diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index a786def3..db02ad1e 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -396,6 +396,19 @@ preparation has one output: the exact CultCache envelope batch that the family admission owner commits atomically. The full job is still one envelope in that batch; it is no longer duplicated as an unread return field or public DTO. +Exact `bda8d8c6` removes twelve aggregate-Mind fields from the role-launch +document. Every live constructor filled them with empty defaults, and the +sealed `EpiphanyReasoningBasis` already carries the exact current typed Mind +projection assembled from source document versions. Role launch now owns only +pass identity and family-specific authority; it cannot carry a second scratch, +graph, planning, evidence, observation, invariant, checkpoint, or churn view. +This removes 255 net source lines without changing the decision-context chain. + +Editor actuation is outside this machine. Epiphany may request provider-owned +editor capabilities through CultMesh/Eve, but owns no Rider or Unity protocol, +process, state, or verifier. Brokkr owns Unity. A future Rider daemon must own +Rider. + External lifecycle boundary: Idunn remains available when Epiphany is missing, failed, or braked. Epiphany's swarm brake is an input only to an Idunn transaction that changes Epiphany's deployed body; it cannot gate Idunn startup, diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index a226dad8..b402daea 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -2,8 +2,9 @@ Updated: 2026-08-23 Branch: `codex/epiphany-shakedown-live` -Latest committed implementation cut: `a276d0f4` -Current worktree: executable/test authority subtraction; Ox17 remains paused +Latest committed implementation cut: `bda8d8c6` +Current worktree: documentation/evidence for role-launch authority subtraction; +Ox17 remains paused ## Orientation @@ -1221,6 +1222,18 @@ struct. `runtime_spine.rs` is 10,126 lines, with 63 public functions and 27 public structs. The focused core check plus the OpenAI-library and release-owned model-runtime test harnesses compile cleanly. +Exact `bda8d8c6` deletes twelve aggregate-Mind fields from +`EpiphanyRoleWorkerLaunchDocument` and all thirteen constructors. Every +producer supplied empty defaults, while the sealed reasoning basis already +owns the exact typed Mind projection and source-document versions. Role launch +now carries only pass identity plus family-specific authority; there is no +parallel scratch/graph/planning/evidence/observation/checkpoint/churn state +mouth. The cut removes 255 net source lines. Core and both OpenAI runtime +owners compile; reasoning-context tests pass 8/8, and narrow Modeling request, +typed failure, and repeated-tool-loop terminality proofs pass. Epiphany still +owns no Rider or Unity editor integration: Brokkr owns Unity through +CultMesh/Eve, and a future Rider daemon must own Rider. + ## Competitive Eyes/Imagination pass `notes/munder-difflin-launch-intelligence-2026-08-23.md` distills the diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index b93cb6f7..a44a3fa9 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index e88cddee..3eb3a6e9 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -52,7 +52,7 @@ current_status: summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused. public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets. competitive_launch_signal: The 2026-08-22 Munder Difflin launch analysis in notes/munder-difflin-launch-intelligence-2026-08-23.md is the current Eyes/Imagination owner for this category signal. It establishes strong demand to try a packaged, local, visual multi-agent control plane and supplies repeated qualitative demand for an operator-attention surface over plans, questions, blockers, decisions, consequences, and liveness; it does not establish retention, reliable autonomy, or paid product-market fit. Munder is materially ahead in installation, cross-platform reach, provider reuse, category compression, community formation, and feedback velocity. Its public failures make renderer-owned physiology, cross-Body restoration, proxy safety metrics, false consequence receipts, provider parity, and marketed-but-unavailable federation concrete falsification targets. Epiphany does not yet own a general operator UI: Persona projection into shared asynchronous chat is the concrete human surface, while CultMesh remains projection-neutral. Social Aquarium, a dense operator cockpit, TUI, and