diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 009d848f..8f710fc2 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -1087,6 +1087,16 @@ their exact job result before retry. Runtime writable state is v41. The next audit boundary is the remaining job role/session join and generic terminal-result cargo, not another lifecycle layer. +Exact `10a70afc` removes the remaining generic job ownership mirrors. +`EpiphanyRuntimeJob` now owns only its semantic identity and the mutable +Queued/Completed/Failed latch. The sealed outer-worker launch owns role; +`EpiphanyRuntimeModelExecutionBinding` owns model-session membership; outer +workers belong to the root session by construction. Session closure, retention, +and tool admission derive those exact joins. Generic job results no longer copy +role/session and lose their always-empty metadata map. A job snapshot requires +zero or one exact terminal result and refuses multiplicity rather than choosing +by completion time. Runtime writable state is v42. + The sealed typed launch owns exact live request association. The terminal role result owns only semantic decision cargo or typed failure. The archived attempt owns historical request kind/ID and typed terminal classification after the diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index a5445b80..85fbcd85 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -828,6 +828,15 @@ Cut in this order: successful authorities, and never selects work by timestamp order. Runtime is v41; the cut removes 67 maintained lines net. The remaining audit target is duplicated role/session identity and generic terminal-result cargo. +50. **Runtime job ownership is derived at `10a70afc`:** the generic job is only + job identity plus Queued/Completed/Failed status. Sealed launches own + outer-worker role, model bindings own model-session membership, and root + membership is structural. Jobs/results lose role/session mirrors, result + metadata disappears, launch options lose three unused fields, and duplicate + terminal results refuse instead of sorting by time. Runtime is v42; 73 + maintained lines are removed net. Next audit generic result cargo by terminal + family so structured mirrors disappear without deleting the only failure + account. Do not preserve the aggregate for compatibility, manufacture a bootstrap thread, release autonomous scheduling, register topology in `gamecult-ops`, diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 92fa64ae..2fcde1c3 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -152,6 +152,20 @@ model-runtime checks pass. The cut removes 67 maintained lines net. Verification generated 3.2 GiB across 4,498 files; cleanup restored only the authenticated 1,776,640-byte state inspector. +Exact `10a70afc` makes the generic runtime job an identity/status latch only. +The sealed worker launch owns outer-worker role; the model execution binding +owns model-session membership; outer workers belong structurally to the root +session. Jobs and generic results lose role/session mirrors, results lose their +empty metadata map, and heartbeat launch options lose constant root-session plus +unused objective/note cargo. Session closure, retention, and tool admission +derive exact joins. Job snapshots refuse multiple terminal results instead of +selecting one by completion time. Runtime advances to v42. Keyed lifecycle, +model-failure audit, transcript-free binding, tool continuation, Persona replay, +coordinator terminality, epoch refusal, OpenAI runtime, release coordinator, and +release model-runtime checks pass. The cut removes 73 maintained lines net. +Verification generated 3.7 GiB across 4,764 files; cleanup restored only the +authenticated 1,776,640-byte state inspector. + Exact `a6cf9383` quarantines concrete Codex/OpenRouter authentication, credential reading, and network transport at the two release entrypoints that perform inference. `epiphany-openai-runtime` now owns only exact native-request @@ -1237,13 +1251,13 @@ coordinator `12/12`, swarm `10/10`, and model-runtime `13/13`. ## Immediate next action The Ox17 deployment lane remains paused. Continue subtraction from exact -`a46725a1`: map every producer and consumer of `EpiphanyRuntimeJob.role` and -`session_id` plus generic terminal job-result role/session/summary cargo against -sealed worker launches, model bindings, structured role results, typed pass -failures, process claims, and archived attempts. Delete mirrors whose exact -owner already exists; preserve only the minimal join or terminal latch that -prevents an invalid consequence. Do not replace them with a registry, adapter, -compatibility reader, or latest head. The Connector CultMesh/Idunn/Yggdrasil proof and +`10a70afc`: partition `EpiphanyRuntimeJobResult` consumers