Rebuild concurrent Mind documentation
This commit is contained in:
Meta Vens
parent
ec1431fff8
commit
7ac47408d0
5 changed files with 438 additions and 5650 deletions
File diff suppressed because it is too large
Load diff
|
|
@ -13,15 +13,13 @@ earned OpenAI-compatible authentication or model-transport capability.
|
|||
|
||||
## Current Mechanism
|
||||
|
||||
- `epiphany-state-model` owns durable Mind shape.
|
||||
- `epiphany-state-model` owns shared typed semantic contracts; durable Mind is keyed CultCache owned by `epiphany-core`.
|
||||
- `epiphany-core` owns keyed Mind admission, runtime spine, organ gates,
|
||||
heartbeat physiology, Persona, and CultMesh integration. Its coordinator and
|
||||
status surfaces still retain a legacy persisted `EpiphanyThreadStateEntry`;
|
||||
that aggregate is an obsolete live authority and currently blocks fresh keyed
|
||||
stores from coordinating. Body, Proposal, frontier-verdict Modeling,
|
||||
Research, Verification, Planning/PlanMind, and Reorientation have been
|
||||
removed from that authority; generic coordinator presence and residual
|
||||
objective/state/status paths remain.
|
||||
heartbeat physiology, Persona, and CultMesh integration. Coordinator policy,
|
||||
status, and every migrated work family consume keyed Mind plus exact runtime
|
||||
receipts. Persisted `EpiphanyThreadStateEntry`, the in-memory
|
||||
`EpiphanyThreadState` schema, generic launch/update transactions, and global
|
||||
launch revisions have been deleted with no compatibility path.
|
||||
- Native binaries expose coordinator, status, state, runtime, memory, daemon,
|
||||
Persona, repo-work, and Verse operations.
|
||||
- CultCache stores typed state and receipts; CultMesh/CultNet carry typed local
|
||||
|
|
@ -212,10 +210,9 @@ Delete or demote:
|
|||
|
||||
Keep the five-day shakedown and Model Atlas operational Gate 1 paused. Complete
|
||||
the remaining Decision-Auditable Concurrent Mind hard cut before another live
|
||||
coordinator run. Fresh Gate preflight proved that keyed Mind and both semantic
|
||||
partitions become ready, then falsified coordinator ownership: status still
|
||||
declares the organism missing because it reads persisted
|
||||
`EpiphanyThreadStateEntry` as the presence and routing head.
|
||||
coordinator run. Fresh Gate preflight exposed the aggregate ownership defect;
|
||||
the aggregate has now been structurally removed. The remaining gate is exact
|
||||
decision-context admission/retention plus fresh concurrent and restart proof.
|
||||
|
||||
Cut in this order:
|
||||
|
||||
|
|
@ -276,11 +273,20 @@ Cut in this order:
|
|||
launch/acceptance, checkpoint/freshness recommendation, latest binding,
|
||||
global revision acceptance, and accepted-at comparison no longer own this
|
||||
family.
|
||||
12. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global
|
||||
expected revisions, aggregate update APIs, and all source references from
|
||||
production. Refuse old writable stores; add no dual reader or migrator.
|
||||
13. Replay fresh-store concurrency and decision-context acceptance. Only then
|
||||
restart Model Atlas Gate 1 from a new external root.
|
||||
12. **Landed at `1662a012`, `07d891ba`, and `ec1431ff`:** coordinator policy now
|
||||
projects keyed current work; persisted `EpiphanyThreadStateEntry`,
|
||||
`coordinator_state_transaction`, generic coordinator services, the
|
||||
`EpiphanyThreadState` schema/prompt renderer, aggregate freshness/context
|
||||
views, generic launch/interrupt requests, and global launch revisions are
|
||||
deleted. No dual reader, bootstrap aggregate, or migrator survives.
|
||||
13. Replace the residual generic Mind gateway/state-patch mouth with concrete
|
||||
invariant-owned mutations. Make reasoning basis and terminal decision
|
||||
context mandatory for role, reorient, Persona, and model-backed failure
|
||||
admission; derive provider requests internally; preserve context links
|
||||
through retention; and prove exact governed tool coverage.
