diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 5e1a697f..d8ac0813 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -2224,6 +2224,21 @@ backends. Unit tests prove stale-snapshot refusal, explicit-ID preservation, zero-window newest preservation, stable replay, and that the head cannot deserialize or enumerate as runnable coordinator receipt authority. -The source still requires an exact authenticated package and copied-state -production proof. It does not pretend to solve runtime -session/model/event/tool retention. +Exact source `16c4b19f` produced warning-free 24-binary release +`sha256-6cd1907a87d37cd4517e3f1d3541ecee6595480c21401f977f51f63e929a8ef8` +with witness +`sha256-c9f4f8ba962bd97674c5e178a67a881b592af5833048029cd11805604bd6c17e`. +Under copied engaged-brake state and a retention window of one, packaged Self +retired 21 receipts, preserved the newest receipt and a deliberately old +receipt named by both resident state and a pending acknowledgement, and wrote +revision-1 digest +`sha256:63587221d745315af81c705824d16313d2f748b6ff9840a2b4152127a6758fbd`. +All 720 unrelated runtime envelopes retained digest +`sha256:c21a12653ce1bf0e64342c6fcbf98d006aeb8fa707de69527886db20e4c20e1c`; +resident pressure/grant/ack/claim counts did not change; active and prepared +authority stayed absent. Exact replay did not advance the head or create work. +Receipts are under `.epiphany-run/coordinator-retention-16c4b19f` and package +construction/inspection under `.epiphany-run/linux-package-16c4b19f`. + +Coordinator receipt retention is accepted. It does not pretend to solve +runtime session/model/event/tool retention. diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 494b6a19..a44f7c81 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -1095,7 +1095,7 @@ Session/job/event/model/tool retention remains forbidden until typed archived session ownership closes tool follow-up, review, recovery, and accepted-frontier references. -The source implementation is now complete but not yet packaged. Runtime owns a +The source implementation is accepted. Runtime owns a typed cumulative count/digest head and exact receipt deletion behind one full-snapshot fence. Resident Self invokes it after each cycle, before resident lifecycle retirement, with a default-256 window and explicit preservation of @@ -1108,5 +1108,25 @@ window and have a small retention window retire it before completion scanning. CultCache `9cae2779` supplies the same atomic replace/delete primitive to the production non-owning redb handle; its concurrent-insert refusal test passes. Twenty resident tests, seven swarm tests, and two coordinator-retention tests -pass. Next commit and package this exact source, then prove it on copied state; -active c005 remains untouched. +pass. Exact `16c4b19f` produced warning-free 24-binary release +`sha256-6cd1907a87d37cd4517e3f1d3541ecee6595480c21401f977f51f63e929a8ef8` +with witness +`sha256-c9f4f8ba962bd97674c5e178a67a881b592af5833048029cd11805604bd6c17e`. +The first package attempt failed closed on the known stale cached git worktree; +only exact corrupted cache directory +`source-fb4097c8f489c830678f32a39e818cf462bff5c1fe853bc12d106184c9bfd571` +was removed, preserving Cargo home and target. The replacement completed in +9m16s and independently inspected as exact source, 24 binaries, no warnings. + +Receipts `.epiphany-run/coordinator-retention-16c4b19f` prove packaged behavior +under copied engaged-brake state. With a window of one, 21 old receipts retired; +the newest receipt and a deliberately old receipt named by both resident state +and a pending acknowledgement survived. The revision-1 head digest is +`sha256:63587221d745315af81c705824d16313d2f748b6ff9840a2b4152127a6758fbd`. +All 720 unrelated runtime envelopes retained digest +`sha256:c21a12653ce1bf0e64342c6fcbf98d006aeb8fa707de69527886db20e4c20e1c`. +Resident authority counts were unchanged, active/prepared authority remained +absent, and exact replay did not advance the head or create work. Active c005 +remained running and untouched. Coordinator receipt retention is accepted. +Next settle supervisor log ownership and packaged Heartbeat retention, then run +the measured idle/active endurance plateau. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 3e3d281e..b7990711 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index be2e63bb..b02b2d3b 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -35,10 +35,10 @@ invariants: - Evidence and git retain history; this map retains only state that changes future decisions. current_status: - summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart are proven. Exact 9f369528 makes build_cache_root own Cargo home and proves 10.17s warm packaging with Cargo at 1.38s. Exact c930f505 proves cross-container resident ownership. Exact ed15f83a release sha256-4a4be03688eab1d1f7c13ac0057f0664c4658cab88471a0eac451a1d4607b85d proves packaged resident lifecycle retention: two closed lifecycles became one non-authority digest/count head, pending pressure survived, grants/acks stayed absent, and replay was idempotent. Coordinator/runtime/log retention, long-duration plateau, and stable Starfire firewall ownership remain open. Yggdrasil is the small public crossing body, never the release forge. + summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, and exact ed15f83a resident lifecycle retention are proven. Exact 16c4b19f release sha256-6cd1907a87d37cd4517e3f1d3541ecee6595480c21401f977f51f63e929a8ef8 proves packaged coordinator receipt retention: 21 old receipts became one non-authority digest/count head, the newest and an explicitly cross-store-referenced old receipt survived, 720 unrelated runtime envelopes remained byte-identical by digest, and replay was idempotent without creating work. Broader runtime/log retention, packaged Heartbeat retention, long-duration plateau, and stable Starfire firewall ownership remain open. Yggdrasil is the small public crossing body, never the release forge. latest_phase: Commit 76afdaf0 moved release construction, filesystem verification, and witness inspection out of monolithic epiphany-core into epiphany-release-construction; core retains only CultMesh publication, load, and authentication. The bootstrap dependency graph excludes epiphany-core, all 19 construction tests pass, and the full core test harness compiles. Exact Linux bootstrap fell from 7m57s to 30.24s cold and 4.40s warm. Exact source 76afdaf0 then produced warning-free 24-binary release sha256-30caab9ef1ea89f9a885d87832b1e312a35288ec3f895bd5b0e83f7f7a6a1aec with witness sha256-89c2ad604254faec3e1e01f753b5dff38a402f43d009074ba4b47b1ec46fdecf. Independent inspection accepted the 12m16s cold build and the identical 10.16s warm replay with Cargo at 0.82s. The packaged full publisher accepted the narrow constructor's witness and changed c005 local-verse.cc from SHA-256 b160c610988753278afbad7f5bad436193144a92e9fd506982099ad58d213909 to 83ed430f5bf0c33996d7c4ee7bf0fa6c9f5f80bc8db94621395ea560852cae81 without body activation. operational_state: - local_worktree: resident_lifecycle_retention_packaged_proven + local_worktree: coordinator_receipt_retention_packaged_proven operator_wireguard: restored yggdrasil: canonical_small_public_crossing_body starfire: temporary_epiphany_cognition_body @@ -68,8 +68,8 @@ current_status: starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed resident_physiology: authenticated_9b8df0b4_c005_bound_to_eyes_tools_nervous_system_with_217dd_and_bd96305e_helpers_running - unresolved_authority: Coordinator receipt retention is implemented and locally proven but still requires exact authenticated packaging and copied-state production proof. Broader semantic/runtime histories remain unbounded pending a typed archived-session owner. Supervisor stdout/stderr are truncated only at launch and unbounded during a long-lived process; the fatal log is append-only. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. - next_action: Commit and package the exact coordinator receipt retention source, then exercise packaged Self only on copied state and prove the typed accumulator cannot create pending work, satisfy resident completion, or resurrect a turn. Preserve active c005. After acceptance, settle supervisor log ownership, audit packaged Heartbeat retention, and measure idle/active endurance. Do not compact session/model/event/tool history until typed archived-session ownership exists. + unresolved_authority: Coordinator receipt retention is accepted. Broader semantic/runtime histories remain unbounded pending a typed archived-session owner. Supervisor stdout/stderr are truncated only at launch and unbounded during a long-lived process; the fatal log is append-only. Packaged Heartbeat retention ownership and long-duration resource plateau remain unproven. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. + next_action: Settle supervisor stdout/stderr/fatal-log ownership from source and infrastructure runbooks, then audit packaged Heartbeat artifact retention before editing. Preserve active c005 and do not compact session/model/event/tool history until typed archived-session ownership exists. After bounded retention is accepted, run measured idle and active endurance plateau and continue the remaining organ coordination matrix. active_subgoals: - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually. @@ -86,7 +86,7 @@ organ_readiness: hands: proven for bounded consequences; native patch, command, commit, push, and typed receipts bind reviewed path ceilings to exact changed-path subsets. soul: proven for the current bounded route-chain consequence; exact d3bfbda0 launched Verification through typed plan-decision provenance, result f23fe2b6 was accepted at revision 57, and Self then derived Modeling before any repeated Hands authority. mind: proven for launch-owned resident frontier adjudication; two historical attempts failed closed, exact bd96305e derived immutable identity from authenticated launch, authorized retry 2d2a3e8b completed, and Self atomically committed terminal adopt decision e7d7f3c7. Broader memory retention and long-duration behavior remain open. - continuity: partial; authenticated 55660d78 terminalized the copied v28 dead worker once and refused duplicate restart, while sealed v28 remained unchanged. Exact 100d8854 closes only all-terminal sessions, emits one deterministic event, and refuses post-close jobs. Exact 42bc665a proves bounded retention and restart sequence recovery. A digest-pinned Linux runtime-spine at b5140288 repeated closure invariants on Yggdrasil. Authenticated c005 proves typed resident state survives hard exit, executable-body replacement, runtime-topology correction, and restart while preserving awaitFrontierProposal. Exact b8138a6b proves active-child and idle SIGTERM closure with exit zero and final braked state. Exact c930f505 proves cross-container resident ownership refusal without state mutation while Heartbeat retains its distinct typed lock. Exact ed15f83a packages resident lifecycle retention: a copied-state fixture retired two closed lifecycles/six exact envelopes into revision-1 digest sha256:69a2c5971430846590fe20ba32a1a9299726a51c997b9e9c07ec044ebbff34a6, preserved two pending pressures, emitted no grant or acknowledgement, and replay did not advance the head. Coordinator/runtime/log retention and the long-duration plateau remain open. + continuity: partial; authenticated 55660d78 terminalized the copied v28 dead worker once and refused duplicate restart, while sealed v28 remained unchanged. Exact 100d8854 closes only all-terminal sessions, emits one deterministic event, and refuses post-close jobs. Exact 42bc665a proves bounded retention and restart sequence recovery. A digest-pinned Linux runtime-spine at b5140288 repeated closure invariants on Yggdrasil. Authenticated c005 proves typed resident state survives hard exit, executable-body replacement, runtime-topology correction, and restart while preserving awaitFrontierProposal. Exact b8138a6b proves active-child and idle SIGTERM closure with exit zero and final braked state. Exact c930f505 proves cross-container resident ownership refusal without state mutation while Heartbeat retains its distinct typed lock. Exact ed15f83a packages resident lifecycle retention. Exact 16c4b19f packages coordinator receipt retention: 21 old receipts retired into revision-1 digest sha256:63587221d745315af81c705824d16313d2f748b6ff9840a2b4152127a6758fbd, the newest plus an old receipt named by resident state/pending acknowledgement survived, 720 unrelated runtime envelopes retained digest sha256:c21a12653ce1bf0e64342c6fcbf98d006aeb8fa707de69527886db20e4c20e1c, resident authority counts did not change, and replay did not advance the head or create work. Broader runtime/log retention and the long-duration plateau remain open. nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Exact c0055772 proves Linux heartbeat acknowledgement/regrant, Self single-consumption launch, authenticated plan coordinator completion, and a persistent resident body. It also proves detached model workers cannot survive a one-shot container PID 1 exit. The accepted Linux Eyes-to-Modeling circuit proves detached role workers, native read-only tool loops, typed admission, and causal next-organ routing at a measured 109887488-byte peak. Modeling job commit spent 160183ms in two cold Repository Body scans. A source cut now reuses one private index across both equality scans; 25 focused observer tests pass and a live-worktree mechanism benchmark reduced the pair from 3832ms to 1537ms. Packaged coordinator timing remains open. Authenticated d910158f isolates Self policy behind one root-graph optional coordinator feature; warm policy invalidation is 6.02s. Root Linux packaging is 12m33s cold and 9.08s warm with persistent caches. Long-duration pressure and resource plateau remain open. Yggdrasil is not a release forge at its current memory budget. forbidden_actions: