diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index e1e2dccb..2c779bab 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -1,8 +1,8 @@ # Epiphany current algorithmic map Updated: 2026-08-24 -Latest committed implementation cut: `fe118e13` on `codex/epiphany-shakedown-live` -Current worktree cut: documentation/evidence for singular native model-stream ownership; +Latest committed implementation cut: `8bb0719b` on `codex/epiphany-shakedown-live` +Current worktree cut: documentation/evidence for earned CultNet publication boundaries; Ox17 remains paused This document describes the live machine. Historical cuts, rejected paths, and @@ -76,6 +76,19 @@ public CultNet schemas are deleted. Runtime advances to v28; the public catalog has 18 schemas. `epiphany-model-runtime` now points directly at its executable body instead of compiling through an include-only shell. Atlas is untouched. +Schema publication is not a shadow registry. Exact `dbed11b3` deletes the +nonexistent runtime-event contract and the obsolete public schema for the +private archived-session tombstone. Exact `8bb0719b` then removes every +runtime-local identity, session, job, binding, coordinator, native model/tool, +and state-ledger JSON mirror. Those documents remain typed CultCache state and +are discovered from the native registration or projected by their owning +CultMesh provider; no live CultNet crossing consumed the hand-maintained JSON, +and several schemas contradicted their Rust owners. The catalog now contains +only three earned portable boundaries: the exact OpenAI-compatible provider +request, `gamecult.persona_state.v0`, and `epiphany.work_organ_state.v0`. The +two cuts remove 850 net maintained lines. Atlas remains untouched and untested +end to end. + CultMesh contains no JSON-derived operator snapshot, coordinator receipt, Hands gate, role-review event, unauthenticated Odin/Eve provider row, or daemon tool directory. Native runtime and keyed Mind receipts remain the owners; old diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index ba17c5b7..eeb421ba 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -363,6 +363,12 @@ Cut in this order: validation, and retention; the exact provider request remains durable audit input. Runtime advances to v28, the catalog drops to 18 schemas, and the model-runtime include shell is gone. Atlas remains unchanged and unaccepted. + Exact `dbed11b3` and `8bb0719b` delete the remaining hand-maintained schema + shadow registry. Runtime-local CultCache documents are discovered from the + native registration or projected by their owning provider; they are not + republished as stale JSON. The catalog now contains only the exact provider + request plus the portable Persona and work-organ contracts. The cut removes + 850 net maintained lines. Atlas remains unchanged and unaccepted. 3. **Baseline transaction landed at `9f7b164f`; operator routing at `587c56d2`; Resident continuation and keyed acceptance at `478fb923`:** baseline Body Modeling is now thread-free from unresolved Body obligation through Launch/Wait/Review and exact Mind admission. Resident and operator callers consume the same family projection and acceptance owner. Thread ID remains immutable pass provenance only. 4. **Proposal Modeling landed at `d1b031cb`:** its immutable request, worker launch, runtime attempt/result, and `Modeling.proposal_frontier` commit now own Launch/Wait/Review and admission. The aggregate launcher refuses proposal cargo; the old selector, validator, context builder, and generic-launch hint are deleted. Body and Proposal share only the exact-envelope launch CAS invariant, not a mutable family registry. Exact `b0a4978d` deletes the later duplicate launch-binding document entirely; the worker launch is the sole launch owner. 5. **Continuation vocabulary landed at `e404c105` and was named truthfully at `fc5d1a4a`:** concrete pass families share one pure `EpiphanyAgentPassContinuationAction`; their semantic requests, projections, validators, and admission owners remain separate. diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 0e363e69..34031285 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -2,8 +2,8 @@ Updated: 2026-08-24 Branch: `codex/epiphany-shakedown-live` -Latest committed implementation cut: `fe118e13` -Current worktree: documentation/evidence for singular native model-stream ownership; +Latest committed implementation cut: `8bb0719b` +Current worktree: documentation/evidence for earned CultNet publication boundaries; Ox17 remains paused ## Orientation @@ -15,7 +15,7 @@ Idunn's Yggdrasil CI/CD task with local compiler work, or wake resident cognition without an explicit operator resumption. Epiphany is a supervised engineering alpha. Exact source `d2ca6630` remains the -production symlink body and is inactive. Exact `fe118e13` is the current +production symlink body and