by structured +role/reorientation success, typed model-pass failure, transport completion, and +process-death recovery. Delete summary, next-move, evidence, and artifact mirrors +where the exact structured owner already exists; preserve the minimal +verdict/time/context or failure account needed for physiology, audit, replay, +and retention. Do not replace removed cargo with metadata, a summary DTO, +compatibility reader, or latest selector. The Connector CultMesh/Idunn/Yggdrasil proof and Ghostlight adoption remain queued behind source stabilization. Preserve keyed Mind, direct Body-to-Modeling flow, consequence receipts, and the complete Model Atlas vertical slice; no live inter-swarm collaboration has run. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 5c9d3c49..5c78a535 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index 8d023c57..815cb6d7 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -75,14 +75,15 @@ current_status: semantic_cache_cut: Exact 856648de deletes the unused semantic-memory and workspace-coverage projection subsystem rather than preserving a second derived model of Mind. Four binaries, the local daemon supervisor, Qdrant/Ollama/Postgres configuration, projector policy/lifecycle/heartbeat/recovery state, semantic query/context packets, aggregate model revision/hash cargo, workspace file-cache reader, and Persona's always-empty semantic-recall fields are gone. No agent request builder or sealed reasoning projection consumed this cache. Modeling now reads the exact typed Body and keyed RepoModel projection directly; future retrieval evidence must enter through an earned typed provider receipt. Idunn remains the sole deployment and daemon-survival authority. Core 165/165, OpenAI runtime 25/25, and release construction 19/19 pass. repo_model_vocabulary_cut: Exact 6ea4ff3c deletes the redundant generic memory profile, dead SHA-1 ID factory, empty profile module, cache-only node/edge kinds, and impossible lifecycle variants. Exact 5218cf2c deletes the producerless RepoModel lifecycle-receipt family. Exact 8bb039af makes domains seed-owned and deletes the unreachable summary mutation/document/validation/registry path plus the test cargo that alone produced it. Exact ab1afc27 removes node salience/confidence and edge confidence because no owner read, validated, routed, or displayed those values. Modeling can author only the keyed repository operations advertised by its provider schema. Affected targets check cleanly; core remains 165/165, RepoModel 5/5, and reasoning-context 8/8. package_baseline: Exact d2ca66301fb6af4e7d2d27fff0b772b0f0fccdf4 remains the admitted production source and current symlink target. Its native serialized full-workspace gate passed with receipt SHA-256 de0fc6b360ce03493b13208d917dc8349801f03364617d966152c85846c47482. Idunn sealed 26 root-owned non-writable binaries plus release-witness.ccmp as release sha256-46407552b4a0937f63d2b7f2bd09a1dacb89d671a6e3807c97209159541aef06; witness-file SHA-256 is 348785ffb0fc3130d3b4538329870c6e6f8442a8da4a01b32fa9b7ffb1f01357. Source 9b9b5c85 also passed Idunn's native test gate under receipt SHA-256 6c6a71359f8c31297419665d2872f6982a89f84e197d71fc5b36a7fc86216093 and remains sealed as release sha256-30a910785a380224bbdbd56a7b742c8d058fa70cb72dab3562e3907903e0d191 with witness-file SHA-256 75bf52d31c56ea3b08e1a702273301c1db12a4b1ffae45e3d948ce8a29b50e1d. A foreign-target helper restarted Idunn during the Epiphany transaction; rollback restored d2ca, removed deployment.env, and left production Epiphany units inactive. OpenRouter model stealth/ox-alpha and its systemd-injected credential are readiness-proven. Idunn is active with zero restarts and its deployment brake is engaged. - summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. Exact edb5c3a3 deletes the launch, heartbeat, and terminal-result family identity mirrors: the sealed typed launch owns live pass identity and the archived attempt owns historical request identity. Exact cabdd6c3 separates immutable coordinator incarnation basis/terminality from minimal model-session admission and removes the remaining session prose, clocks, dead states, redundant options, and whole-store coordinator snapshot. Exact a46725a1 reduces runtime jobs to Queued/Completed/Failed admission latches and removes timestamp selection from Research. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused. + summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. Exact edb5c3a3 deletes the launch, heartbeat, and terminal-result family identity mirrors: the sealed typed launch owns live pass identity and the archived attempt owns historical request identity. Exact cabdd6c3 separates immutable coordinator incarnation basis/terminality from minimal model-session admission and removes the remaining session prose, clocks, dead states, redundant options, and whole-store coordinator snapshot. Exact a46725a1 reduces runtime jobs to Queued/Completed/Failed admission latches and removes timestamp selection from Research. Exact 10a70afc derives job role/session ownership from sealed launches and model bindings, leaving the generic job as identity plus status. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused. public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets. competitive_launch_signal: The 2026-08-22 Munder Difflin launch analysis in notes/munder-difflin-launch-intelligence-2026-08-23.md is the current Eyes/Imagination owner for this category signal. It establishes strong demand to try a packaged, local, visual multi-agent control plane and supplies repeated qualitative demand for an operator-attention surface over plans, questions, blockers, decisions, consequences, and liveness; it does not establish retention, reliable autonomy, or paid product-market fit. Munder is materially ahead in installation, cross-platform reach, provider reuse, category compression, community formation, and feedback velocity. Its public failures make renderer-owned physiology, cross-Body restoration, proxy safety metrics, false consequence receipts, provider parity, and marketed-but-unavailable federation concrete falsification targets. Epiphany does not yet own a general operator UI: Persona projection into shared asynchronous chat is the concrete human surface, while CultMesh remains projection-neutral. Social Aquarium, a dense operator cockpit, TUI, and audit surfaces may use distinct Eve compositions over the same provider-owned facts. A one-hour projection experiment and managed continuity/federation remain evidence-led options rather than adopted roadmap authority; the source-subtraction and test-authority audit remains next. - latest_phase: Fresh-package Ox17 remains paused while source subtraction continues. The live source owns keyed Mind, sealed reasoning projections and exact provider requests, direct Body-to-Modeling work, typed frontier planning, Persona, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts. Provider events and receipts are transient transport values normalized into one native persisted model stream/receipt family. The pure OpenAI runtime library opens exact model execution and admits typed provider events. OpenRouter auth/networking remains a direct release-entrypoint boundary; Codex transport crosses the lean authenticated CodexConnector client ABI and no Codex auth, HTTP/SSE, Codex-home, or compiled Codex dependency remains in Epiphany. Runtime model bindings are request-to-session/job edges; provider, worker ancestry, and reasoning basis remain on the native model request. Runtime tool bindings are intent-to-session/job edges; model ancestry remains on the exact tool intent. Workers use one governed tool-capable route; no parallel no-tools mode survives. The sealed typed worker launch is the sole live owner of pass-family identity; terminal role results contain semantic decision cargo rather than routing echoes, and archived attempts retain historical request identity plus the structured decision. Runtime jobs are only mutable Queued-to-Completed-or-Failed admission latches; clocks and unowned intermediate states are absent, and Research derives attempt authority as an exact set rather than timestamp order. Runtime child documents, Hands consequence receipts, and repository-frontier documents carry only causal identity, lifecycle, strong dependencies, semantic payload, and consequence; CultCache plus the runtime root epoch own internal type/schema identity. Runtime identity and swarm binding retain their explicit epoch fields. Sealed worker contexts retain explicit schema and contract because they are exact model input. Autonomous proposal origin belongs to the Proposal-Modeling request; there is no companion binding document or stored hash echo. The immutable repository-domain receipt carries only the canonical repository name and exact authenticated Body hash; runtime, swarm, workspace, envelope identity/schema, prose, and time remain derived. Operator objective intake carries only thread provenance, the asserted objective, source actor/reference, and submission time; CultCache owns envelope identity/schema and the Mind objective owns active state. Persona-memory v2 owns exact Interpreter effect/context provenance; Persona social mention v2 relies on its queue and turn request for routing; tool-receipt v1 owns exact result JSON or error. Research authenticates the real Substrate Gate grant and tool receipts in place, then writes keyed evidence/observations under one exact `Eyes.frontier_research` Mind commit; no source-lookup