Record keyed Verification ownership cut
This commit is contained in:
Meta Vens
parent
fc5d1a4a84
commit
7501564f0a
5 changed files with 85 additions and 24 deletions
|
|
@ -4984,8 +4984,9 @@ gone. Verification proves concurrent launch convergence, exact Wait/Review,
|
|||
keyed admission, no thread-state envelope, core 564/564, Self policy 26/26, and
|
||||
the coordinator-runtime feature build.
|
||||
|
||||
Exact `e404c105` collapses the duplicated Body and Proposal Launch/Wait/Review
|
||||
enums into `EpiphanyModelingContinuationAction`. This type owns only the common
|
||||
Exact `e404c105` collapsed the duplicated Body and Proposal Launch/Wait/Review
|
||||
enums; exact `fc5d1a4a` names the now-shared vocabulary truthfully as
|
||||
`EpiphanyAgentPassContinuationAction`. This type owns only the common
|
||||
attempt-continuation vocabulary. It does not own request selection, result
|
||||
validity, mutation shape, or admission; those remain with the concrete Body and
|
||||
Proposal families. The shared vocabulary is therefore DRY without becoming a
|
||||
|
|
@ -5097,3 +5098,42 @@ omitted: later fields can occupy the wrong schema positions. CultCache exact
|
|||
named maps. `prepare_mind_document` is the single Mind boundary, and objective,
|
||||
Body, and Research writers use it. This is an encoding owner, not a second state
|
||||
format or compatibility path.
|
||||
|
||||
## Keyed frontier Verification lifecycle (2026-08-18)
|
||||
|
||||
Exact `fc5d1a4a` removes Verification from aggregate coordinator behavior. A
|
||||
successful exact Hands commit publishes its `HandsCommitReceipt` and derived
|
||||
`RepoFrontierVerificationRequest` in one CAS transaction. The request seals the
|
||||
route, exact frontier document, Hands authority, intent, review, patch receipt,
|
||||
command receipt, and commit receipt. The full RepoModel projection remains
|
||||
audit cargo and cannot turn unrelated graph work into a conflict.
|
||||
|
||||
- Owner: `project_current_work` derives Verification Launch/Wait/Review;
|
||||
`launch_current_frontier_verification_work` publishes the deterministic
|
||||
attempt; `accept_frontier_verification_result` alone admits the decision under
|
||||
`Soul.verification`.
|
||||
- Inputs: one exact routed frontier, one complete authorized Hands consequence,
|
||||
immutable Verification request and launch, terminal runtime result, sealed
|
||||
reasoning basis, and exact decision context.
|
||||
- Outputs: one keyed `EpiphanyMindVerificationAuditDocument`, one typed
|
||||
`SoulVerdictReceipt`, one deterministic `RepoFrontierModelingRequest`, and one
|
||||
atomic `EpiphanyMindCommitReceipt`.
|
||||
- Derived state: role boards, events, accepted-at timestamps, latest result
|
||||
slots, generic Verification status, and coordinator thread are display or
|
||||
transport projections only.
|
||||
- Forbidden writers: generic role launch/acceptance, aggregate thread updates,
|
||||
accepted-at comparisons, dynamic Hands telemetry prompt appenders, and the
|
||||
model cannot create, suppress, review, or admit Verification. The runtime,
|
||||
not model JSON, supplies request and route identity from the sealed launch.
|
||||
- Shared paths: operator, status, and Resident consume the same current-work
|
||||
projection and the same admission owner. Runtime fulfillment and archival use
|
||||
the same typed `FrontierVerification` request reference.
|
||||
- Cut line: the aggregate Soul-verdict acceptance prerequisite, latest Hands
|
||||
consequence selector, prompt-time request writer, and generic Verification
|
||||
launch/acceptance fallback are deleted. `EpiphanyAgentPassContinuationAction`
|
||||
shares only Launch/Wait/Review vocabulary across concrete pass families.
