Record typed Persona consequence boundary

This commit is contained in:
Meta Vens 2026-08-23 16:48:31 +02:00
commit 4e4d35ea36
5 changed files with 28 additions and 4 deletions

View file

@ -1,7 +1,7 @@
# Epiphany current algorithmic map
Updated: 2026-08-23
Latest committed implementation cut: `500125d5` on `codex/epiphany-shakedown-live`
Latest committed implementation cut: `63939fa2` on `codex/epiphany-shakedown-live`
Current worktree cut: canonical map/evidence sync; Ox17 remains paused
This document describes the live machine. Historical cuts, rejected paths, and
@ -108,6 +108,13 @@ the coordinator actually calls into one `epiphany-core` module. Operator-safe
lowering remains tested; command parsing, file output, and duplicate compilation
do not.
Persona's consequence membrane is typed, not lexical. Exact `63939fa2` removes
the keyword tribunal that rejected projector prose for looking like JSON or
containing action-shaped words. Projector and Persona outputs remain sealed
private stage results. The Interpreter's closed effect enum, allowed-channel
set, cardinality and size bounds, exact decision context, and Mind admission
own consequence safety. Prompt-substring tests do not.
Persisted cluster topology is also gone. Its writer became dead when the
callerless seed bundle was removed, while the supervisor merely accepted any
nonempty subset of seven fixed keys as “bootstrap” without authenticating Body

View file

@ -224,7 +224,7 @@ Delete or demote:
Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate
1 paused. Continue the source-subtraction and test-authority audit from exact
`500125d5`. The current sequence has deleted the semantic-memory/workspace-coverage
`63939fa2`. The current sequence has deleted the semantic-memory/workspace-coverage
projection system, its local daemon supervisor, and the surviving generic
RepoModel profile, impossible lifecycle, producerless receipt/summary, and
decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state
@ -526,6 +526,12 @@ Cut in this order:
projection, rendering, and operator-thought sealing live once in
`epiphany-core`; the coordinator imports that module directly. Cargo falls to
20 executable targets without losing the operator-sealing check.
40. **Persona consequence safety is typed at `63939fa2`:** projector and Persona
prose are inert stage outputs, so a hand-written forbidden-word tribunal
cannot add authority. Only the Interpreter's closed effect enum can propose
consequence. The tribunal, test-only prompt wrapper, prompt-substring test,
and forbidden-word test are deleted; exact stage/context and typed-effect
refusal tests remain.
Do not preserve the aggregate for compatibility, manufacture a bootstrap
thread, release autonomous scheduling, register topology in `gamecult-ops`,

View file

@ -2,7 +2,7 @@
Updated: 2026-08-23
Branch: `codex/epiphany-shakedown-live`
Latest committed implementation cut: `500125d5`
Latest committed implementation cut: `63939fa2`
Current worktree: canonical map/evidence sync; Ox17 remains paused
## Orientation
@ -63,6 +63,16 @@ release assertion are gone. Cargo has 20 executable targets and zero duplicate
binary-source owners. Coordinator compilation, the exact operator-sealing test,
and release construction 17/17 pass.
Exact `63939fa2` deletes Persona's hand-written projector-output language
tribunal. Projector and Persona prose are inert private cognition; only the
Interpreter's closed typed effect enum can propose a state or speech
consequence. Keyword matches on `STATE NOTE`, `SAY`, JSON punctuation, or field
names therefore added retries without adding authority. The cut also deletes a
test-only prompt wrapper and two tests that blessed prompt phrases/forbidden
words. Three-stage execution and replay, channel-escape refusal, substituted
provider/model refusal, typed-effect validation, and all OpenAI-runtime targets
pass.
No Epiphany-owned Rider or Unity code, target, schema, or actuator exists.
Brokkr owns Unity through Eve/CultMesh. A future Rider daemon owns Rider.
Epiphany may consume their typed capabilities and receipts; it does not poke