document or evidence packet survives. Resident Self state v3 and retention head v1 retain lifecycle counts and the exact deletion chain without a causal clock. Mind/runtime writable epochs are v10/v41. The public CultNet catalog contains only three earned portable boundaries: exact OpenAI-compatible provider request, Persona state, and work-organ state. Old writable stores refuse with no migrator or dual reader. Brokkr owns Unity through Eve/CultMesh; a future Rider daemon owns Rider. No Idunn build, package, deployment, Ox root, or Model Atlas Gate run is authorized. Ox16 remains sealed historical evidence. + latest_phase: Fresh-package Ox17 remains paused while source subtraction continues. The live source owns keyed Mind, sealed reasoning projections and exact provider requests, direct Body-to-Modeling work, typed frontier planning, Persona, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts. Provider events and receipts are transient transport values normalized into one native persisted model stream/receipt family. The pure OpenAI runtime library opens exact model execution and admits typed provider events. OpenRouter auth/networking remains a direct release-entrypoint boundary; Codex transport crosses the lean authenticated CodexConnector client ABI and no Codex auth, HTTP/SSE, Codex-home, or compiled Codex dependency remains in Epiphany. Runtime model bindings are request-to-session/job edges; provider, worker ancestry, and reasoning basis remain on the native model request. Runtime tool bindings are intent-to-session/job edges; model ancestry remains on the exact tool intent. Workers use one governed tool-capable route; no parallel no-tools mode survives. The sealed typed worker launch is the sole live owner of pass-family identity; terminal role results contain semantic decision cargo rather than routing echoes, and archived attempts retain historical request identity plus the structured decision. Runtime jobs are only mutable job-identity plus Queued/Completed/Failed admission latches; clocks, role/session mirrors, and unowned intermediate states are absent. Model bindings own model-session membership, sealed launches own outer-worker role, root membership is structural, and Research derives attempt authority as an exact set rather than timestamp order. Runtime child documents, Hands consequence receipts, and repository-frontier documents carry only causal identity, lifecycle, strong dependencies, semantic payload, and consequence; CultCache plus the runtime root epoch own internal type/schema identity. Runtime identity and swarm binding retain their explicit epoch fields. Sealed worker contexts retain explicit schema and contract because they are exact model input. Autonomous proposal origin belongs to the Proposal-Modeling request; there is no companion binding document or stored hash echo. The immutable repository-domain receipt carries only the canonical repository name and exact authenticated Body hash; runtime, swarm, workspace, envelope identity/schema, prose, and time remain derived. Operator objective intake carries only thread provenance, the asserted objective, source actor/reference, and submission time; CultCache owns envelope identity/schema and the Mind objective owns active state. Persona-memory v2 owns exact Interpreter effect/context provenance; Persona social mention v2 relies on its queue and turn request for routing; tool-receipt v1 owns exact result JSON or error. Research authenticates the real Substrate Gate grant and tool receipts in place, then writes keyed evidence/observations under one exact `Eyes.frontier_research` Mind commit; no source-lookup document or evidence packet survives. Resident Self state v3 and retention head v1 retain lifecycle counts and the exact deletion chain without a causal clock. Mind/runtime writable epochs are v10/v42. The public CultNet catalog contains only three earned portable boundaries: exact OpenAI-compatible provider request, Persona state, and work-organ state. Old writable stores refuse with no migrator or dual reader. Brokkr owns Unity through Eve/CultMesh; a future Rider daemon owns Rider. No Idunn build, package, deployment, Ox root, or Model Atlas Gate run is authorized. Ox16 remains sealed historical evidence. execution_binding_authority_cut: Exact ce6bff12 reduces model and tool execution bindings to the only facts they own. A model binding maps one native request to its runtime session and job; a tool binding maps one typed intent to its runtime session and job. Provider identity, source worker, reasoning basis, and model-request ancestry are no longer copied into bindings or compared through timestamp-shaped API arguments. Validation, retention, public-source lookup, worker terminality, decision sealing, and