|
||||
- Verification: exact replay returns the original commit receipt; an unrelated
|
||||
keyed node commit between inference and admission merges; an exact-frontier
|
||||
change refuses admission with the copied store byte-identical. Core 559/559,
|
||||
OpenAI runtime 23/23, coordinator runtime 18/18, and both all-target checks
|
||||
pass.
|
||||
|
|
|
|||
|
|
@ -18,9 +18,9 @@ earned OpenAI-compatible authentication or model-transport capability.
|
|||
heartbeat physiology, Persona, and CultMesh integration. Its coordinator and
|
||||
status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`;
|
||||
that aggregate is an obsolete live authority and currently blocks fresh keyed
|
||||
stores from coordinating. Body, Proposal, and frontier-verdict Modeling have
|
||||
been removed from that authority; Research acceptance, Verification,
|
||||
planning, reorientation, and generic coordinator presence remain.
|
||||
stores from coordinating. Body, Proposal, frontier-verdict Modeling,
|
||||
Research, and Verification have been removed from that authority; planning,
|
||||
reorientation, and generic coordinator presence remain.
|
||||
- Native binaries expose coordinator, status, state, runtime, memory, daemon,
|
||||
Persona, repo-work, and Verse operations.
|
||||
- CultCache stores typed state and receipts; CultMesh/CultNet carry typed local
|
||||
|
|
@ -230,7 +230,7 @@ Cut in this order:
|
|||
status consumes the shared projection.
|
||||
3. **Baseline transaction landed at `9f7b164f`; operator routing at `587c56d2`; Resident continuation and keyed acceptance at `478fb923`:** baseline Body Modeling is now thread-free from unresolved Body obligation through Launch/Wait/Review and exact Mind admission. Resident and operator callers consume the same family projection and acceptance owner. Thread ID remains immutable pass provenance only.
|
||||
4. **Proposal Modeling landed at `d1b031cb`:** its immutable request, exact launch binding, runtime attempt/result, and `Modeling.proposal_frontier` commit now own Launch/Wait/Review and admission. The aggregate launcher refuses proposal cargo; the old selector, validator, context builder, and generic-launch hint are deleted. Body and Proposal share only the exact-envelope launch CAS invariant, not a mutable family registry.
|
||||
5. **Continuation vocabulary landed at `e404c105`:** Body and Proposal share one pure `EpiphanyModelingContinuationAction`; their semantic requests, projections, validators, and admission owners remain separate.
|
||||
5. **Continuation vocabulary landed at `e404c105` and was named truthfully at `fc5d1a4a`:** concrete pass families share one pure `EpiphanyAgentPassContinuationAction`; their semantic requests, projections, validators, and admission owners remain separate.
|
||||
6. **Dormant claim-repair authority deleted at `20dd66c8`:** no request/binding/context schema, runtime carrier, coordinator branch, result cargo, export, or model lowering survives. The independent Eyes challenge fact remains. The same pass fixed two-snapshot Body/Proposal launch derivation and stress-proved single Proposal launch 20/20.
|
||||
7. **Frontier-verdict Modeling landed at `d367e525`:** one exact Soul verdict
|
||||
atomically creates its deterministic request; the sealed role projection,
|
||||
|
|
@ -248,14 +248,22 @@ Cut in this order:
|
|||
writes merge. Accepted Eyes, role lanes, timestamps, generic regather, and
|
||||
Modeling hints cannot launch Eyes or gate Modeling. CultCache `ba6a487`
|
||||
supplies the shared named nested-document encoding boundary used by Mind.
|
||||
Migrate Verification, planning, and reorientation next from
|
||||
9. **Frontier Verification landed at `fc5d1a4a`:** one exact Hands commit and
|
||||
its deterministic Verification request publish atomically. The sealed
|
||||
request/launch/result/context lifecycle owns Launch/Wait/Review; admission
|
||||
writes the keyed audit, Soul verdict, frontier-Modeling request, and Mind
|
||||
commit receipt atomically. Disjoint keyed writes merge, exact-frontier drift
|
||||
refuses byte-identically, and replay is stable. Generic launch/acceptance,
|
||||
accepted-at/latest-result selection, dynamic telemetry prompts, and
|
||||
model-authored causal IDs no longer own this family.
|
||||
Migrate planning and reorientation next from
|
||||
aggregate state patches and generic role lanes to family-owned current-work
|
||||
projections, exact job identities, `MindMutation` plans, and exact commit
|
||||
receipts. Reuse pure invariant primitives, not a generic mutable registry.
|
||||
9. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
|
||||
10. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
|
||||
expected revisions, aggregate update APIs, and all source references from
|
||||
production. Refuse old writable stores; add no dual reader or migrator.
|
||||
10. Replay fresh-store concurrency and decision-context acceptance. Only then
|
||||
11. Replay fresh-store concurrency and decision-context acceptance. Only then
|
||||
restart Model Atlas Gate 1 from a new external root.
|
||||
|
||||
Do not preserve the aggregate for compatibility, manufacture a bootstrap
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ effects, receipts, Mind admission, brakes, external consequence gates, and
|
|||
terminal commit. Focused core and OpenAI-runtime Persona suites pass.
|
||||
|
||||
The five-day shakedown remains paused. The active branch includes exact
|
||||
`c7412998` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
|
||||
`fc5d1a4a` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
|
||||
vertical slice, ordinary Modeling authoring path, durable publisher identity,
|
||||
fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
|
||||
landed. Historical aggregate RepoModel and partial Gate stores are evidence
|
||||
|
|
@ -22,7 +22,8 @@ or repair path can restore their authority.
|
|||
This is not yet the full Concurrent Mind cut. Persisted
|
||||
`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple
|
||||
unmigrated launch/acceptance/status readers remain live production authorities.
|
||||
Baseline Body, Proposal, frontier-verdict Modeling, and frontier Research are no longer among them:
|
||||
Baseline Body, Proposal, frontier-verdict Modeling, frontier Research, and
|
||||
frontier Verification are no longer among them:
|
||||
keyed Mind owns their work projections, operator and Resident launch, exact job-bound
|
||||
continuation, review, and semantic admission. Research is driven only by an explicit
|
||||
external-evidence obligation; accepted Eyes state, timestamps, generic regather, and
|
||||
|
|
@ -56,7 +57,8 @@ canonical Eve schema IDs without dependency semantics. Eve exact `b597dab` and
|
|||
`gamecult.eve.surface.v1` retained tree for GUI and TUI.
|
||||
|
||||
Verification is green at the latest ownership cut: Epiphany core library
|
||||
561/561, OpenAI runtime 43/43, Self policy 26/26, and coordinator runtime 18/18.
|
||||
559/559, OpenAI runtime 23/23, coordinator runtime 18/18, and core/OpenAI
|
||||
all-target checks pass.
|
||||
An unfiltered core package run also exposed two pre-existing
|
||||
`epiphany-hands-action` fixture failures: those fixtures omit the exact
|
||||
`RepoFrontierHandsAuthority` already required by production. The gate was not
|
||||
|
|
@ -67,7 +69,8 @@ still reaches an older feature-gated workspace-coverage recovery smoke whose
|
|||
already-absent API predates this slice; no compatibility shim was added.
|
||||
|
||||
These are implementation and isolated proof claims. They are not sustained
|
||||
Starfire dogfood. Gate 1 is the next rite: use separate real stores and
|
||||
Starfire dogfood. Planning, reorientation, and final aggregate deletion are the
|
||||
next source rites; only then may Gate 1 use separate real stores and
|
||||
identities; keep impact ingress absent while ordinary Modeling seeds facts and
|
||||
publishers/projector establish signed sight; then engage all three Atlas brakes
|
||||
and prove later organ cycles are held while the last Eve projection remains
|
||||
|
|
@ -362,8 +365,9 @@ deleted. A shared exact-envelope launch CAS remains because it protects the
|
|||
same atomic publication invariant for Body and Proposal, not because it owns
|
||||
family policy.
|
||||
|
||||
Exact `e404c105` removes the duplicate Body/Proposal continuation enums. One
|
||||
`EpiphanyModelingContinuationAction` now names Launch, Wait, and Review; each
|
||||
Exact `e404c105` removed the duplicate Body/Proposal continuation enums; exact
|
||||
`fc5d1a4a` names the shared vocabulary `EpiphanyAgentPassContinuationAction`.
|
||||
It names Launch, Wait, and Review; each
|
||||
family retains its own request, projection, validity rules, and admission owner.
|
||||
|
||||
Exact `20dd66c8` deletes claim-repair's request/binding/context schemas, runtime
|
||||
|
|
@ -404,11 +408,20 @@ omitted middle optionals. CultCache exact `ba6a487` adds named nested preparatio
|
|||
Mind envelopes retain their typed numeric slots while nested document fields remain named.
|
||||
Objective, Body, and Research Mind writers now share that boundary.
|
||||
|
||||
Map and migrate Verification next onto its exact Hands consequence, request/launch,
|
||||
terminal decision context, typed audit, Soul verdict, and family-owned Mind commit. Delete
|
||||
generic role launch/acceptance, latest-result, accepted-at, and thread-state authority for
|
||||
that family. Continue with planning and reorientation, then delete the aggregate
|
||||
schema/transaction. Run the source
|
||||
Exact `fc5d1a4a` completes that Verification cut. The exact Hands commit and
|
||||
derived `RepoFrontierVerificationRequest` publish atomically; current-work owns
|
||||
Launch/Wait/Review; the sealed role projection carries the exact route,
|
||||
frontier, Hands authority and receipts; and `Soul.verification` admission writes
|
||||
the keyed audit, Soul verdict, deterministic frontier-Modeling request, and
|
||||
Mind commit receipt in one transaction. A disjoint keyed node commit merges,
|
||||
an exact-frontier change refuses byte-identically, and replay returns the
|
||||
original receipt. Generic Verification launch/acceptance, accepted-at/latest
|
||||
selection, dynamic telemetry prompt mutation, and model-authored causal IDs are
|
||||
gone.
|
||||
|
||||
Map and migrate frontier Planning and PlanMind next onto their exact frontier,
|
||||
candidate, decision-context, and keyed Mind authorities. Continue with
|
||||
reorientation, then delete the aggregate schema/transaction. Run the source
|
||||
guards and fresh-store concurrency/decision-context suite. Only after that may
|
||||
Model Atlas Gate 1 restart from a new external root. Keep the current fresh and
|
||||
partial roots read-only; do not release scheduling, register operational
|
||||
|
|
|
|||
Binary file not shown.
|
|
@ -38,9 +38,9 @@ invariants:
|
|||
- Evidence and git retain history; this map retains only state that changes future decisions.
