Record dormant authority deletion

notes/epiphany-current-algorithmic-map.md

@@ -4991,12 +4991,23 @@ validity, mutation shape, or admission; those remain with the concrete Body and
 Proposal families. The shared vocabulary is therefore DRY without becoming a
 generic work registry.
 
-The next source audit found that claim-repair is not a live request family.
+The next source audit found that claim-repair was not a live request family.
 `commit_repo_model_claim_challenge` and
 `commit_repo_model_claim_repair_request` have no production caller, no source
 constructs a `RepoModelClaimChallenge`, and no acceptance test proves the chain.
-Its aggregate-thread launch branch is dormant scaffolding. The deletion line is
-the repair request/binding/context/export and their carrier fields; a future
-Eyes contradiction must earn a new typed external-evidence obligation through a
-real producer, current-work projection, terminal context, and Mind admission
-proof rather than inheriting this unowned anatomy.
+Its aggregate-thread launch branch was dormant scaffolding. Exact `20dd66c8`
+deletes the repair request/binding/context contracts, runtime registration and
+carriers, coordinator validation/binding writer, reasoning projection, result
+cargo, exports, and OpenAI lowering. A source guard over Rust/TOML paths finds no
+surviving family symbol. The Eyes claim-challenge document remains because its
+exact claim hash independently suppresses unsafe planning. A future Eyes
+contradiction must earn a typed external-evidence obligation through a real
+producer, current-work projection, terminal context, and Mind admission proof.
+
+That deletion pass also falsified the initial launch-CAS proof. Body and
+Proposal launchers first projected work, then opened a second cache snapshot;
+the latter could observe a just-committed binding, increment the attempt
+ordinal, and launch a second live worker. The owner now derives launchability
+and ordinal from the same pulled cache snapshot used to construct its exact CAS.
+Concurrent Proposal launch convergence passes 20/20 stress iterations; a live
+attempt cannot be converted into retry authority by a convenience preflight.

notes/epiphany-fork-implementation-plan.md

@@ -231,7 +231,7 @@ Cut in this order:
 3. **Baseline transaction landed at `9f7b164f`; operator routing at `587c56d2`; Resident continuation and keyed acceptance at `478fb923`:** baseline Body Modeling is now thread-free from unresolved Body obligation through Launch/Wait/Review and exact Mind admission. Resident and operator callers consume the same family projection and acceptance owner. Thread ID remains immutable pass provenance only.
 4. **Proposal Modeling landed at `d1b031cb`:** its immutable request, exact launch binding, runtime attempt/result, and `Modeling.proposal_frontier` commit now own Launch/Wait/Review and admission. The aggregate launcher refuses proposal cargo; the old selector, validator, context builder, and generic-launch hint are deleted. Body and Proposal share only the exact-envelope launch CAS invariant, not a mutable family registry.
 5. **Continuation vocabulary landed at `e404c105`:** Body and Proposal share one pure `EpiphanyModelingContinuationAction`; their semantic requests, projections, validators, and admission owners remain separate.
-6. Delete the dormant claim-repair request/launch scaffold. It has no production challenge producer, request caller, or acceptance proof, so migrating it would manufacture authority. Reintroduce repair only from a real typed external-evidence obligation.
+6. **Dormant claim-repair authority deleted at `20dd66c8`:** no request/binding/context schema, runtime carrier, coordinator branch, result cargo, export, or model lowering survives. The independent Eyes challenge fact remains. The same pass fixed two-snapshot Body/Proposal launch derivation and stress-proved single Proposal launch 20/20.
 7. Migrate frontier-verdict, Research, Verification, planning, and
    reorientation acceptance from aggregate state patches and generic role lanes
    to family-owned current-work projections, exact job identities,

notes/fresh-workspace-handoff.md

@@ -360,12 +360,19 @@ Exact `e404c105` removes the duplicate Body/Proposal continuation enums. One
 `EpiphanyModelingContinuationAction` now names Launch, Wait, and Review; each
 family retains its own request, projection, validity rules, and admission owner.
 
