diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 85a053e1..658ad3c1 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -1,7 +1,7 @@ # Epiphany current algorithmic map Updated: 2026-08-23 -Latest committed implementation cut: `500125d5` on `codex/epiphany-shakedown-live` +Latest committed implementation cut: `63939fa2` on `codex/epiphany-shakedown-live` Current worktree cut: canonical map/evidence sync; Ox17 remains paused This document describes the live machine. Historical cuts, rejected paths, and @@ -108,6 +108,13 @@ the coordinator actually calls into one `epiphany-core` module. Operator-safe lowering remains tested; command parsing, file output, and duplicate compilation do not. +Persona's consequence membrane is typed, not lexical. Exact `63939fa2` removes +the keyword tribunal that rejected projector prose for looking like JSON or +containing action-shaped words. Projector and Persona outputs remain sealed +private stage results. The Interpreter's closed effect enum, allowed-channel +set, cardinality and size bounds, exact decision context, and Mind admission +own consequence safety. Prompt-substring tests do not. + Persisted cluster topology is also gone. Its writer became dead when the callerless seed bundle was removed, while the supervisor merely accepted any nonempty subset of seven fixed keys as “bootstrap” without authenticating Body diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index fdb4e301..bc5a52da 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -224,7 +224,7 @@ Delete or demote: Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate 1 paused. Continue the source-subtraction and test-authority audit from exact -`500125d5`. The current sequence has deleted the semantic-memory/workspace-coverage +`63939fa2`. The current sequence has deleted the semantic-memory/workspace-coverage projection system, its local daemon supervisor, and the surviving generic RepoModel profile, impossible lifecycle, producerless receipt/summary, and decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state @@ -526,6 +526,12 @@ Cut in this order: projection, rendering, and operator-thought sealing live once in `epiphany-core`; the coordinator imports that module directly. Cargo falls to 20 executable targets without losing the operator-sealing check. +40. **Persona consequence safety is typed at `63939fa2`:** projector and Persona + prose are inert stage outputs, so a hand-written forbidden-word tribunal + cannot add authority. Only the Interpreter's closed effect enum can propose + consequence. The tribunal, test-only prompt wrapper, prompt-substring test, + and forbidden-word test are deleted; exact stage/context and typed-effect + refusal tests remain. Do not preserve the aggregate for compatibility, manufacture a bootstrap thread, release autonomous scheduling, register topology in `gamecult-ops`, diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 2a8c98f1..a151cbde 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -2,7 +2,7 @@ Updated: 2026-08-23 Branch: `codex/epiphany-shakedown-live` -Latest committed implementation cut: `500125d5` +Latest committed implementation cut: `63939fa2` Current worktree: canonical map/evidence sync; Ox17 remains paused ## Orientation @@ -63,6 +63,16 @@ release assertion are gone. Cargo has 20 executable targets and zero duplicate binary-source owners. Coordinator compilation, the exact operator-sealing test, and release construction 17/17 pass. +Exact `63939fa2` deletes Persona's hand-written projector-output language +tribunal. Projector and Persona prose are inert private cognition; only the +Interpreter's closed typed effect enum can propose a state or speech +consequence. Keyword matches on `STATE NOTE`, `SAY`, JSON punctuation, or field +names therefore added retries without adding authority. The cut also deletes a +test-only prompt wrapper and two tests that blessed prompt phrases/forbidden +words. Three-stage execution and replay, channel-escape refusal, substituted +provider/model refusal, typed-effect validation, and all OpenAI-runtime targets +pass. + No Epiphany-owned Rider or Unity code, target, schema, or actuator exists. Brokkr owns Unity through Eve/CultMesh. A future Rider daemon owns Rider. Epiphany may consume their typed capabilities and receipts; it does not poke diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 926204bf..10934790 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index a940aa94..e1b82d38 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -60,6 +60,7 @@ current_status: build_target_ownership_cut: Exact a319146b deletes the public non-atomic worker-launch path used only by test fixtures; exact 76fd259b deletes two source-layout tests while retaining real CLI refusal behavior. Exact b95a3266 deletes the superseded unpackaged OpenAI debug executable and the tests/helper that animated it. Exact 6f93134d makes epiphany-release-bundle the sole package owner for production entrypoints, disables automatic leaf binaries, reduces Cargo executable targets from 26 to 22, and deletes a hardcoded release target map plus two self-affirming tests that did not drive the build. Exact c04c3aff deletes the five-reexport auth wrapper crate; the transport imports its narrow Codex auth surface directly. Cargo metadata reports