is inactive. Exact `8bb0719b` is the current build-affecting source. Historical live proofs remain evidence; they do not authorize the next capstone or Gate 1. @@ -45,6 +45,21 @@ authorize the next capstone or Gate 1. ## What just landed +Exact `dbed11b3` and `8bb0719b` delete the false hand-maintained CultNet schema +registry. The first cut removes the nonexistent runtime-event contract and the +obsolete public schema for the private archived-session tombstone. The second +removes runtime-local identity, session, job, binding, coordinator, native +model/tool, and state-ledger JSON mirrors. Those documents remain typed +CultCache state and are discovered from native registration or projected by +their owning CultMesh provider; no live CultNet crossing consumed their schema +files, and several files contradicted their Rust owners. The catalog now +contains only the exact OpenAI-compatible provider request plus the portable +Persona and work-organ contracts: 3 rows, 3 files, 0 missing, 0 unindexed, and +0 internal contract references. The cuts remove 850 net maintained lines. No +Rust build was activated because runtime source and registrations are +unchanged. Model Atlas is untouched; live inter-swarm collaboration remains +unproven. + Exact `fe118e13` removes the second persisted copy of every provider stream event and terminal receipt. OpenAI/OpenRouter transport values now normalize immediately into the native `EpiphanyModelStreamEvent` and @@ -925,7 +940,7 @@ coordinator `12/12`, swarm `10/10`, and model-runtime `13/13`. ## Immediate next action The Ox17 deployment lane is paused. Continue the registered-document and test- -liability audit from exact `fe118e13`; do not compile or deploy through Idunn +liability audit from exact `8bb0719b`; do not compile or deploy through Idunn yet. Delete an abstraction with tests that merely animate it when it has no decision-bearing consumer. Preserve keyed Mind, sealed reasoning, direct Body- to-Modeling flow, family admission owners, Persona social state, provider diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 96726107..f5dec80e 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index 451fd421..41bfe4ea 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -52,9 +52,10 @@ current_status: summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused. public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets. competitive_launch_signal: The 2026-08-22 Munder Difflin launch analysis in notes/munder-difflin-launch-intelligence-2026-08-23.md is the current Eyes/Imagination owner for this category signal. It establishes strong demand to try a packaged, local, visual multi-agent control plane and supplies repeated qualitative demand for an operator-attention surface over plans, questions, blockers, decisions, consequences, and liveness; it does not establish retention, reliable autonomy, or paid product-market fit. Munder is materially ahead in installation, cross-platform reach, provider reuse, category compression, community formation, and feedback velocity. Its public failures make renderer-owned physiology, cross-Body restoration, proxy safety metrics, false consequence receipts, provider parity, and marketed-but-unavailable federation concrete falsification targets. Epiphany does not yet own a general operator UI: Persona projection into shared asynchronous chat is the concrete human surface, while CultMesh remains projection-neutral. Social Aquarium, a dense operator cockpit, TUI, and audit surfaces may use distinct Eve compositions over the same provider-owned facts. A one-hour projection experiment and managed continuity/federation remain evidence-led options rather than adopted roadmap authority; the source-subtraction and test-authority audit remains next. - latest_phase: Fresh-package Ox17 remains paused while source subtraction continues. The live source owns keyed Mind, sealed reasoning projections and exact provider requests, direct Body-to-Modeling work, typed frontier planning, Persona, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts. Provider events and receipts are transient transport values normalized into one native persisted model stream/receipt family. Persona-memory v2 owns exact Interpreter effect/context provenance; Persona social mention v2 relies on its queue and turn request for routing; tool-receipt v1 owns exact result JSON or error; Eyes evidence packet v2 relies on its request/context identity for Research provenance; Resident Self state v3 and retention head v1 retain lifecycle counts and the exact deletion chain without a causal clock. Mind/runtime writable epochs are v10/v28 and the local public catalog has 18 schemas. Old writable stores refuse with no migrator or dual reader. Brokkr owns Unity through Eve/CultMesh; a future Rider daemon owns Rider. No Idunn build, package, deployment, Ox root, or Model