Record keyed Reorientation ownership cut

This commit is contained in:
Meta Vens 2026-08-18 03:24:58 +02:00
commit 47ddcd5516
5 changed files with 113 additions and 78 deletions

View file

@ -360,8 +360,9 @@ scheduler, route, notification, or interface contract.
| Body Modeling launch/acceptance owners | exact Body obligation, runtime attempt, sealed decision context, and semantic mutation | one job-bound lifecycle and keyed Mind/RepoModel commit | Baseline Body Modeling never reads or writes `EpiphanyThreadStateEntry`; Eyes is not its gate. |
| Proposal Modeling launch/acceptance owners | immutable proposal request, exact launch binding and attempt, sealed decision context, and frontier mutation | one deterministic Launch/Wait/Review lifecycle and `Modeling.proposal_frontier` commit | Thread is creation provenance only; the aggregate launcher refuses proposal cargo. |
| frontier Planning/PlanMind launch and adoption owners | exact frontier/dependency versions, per-claim obligation guards, immutable candidate, exact attempts, and sealed decision contexts | deterministic Imagination/Mind lifecycle plus atomic adopted frontier and receipt | Imagination proposes; Mind alone adopts. Unrelated keyed writes merge, while frontier or claim-obligation drift conflicts. |
| `coordinator_state_transaction.rs` and `EpiphanyThreadStateEntry` | legacy aggregate state and unmigrated reorientation/generic coordinator companions | obsolete aggregate commits for residual families only | This is a deletion target, not canonical Mind; it may not regain authority over migrated Body, Modeling, Research, Verification, or Planning families. |
| `coordinator_acceptance.rs` | reviewed family result and its concrete admission owner | family-owned admission or residual legacy aggregate transaction | Body and Proposal delegate to their concrete acceptance owners; no duplicate semantic owner survives there. |
| `reorientation_work.rs` | exact keyed continuity projection, deterministic attempt, sealed decision context, and terminal result or model-backed failure | typed resume/regather decision plus continuity receipt, or typed failure before retry | Thread, role lanes, freshness labels, timestamps, and aggregate revision cannot launch or admit Reorientation. |
| `coordinator_state_transaction.rs` and `EpiphanyThreadStateEntry` | legacy aggregate state and generic coordinator companions | obsolete aggregate commits for residual generic paths only | This is a deletion target, not canonical Mind; it may not regain authority over migrated Body, Modeling, Research, Verification, Planning, or Reorientation families. |
| `coordinator_acceptance.rs` | reviewed residual role result and its concrete admission owner | family-owned admission or residual legacy aggregate transaction | The aggregate Reorientation acceptor is deleted; no duplicate continuity owner survives here. |
| `thread_state_store.rs` | typed state entry | low-level CultCache codec/read access | Substrate, not policy; it exposes no production writer. |
| `coordinator_service.rs` | state/runtime store paths and typed commands | state update, launch, accept, interrupt results | Facade routes typed work; it contains no policy or protocol mapping. |
| `surfaces/*` | native state, runtime snapshots, pressure/freshness inputs | scene, jobs, roles, planning, context, graph, CRRC, coordinator recommendations | Read surfaces derive; they do not mutate. |
@ -394,9 +395,10 @@ flowchart LR
primitive. Concrete invariant owners derive exact strong reads and complete
write sets; disjoint document identities merge under one CultCache batch CAS,
while same-identity or changed strong-read conflicts refuse without partial
mutation. `coordinator_state_transaction` remains only because unmigrated
families still depend on the obsolete aggregate. It is explicitly not a second
canonical Mind and must be deleted when those families move.
mutation. `coordinator_state_transaction` remains only because generic
coordinator presence and residual objective/state/status paths still depend on
the obsolete aggregate. It is explicitly not a second canonical Mind and is
the next deletion target.
Forbidden writers:
@ -877,40 +879,14 @@ Future audit frontier, not established anatomy: sibling Bifrost subprocess JSON
used by readiness needs a focused identity/schema/provenance audit before any
cut or confirmed finding.
## Freshness -> reorientation authority (2026-07-15)
## Historical freshness-based Reorientation path (deleted 2026-08-18)
```text
canonical retrieval state -----------------------> retrieval judgment --+
legacy graph checkpoint + churn + frontier -----> legacy graph judgment -+--> reorientation decision --> CRRC/coordinator/launch
positive watcher changes ------------------------> watcher judgment -----+
durable investigation checkpoint ---------------------------------------+
```
`derive_freshness` owns the first three judgments. Retrieval Ready becomes
Clean only with an empty dirty-path set; otherwise it derives Stale. The legacy
thread graph can prove Stale from explicit frontier pressure, but cannot prove
Clean/Ready because it has no legal Modeling writer and cannot see canonical
RepoModel admission. Missing authority stays Missing/Unknown. Watcher silence stays
Unavailable/Unknown because no continuity receipt exists; Changed is positive
evidence. `surfaces/jobs.rs` consumes the same graph judgment for remap work.
`recommend_reorientation` alone owns Resume/Regather. Resume requires a
resume-ready investigation checkpoint, retrieval Clean, graph Clean, and a
watcher that is Clean or Unknown. Any retrieval/graph non-clean value or
watcher Dirty/Stale/Changed forces Regather. Path matches, status labels,
worker-launch documents, coordinator rows, and CRRC recommendations are derived
consumers and forbidden decision writers.
Canonical RepoModel is the admitted keyed map, not the repository Body. Its
exact projection digest and sealed source-document versions prove map identity