no binary source with multiple package owners; release construction passes 17/17. runtime_registry_authority_cut: Exact 03140a47 deletes the 649-line epiphany-runtime-spine operator/debug CLI, its packaged release role, its callerless Hello/schema-catalog service facsimile, the 600-line hand-maintained mutation-contract mirror, and the source-shape test that guarded that mirror. CultCache exact fdbf3bf exposes its registered type identities, so runtime status and model preflight derive accepted documents from the same registration used to open the Mind store. Executable targets fall from 22 to 21 with zero duplicate source owners. Core checks without warnings and release construction passes 17/17. Editor actuation remains entirely provider-owned: Brokkr owns Unity through CultMesh/Eve and a future Rider daemon owns Rider. coordinator_status_cut: Exact 500125d5 deletes the unconsumed packaged epiphany-mvp-status executable. Its live projection and operator-sanitization functions move from a binary source textually included by the coordinator into one epiphany-core module. The dead CLI parser, default store, result-file writer, release role, and redundant release assertion are gone. Cargo has 20 executable targets and zero duplicate binary-source owners; the release-owned coordinator checks, the operator thought-sealing test passes, and release construction remains 17/17. + persona_language_tribunal_cut: Exact 63939fa2 deletes Persona's keyword-based projector-output tribunal, its test-only no-transcript prompt wrapper, and two tests that blessed prompt phrases and forbidden words rather than a consequence. Projector and Persona outputs remain inert private cognition sealed into exact stage contexts. Only the Interpreter's closed typed effect enum can propose state or speech; its channel, cardinality, size, schema, and exact-context validation remain. The three-stage execution/replay, channel-escape refusal, substituted provider/model refusal, retained typed-effect validation, and OpenAI-runtime all-target checks pass. bifrost_authority_cut: Exact 203bcc41 deletes Epiphany's producerless Bifrost body-change/GitHub publication family: four document types, three singleton latest heads, constructors, validators, writers, local-Verse advertisement/projection, public exports, and five tests that manufactured both ends. Bifrost owns the real Persona feedback/delivery stores and signed crossing receipts; Epiphany does not publish an alternate Bifrost protocol. Core and release-bundle checks pass; the remaining CultMesh suite passes 13/13. hands_pr_authority_cut: Exact 11d99de1 deletes the producerless HandsPrReceipt type, registration, dead test-only writer, read path, exports, relinquishment branch, and two contract advertisements. Hands owns local patch, command, and commit consequences; exact remote publication evidence belongs to the provider/Bifrost crossing. Core and release-bundle checks pass, and the rebuilt 43-entry schema catalog contains no deleted PR family. local_verse_contract_cut: Exact a4af4734 deletes six organ-specific contract DTO/factories, the callerless LocalVerseContext query/seed bundle, fixed Verse/room policy prose, the mind-contract self-test, and persisted cluster topology. The topology writer had no caller; supervision accepted any nonempty fixed-key subset without authenticating Body domain, completeness, or runtime binding. That false bootstrap gate, loader, exports, and its diagnostic test are gone. Exact 03140a47 later deletes the remaining standalone runtime contract mirror; live providers own their CultMesh/CultNet catalogs. Exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health remain supervisor prerequisites. The cut removes 1,005 net source lines; core/release checks, CultMesh 12/12, and supervisor 4/4 pass. @@ -110,7 +111,7 @@ current_status: yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 unresolved_authority: Generic command, legacy lineage, caller-authored identity, behaviorless policy fields, global lifecycle latest state, timestamp election, Windows Task Scheduler authority, and their false proofs are gone. Semantic and workspace launch owners are separate over shared process mechanics. The remaining daemon supervisor still combines the service loop, aggregate signed-health publication, semantic reconciliation, and the large workspace recovery state machine. Continue decomposing only where ownership becomes smaller; do not create family frameworks or adapters. The false persisted cluster-topology bootstrap sentinel is gone; supervisor admission remains bound to exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Continue the source/test-authority audit after exact 500125d5. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, and family admission owners. Epiphany owns no local daemon supervisor, standalone schema service, status CLI, or editor bridge. Do not run a local full-workspace compile, package, deployment, or Ox root. + next_action: Continue the source/test-authority audit after exact 63939fa2. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, status CLI, editor bridge, or keyword tribunal over natural language. Do not run a local full-workspace compile, package, deployment, or Ox root. runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains.