diff --git a/epiphany-core/src/bin/epiphany-repo-consensus-brief-family-smoke.rs b/epiphany-core/src/bin/epiphany-repo-consensus-brief-family-smoke.rs index 3e6ef991..12a9751a 100644 --- a/epiphany-core/src/bin/epiphany-repo-consensus-brief-family-smoke.rs +++ b/epiphany-core/src/bin/epiphany-repo-consensus-brief-family-smoke.rs @@ -242,9 +242,10 @@ fn run_smoke(args: Args) -> Result { &["intakeConsensus", "schemaVersion"], "epiphany.repo_work_intake_consensus_readback.v0", )?; + require_eq(&overview, &["intakeConsensus", "owner"], "Self")?; require_eq( &overview, - &["intakeConsensus", "owner"], + &["intakeConsensus", "handoffRoute"], "Persona->Imagination", )?; require_eq( diff --git a/epiphany-core/src/bin/epiphany-verse-query.rs b/epiphany-core/src/bin/epiphany-verse-query.rs index 7d66fe65..22babb2e 100644 --- a/epiphany-core/src/bin/epiphany-verse-query.rs +++ b/epiphany-core/src/bin/epiphany-verse-query.rs @@ -7814,7 +7814,7 @@ fn bifrost_ledger_report( &mut tui_rows, BifrostLedgerRow { document_kind: "collaboration-feedback".to_string(), - owner: "Persona->Imagination".to_string(), + owner: feedback.source_persona_id.clone(), id: feedback.feedback_id.clone(), status: "queued-for-imagination".to_string(), route: feedback.requested_consensus_route.clone(), @@ -8117,7 +8117,7 @@ fn bifrost_accounting_rows( &mut tui_rows, BifrostAccountingRow { lane: "collaboration-consensus".to_string(), - owner: "Persona->Imagination".to_string(), + owner: "Bifrost".to_string(), status: bifrost_accounting_status( collaboration_closed, arrival_latest_feedback.is_some() || latest_consensus.is_some(), diff --git a/epiphany-core/src/bin/epiphany-work.rs b/epiphany-core/src/bin/epiphany-work.rs index 9ec7adbf..5817f7de 100644 --- a/epiphany-core/src/bin/epiphany-work.rs +++ b/epiphany-core/src/bin/epiphany-work.rs @@ -9768,7 +9768,8 @@ fn run_overview(args: OverviewArgs) -> Result { .unwrap_or(false); let intake_consensus_readback = json!({ "schemaVersion": "epiphany.repo_work_intake_consensus_readback.v0", - "owner": "Persona->Imagination", + "owner": "Self", + "handoffRoute": "Persona->Imagination", "item": item, "feedbackId": feedback_id, "consensusReceiptId": consensus_receipt_id, diff --git a/notes/conceptual-substitution-audit-2026-07-12.md b/notes/conceptual-substitution-audit-2026-07-12.md index bb491019..9e092892 100644 --- a/notes/conceptual-substitution-audit-2026-07-12.md +++ b/notes/conceptual-substitution-audit-2026-07-12.md @@ -1382,3 +1382,10 @@ publication-review ownership. The report still grants none of those effects. The next projection scar is arrow-shaped handoff text stored in `owner`, notably `Persona->Imagination` in intake/accounting rows. A route is not an owner. Trace the document producer and carry the handoff in its route field. + +The arrow-owner substitution is cut. Self owns the intake-consensus readback +and it now carries `handoffRoute=Persona->Imagination`. Collaboration feedback +ledger rows name the actual source Persona id as owner and retain the requested +Imagination consensus route. Bifrost owns collaboration-consensus accounting; +the Persona-to-Imagination chain is what Bifrost observes, not who Bifrost is. +Production source now contains no arrow-shaped owner value. diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index fc139228..798498b0 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -503,3 +503,9 @@ Soul owns redaction and readiness sight; Maintainer owns readiness approval; Bifrost owns publication review; the four required reviewers are an explicit list. Next cut arrow-shaped handoffs such as `Persona->Imagination` out of owner fields and preserve them only as routes. + +Arrow-shaped owner values are now gone. Self owns intake-consensus readback and +publishes the Persona-to-Imagination handoff separately; feedback ledger rows +use their source Persona id; Bifrost owns consensus accounting. Continue the +conceptual-substitution scan beyond owner strings: look for status, route, +receipt, or cache fields that borrow consequence authority from another organ. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 8ea86c71..1b0c475a 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index 68fabfee..52728d97 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -660,4 +660,4 @@ current_status: - Service lifecycle receipt history is now event-only: `load_epiphany_cultmesh_daemon_service_lifecycle_receipts` filters out the `epiphany-local/daemon-service-lifecycle-receipt/latest` mirror, while `load_latest_epiphany_cultmesh_daemon_service_lifecycle_receipt` remains the latest-state reader. Focused unit test `service_lifecycle_receipt_history_excludes_latest_mirror` proves two per-receipt writes return exactly two history records and latest points at the second. Fresh smoke `verse-query-lifecycle-history-filter-smoke` and live overview/triage `local-20260618-145632-497-efac6f0d` / `local-20260618-145632-321-867947af` prove compact swarm sights still expose service lifecycle attention plus the present elevated runbook artifact without daemon pokes or service mutation. Do not use a broad unscoped cargo test filter for this check on Windows; it fans out across bin harnesses and hit a broken pipe during this pass. - `epiphany-verse-query seed-compact` is the compact seed receipt for wrappers and read-only rites. The older `seed` command still prints the full local Verse context for explicit debugging, but compact wrapper modes now avoid full `seed`/final `query` readback after the combined overview proof exposed Windows debug stack overflow from full-context serialization pressure. last_completed_repo_swarm_cut: Huginn live-fire has crossed the first real repo Body from Persona pressure to branch-local Hands commit and Soul/Mind closure, and now has repeatable closure and redacted-public-proof mouths. On `E:\Projects\Huginn` branch `epiphany/huginn/first-awakening`, `tools/epiphany_local_run.ps1 -Mode repo-persona-intake` accepted item `huginn-inspection-readback-livefire`, Weksa/Persona intake remained sealed, and `epiphany-work derive-plan` lowered it to model-authored safe family `repo.status_section` for `README.md` only. `tools/epiphany_local_run.ps1 -Mode repo-swarm-run` advanced four bounded pulses: run-from-plan, adopt-from-plan, execute-from-plan, and close-from-execute. Huginn commit `e9b07c38fceabbdc89ea35c2156326c80c0393a2` updated only `README.md`; closure receipt `.epiphany\work\work-close-huginn-inspection-readback-livefire.json` records status `closed`, Soul verdict `passed`, Mind state commit `repo-work-close-huginn-inspection-readback-livefire-mind-commit`, safe family `repo.status_section`, path scope `README.md`, Bifrost publication gate, and `privateStateExposed=false`. Verification also ran Huginn's TypeScript compiler through concrete Node path: `C:\Program Files\nodejs\node.exe E:\Projects\Huginn\node_modules\typescript\bin\tsc -p tsconfig.json` passed. Native verifier `epiphany-repo-livefire-closure-smoke --workspace E:\Projects\Huginn --item huginn-inspection-readback-livefire --expected-path README.md --expected-family repo.status_section --expected-gate awaiting-publication --expected-blocker bifrost-publication-missing` checks closure receipt, Mind map entry, overview gate/blocker, authority seals, and `git show` changed paths, returning `status=ok`, `soulVerdict=passed`, `publicationGate=Bifrost`, and `privateStateExposed=false`. Wrapper `tools/epiphany_local_run.ps1 -Mode repo-livefire-closure -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exposes the same read-only proof through the local operator mouth; artifact `local-20260621-190156-803-2f85ba15` printed commit, path, gate, blocker, Soul verdict, Mind commit receipt, and `privateStateExposed=False` without push, merge, publication, or target mutation. New wrapper `tools/epiphany_local_run.ps1 -Mode repo-work-public-proof -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exports the redacted proof bundle and repo-local Verse index without publishing; artifact `local-20260621-190645-345-4555b1dc` wrote `.epiphany\public\proof-bundles\repo-work-public-proof-huginn-inspection-readback-livefire.json`, proof id `repo-work-public-proof-huginn-inspection-readback-livefire`, SHA-256 `857545b199f3e37eb06c2e757e5cfc201958e46667bb1f8403fd333a22620f63`, nine artifact rows, zero publication rows, and `privateStateExposed=False`. swarm overview readback `local-20260621-190701-140-b9519ec6` sees the `REPO-WORK-PUBLIC-PROOF` row and action row from Huginn's repo-local Verse with the same SHA-256 while Bifrost publication remains missing. Launcher compact modes are now named compact operator-context modes instead of read-only modes, and `bifrost-public-proof` summaries print item, target public Verse, room, proof SHA-256, review receipts, and credit receipts so publication receipts are auditable without claiming upstream sync. - next_action: Continue the projection-owner purge. Readiness projections now separate Idunn aftercare ownership, Soul verification/sight, Maintainer approval, Bifrost publication review, and the required reviewer list. Next trace and cut arrow-shaped handoffs such as Persona->Imagination from owner fields; preserve handoff topology in route fields and keep closure's zero-substring invariant. + next_action: Continue the conceptual-substitution audit beyond owner strings. Arrow-shaped handoffs are no longer owners: Self owns intake readback, source Personas own feedback, Bifrost owns consensus accounting, and routes carry the Persona-to-Imagination handoff. Next inspect status, route, receipt, scheduler, and cache projections for borrowed consequence authority; keep closure's zero-substring invariant.