-Source inspection then falsified the assumption that claim-repair is a live
-family: its exported request/launch surface has no production challenge
-producer, request caller, or acceptance proof. Delete that dormant aggregate-
-thread scaffold rather than migrating it. Then migrate the live frontier-
-verdict Modeling chain onto exact Soul/route/request authority and the shared
-continuation vocabulary. Continue with Research, Verification,
+Exact `20dd66c8` deletes claim-repair's request/binding/context schemas, runtime
+carriers, coordinator launch branch, reasoning projection, result cargo,
+exports, and OpenAI lowering. The Eyes claim-challenge fact remains because it
+still blocks unsafe planning. No Rust/TOML production symbol for the dormant
+family survives. During verification, the concurrent Proposal launch test
+exposed two-snapshot attempt derivation; Body and Proposal launchers now
+revalidate launchability and ordinal from the exact cache snapshot used by the
+CAS. Proposal convergence passes 20/20 stress iterations.
+
+Migrate the live frontier-verdict Modeling chain next onto exact
+Soul/route/request authority and the shared continuation vocabulary. Delete its
+accepted-at ordering, aggregate prompt construction, and role-lane review path.
+Continue with Research, Verification,
 planning, and reorientation; then delete the aggregate schema/transaction. Run the source
 guards and fresh-store concurrency/decision-context suite. Only after that may
 Model Atlas Gate 1 restart from a new external root. Keep the current fresh and

state/map.yaml

@@ -40,7 +40,7 @@ invariants:
 current_status:
   summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, and complete Body plus Proposal Modeling lifecycles are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns both families' work discovery, deterministic launch, exact job-bound continuation, review, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities for repair, verdict, Research, Verification, planning, reorientation, generic coordinator presence, and residual status paths. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
-  latest_phase: Exact d1b031cb cuts Proposal Modeling from mutable thread and aggregate coordinator authority. EpiphanyCurrentWorkProjection now derives Proposal Launch, Wait, and Review from the immutable request, deterministic family launch binding, exact runtime attempt/result, and Modeling.proposal_frontier Mind commit. Proposal intake treats thread ID as creation provenance only. Operator, status, and Resident Self consume the same lifecycle; admission is owned by accept_proposal_modeling_result and commits exact keyed RepoModel writes through MindMutation. A shared launch CAS primitive publishes the runtime family, exact family binding, and scoped read grant while allowing unrelated Mind documents to commit concurrently. The aggregate coordinator launcher refuses proposal cargo, its proposal selector/validator/context builder are deleted, and generic Modeling can no longer carry a proposal hint. Focused lifecycle, Self-policy 26/26, core 564/564, and coordinator-runtime feature checks pass. Gate 1 remains paused because residual families still retain aggregate authority.
+  latest_phase: Exact 20dd66c8 deletes the dormant claim-repair request/launch authority after source inspection proved it had no production challenge producer, request caller, or acceptance proof. Request/binding/context schemas, runtime carriers and registration, coordinator validator/binding writer, reasoning projection, result cargo, exports, and OpenAI lowering are gone; the Eyes claim-challenge fact remains because it independently blocks unsafe planning. The full suite also exposed a concurrent Proposal launch race: launchability and attempt ordinal were being derived across two snapshots, allowing a second live attempt. Body and Proposal launch owners now revalidate against the exact cache snapshot used by their CAS. Proposal convergence passes 20/20 stress iterations; core 564/564, OpenAI runtime 43/43, Self policy 26/26, and coordinator-runtime checks pass. Gate 1 remains paused behind the live frontier-verdict and other aggregate families.
   operational_state:
     local_worktree: clean_at_latest_documentation_handoff
     operator_wireguard: restored
@@ -73,8 +73,8 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
-  unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for frontier-verdict, Research, Verification, planning, reorientation, and generic coordinator families, including status presence and parts of request selection. They own neither baseline Body nor Proposal Modeling. Claim-repair is a different wound: its exported request/launch schema still reads aggregate thread state, but source inspection found no production challenge producer, request caller, or acceptance proof, so it is dormant scaffold rather than a live family. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Delete the unowned claim-repair request/launch surface instead of migrating dead scaffolding; a future Eyes challenge must re-enter through an actual typed external-evidence obligation and family acceptance proof. Then migrate the live frontier-verdict Modeling chain from aggregate Verification acceptance/timestamp routing onto typed Soul verdict, exact route/request, the shared Modeling continuation vocabulary, deterministic job identity, and its existing Modeling.frontier_verdict MindMutation owner. Continue through Research, Verification, planning, and reorientation; then delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every residual behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
+  unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for frontier-verdict, Research, Verification, planning, reorientation, and generic coordinator families, including status presence and parts of request selection. They own neither baseline Body nor Proposal Modeling, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
+  next_action: Migrate the live frontier-verdict Modeling chain from aggregate Verification acceptance and accepted-at routing onto typed Soul verdict, exact route/request, the shared Modeling continuation vocabulary, deterministic job identity, and its existing Modeling.frontier_verdict MindMutation owner. Delete accepted_research_is_newest_unmodeled_boundary, latest accepted Verification selection, aggregate prompt construction, and generic role-lane review for this family. Continue through Research, Verification, planning, and reorientation; then delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every residual behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
 
 active_subgoals:
   - Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.