only. Future Ready additionally requires a nervous-system-owned, continuity-
bearing Body observation and retrieval coverage bound to the same source
generation; Mind derives readiness from that exact join. Legacy graph
checkpoints retain only checkpoint identity and frontier content; churn retains
understanding and diff pressure. Neither can publish graph freshness or a graph
revision. Generic thread patches, watcher silence, snapshot source metadata,
and unrelated thread revisions are forbidden readiness writers. Until every
authority is present and current, Unknown is the truthful result.
The old `derive_freshness` -> `recommend_reorientation` -> CRRC launch path is
deleted. It mixed legacy thread checkpoints, watcher/retrieval labels, role-lane
results, and timestamp ordering into behavioral authority. Those surfaces may
still describe physiology or display state, but they cannot create, suppress,
or admit Reorientation. The live owner is the keyed continuity request and
current-work lifecycle documented below.
## Repository Body observation substrate (2026-07-15)
@ -2107,7 +2083,7 @@ steward must ship in the owned release graph or its narrow typed write port must
move into an already-shipped native owner; canonical Mind maintenance must not
require a second monolithic core build.
## Live route relinquishment and stale CRRC fallback (2026-08-09)
## Historical route relinquishment and CRRC fallback (retired 2026-08-18)
The adopted frontier candidate carried its own negative transition: discard the
planning draft if later admitted evidence proves the coordinated resident
@ -2119,20 +2095,12 @@ artifact scope. Mind-owned relinquishment `7b846272...` atomically retired route
`817bf422...`, advanced RepoModel from revision 2 to 3, and preserved the adopted
route as immutable history.
The status owner now compares the latest bound reorientation job `updated_at`
with the latest typed relinquishment `relinquished_at`. No relinquishment keeps
the ordinary CRRC path. After relinquishment, a missing or older reorientation
job makes manual-regather pressure stale. Coordinator status preserves the raw
CRRC source projection but feeds routing `Continue` with no scene action to
Self. A newer reorientation result retains ordinary manual-regather authority.
The focused policy regression passed 1/1. A collision-safe copy of the c005
`eyes-tools` store derived `awaitFrontierProposal`, `canAutoRun=false`, and
target Imagination while source signals still published raw CRRC
`regatherManually`. The live c005 store was never mounted. CRRC therefore owns
continuity observation, Self owns routing, and relinquishment is the causal
boundary preventing dead continuity history from impersonating current Eyes
pressure.
The route receipt remains immutable historical evidence. The later status
compensator that compared reorientation `updated_at` with relinquishment time
is deleted: timestamps no longer decide causal currency. Current work derives
from exact typed obligations and their request/result/decision chains. A stale
continuity projection cannot suppress or manufacture Eyes, Modeling, Planning,
Hands, or Reorientation work.
## Build runner and dependency-graph authority receipt (2026-08-09)
@ -5183,3 +5151,46 @@ contains no coordinator thread.
reject the stale request and launch byte-identically. Core library 555/555,
OpenAI runtime 23/23, coordinator runtime 18/18, and core/OpenAI all-target
checks pass.
## Keyed Reorientation lifecycle (2026-08-18)
Exact `d5df53ae` removes Reorientation from aggregate thread-state behavior.
`EpiphanyReorientationRequest` seals one explicit typed continuity projection:
Mind identity, objective, focus/checkpoint, mode, current Body observation,
RepoModel identity/frontier documents, and the preceding accepted continuity
decision when one exists. The request stores every exact typed source version;
thread is creation provenance only and does not participate in request identity
or currentness.
- Owner: `reorientation_work.rs` creates the request, derives
Launch/Wait/Review, publishes deterministic attempts, records model-backed
terminal failure, and alone admits a successful decision under
`Continuity.reorientation`.
- Inputs: exact keyed Mind source versions, immutable request and launch
binding, exact runtime job/process result, sealed reasoning basis, and exact
decision context.
- Outputs: one immutable `EpiphanyMindReorientationDecisionDocument` plus
`ContinuityRecoveryReceipt`, or one immutable
`EpiphanyMindReorientationPassFailureDocument` before retry. Both preserve the
exact terminal decision context; neither needs a transcript.
- Derived state: operator status, CRRC wording, role boards, runtime events,
timestamps, and creation thread are display, physiology, or provenance only.
- Forbidden writers: `EpiphanyThreadStateEntry`, global expected revision,
generic coordinator launch/acceptance, latest role-lane result, checkpoint
freshness labels, accepted-at ordering, and aggregate scratch/checkpoint
patches cannot launch, suppress, retry, or admit Reorientation.
- Shared paths: status, operator, coordinator, reasoning-basis sealing, result
review, and retry all consume the same keyed current-work projection and
family owner.
- Cut line: aggregate Reorientation service/acceptance APIs, generic launch
constructors, the checkpoint/freshness recommender, and the timestamp
relinquishment compensator are deleted. `surfaces/reorient.rs` retains only
the display enum for an accepted resume/regather decision.
- Concurrency: an unrelated Mind insert after basis sealing merges because it
is not a family strong read. Replacing an exact objective/frontier source
refuses admission byte-identically; model output is never rebased. The
accepted decision itself becomes immutable source cargo for a later explicit
request over otherwise identical state.
- Verification: core 552/552; OpenAI runtime library 23/23 and both runtime
binaries 10/10; coordinator 18/18; status 3/3; relevant all-target checks
pass.