tool continuation reload the exact native request or tool intent. Runtime writable state advances to v37. Core, epoch refusal, transcript-free decision audit, OpenAI tool continuation, and the release-owned tool runtime pass. The cut removes 67 net source lines and leaves runtime_spine.rs at 9,300 physical lines with 50 public functions and 25 public structs. Verification generated 12.713 GiB across 19,134 files; Cargo cleanup restored the single 1.78 MiB state inspector. Atlas is untouched; no live inter-swarm collaboration has run. provider_transport_boundary_cut: Exact ed7357a2 removes Codex transport from Epiphany's compiled body. The complete epiphany-openai-codex-spine package, codex-login/codex-client graph, CODEX_HOME/auth.json readiness, direct Codex HTTP/SSE, and Codex credential creation/argv are gone. Model and Persona entrypoints use the lean typed client from exact CodexConnector 54d8bc2525b7e7fa1b9dd26b95871247ff4c7566 over authenticated loopback MessagePack; Connector owns Codex auth, transport, replay, and exact native/provider digest receipts. Epiphany retains sealed native/provider requests, strict schema/call-ID projection, tool continuation, decision admission, and typed receipt evidence. OpenRouter remains one direct ureq/Rustls boundary with its own credential and terminal-tool dialect. Model receipts advance to v1 and runtime to v38; caller identity, both request digests, and cached-token usage survive transcript deletion. The maintained non-lock source shrinks by 857 lines and Cargo.lock drops 4,830 lines. Core 150/150, runtime 21/21, adapter 5/5, model edge 12/12, Persona 1/1, exact launch checks, and focused no-deps Clippy pass. Two focused build roots totaling 10.8 GiB were removed; only the exact 1,776,640-byte state inspector at SHA-256 DD38855C6F092C2C53D2212A938E737643F41130F4681708840BA6075320A04E remains. Atlas is untouched and no collaboration acceptance is claimed. runtime_session_authority_cut: Exact cabdd6c3 removes coordinator process incarnations from the generic model-session aggregate. EpiphanyRuntimeSession now contains only grouping identity plus active/completed admission state. Immutable EpiphanyCoordinatorRunBasis records exact thread, resident launch, objective, and start provenance. Exact completion/failure receipts and process-death recovery compete through one deterministic EpiphanyCoordinatorRunTerminality identity, so one full typed authority wins while unrelated document inserts merge. Objective prose, clocks, coordinator notes, four unused status variants, the one-field session-options wrapper, and the dead whole-snapshot append helper are deleted. Runtime advances to v40 with no compatibility reader. The focused Core, model-failure audit, Persona, coordinator terminality/conflict, release coordinator, and release model-runtime checks pass. The code cut removes 62 maintained lines net. Verification created 6.3 GiB across 7,017 Cargo files; cleanup restored exactly the 1,776,640-byte state inspector at SHA-256 DD38855C6F092C2C53D2212A938E737643F41130F4681708840BA6075320A04E. Atlas remains untouched and no live inter-swarm collaboration is claimed. runtime_job_authority_cut: Exact a46725a1 removes timestamp causality and dead transition theater from EpiphanyRuntimeJob. The job is now the minimal mutable admission latch from Queued to Completed or Failed; Running, WaitingForReview, Cancelled, created_at, and updated_at are gone. Research no longer chooses a latest attempt by creation time: it derives the exact attempt set, refuses multiple live or multiple successful authorities, requires terminal evidence for failures, and otherwise projects launch, wait, or review deterministically. Runtime advances to v41 with no compatibility reader. Core, old-epoch refusal, model-failure audit, Persona replay, OpenAI runtime, release coordinator, and release model-runtime checks pass. The cut removes 67 maintained lines net. Verification created 3.2 GiB across 4,498 Cargo files; cleanup restored exactly the authenticated 1,776,640-byte state inspector. Atlas remains untouched and live inter-swarm collaboration remains unproven. + runtime_job_binding_cut: Exact 10a70afc makes EpiphanyRuntimeJob a two-field identity/status latch. The sealed worker launch owns outer-worker role; EpiphanyRuntimeModelExecutionBinding owns model-session membership; outer workers belong to the root session by definition. Role and session disappear from jobs and generic job results, the result's always-empty metadata map is deleted, and heartbeat launch options lose constant root-session plus unused objective/note cargo. Session closure and retention derive their exact job set from model bindings; tool ownership derives from either the sealed launch or one exact model