Atlas Gate run is authorized. Ox16 remains sealed historical evidence. + latest_phase: Fresh-package Ox17 remains paused while source subtraction continues. The live source owns keyed Mind, sealed reasoning projections and exact provider requests, direct Body-to-Modeling work, typed frontier planning, Persona, provider-owned Bifrost feedback, and Odin/Idunn deployment receipts. Provider events and receipts are transient transport values normalized into one native persisted model stream/receipt family. Persona-memory v2 owns exact Interpreter effect/context provenance; Persona social mention v2 relies on its queue and turn request for routing; tool-receipt v1 owns exact result JSON or error; Eyes evidence packet v2 relies on its request/context identity for Research provenance; Resident Self state v3 and retention head v1 retain lifecycle counts and the exact deletion chain without a causal clock. Mind/runtime writable epochs are v10/v28. The public CultNet catalog contains only three earned portable boundaries: exact OpenAI-compatible provider request, Persona state, and work-organ state. Old writable stores refuse with no migrator or dual reader. Brokkr owns Unity through Eve/CultMesh; a future Rider daemon owns Rider. No Idunn build, package, deployment, Ox root, or Model Atlas Gate run is authorized. Ox16 remains sealed historical evidence. fixed_routing_and_retention_cargo_cut: Exact ffd91c20 deletes EyesEvidencePacket.source_role_id, PersonaSocialMention.target_agent_id, and ResidentSelfRetentionHead.retained_at_millis. Each producer supplied one fixed or non-causal value and no consumer read it; the request/context, Persona queue plus turn request, and retention chain remain the real owners. Eyes packet v2, Persona mention v2, Resident Self state v3/retention head v1, and runtime v27 form a hard cut. Core and the three consuming release entrypoints compile; consequential Persona, Research, and epoch-refusal proofs pass. The maintained source delta is 6 net deletions. Atlas is untouched; no live inter-swarm collaboration has run. provider_stream_authority_cut: Exact fe118e13 makes OpenAI/OpenRouter events and receipts transient transport values. The runtime immediately normalizes them into the single persisted native model event/receipt family used by tool continuation, assistant reconstruction, terminal validation, and bounded retention. Duplicate provider writes, registrations, archive requirements, schema IDs, two public schemas/index rows, and the include-only model-runtime shell are gone; the exact provider request remains durable. Runtime advances to v28 and the catalog drops to 18 schemas. The cut removes 270 net maintained lines. Adapter 1/1, provider spine 14/14, reasoning context 8/8, runtime 23/23, model entrypoint 11/11, swarm 4/4, epoch refusal 1/1, and release construction 15/15 pass. Atlas is untouched; live inter-swarm collaboration remains unproven. + cultnet_catalog_authority_cut: Exact dbed11b3 and 8bb0719b delete the hand-maintained JSON shadow registry. The nonexistent runtime-event contract and obsolete public archived-session tombstone schema disappear first. Runtime-local identity, session, job, binding, coordinator, native model/tool, and state-ledger schemas then disappear because no live CultNet provider carries them and several contradicted their Rust owners. Typed CultCache registration and owner-projected CultMesh state remain authoritative. The catalog has exactly three earned boundaries: the exact OpenAI-compatible provider request, gamecult.persona_state.v0, and epiphany.work_organ_state.v0. Parse/path/unindexed/forbidden-contract checks pass at 3/3/0/0/0. The cuts remove 850 net maintained lines. Atlas is untouched; live inter-swarm collaboration remains unproven. atlas_authoring_cut: Exact ce306e23 preserves the complete inter-swarm Atlas vertical slice while deleting its duplicate local offer/claim authoring authority. Ordinary Modeling through RepoModel operations is the sole owner of provider offers and consumer claims; Atlas retains signed publication, trust, transport, deterministic projection, Soul verification, Self impact admission, Resident Self wake, brakes, and Eve lowering. Two direct write-intent types, their runtime commit APIs and registry entries, 518 planner lines, and two tests that animated only that duplicate path are gone. The runtime proof now creates offers/claims through RepoModel before proving exact verification admission and Body-drift refusal. The cut removes 593 net source lines; the three-repository direct/transitive Modeling proof passes. These are component proofs only: no live inter-swarm collaboration has yet run, so the Atlas vertical slice remains protected until Gate 1 exercises it end to end. Runtime writable epoch is v14. autonomous_proposal_binding_cut: Exact 5d507bfd reduces Self's autonomous Imagination-to-Modeling origin binding from a 22-field duplicate archive to six causal join fields: schema, exact direction-result identity, selected option ordinal, worker job identity, and exact worker-result/launch digests. Proposal identity and payload, direction request, runtime/thread, typed model projection, Body/domain binding, selected option content, and canonical Modeling-request identity are checked directly from their owning immutable documents. The atomic proposal plus binding plus Modeling-request commit and its broad keyed-lifecycle proof remain; 60 net source lines are gone. Runtime writable epoch is v15. hands_verification_derivation_cut: Exact 6ccc7dd2 deletes the 20-field transient Hands receipt-chain summary. The Hands commit owner now derives the exact Verification request directly from the persisted patch, command, and commit receipts plus the frontier authority; no copied schema, job, grant, command-output, Git, path, summary, or timestamp fields mediate that handoff. Atomic Hands-to-Verification admission and the concurrent Persona/Hands lifecycle proof remain. The cut removes 43 net source lines without adding state, schema, or tests. @@ -140,7 +141,7 @@ current_status: yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 unresolved_authority: `runtime_spine.rs` remains the largest central liability at 9,656 lines, 53 public functions, and 25 public structs; it still mixes immutable identity, sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. Sessions and jobs now carry only lifecycle identity/status; terminal result documents own summaries and artifacts. The lenient duplicate session ensure writer is gone; the strict diagnostic creator refuses identity collisions. All persisted family launch-binding documents, the standalone verdict-driven Modeling writer, coordinator artifact/status cargo, and uninhabited aggregate state-model DTO families are gone; immutable worker launches plus typed family requests and atomic admission receipts own launch ancestry and downstream work creation. Continue splitting only by deleting callerless or duplicate authority and auditing tests against consequential behavior; do not create family frameworks or adapters. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Bifrost's Discord delivery path is a real consumer of Epiphany's short-lived request-bound permit signature, so the distinct permit identity/process remains an earned privilege boundary; current Ygg deployment doctrine still points that crossing at the old Starfire endpoint and installs no issuer unit, which the Idunn lane must repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Resume the registered-document and test-liability audit after exact fe118e13. Delete only complete dead authority slices and tests with no consequential claim. Preserve exact identity, decision audit, conflict/replay, retry ancestry, retention fences, terminal Self provenance, typed frontier planning, Persona consequences, exact native/provider requests, governed tool receipts, and the complete unrun Model Atlas vertical slice. Component tests are not collaboration acceptance. Do not run a local full-workspace compile, package, deployment, Ox root, or Model Atlas Gate run. + next_action: Resume the registered-document and test-liability audit after exact 8bb0719b. Delete only complete dead authority slices and tests with no consequential claim. Preserve exact identity, decision audit, conflict/replay, retry ancestry, retention fences, terminal Self provenance, typed frontier planning, Persona consequences, exact native/provider requests, governed tool receipts, and the complete unrun Model Atlas vertical slice. Component tests are not collaboration acceptance. Do not run a local full-workspace compile, package, deployment, Ox root, or Model Atlas Gate run. runtime_spine_surface_cut: `runtime_spine.rs` owns immutable runtime identity, exact sessions/jobs and process claims, model/tool execution bindings, family admission, consequence receipts, retention, and identity-resurrection fences. Provider requests remain exact durable audit input; provider events/receipts normalize into one native persisted stream/receipt family. Session/job documents carry lifecycle identity and status; terminal job results carry summaries, evidence, artifacts, and decision-context identity. Completed model-session retention writes one private resurrection tombstone; archived worker retention keeps exact request/terminal identity, deletion digest, decision context, structured result, and terminal job records. Mind/runtime writable epochs are v10/v28. The spine is 9,656 lines with 53 public functions and 25 public structs. Continue subtraction by tracing each public surface and verifier to a live consumer and consequential invariant; do not recreate deleted authority through registries, adapters, compatibility readers, or summary DTOs.