View file

@ -19,8 +19,9 @@ earned OpenAI-compatible authentication or model-transport capability.
status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`;
that aggregate is an obsolete live authority and currently blocks fresh keyed
stores from coordinating. Body, Proposal, frontier-verdict Modeling,
Research, Verification, and Planning/PlanMind have been removed from that
authority; reorientation and generic coordinator presence remain.
Research, Verification, Planning/PlanMind, and Reorientation have been
removed from that authority; generic coordinator presence and residual
objective/state/status paths remain.
- Native binaries expose coordinator, status, state, runtime, memory, daemon,
Persona, repo-work, and Verse operations.
- CultCache stores typed state and receipts; CultMesh/CultNet carry typed local
@ -265,12 +266,20 @@ Cut in this order:
planning conflicts without turning unrelated graph writes into a global
head. Thread provenance, generic coordinator validators/constructors,
aggregate role lanes, and accepted-at/latest-result behavior no longer own
this family. Migrate reorientation next with the same exact-document
doctrine, without a generic mutable registry.
11. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
this family.
11. **Reorientation landed at `d5df53ae`:** one keyed request seals the exact
continuity projection and source document versions; deterministic attempts
bind an exact reasoning basis and terminal decision context. The family
owner alone admits resume/regather plus its continuity receipt. Model-backed
failure retains a typed Mind failure document before retry. Status and
coordinator routing use the same current-work projection. Aggregate
launch/acceptance, checkpoint/freshness recommendation, latest binding,
global revision acceptance, and accepted-at comparison no longer own this
family.
12. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
expected revisions, aggregate update APIs, and all source references from
production. Refuse old writable stores; add no dual reader or migrator.
12. Replay fresh-store concurrency and decision-context acceptance. Only then
13. Replay fresh-store concurrency and decision-context acceptance. Only then
restart Model Atlas Gate 1 from a new external root.
Do not preserve the aggregate for compatibility, manufacture a bootstrap