audit surfaces may use distinct Eve compositions over the same provider-owned facts. A one-hour projection experiment and managed continuity/federation remain evidence-led options rather than adopted roadmap authority; the source-subtraction and test-authority audit remains next. - latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 856648de is the largest current cut: 32,866 net source lines, four binaries, one competing daemon-survival authority, and the entire unconsumed semantic/workspace projection stack are gone. Exact 6e600e8d removes the test-only user proposal mouth and the User/Persona/Bifrost source-kind fiction: only an exact admitted Imagination direction result plus its worker launch/result and autonomous binding can create proposal Modeling work. Exact 82f4733d removes the proposal's duplicated desired outcome, permanently empty scope hints, and copied timestamp. Exact 6fbd8184 removes repository/workspace/thread/runtime mirrors from inert proposal content; the atomic Modeling request owns those coordinates and the autonomous validator binds them back to exact Body/domain and Imagination provenance. Exact 2dfd8c72 deletes the test-only Eyes claim-challenge side channel: no live agent pass produced it, while one fixture manufactured the packet, challenge, writer call, and downstream gating. Eyes evidence must now enter Modeling and change the keyed model itself; it cannot separately decide Planning or Hands actionability. Exact 3eca3394 deletes the aggregate runtime status DTO, its whole-store counter scans, and the unconsumed runtime-spine-status JSON artifact; live readiness callers read only the immutable runtime identity, while schema preflight reads the canonical registration directly. Exact 27c8389c deletes the prepared-heartbeat wrapper and its unread job clone; callers consume the exact prepared envelope batch directly, while the job document remains inside that atomic batch. Exact e7c1166b repairs the stale Body whitepaper; live code, manifests, scripts, and schemas contain no Rider or Unity integration authority. Brokkr owns Unity through Eve/CultMesh, and a future Rider daemon must own Rider. Native runtime, keyed Mind, Persona, direct Body-to-Modeling flow, exact provider requests, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts remain. Mind/runtime writable epochs are v8/v11; old stores refuse with no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume. + latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 856648de is the largest current cut: 32,866 net source lines, four binaries, one competing daemon-survival authority, and the entire unconsumed semantic/workspace projection stack are gone. Exact 6e600e8d removes the test-only user proposal mouth and the User/Persona/Bifrost source-kind fiction: only an exact admitted Imagination direction result plus its worker launch/result and autonomous binding can create proposal Modeling work. Exact 82f4733d removes the proposal's duplicated desired outcome, permanently empty scope hints, and copied timestamp. Exact 6fbd8184 removes repository/workspace/thread/runtime mirrors from inert proposal content; the atomic Modeling request owns those coordinates and the autonomous validator binds them back to exact Body/domain and Imagination provenance. Exact 2dfd8c72 deletes the test-only Eyes claim-challenge side channel: no live agent pass produced it, while one fixture manufactured the packet, challenge, writer call, and downstream gating. Eyes evidence must now enter Modeling and change the keyed model itself; it cannot separately decide Planning or Hands actionability. Exact 3eca3394 deletes the aggregate runtime status DTO, its whole-store counter scans, and the unconsumed runtime-spine-status JSON artifact; live readiness callers read only the immutable runtime identity, while schema preflight reads the canonical registration directly. Exact 27c8389c deletes the prepared-heartbeat wrapper and its unread job clone; callers consume the exact prepared envelope batch directly, while the job document remains inside that atomic batch. Exact e7c1166b repairs the stale Body whitepaper; live code, manifests, scripts, and schemas contain no Rider or Unity integration authority. Brokkr owns Unity through Eve/CultMesh, and a future Rider daemon must own Rider. Exact bda8d8c6 deletes twelve permanently empty aggregate-Mind fields from role launch; the sealed reasoning basis remains the sole exact typed prompt-state projection. Native runtime, keyed