GameCult/Epiphany
Archived
Watch
9
0
Fork
You've already forked Epiphany
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record provider-owned host identity

Browse source
This commit is contained in:
Meta Vens 2026-08-23 19:20:30 +02:00
commit 4e47224bfe
6 changed files with 34 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

10
notes/epiphany-current-algorithmic-map.md
View file

@ -1,7 +1,7 @@
# Epiphany current algorithmic map
Updated: 2026-08-23
Latest committed implementation cut: `900c5232` on `codex/epiphany-shakedown-live`
Latest committed implementation cut: `94098223` on `codex/epiphany-shakedown-live`
Current worktree cut: executable/test authority subtraction; Ox17 remains paused
This document describes the live machine. Historical cuts, rejected paths, and
@ -183,6 +183,14 @@ still admits the exact proposal, selects Modeling work, resolves concurrent
launch, seals reasoning, and commits the result. No wrapper can create a second
proposal mouth or make CLI spelling part of the invariant.
Bifrost owns its private feedback-signing identity. Exact `94098223` deletes
Epiphany's host-identity executable and the private signer, persisted identity,
enrollment, platform protection, and anchor-export implementation behind it.
Epiphany retains only the typed public anchor and purpose/payload/identity-bound
Ed25519 verifier required at feedback admission. Tests use a deterministic
test-only signer; production code cannot create, open, rotate, or export the
provider's trust root.
Persisted cluster topology is also gone. Its writer became dead when the
callerless seed bundle was removed, while the supervisor merely accepted any
nonempty subset of seven fixed keys as “bootstrap” without authenticating Body

8
notes/epiphany-fork-implementation-plan.md
View file

@ -224,7 +224,7 @@ Delete or demote:
Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate
1 paused. Continue the source-subtraction and test-authority audit from exact
`900c5232`. The current sequence has deleted the semantic-memory/workspace-coverage
`94098223`. The current sequence has deleted the semantic-memory/workspace-coverage
projection system, its local daemon supervisor, and the surviving generic
RepoModel profile, impossible lifecycle, producerless receipt/summary, and
decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state
@ -240,8 +240,10 @@ Resident Self now solely imports authenticated Bifrost deliveries; exact
snapshot seam. Exact `56267201` deletes the three unadmitted Atlas daemon
shells while retaining their typed library owners. Exact `900c5232` deletes the
callerless frontier-proposal wrapper while retaining typed Self/runtime intake.
Next inspect the one-shot host-identity and Hands consequence command
boundaries. The next test cut removes
Exact `94098223` reduces host identity to provider-owned public-anchor
verification and deletes Epiphany's private-custody stack. Next redesign the
Hands consequence command into its actual execution owner before removing its
shell. The next test cut removes
static display labels, pure helper spelling checks, and redundant cache-policy
assertions only where stronger consequence tests already own the invariant.

13
notes/fresh-workspace-handoff.md
View file

@ -2,7 +2,7 @@
Updated: 2026-08-23
Branch: `codex/epiphany-shakedown-live`
Latest committed implementation cut: `900c5232`
Latest committed implementation cut: `94098223`
Current worktree: executable/test authority subtraction; Ox17 remains paused
## Orientation
@ -44,6 +44,17 @@ authorize the next capstone or Gate 1.
## What just landed
Exact `94098223` removes Epiphany's unowned private host-identity custody and
leaves only the Bifrost public-anchor contract plus signature verifier. The
host-identity executable, release role, private identity schema/signer,
enrollment/open/status/export APIs, default paths, Windows DPAPI, Linux seed
masking, assurance claims, and direct random/zeroize/root OS dependencies are
gone. Bifrost owns its private identity; Epiphany authenticates signed feedback
against one pinned public anchor. A deterministic test-only signer replaces the
production custody stack in verifier fixtures. The cut removes 561 net lines,
leaves 12 Cargo executable targets, and passes focused verifier, Persona
feedback, core, swarm, and release-construction checks.
Exact `900c5232` deletes the callerless `epiphany-frontier-proposal` command,
its forced release role, CLI parser, JSON summary, and two parser-only tests:
188 pure deletions. Proposal intake and selection remain typed runtime/Self