binding; duplicate terminal results refuse instead of sorting by completion time. Runtime advances to v42 without a compatibility reader. Keyed lifecycle, model-failure audit, transcript-free binding, tool continuation, Persona replay, coordinator terminality, epoch refusal, OpenAI runtime, release coordinator, and release model-runtime checks pass. The cut removes 73 maintained lines net. Verification created 3.7 GiB across 4,764 Cargo files; cleanup restored exactly the authenticated 1,776,640-byte state inspector. Atlas remains untouched and live inter-swarm collaboration remains unproven. standalone_codex_transport_target: Independent GameCult/CodexConnector exact 54d8bc2525b7e7fa1b9dd26b95871247ff4c7566 owns one Cargo package and one public daemon binary. Its default library is the lean encrypted client/contract ABI; the daemon feature adds the public service, bounded raw Responses transport, the private digest-pinned official codex app-server credential child, and keyed CultCache replay. Active identity is sealed before provider I/O; the exact encrypted completion is durable before reply; completed replay survives restart byte-identically; restart-era active work refuses as indeterminate without consuming current capacity. Callers own native/provider projection, prompts, tools, decisions, and admission. Redacted CultMesh/Odin readiness, the independent Idunn target, Yggdrasil service installation, and Ghostlight's consumer/deployment cut remain open. No live credential or deployment authority has moved. fixed_routing_and_retention_cargo_cut: Exact ffd91c20 deletes EyesEvidencePacket.source_role_id, PersonaSocialMention.target_agent_id, and ResidentSelfRetentionHead.retained_at_millis. Each producer supplied one fixed or non-causal value and no consumer read it; the request/context, Persona queue plus turn request, and retention chain remain the real owners. Eyes packet v2, Persona mention v2, Resident Self state v3/retention head v1, and runtime v27 form a hard cut. Core and the three consuming release entrypoints compile; consequential Persona, Research, and epoch-refusal proofs pass. The maintained source delta is 6 net deletions. Atlas is untouched; no live inter-swarm collaboration has run. provider_stream_authority_cut: Exact fe118e13 makes OpenAI/OpenRouter events and receipts transient transport values. The runtime immediately normalizes them into the single persisted native model event/receipt family used by tool continuation, assistant reconstruction, terminal validation, and bounded retention. Duplicate provider writes, registrations, archive requirements, schema IDs, two public schemas/index rows, and the include-only model-runtime shell are gone; the exact provider request remains durable. Runtime advances to v28 and the catalog drops to 18 schemas. The cut removes 270 net maintained lines. Adapter 1/1, provider spine 14/14, reasoning context 8/8, runtime 23/23, model entrypoint 11/11, swarm 4/4, epoch refusal 1/1, and release construction 15/15 pass. Atlas is untouched; live inter-swarm collaboration remains unproven. @@ -182,10 +183,10 @@ current_status: starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 - unresolved_authority: `runtime_spine.rs` remains the largest central liability; it still mixes immutable identity, model sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. The sealed launch solely owns live family identity and archived attempts own retained request identity. Exact cabdd6c3 removes coordinator runs from the generic session aggregate; exact a46725a1 reduces generic jobs to role, session membership, and a Queued/Completed/Failed admission latch with no causal clocks. Role and session are still echoed beside immutable launches or model bindings and terminal job results still mirror role/session plus model-authored summaries already present in structured terminal decisions. Audit those remaining joins and cargo before considering a split or abstraction. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Bifrost's Discord delivery path remains an earned privilege boundary and its Yggdrasil issuer/crossing route still requires owning-lane repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Continue source subtraction from exact a46725a1. Map every producer and consumer of EpiphanyRuntimeJob.role/session_id and EpiphanyRuntimeJobResult role/session/summary cargo against sealed worker launches, model execution bindings, structured role results, typed pass failures, process claims, and archived attempts. Delete mirrors whose owner is already exact; retain only the minimal join or terminal latch required to prevent an invalid consequence. Do not add a registry, adapter, compatibility reader, or latest head. Keep the standalone Connector readiness/Idunn/Yggdrasil/Ghostlight deployment sequence queued until the source body stabilizes. Preserve one refresh writer, consumer-owned prompts/tools/admission, and the complete unrun Model Atlas vertical slice. Do not run a local full-workspace compile, package, live credential transfer, Ox root, or Model Atlas Gate run. + unresolved_authority: `runtime_spine.rs` remains the largest central liability; it still mixes immutable identity, model sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. The sealed launch solely owns live family identity and archived attempts own retained request identity. Exact cabdd6c3 removes coordinator runs from the generic session aggregate; exact a46725a1 removes job clocks and dead states; exact 10a70afc reduces the job itself to identity plus Queued/Completed/Failed status while sealed launches and model bindings own role/session joins. Generic terminal job results still copy summary, next move, evidence, and artifact cargo from structured role/reorientation outcomes, but they are also the terminal physiology for model transport and process-death failures. Audit each field by terminal family before subtracting it; do not erase the only typed failure account. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Bifrost's Discord delivery path remains an earned privilege boundary and its Yggdrasil issuer/crossing route still requires owning-lane repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only. + next_action: Continue source subtraction from exact 10a70afc. Partition EpiphanyRuntimeJobResult consumers by terminal family: structured role/reorientation success, typed model-pass failure, transport completion, and process-death recovery. Delete summary/next/evidence/artifact mirrors where an exact structured owner already exists; preserve the minimal verdict/time/context or failure account needed for physiology, audit, replay, and retention. Replace no field with metadata, a summary DTO, a compatibility reader, or a latest selector. Keep the standalone Connector readiness/Idunn/Yggdrasil/Ghostlight deployment sequence queued until the source body stabilizes. Preserve one refresh writer, consumer-owned prompts/tools/admission, and the complete unrun Model Atlas vertical slice. Do not run a local full-workspace compile, package, live credential transfer, Ox root, or Model Atlas Gate run. - runtime_spine_surface_cut: `runtime_spine.rs` owns immutable runtime identity, minimal model sessions/jobs and process claims, model/tool execution bindings, family admission, consequence receipts, retention, and identity-resurrection fences. Provider requests remain exact durable audit input; provider events/receipts normalize into one native persisted stream/receipt family. The sealed typed launch document owns live pass-family identity. Terminal role results carry semantic outcome or typed failure, never duplicate family, route, or Body-basis routing fields. Archived worker attempts retain exact request kind/ID, deletion digest, decision context, structured result, and terminal job records after live launch deletion. Model sessions carry only grouping identity plus active/completed admission state. Coordinator incarnation launch provenance is an immutable typed basis; one deterministic typed terminality identity admits the exact full run receipt or death recovery and makes competing terminal outcomes conflict without fencing unrelated documents. Runtime jobs carry only job identity, session join, role, and the Queued/Completed/Failed admission latch. No job clock or intermediate status participates in causality; Research refuses ambiguous attempt sets instead of selecting a latest timestamp. Terminal job results carry summaries, evidence, artifacts, and decision-context identity. Completed model-session retention writes one private resurrection tombstone. Mind/runtime writable epochs are v10/v41. Runtime identity and swarm binding retain explicit epoch fields; their child physiology, Hands consequence, and repository-frontier documents rely on CultCache type/schema identity rather than carrying fixed duplicate metadata. Sealed worker contexts keep exact model-input schema and contract. Autonomous proposal promotion commits one proposal/request pair; the request owns its exact origin identities. Research coverage derives from the exact structured result and `Eyes.frontier_research` commit receipt, not a companion packet. Persona delivery consequence identity belongs to the social terminal while Bifrost retains the signed crossing request/receipt. Family launch CAS, model execution, and coordinator basis admission are the only session/job creation owners. Continue subtraction by auditing the remaining role/session joins and terminal-result cargo against their exact sealed owners; do not recreate deleted authority through registries, adapters, compatibility readers, or summary DTOs. + runtime_spine_surface_cut: `runtime_spine.rs` owns immutable runtime identity, minimal model sessions/jobs and process claims, model/tool execution bindings, family admission, consequence receipts, retention, and identity-resurrection fences. Provider requests remain exact durable audit input; provider events/receipts normalize into one native persisted stream/receipt family. The sealed typed launch document owns live pass-family identity and outer-worker role. Model execution bindings own model-session membership; outer-worker root membership is structural. Archived worker attempts retain exact request kind/ID, deletion digest, decision context, structured result, and terminal job records after live launch deletion. Model sessions carry only grouping identity plus active/completed admission state. Coordinator incarnation launch provenance is an immutable typed basis; one deterministic typed terminality identity admits the exact full run receipt or death recovery and makes competing terminal outcomes conflict without fencing unrelated documents. Runtime jobs carry only job identity plus the Queued/Completed/Failed admission latch. No job clock, role/session mirror, intermediate status, or latest-result selector participates in causality. Terminal job results carry verdict, summary, completion time, next move, evidence, artifacts, and decision-context identity; role/session and the empty metadata map are gone. Completed model-session retention derives its exact jobs from model bindings and writes one private resurrection tombstone. Mind/runtime writable epochs are v10/v42. Runtime identity and swarm binding retain explicit epoch fields; their child physiology, Hands consequence, and repository-frontier documents rely on CultCache type/schema identity rather than carrying fixed duplicate metadata. Sealed worker contexts keep exact model-input schema and contract. Autonomous proposal promotion commits one proposal/request pair; the request owns its exact origin identities. Research coverage derives from the exact structured result and `Eyes.frontier_research` commit receipt, not a companion packet. Persona delivery consequence identity belongs to the social terminal while Bifrost retains the signed crossing request/receipt. Family launch CAS, model execution, and coordinator basis admission are the only session/job creation owners. Continue subtraction by auditing generic terminal-result cargo per terminal family; do not recreate deleted authority through registries, adapters, compatibility readers, or summary DTOs. runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains. diff --git a/state/scratch.md b/state/scratch.md index 5143ede3..802b01f1 100644 --- a/state/scratch.md +++ b/state/scratch.md @@ -238,13 +238,20 @@ and janitors may reduce the symptom but cannot substitute for deleting code. authority from the exact attempt set and refuses multiple live or successful authorities instead of choosing the newest timestamp. Runtime is v41; 67 maintained lines are removed net. -42. Next: audit the remaining job `role`/`session_id` joins and generic terminal - job-result cargo against sealed worker launches, model bindings, structured - outcomes, typed failures, process claims, and archives. Preserve only facts - that prevent an invalid consequence. -43. Continue the public runtime-spine and test-liability audit by live owner +42. Done: exact `10a70afc` reduces `EpiphanyRuntimeJob` to identity plus status. + Sealed launches own outer-worker role, model bindings own model-session + membership, and outer workers belong structurally to the root session. Jobs + and generic results lose role/session mirrors; results also lose their empty + metadata map. Session closure, tool ownership, and retention derive exact + joins; duplicate results refuse instead of sorting by time. Runtime is v42; + 73 maintained lines are removed net. +43. Next: audit generic terminal-result summary, next-move, evidence, and + artifact cargo separately for structured outcomes, typed model failures, + transport completion, and process death. Preserve the only typed failure + account; delete mirrors where an exact owner already exists. +44. Continue the public runtime-spine and test-liability audit by live owner and consequential invariant. Do not subtract the unrun Atlas vertical slice; no inter-swarm collaboration has yet been exercised. Streamline it only around its one end-to-end authority map. -44. Run focused tests after each cut. Only after source subtraction stabilizes +45. Run focused tests after each cut. Only after source subtraction stabilizes should Idunn's build scratch contract be reconsidered.