Mind, Persona, direct Body-to-Modeling flow, exact provider requests, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts remain. Mind/runtime writable epochs are v8/v11; old stores refuse with no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume. supervisor_subtraction: Exact 856648de completes the supervisor deletion. Epiphany owns no local generic daemon supervisor, semantic projector service, workspace-coverage projector, Windows Task Scheduler integration, or service-policy/lifecycle/heartbeat/recovery mirror. Idunn on Yggdrasil owns source-triggered compilation, testing, packaging, deployment, signed health, and daemon survival. The canonical Epiphany brake gates Epiphany cognition and consequence authority, not Idunn startup or unrelated lifecycle. launch_dependency_cut: Exact 2aeab7a9 deletes the generic organ dependency matrix, generic receipt catalogue/proof profiles, persisted worker-launch cargo, Persona prompt injection, evaluator, and three self-certifying tests: 700 net lines. Family admission owners derive exact dependencies from typed state. Worker-launch schema v2 and Persona projector prompt v1 refuse the old writable shape. Core 378/378, OpenRouter runtime 27/27, packaged runtime 13/13, and Persona re-entry 1/1 pass. operator_surface_subtraction: Exact ef92e853 deletes the callerless view-lens registry, legacy acceptance-bundle builders, test-only raw-JSON result interpreters, and six tests: 797 net lines. Exact a292979d and 77e817c1 delete the duplicate CRRC recommendation algorithm, its unused input model, and four tests: 206 lines. Exact 3b94bf6e and 59c5e3a6 delete the nested duplicate status view, false auxiliary mode, and ignored status arguments. Exact 7c9b0cf3 deletes the fixed synthetic job table, role-board job cargo/mappers, and its test: 338 net lines. Exact 2ce91461 deletes the scene/planning Mind reconstructions, duplicate self-policy crate, unused prompt templates, four counterfeit schemas, and ten producer/source-text tests: 1,723 net lines. Exact 78836f3b deletes eight unconsumed status tableaux, the pressure calculator production only called without telemetry, its unreachable compaction action, one counterfeit schema, and six tests: 518 net lines. Exact f10f7fb3 deletes the final twelve epiphany.surface.* schemas and ten catalog entries after every one proved producerless and consumerless: 692 pure deletions. Exact ab3cacfb deletes thirty-one more producerless contracts, the false runtime-session mutation mouth, every Epiphany-owned Rider/Unity command schema, a callerless prompt-context module, its test-only specialist prompt system, and four self-affirming tests: 3,514 net lines. Exact 16d85b1b deletes six duplicate JSON-schema builder tests and two OpenAI-runtime self-source searches: 209 pure test-line deletions. Exact 06f93f70 deletes the test-only inverse OpenAI-to-native request mapper and makes two retained tests follow canonical native-to-provider derivation: sixty net lines. The local catalog now has twenty-three live or portable contracts. Brokkr owns Unity capabilities through CultMesh/Eve; a future Rider daemon owns Rider. Status retains Mind identity, exact current work, one action/reason decision, readable role lanes, and operator thought sealing. Core checks cleanly; retained provider and focused request-flow tests pass. @@ -115,9 +115,9 @@ current_status: yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 unresolved_authority: The local daemon-supervisor, semantic projector, workspace-coverage projector, generic event authority, Rider/Unity editor organs, and their false proofs are gone. `runtime_spine.rs` remains the largest central liability at 10,126 lines, 63 public functions, and 27 public structs; it still mixes immutable identity, sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. Continue splitting only by deleting callerless or duplicate authority; do not create family frameworks or adapters. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Its Discord delivery path is a real consumer of Epiphany's short-lived request-bound permit signature, so the distinct permit identity/process is retained as an earned privilege boundary; current Ygg deployment doctrine still points that crossing at the old Starfire endpoint and installs no issuer unit, which the Idunn lane must repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Resume the public runtime-spine and test-liability audit after exact 27c8389c. Trace each remaining public API and verifier to a live owner and consequential invariant; delete callerless mouths, checked mirrors, and tests of implementation spelling. Preserve immutable runtime identity, exact job/session terminality, decision contexts and failures, model/tool bindings and receipts, atomic Hands-to-Verification admission, conflict/replay, and retention fences. Do not run a local full-workspace compile, package, deployment, or Ox root. + next_action: Resume the public runtime-spine and test-liability audit after exact bda8d8c6. Trace each remaining public API and verifier to a live owner and consequential invariant; delete callerless mouths, checked mirrors, duplicate prompt-state cargo, and tests of implementation spelling. Preserve immutable runtime identity, exact job/session terminality, sealed typed reasoning projections, decision contexts and failures, model/tool bindings and receipts, atomic Hands-to-Verification admission, conflict/replay, and retention fences. Do not run a local full-workspace compile, package, deployment, or Ox root. - runtime_spine_surface_cut: Exact 25d4d1fa deletes twenty-four callerless public runtime readers, mutation wrappers, status projections, their exports, and the tool-invocation status DTO. It also deletes the entirely unconsumed Hands route-relinquishment writer, refusal receipt, Mind relinquishment receipt, schema registration, and validation branch. Exact 1fea7bde deletes the final callerless Hands-chain timestamp reader and demotes the chain summary to private commit cargo. Exact 40d00bc5 deletes the unconsumed detailed planning-eligibility tableau, its two DTOs, and its two public APIs; Hands and Imagination now share the existing actionable-frontier predicate. Exact ac6455c5 removes five dormant transaction-injection callbacks and demotes three archive actuators behind their retention owners without weakening snapshot/CAS fences. Exact 6e600e8d rebuilds the broad proposal/Hands/Persona lifecycle proof through real Imagination provenance, then deletes the generic proposal writer, selector, input DTO, four-way source enum, constant provenance/privacy/public-source fields, compatibility hash branch, and provider branch. Exact 82f4733d removes three more constant/copy-only proposal fields. Exact 6fbd8184 moves repository/workspace/thread/runtime coordinates out of inert proposal content and into their atomic Modeling request owner; autonomous validation derives that request identity from binding runtime plus proposal identity and checks it against Body/domain and Imagination provenance. Exact 2dfd8c72 removes the producerless Eyes claim-challenge contract, writer, registry row, validation and routing branches, claim-obligation challenge vector, fixture-only packet inserter, and 76 lines of self-authored test scenario: 465 net source deletions. Exact keyed claim/frontier envelopes still own stale-state refusal; new external evidence must create a Modeling obligation and a fresh keyed model mutation rather than gate work through a parallel Eyes-owned status. Exact 3eca3394 replaces the thirteen-field aggregate runtime status projection with one exact optional identity read, deletes its session/job/tool scans, and removes the unconsumed coordinator summary member plus standalone runtime-spine-status artifact: 96 net source deletions. Schema preflight still derives the registered catalog from the actual CultCache registration owner. Exact 27c8389c collapses `PreparedRuntimeSpineHeartbeatJob` into its only consumed value, the exact prepared envelope batch, deleting an unread full job clone and one public struct: 10 net source deletions. The job document remains one member of the atomic batch. Mind/runtime epochs are v8/v11 and claim-obligation documents are v3. Proposal Modeling may recommend only Eyes or Imagination; Hands still requires adopted-plan authority. Across these cuts the spine falls to 10,126 lines, 63 public functions, and 27 public structs. The focused core library, OpenAI library, release-owned coordinator, model-runtime, OpenAI test harness, and model-runtime test harness check cleanly; the keyed lifecycle and epoch-refusal proofs pass without warnings. + runtime_spine_surface_cut: Exact 25d4d1fa deletes twenty-four callerless public runtime readers, mutation wrappers, status projections, their exports, and the tool-invocation status DTO. It also deletes the entirely unconsumed Hands route-relinquishment writer, refusal receipt, Mind relinquishment receipt, schema registration, and validation branch. Exact 1fea7bde deletes the final callerless Hands-chain timestamp reader and demotes the chain summary to private commit cargo. Exact 40d00bc5 deletes the unconsumed detailed planning-eligibility tableau, its two DTOs, and its two public APIs; Hands and Imagination now share the existing actionable-frontier predicate. Exact ac6455c5 removes five dormant transaction-injection callbacks and demotes three archive actuators behind their retention owners without weakening snapshot/CAS fences. Exact 6e600e8d rebuilds the broad proposal/Hands/Persona lifecycle proof through real Imagination provenance, then deletes the generic proposal writer, selector, input DTO, four-way source enum, constant provenance/privacy/public-source fields, compatibility hash branch, and provider branch. Exact 82f4733d removes three more constant/copy-only proposal fields. Exact 6fbd8184 moves repository/workspace/thread/runtime coordinates out of inert proposal content and into their atomic Modeling request owner; autonomous validation derives that request identity from binding runtime plus proposal identity and checks it against Body/domain and Imagination provenance. Exact 2dfd8c72 removes the producerless Eyes claim-challenge contract, writer, registry row, validation and routing branches, claim-obligation challenge vector, fixture-only packet inserter, and 76 lines of self-authored test scenario: 465 net source deletions. Exact keyed claim/frontier envelopes still own stale-state refusal; new external evidence must create a Modeling obligation and a fresh keyed model mutation rather than gate work through a parallel Eyes-owned status. Exact 3eca3394 replaces the thirteen-field aggregate runtime status projection with one exact optional identity read, deletes its session/job/tool scans, and removes the unconsumed coordinator summary member plus standalone runtime-spine-status artifact: 96 net source deletions. Schema preflight still derives the registered catalog from the actual CultCache registration owner. Exact 27c8389c collapses `PreparedRuntimeSpineHeartbeatJob` into its only consumed value, the exact prepared envelope batch, deleting an unread full job clone and one public struct: 10 net source deletions. The job document remains one member of the atomic batch. Exact bda8d8c6 deletes twelve aggregate-Mind fields from the role-launch contract and every constructor: all were empty defaults, while the sealed reasoning basis already owns the exact typed Mind projection. Role launch now owns only identity plus family-specific authority; it cannot carry parallel scratch, graph, planning, evidence, observation, invariant, checkpoint, or churn state. The cut removes 255 net source lines. Mind/runtime epochs are v8/v11 and claim-obligation documents are v3. Proposal Modeling may recommend only Eyes or Imagination; Hands still requires adopted-plan authority. Across these cuts the spine remains 10,126 lines, with 63 public functions and 27 public structs. The focused core library, OpenAI library, release-owned coordinator, model-runtime, OpenAI test harness, and model-runtime test harness check cleanly; the keyed lifecycle, reasoning-context, typed-failure, repeated-tool-loop, and epoch-refusal proofs pass without warnings. runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains. diff --git a/state/scratch.md b/state/scratch.md index f79830e1..55fe88bc 100644 --- a/state/scratch.md +++ b/state/scratch.md @@ -163,7 +163,12 @@ and janitors may reduce the symptom but cannot substitute for deleting code. exact envelope batch every caller actually consumes. Its unread full job clone and one public struct are gone; the job document remains inside the atomic prepared batch. Ten net source lines are removed. -29. Next: resume the public runtime-spine and test-liability audit by live owner +29. Done: exact `bda8d8c6` deletes twelve duplicate aggregate-Mind fields from + the role-launch contract and every constructor. Every producer supplied + empty defaults, and the sealed reasoning basis already owns the exact typed + Mind projection. Launch authority now carries only identity plus its + family-specific context. The cut removes 255 net source lines. +30. Next: resume the public runtime-spine and test-liability audit by live owner and consequential invariant. -30. Run focused tests after each cut. Only after source subtraction stabilizes +31. Run focused tests after each cut. Only after source subtraction stabilizes should Idunn's build scratch contract be reconsidered.