View file

@ -12,7 +12,7 @@ effects, receipts, Mind admission, brakes, external consequence gates, and
terminal commit. Focused core and OpenAI-runtime Persona suites pass.
The five-day shakedown remains paused. The active branch includes exact
`c9329ed6` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
`d5df53ae` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
vertical slice, ordinary Modeling authoring path, durable publisher identity,
fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
landed. Historical aggregate RepoModel and partial Gate stores are evidence
@ -20,10 +20,10 @@ only. No production model output, registry, command, admission path, projector,
or repair path can restore their authority.
This is not yet the full Concurrent Mind cut. Persisted
`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple
unmigrated launch/acceptance/status readers remain live production authorities.
`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple generic
objective/state/status readers remain live production authorities.
Baseline Body, Proposal, frontier-verdict Modeling, frontier Research,
frontier Verification, and frontier Planning/PlanMind are no longer among them:
frontier Verification, frontier Planning/PlanMind, and Reorientation are no longer among them:
keyed Mind owns their work projections, operator and Resident launch, exact job-bound
continuation, review, and semantic admission. Research is driven only by an explicit
external-evidence obligation; accepted Eyes state, timestamps, generic regather, and
@ -57,8 +57,8 @@ canonical Eve schema IDs without dependency semantics. Eve exact `b597dab` and
`gamecult.eve.surface.v1` retained tree for GUI and TUI.
Verification is green at the latest ownership cut: Epiphany core library
555/555, OpenAI runtime 23/23, coordinator runtime 18/18, and core/OpenAI
all-target checks pass.
552/552, OpenAI runtime library 23/23 plus both runtime binaries 10/10,
coordinator runtime 18/18, status 3/3, and relevant all-target checks pass.
An unfiltered core package run also exposed two pre-existing
`epiphany-hands-action` fixture failures: those fixtures omit the exact
`RepoFrontierHandsAuthority` already required by production. The gate was not
@ -69,8 +69,8 @@ still reaches an older feature-gated workspace-coverage recovery smoke whose
already-absent API predates this slice; no compatibility shim was added.
These are implementation and isolated proof claims. They are not sustained
Starfire dogfood. Reorientation and final aggregate deletion are the next
source rites; only then may Gate 1 use separate real stores and
Starfire dogfood. Final aggregate deletion is the next source rite; only then
may Gate 1 use separate real stores and
identities; keep impact ingress absent while ordinary Modeling seeds facts and
publishers/projector establish signed sight; then engage all three Atlas brakes
and prove later organ cycles are held while the last Eve projection remains
@ -432,10 +432,25 @@ consequence rather than requiring the obsolete pre-adoption frontier. Generic
Planning/PlanMind launch constructors and validators, role-lane failure review,
thread-derived request identity, and aggregate coordinator routing are gone.
Map and migrate reorientation next onto exact keyed freshness and continuity
obligations, sealed decision contexts, deterministic attempts, and family-owned
Mind mutations. Then delete the aggregate schema/transaction. Run the source
guards and fresh-store concurrency/decision-context suite. Only after that may
Model Atlas Gate 1 restart from a new external root. Keep the current fresh and
partial roots read-only; do not release scheduling, register operational
topology, touch the original c011 volumes, or build on Yggdrasil.
Exact `d5df53ae` completes Reorientation. One immutable request seals the exact
typed continuity projection and source document versions; thread is creation
provenance only. Current-work owns deterministic Launch/Wait/Review attempts,
the worker reasoning basis uses the request's exact source documents, and
`Continuity.reorientation` alone admits a typed resume/regather decision plus
continuity receipt. A model-backed terminal failure retains its exact decision
context in a typed Mind failure document before retry. Unrelated Mind inserts
merge, exact source replacement refuses admission byte-identically, accepted
decisions support later reorientation over otherwise identical state, and
replay returns the original receipt. Status and coordinator routing consume the
same current-work projection. The aggregate launcher/acceptor, latest binding,
checkpoint/freshness recommender, global revision acceptance gate, and
accepted-at comparison are deleted.
Delete the aggregate schema/transaction next. Replace only genuinely live
objective/focus/mode/planning mutations with keyed Mind owners; derive scene,
planning, jobs, roles, and operator status from keyed Mind plus exact runtime
receipts. Run source guards and the fresh-store concurrency/decision-context
suite. Only after that may Model Atlas Gate 1 restart from a new external root.
Keep the current fresh and partial roots read-only; do not release scheduling,
register operational topology, touch the original c011 volumes, or build on
Yggdrasil.

Binary file not shown.

View file

@ -38,9 +38,9 @@ invariants:
- Evidence and git retain history; this map retains only state that changes future decisions.
current_status:
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, and frontier Planning/PlanMind lifecycles are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns these families' work discovery, deterministic launch, exact job-bound continuation, review, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities for reorientation, generic coordinator presence, and residual status paths. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, and Reorientation lifecycles are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns these families' work discovery, deterministic launch, exact job-bound continuation, review, typed failure, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities only for generic coordinator presence, legacy objective/state mutation, role-board/status projection, and residual unmigrated callers. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
latest_phase: Exact c9329ed6 migrates frontier Planning and PlanMind onto one deterministic current-work lifecycle. Planning requests seal the exact frontier/dependency documents and per-claim obligation guards; Imagination produces a typed candidate, and Mind alone may adopt it through an exact PlanMind request, sealed decision context, and family-owned frontier mutation. Request identity excludes thread provenance. Unrelated keyed graph writes merge; an exact frontier or claim-obligation change refuses stale work; plan adoption and its receipt publish atomically; exact replay authenticates the immutable request/result chain and the already-adopted consequence without demanding the obsolete pre-adoption state. Claim challenges now atomically update per-node obligation documents, closing the planning-versus-new-challenge race without a global model head. Generic coordinator Planning/PlanMind launch validators, aggregate launch constructors, role-lane failure reviews, and thread-state routing are deleted for this family. Core library 555/555, OpenAI runtime 23/23, coordinator runtime 18/18, and core/OpenAI all-target checks pass. Gate 1 remains paused behind reorientation and final aggregate deletion.
latest_phase: Exact d5df53ae migrates Reorientation onto one keyed continuity request and current-work lifecycle. The request seals the exact typed Mind projection and carries thread only as creation provenance; deterministic attempts bind an exact reasoning basis and terminal decision context. Continuity.reorientation alone admits resume/regather decisions and a continuity receipt through keyed Mind CAS. Model-backed failures retain the exact decision context in a typed Mind failure document before retry; transport cancellation may retry without impersonating a decision. Unrelated Mind inserts merge, changed exact objective/frontier sources refuse admission byte-identically, accepted decisions become immutable basis cargo for a later request over otherwise identical state, and replay returns the original receipt. Status, operator launch, result review, and coordinator routing consume the keyed current-work projection. The aggregate reorientation launcher/acceptor, checkpoint/freshness recommender, latest role-lane selector, global expected revision gate, and accepted-at comparison are deleted. Core library 552/552, OpenAI runtime library 23/23 plus both runtime binaries 10/10, coordinator runtime 18/18, status 3/3, and relevant all-target checks pass. Gate 1 remains paused behind final aggregate deletion.
operational_state:
local_worktree: clean_at_latest_documentation_handoff
operator_wireguard: restored
@ -73,8 +73,8 @@ current_status:
starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for reorientation and generic coordinator families, including status presence and residual result selection. They own none of the migrated Modeling, Research, Verification, or Planning families, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
next_action: Map and migrate reorientation from aggregate checkpoint, role-lane, accepted-at, and thread-state decisions onto an exact keyed continuity obligation, sealed reorientation projection, deterministic attempt, typed terminal decision or pass failure, and family-owned Mind mutation. Resume or regather must be derived from exact Body/Mind freshness documents and continuity receipts, not a latest result slot or global revision. Then delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, aggregate update APIs, and every residual behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for generic coordinator presence, objective/state mutation, role-board/status assembly, and residual launch/result consumers. They own none of the migrated Body, Modeling, Research, Verification, Planning, or Reorientation families, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
next_action: Delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, aggregate update APIs, generic role-lane routing, and every residual behavioral reader/writer. Replace only genuinely live objective/focus/mode/planning writes with keyed MindMutation owners; assemble operator scene, planning, jobs, roles, and status as non-persisted views over keyed Mind and exact runtime receipts. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
active_subgoals:
- Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.