|
||||
|
||||
current_status:
|
||||
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, and frontier-verdict Modeling lifecycles, and exact frontier Research lifecycle are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns these families' work discovery, deterministic launch, exact job-bound continuation, review, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities for Verification, planning, reorientation, generic coordinator presence, and residual status paths. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
|
||||
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, and frontier Verification lifecycles are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns these families' work discovery, deterministic launch, exact job-bound continuation, review, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities for planning, reorientation, generic coordinator presence, and residual status paths. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
|
||||
public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
|
||||
latest_phase: Exact c7412998 migrates frontier Research onto its immutable v3 request, exact frontier/dependency document authority, deterministic attempt, sealed reasoning basis and decision context, request/context-bound EyesEvidencePacket, and one Eyes.frontier_research MindMutation owner. The complete RepoModel view is audit cargo; only the exact frontier closure is a strong dependency. A terminal Research decision therefore remains durable after state changes, disjoint keyed writes merge at admission, and a changed frontier refuses admission byte-identically without rebasing the output. Eyes launches only from an explicit external-evidence obligation; accepted Eyes, role lanes, accepted-at timestamps, generic regather, and Modeling hints cannot create or gate Modeling. Exact ba6a487 adds named nested MessagePack preparation for Mind documents so omitted optional fields cannot shift later typed values while CultCache envelope slots remain stable. CultCache 42/42 active tests, core library 561/561, OpenAI runtime 43/43, Self policy 26/26, coordinator runtime 18/18, and all-target core compilation pass. The known unrelated epiphany-hands-action fixture failures remain; the production Hands gate was not weakened. Gate 1 remains paused behind Verification and the other aggregate families.
|
||||
latest_phase: Exact fc5d1a4a migrates frontier Verification onto one deterministic current-work lifecycle rooted in the exact Hands consequence and RepoFrontierVerificationRequest. The Hands commit atomically publishes its receipt and request; launch seals the exact request, route, frontier, Hands authority/intent/review/receipts, reasoning basis, and terminal decision context. Soul.verification admission atomically writes a keyed Verification audit, Soul verdict, deterministic frontier-Modeling request, and Mind commit receipt. The complete RepoModel view is audit cargo; exact frontier and Hands documents are strong authority. A terminal decision survives later state changes, disjoint keyed writes merge, an exact-frontier change refuses admission byte-identically, and exact replay returns the original receipt. Generic coordinator launch/acceptance, accepted-at/latest-result selection, aggregate Soul prerequisites, dynamic Verification telemetry prompts, and model-authored request/route identity are deleted. Launch/Wait/Review now share the truthful EpiphanyAgentPassContinuationAction vocabulary without a mutable registry. Core library 559/559, OpenAI runtime 23/23, coordinator runtime 18/18, and core/OpenAI all-target checks pass. Gate 1 remains paused behind planning, reorientation, and final aggregate deletion.
|
||||
operational_state:
|
||||
local_worktree: clean_at_latest_documentation_handoff
|
||||
operator_wireguard: restored
|
||||
|
|
@ -73,8 +73,8 @@ current_status:
|
|||
starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
|
||||
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
|
||||
resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
|
||||
unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for Verification, planning, reorientation, and generic coordinator families, including status presence and residual result selection. They own none of the migrated Modeling or Research families, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
|
||||
next_action: Map and migrate Verification from generic role launch/acceptance and aggregate thread-state receipts onto its exact Hands consequence, RepoFrontierVerificationRequest, launch/result/decision context, typed Verification audit, Soul verdict, and a family-owned keyed Mind mutation. The terminal decision must remain durable when a strong route/frontier dependency changes, while admission refuses without partial mutation or rebasing. Delete latest-result and accepted-at selection, aggregate Verification acceptance, and any Eyes dependency. Then continue through planning and reorientation; finally delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every residual behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
|
||||
unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for planning, reorientation, and generic coordinator families, including status presence and residual result selection. They own none of the migrated Modeling, Research, or Verification families, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
|
||||
next_action: Map and migrate the planning family from aggregate role lanes and thread-state decisions onto exact frontier Planning and PlanMind requests, candidates, sealed decision contexts, and family-owned keyed Mind mutations. Imagination may propose futures but only Mind may adopt a plan; exact frontier/dependency documents and the adopted candidate are strong authority, while unrelated keyed changes merge. Delete accepted-at/latest-slot/thread revision behavior and any request identity that still includes thread provenance. Then migrate reorientation; finally delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every residual behavioral reader/writer. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
|
||||
|
||||
active_subgoals:
|
||||
- Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.
|
||||
|
|
|
|||
Reference in a new issue