exact `4d6d269f` packaged 24 Linux binaries as

state/map.yaml

@@ -36,9 +36,9 @@ invariants:
 
 current_status:
   summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, exact 6bc3ec3f semantic physical-epoch retirement, and exact 44230a05 Persona conversation retention are proven. Gamecult-ops 059821f owns Yggdrasil stream retention and exact 6ee08a4 owns stable Starfire Persona-permit firewall ingress. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Yggdrasil is the small public crossing body, never the release forge.
-  latest_phase: Exact 16407f7e packages 24 Linux binaries as release sha256-66cf1c2f4d88e7885a36870277cf4b143204de9c9b0dad0ed8f809983b3c55af with witness sha256-5f41248bb11c01f19125f16bf39f3dfcc2a802de211f3eae7e2caf292d59e4b3 and zero warnings. Copied two-container proof makes each shared-store role singleton the cross-PID-namespace liveness owner and each exact fresh row the release/witness/source/executable identity. Actual c006 then completed a 923-observed-pulse braked endurance window with zero authority violations, byte-exact stable state/workspace stores, Heartbeat RSS 28.63-28.88 MiB, resident RSS 54.11-55.50 MiB, both owners still alive, and final authenticated readiness active with no reasons.
+  latest_phase: Exact c9a2a979 packages 24 Linux binaries as release sha256-78b09d7c32867c71d593951f328a191b7261600a1d9e81d7fdcd35ce7414f218 with witness sha256-ddf32da018f5a53eb87f3ed5b87ccfa57616203970d6fdab9641ee1ac8f71f24 and zero warnings. Fresh copied c006 proved receipt-bound internal turnover: Mind rejected one malformed Modeling patch, coordinator failure review superseded it exactly once inside a successful receipt, that newer receipt caused a distinct second grant, stale action drift refused with consequence none, both grants completed, resident state ended idle, and Hands/Persona/deployment envelopes stayed byte-identical.
   operational_state:
-    local_worktree: exact_16407f7e_c006_braked_endurance_accepted_autonomous_frontier_turnover_next
+    local_worktree: exact_c9a2a979_copied_internal_turnover_accepted_actual_replay_next
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -70,7 +70,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: c006_exact_16407f7e_alive_braked_revision_26_after_one_fulfilled_proposal_modeling_grant_and_923_pulse_endurance
   unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, all three packaged fulfilled-before-receipt lanes, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, normal coordinator lifecycle opening/error closure/legacy repair/archival, co-resident resident lifecycle retention, authenticated outer-worker attempt retention, deployed supervisor/projector journald ownership, and Docker named-volume atomic snapshot visibility are accepted live. Starfire's Docker Desktop F: bind is rejected for mutable authority after an exact packaged lockless reader observed an empty published snapshot during writer interruption. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Commit and package the continuation failure-review context repair. Recopy pristine braked c006 and require the malformed Modeling patch to be rejected and superseded once inside a successful bounded coordinator receipt, then require a genuinely newer causal receipt/grant without process-failure requeue or Hands/Persona/deployment consequence. Only after copied acceptance replay a bounded actual-c006 brake window and re-engage the brake. Yggdrasil never builds.
+  next_action: Publish exact c9a2a979 into actual c006 under its cognitive brake, replace both provider bodies without changing the named stores, authenticate readiness, run the bounded receipt-bound turnover path, and re-engage the brake. Require successful supersession/causal receipts, no process-failure retry, no Hands/Persona/deployment consequence, and clean owner shutdown/restart receipts. Then inspect the next typed action and continue the organ matrix. Yggdrasil never builds.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.

state/scratch.md

@@ -4,9 +4,10 @@ Disposable working memory for one bounded rite.
 
 ## Current Subgoal
 
-Replay copied c006 after repairing missing continuation failure-review context.
+Replay accepted receipt-bound turnover on actual c006 under a bounded brake
+window.
 
-## Live finding
+## Accepted copied finding
 
 Exact `4d6d269f` created one correct receipt-bound pressure and no grant under
 brake. After release, Mind rejected the old Modeling result because its patch
@@ -15,16 +16,16 @@ would create an unanchored node. The continuation argv lacked
 resident Self requeued the same pressure twelve times before the copied brake
 intervened.
 
-## Authority map for the repair
+## Authority map for actual replay
 
-- Owner: Mind owns patch admission and rejection. Coordinator failure review
-  owns superseding the exact rejected role result. Heartbeat owns neither.
+- Owner: the actual cognitive brake owns the replay window. Mind owns patch
+  rejection, coordinator failure review owns supersession, and each exact
+  receipt owns at most one next safe continuation pressure.
 - Inputs: the exact terminal Modeling result, its admission error, the existing
   coordinator supersession contract, the receipt-derived required action, and
   a one-step execution bound.
-- Outputs: one typed role-failure supersession followed by a successful bounded
-  coordinator receipt whose newly derived action can become a distinct causal
-  pressure.
+- Outputs: the same two completed actual grants and causal receipts proven on
+  copied state, followed by an engaged brake and idle coherent resident state.
 - Derived state: process exit, resident cancellation, retry count, and error
   log are evidence of the missing context; they are not rejection authority.
 - Forbidden writers: Mind may not accept the malformed aggregate; resident
@@ -33,9 +34,9 @@ intervened.
 - Shared paths: every safe receipt-bound role review launch carries the same
   existing failed-result supersession capability. Direct operator runs retain
   their explicit policy choice.
-- Cut line: add the existing coordinator capability to continuation argv. Do
-  not weaken memory-graph validation or add another retry state machine.
-- Verification: exact argv test plus all coordinator tests; package once; copy
-  pristine braked c006 again; require one rejection/supersession, a successful
-  receipt, a genuinely newer pressure/grant, no process-failure loop, and zero
-  Hands/Persona/deployment consequence.
+- Cut line: publish the authenticated body and replace provider processes only;
+  do not migrate or edit actual cognition stores. Stop the bounded window after
+  the copied terminal action shape is reproduced.
+- Verification: release/witness/source readiness before release; exact grant,
+  supersession, receipt, and no-consequence evidence; external-family byte
+  comparison; brake re-engagement; active readiness; clean owner receipts.