|
||||
14. Refuse old writable-store epochs and replay fresh-store disjoint
|
||||
concurrency, same-identity conflict, transcript deletion, restart, and
|
||||
re-entry. Only then restart Model Atlas Gate 1 from a new external root.
|
||||
|
||||
Do not preserve the aggregate for compatibility, manufacture a bootstrap
|
||||
thread, release autonomous scheduling, register topology in `gamecult-ops`,
|
||||
|
|
|
|||
|
|
@ -1,456 +1,170 @@
|
|||
# Fresh workspace handoff
|
||||
|
||||
Updated: 2026-08-18
|
||||
Branch: `codex/epiphany-shakedown-live`
|
||||
Latest implementation cut: `ec1431ff`
|
||||
|
||||
## Current state
|
||||
## Orientation
|
||||
|
||||
The Persona projection membrane now consumes Ghostlight's generalized
|
||||
`ghostlight-persona-projection` crate pinned to Ghostlight commit `51fc7495`.
|
||||
The live executor projects transcript and typed Persona context before Persona
|
||||
cognition; Persona receives one lived stream only. Epiphany still owns typed
|
||||
effects, receipts, Mind admission, brakes, external consequence gates, and
|
||||
terminal commit. Focused core and OpenAI-runtime Persona suites pass.
|
||||
The five-day shakedown and Model Atlas operational Gate 1 are paused. Do not
|
||||
touch historical c011/proof volumes, reuse partial Gate roots, release
|
||||
autonomous scheduling, register operational topology in `gamecult-ops`, build
|
||||
on Yggdrasil, or call the organism deployment-ready.
|
||||
|
||||
The five-day shakedown remains paused. The active branch includes exact
|
||||
`d5df53ae` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
|
||||
vertical slice, ordinary Modeling authoring path, durable publisher identity,
|
||||
fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
|
||||
landed. Historical aggregate RepoModel and partial Gate stores are evidence
|
||||
only. No production model output, registry, command, admission path, projector,
|
||||
or repair path can restore their authority.
|
||||
Epiphany is a supervised engineering alpha. Historical live proofs remain
|
||||
valid evidence, but current source has advanced beyond the last packaged c011
|
||||
body.
|
||||
|
||||
This is not yet the full Concurrent Mind cut. Persisted
|
||||
`EpiphanyThreadStateEntry`, its coordinator transaction, and multiple generic
|
||||
objective/state/status readers remain live production authorities.
|
||||
Baseline Body, Proposal, frontier-verdict Modeling, frontier Research,
|
||||
frontier Verification, frontier Planning/PlanMind, and Reorientation are no longer among them:
|
||||
keyed Mind owns their work projections, operator and Resident launch, exact job-bound
|
||||
continuation, review, and semantic admission. Research is driven only by an explicit
|
||||
external-evidence obligation; accepted Eyes state, timestamps, generic regather, and
|
||||
role lanes cannot launch Eyes or gate Modeling. Fresh Gate
|
||||
preflight proved the consequence: both keyed semantic partitions reached ready,
|
||||
but status still called the organism missing because no thread aggregate
|
||||
existed. Model Atlas Gate 1 is therefore paused behind that deletion, not merely
|
||||
behind another operational retry.
|
||||
## What just landed
|
||||
|
||||
The Atlas keeps the federation sharp. A provider Mind owns an offer. A consumer
|
||||
Mind owns a claim. Soul owns verification evidence for exact endpoint versions.
|
||||
Signed per-repository publishers carry those facts through Odin, a deterministic
|
||||
projector derives compatibility, cycles, freshness, and blast radius, Eve lowers
|
||||
one retained tree, and each consumer Self decides whether a local impact wakes
|
||||
Modeling or Soul. Nobody owns a shared edge. Atlas never grants Hands authority
|
||||
and no organ opens a foreign repository Mind store.
|
||||
The global thread-state authority is gone.
|
||||
|
||||
Epiphany exact `4c0cbd57` contains the typed contracts, per-family CAS planners,
|
||||
signing and trust, immutable publication stores, publisher/projector/ingress
|
||||
daemons, brake scopes, Resident Self scheduling, and three-repository smoke.
|
||||
Exact `f60db0a2` closes the production authoring/evidence seam: ordinary
|
||||
Modeling emits semantic offer/claim transitions only; runtime proposal v2 binds
|
||||
the exact request, result, evidence set, and current Body basis; the planner
|
||||
resolves authenticated manifest digests and opaque IDs; and the publisher
|
||||
refuses drifted Body evidence. The projection and Eve tree carry endpoint
|
||||
labels/contracts/lifecycle/Body evidence, exact current Soul evidence,
|
||||
publisher age/watermarks, cycles, and blast radius.
|
||||
Odin exact `d34cb7e` persists and serves the publication, projection, and
|
||||
canonical Eve schema IDs without dependency semantics. Eve exact `b597dab` and
|
||||
`076d212` provide the canonical Atlas provider advertisement and one
|
||||
`gamecult.eve.surface.v1` retained tree for GUI and TUI.
|
||||
- `1662a012` makes coordinator policy a pure projection over keyed Mind,
|
||||
exact current-work families, Resident pressure, and runtime receipts.
|
||||
- `07d891ba` deletes persisted `EpiphanyThreadStateEntry`,
|
||||
`coordinator_state_transaction`, generic coordinator state/update/launch/
|
||||
acceptance/interrupt services, and their aggregate writers.
|
||||
- `ec1431ff` deletes `EpiphanyThreadState` itself, global launch revision cargo,
|
||||
generic launch/interrupt request types, aggregate prompt/freshness/graph-
|
||||
context surfaces, the obsolete Repo graph importer, and the historical
|
||||
prompt-context smoke.
|
||||
|
||||
Verification is green at the latest ownership cut: Epiphany core library
|
||||
552/552, OpenAI runtime library 23/23 plus both runtime binaries 10/10,
|
||||
coordinator runtime 18/18, status 3/3, and relevant all-target checks pass.
|
||||
An unfiltered core package run also exposed two pre-existing
|
||||
`epiphany-hands-action` fixture failures: those fixtures omit the exact
|
||||
`RepoFrontierHandsAuthority` already required by production. The gate was not
|
||||
weakened; fixture repair remains separate test-harness debt. Earlier workspace
|
||||
checks remain accepted; Odin Node 1/1 and Rust 15/15; Eve Atlas
|
||||
conformance 4/4 and Eve contracts 6/6. The workspace-wide all-features check
|
||||
still reaches an older feature-gated workspace-coverage recovery smoke whose
|
||||
already-absent API predates this slice; no compatibility shim was added.
|
||||
There is no compatibility aggregate, dual reader, bootstrap thread, or
|
||||
migrator. Thread identifiers may survive only as immutable pass-creation
|
||||
provenance; they do not own identity, currentness, or conflict.
|
||||
|
||||
These are implementation and isolated proof claims. They are not sustained
|
||||
Starfire dogfood. Final aggregate deletion is the next source rite; only then
|
||||
may Gate 1 use separate real stores and
|
||||
identities; keep impact ingress absent while ordinary Modeling seeds facts and
|
||||
publishers/projector establish signed sight; then engage all three Atlas brakes
|
||||
and prove later organ cycles are held while the last Eve projection remains
|
||||
visibly stale/read-only and no lane wakes.
|
||||
Verification at this boundary:
|
||||
|
||||
Gate 1 preflight exposed and cut one publisher lifecycle defect before live
|
||||
evidence was admitted. The publisher now enrolls its private signing identity
|
||||
only when absent, reopens that exact identity on later heartbeats, and exports
|
||||
one idempotent public trust anchor to a separate operator-readable store. This
|
||||
keeps identity rotation impossible by retry and gives the projector a real
|
||||
public anchor to pin without reading private state. The focused identity
|
||||
reopen/export test passes; the operational gate remains in progress and is not
|
||||
yet accepted.
|
||||
- every Epiphany core target compiles;
|
||||
- core library `489/489`;
|
||||
- OpenAI runtime library `23/23`;
|
||||
- model-runtime binary `10/10`;
|
||||
- OpenAI-runtime binary `10/10`;
|
||||
- Persona service target compiles.
|
||||
|
||||
The first fresh Eve bootstrap then falsified a second missing owner: repository
|
||||
Body bootstrap called the legacy agent-memory admission gate against an empty
|
||||
store, which correctly refused because no canonical organ rows existed. Fresh
|
||||
bootstrap now initializes the immutable swarm identity and all seven typed
|
||||
organ-memory rows before admitting generation one through the shared witness
|
||||
primitive. Legacy admission remains migration-only. The nine focused
|
||||
agent-memory tests pass, including exact fresh replay. The refused partial Eve
|
||||
root is retained in the Gate 1 artifact directory; the operational retry must
|
||||
use a new state root.
|
||||
## Canonical machine now
|
||||
|
||||
The next fresh three-repository bootstrap falsified a third missing owner. The
|
||||
keyed RepoModel seed committed, but bootstrap did not emit the Modeling
|
||||
semantic-projection obligation that readiness requires. Exact `d11e6511`
|
||||
derives that obligation from the exact keyed seed envelopes and commits it as a
|
||||
derived runtime companion in the same batch CAS as seed provenance, keyed Mind
|
||||
documents, and the Mind commit receipt. It is not a Mind document and cannot be
|
||||
repaired by status or a projector. Replay validates the existing companion;
|
||||
the focused seed/replay test passes. The three partial stores without this
|
||||
companion remain read-only evidence. Resume Gate 1 only from a fresh state root.
|
||||
The runtime Mind `.cc` is the sole decision-bearing store. Keyed Mind and
|
||||
RepoModel documents assemble deterministic views; their projection digests are
|
||||
audit/display identities, not mutable authority revisions.
|
||||
|
||||
Exact `2ba6b9dc` closes the next preflight defect. The semantic projector body
|
||||
owned two canonical stores but enumerated only agent-memory Mind; it now loads
|
||||
and validates both Mind and Modeling inputs on every pulse while allowing one
|
||||
faulty source to remain visible without hiding the other. CultMesh semantic
|
||||
health also distinguishes terminal-ready from query-eligible, so a successful
|
||||
empty partition no longer degrades the provider. On the fresh root, Eve, Odin,
|
||||
and Epiphany each executed Modeling once, then settled idle with two inspected
|
||||
sources and zero source, retention, or health faults.
|
||||
`mind_transaction::commit_mind_mutation` is the canonical commit primitive.
|
||||
Concrete invariant owners supply exact strong reads and complete typed writes.
|
||||
Disjoint identities merge, same-identity divergence conflicts, changed strong
|
||||
reads refuse without mutation, and exact replay returns the original receipt.
|
||||
Model output is never silently rebased.
|
||||
|
||||
The following production status read falsified the remaining campaign premise:
|
||||
`EpiphanyThreadStateEntry` still owns coordinator presence/routing. Canonical
|
||||
docs previously described the keyed foundation too broadly. The hard cut is
|
||||
now the immediate campaign; Gate 1 cannot resume until production source has no
|
||||
thread aggregate writer or behavioral reader.
|
||||
`current_work.rs` derives work from unresolved typed state obligations and
|
||||
exact runtime receipts:
|
||||
|
||||
Public positioning was synchronized on 2026-08-16 without changing that next
|
||||
rite. `docs/positioning.md` is the current claim owner: Epiphany is the
|
||||
organizational layer above frontier AI workers; the primary failure is global
|
||||
coherence collapse rather than context-window exhaustion; prompts are bounded
|
||||
projections of governed organizational state; humans retain purpose, judgment,
|
||||
authority, disagreement, exceptions, and acceptance; and GameCult is the forge
|
||||
and longitudinal evidence program for a target federation of one locally owned
|
||||
Epiphany project organism per living project Body. Those organisms collaborate
|
||||
through governed typed surfaces while private Mind and consequence authority
|
||||
remain local. Durable public Persona relationships and visitor-facing surfaces
|
||||
are intended social infrastructure, not deployed capability. The fleet, real
|
||||
three-repository Gate 1, complete Bifrost attribution, sustained autonomous
|
||||
production, visitor experience, and external design-partner pilots remain
|
||||
explicitly gated supervised-alpha targets.
|
||||
- Modeling consumes Body/RepoModel obligations directly.
|
||||
- Eyes launches only for an explicit outside-evidence obligation.
|
||||
- Verification consumes exact Hands consequences and invariant obligations.
|
||||
- Persona consumes typed unread social/relationship state.
|
||||
- Hands consumes an adopted plan/route and exact capability receipts.
|
||||
|
||||
The completed Decision-Auditable Concurrent Mind foundation uses typed,
|
||||
content-addressed reasoning bases that preserve exact source envelopes and a
|
||||
closed projection;
|
||||
terminal decision contexts preserve the exact native request, the provider
|
||||
request derived from it, and every ordered governed tool intent/receipt actually
|
||||
fed to the model. Worker model requests require a sealed basis, and structured
|
||||
role/reorient results plus their generic job result bind the terminal context.
|
||||
Tool-round-limit and repeated-tool-loop failures seal the last request context
|
||||
before worker failure. Model-session archives preserve their basis/context IDs,
|
||||
and fulfilled worker-attempt tombstones preserve and revalidate the exact
|
||||
decision context instead of collapsing it to a digest. Exact-envelope batch CAS
|
||||
merges disjoint Mind documents and explicitly refuses same-identity or
|
||||
changed-strong-read conflicts. All three Persona stages now seal
|
||||
predecessor-bound contexts, the effect and terminal commit atomically, and
|
||||
Persona retention preserves the structured effect, conversation/consequence
|
||||
receipts, terminal receipt, reasoning bases, and decision contexts while
|
||||
removing stage/execution scaffolding. Exact `ee3d82c0` binds provider/runtime
|
||||
errors and watchdog timeouts to the exact admitted request held by the running
|
||||
pass, without inventing a persisted latest-request head. Exact `71505941` adds
|
||||
the keyed Mind document family, deterministic `EpiphanyMindView`, atomic
|
||||
runtime/Mind epoch identity, and a mutation gate that rejects non-Mind envelopes
|
||||
or semantic key drift. The keyed view is now the sole current RepoModel source;
|
||||
it does not read or translate historical aggregate stores.
|
||||
Events, timestamps, role lanes, latest-result slots, and accepted-at ordering
|
||||
are projections only.
|
||||
|
||||
Exact `2eb95df6` closes the external Body prompt seam. A repository observation
|
||||
is first authenticated against the Body store, then admitted into the runtime
|
||||
Mind as one immutable semantic-key document containing its exact typed basis
|
||||
and exact source envelope. The Body organ's provenance is recorded in the same
|
||||
Mind commit receipt; no raw transcript or JSON sidecar participates. The
|
||||
highest authenticated Body generation is derived from those admitted
|
||||
documents. Baseline Body Modeling work and sealed role reasoning now read that
|
||||
Mind state only. A focused counter proves current-work projection performs zero
|
||||
Body-store and zero repository-file reads, and a substituted external
|
||||
observation refuses without changing the Mind bytes.
|
||||
## Decision-audit foundation
|
||||
|
||||
Exact `bd5034cd` is the first live authority cut. Operator objective intake now
|
||||
atomically writes one semantic objective document, its immutable typed operator
|
||||
provenance, and one Mind commit receipt. It writes no thread-state aggregate;
|
||||
thread identity is provenance, and replacement refuses without changing store
|
||||
bytes. The commit authority is explicitly model context or operator provenance,
|
||||
so operator decisions do not counterfeit model reasoning. The aggregate-only
|
||||
Modeling acceptance repair writer and commands are deleted; frontier execution
|
||||
inspection/amendment remains under a truthfully named binary.
|
||||
The intended retained chain is:
|
||||
|
||||
The keyed RepoModel foundation now gives identity, domain, node, edge, summary,
|
||||
frontier, lifecycle receipt, and per-node unresolved-claim obligations separate
|
||||
CultCache identities. Its deterministic validated view is part of
|
||||
`EpiphanyMindView` and has no revision/hash head. Documents store canonical
|
||||
named MessagePack behind typed constructors because direct compact nesting let
|
||||
skipped middle fields shift into the wrong schema positions. Mind CAS strong
|
||||
reads are now genuine read fences: CultCache receives byte-identical expected
|
||||
envelopes as required by its physical primitive, while the commit receipt lists
|
||||
only semantic writes. A stale read-only dependency blocks the whole mutation
|
||||
without partial insertion. Full core remains 690 passing with one ignored
|
||||
cross-process helper.
|
||||
1. exact typed Mind document versions;
|
||||
2. sealed `EpiphanyReasoningBasis` with a closed typed projection;
|
||||
3. exact final native model request;
|
||||
4. internally derived provider request;
|
||||
5. exact ordered governed tool intents/receipts supplied to the pass;
|
||||
6. sealed `EpiphanyDecisionContext`;
|
||||
7. structured terminal decision or typed pass failure;
|
||||
8. invariant-owned `MindMutation` and `EpiphanyMindCommitReceipt`.
|
||||
|
||||
The concrete RepoModel mutation planner now accepts a persisted typed semantic
|
||||
proposal and owns dependency derivation for domains, nodes, edges, summaries,
|
||||
and frontier documents. Node and edge retirement are semantic operations;
|
||||
admission and lifecycle receipts remain runtime-owned. Callers do not supply a
|
||||
strong-read list. One mutation can create a complete domain/node/edge/summary
|
||||
slice in dependency-reversed order, while duplicate semantic identities refuse.
|
||||
A fresh node retirement and a concurrent new frontier target both write the
|
||||
same previously absent obligation identity, so only one can commit.
|
||||
Transcripts, SSE frames, reasoning deltas, and intermediate prose are optional
|
||||
and non-authoritative. A retained decision must remain auditable after deleting
|
||||
them.
|
||||
|
||||
Exact `8ad16be0` cuts the first aggregate RepoModel bootstrap path.
|
||||
`epiphany-repository-body bootstrap` now admits an `EpiphanyRepoModelSeed` as
|
||||
typed operator provenance and atomically writes only keyed RepoModel documents,
|
||||
derived claim obligations, and the generic Mind commit receipt. Identical seed
|
||||
replay is inert; divergent replay and any aggregate RepoModel envelope refuse.
|
||||
The seed contains no revision/hash head. Full core passes 692 tests with one
|
||||
ignored cross-process helper, and the repository-body binary checks cleanly.
|
||||
Exact `18d3783a` deletes the old thread-state-to-aggregate bootstrap binary.
|
||||
Exact `120663fa` removes aggregate bootstrap/read behavior from launch context:
|
||||
prompt assembly loads `EpiphanyRepoModelView`, derives a nonpersisted query-only
|
||||
graph projection, and renders only its projection digest. The derived snapshot
|
||||
has no revision/hash authority. All seven launch-context tests and the full core
|
||||
suite pass.
|
||||
Several concrete Body, Proposal, frontier-verdict Modeling, Research,
|
||||
Verification, Planning/PlanMind, and Reorientation paths already use sealed
|
||||
bases/contexts and keyed admission. Research is driven only by explicit
|
||||
external-evidence obligations; Eyes does not gate Body Modeling.
|
||||
|
||||
Operational correction: the original c011 resident and Heartbeat containers
|
||||
are not alive; both exited 255 on 2026-08-11. Their named volumes are quiescent
|
||||
and remain untouched. Historical c011 zero-zombie and organ-circuit evidence is
|
||||
still valid, but it is not current liveness. Every copied public-Eyes body is
|
||||
braked and stopped. Yggdrasil remains the public crossing and never builds
|
||||
Epiphany.
|
||||
## Remaining wound
|
||||
|
||||
## Consolidation cut
|
||||
The broader Decision-Auditable Concurrent Mind migration is incomplete.
|
||||
|
||||
The shakedown found the same missing invariants in different clothes. The
|
||||
consolidation now gives each repeated invariant one named owner.
|
||||
The residual generic `MindGatewayReview` / `MindStateCommitReceipt` v0 /
|
||||
`EpiphanyRoleStatePatchDocument` path still represents a generic state-effect
|
||||
admission mouth outside concrete invariant-owned `MindMutation` families.
|
||||
Generic role failures, Persona projector/persona/interpreter stages, and some
|
||||
worker/session archival paths do not yet make exact `reasoning_basis_id` and
|
||||
`decision_context_id` structurally mandatory.
|
||||
|
||||
- `causal_work_identity` is the single pure derivation owner for Proposal
|
||||
Modeling, Research, frontier Planning, PlanMind, and Admitted Model Direction
|
||||
request identities. Runtime plus immutable admitted cause determine identity.
|
||||
Coordinator thread and timestamps are provenance only.
|
||||
- Coordinator launch cannot restore a superseded request thread into canonical
|
||||
state. The current admitted thread owns transport; the request's creation
|
||||
thread remains inspectable provenance.
|
||||
- `ImmutableGithubSource` is the single parser, validator, canonicalizer, and
|
||||
renderer for immutable public GitHub identities. Modeling selection, Eyes
|
||||
execution, and Mind receipt authentication use the same type.
|
||||
- Mind now independently rejects a malformed but internally self-consistent
|
||||
public-source receipt. Provider validation is no longer trusted as a substitute
|
||||
for admission validation.
|
||||
- `runtime_worker_attempt` owns the complete typed request-family association and
|
||||
process-status classification for one launch/process/result/archive family.
|
||||
- Self decides Research launch currency from the exact current causal frontier;
|
||||
a stale terminal Research role projection cannot suppress new Eyes work.
|
||||
- The typed `RepoFrontierResearchRequest` owns the exact allowed public-source
|
||||
set. One launch-to-request derivation is shared by Self coverage, Research
|
||||
acceptance, and final Mind revalidation. Capability grants, prompts, and
|
||||
locally inspected files are not substitutes for exact requested receipts.
|
||||
- `RepoFrontierResearchLifecycle` owns the exact current Research continuation.
|
||||
Resident Self, coordinator policy, and status consume its typed Launch/Review
|
||||
action. A completed superseded role lane is display history, not a launch
|
||||
suppressor or compensating repair path.
|
||||
- Worker reaping consumes the full `ProcessInstanceIdentity`, not a PID. The
|
||||
kernel wait occurs only after that exact incarnation is observed exited. A
|
||||
historical claim cannot reap a reused coordinator child.
|
||||
Context validation must become exact and DRY:
|
||||
|
||||
Core passes 687 active tests with one intentional ignored cross-process helper.
|
||||
The packaged no-grant execution gate passed under `--network none` with
|
||||
byte-identical state and no receipt. Exact packaged `f90f1186`, release
|
||||
`sha256-0e41c9106eb0e37a9cf3e7a4b67671d494b880b7e71fec65336a8c3e7e1129b4`,
|
||||
witness `sha256-a310c72292a44f950ce7b0ab469779d02e6edd1068670fe37f990f7d82846ee4`,
|
||||
then completed two copied immutable-public-source Research/Mind acceptance
|
||||
cycles. Public tool receipts advanced from 53 to 61, Hands stayed false, and
|
||||
both daemons stopped braked with exit zero.
|
||||
- provider request must equal internal lowering of the native request;
|
||||
- final native input/tool definitions must be exact;
|
||||
- every ToolCall name/arguments and ToolResult output must bind the exact
|
||||
governed intent/terminal receipt/runtime binding;
|
||||
- request-owned public-source observations and model-continuation observations
|
||||
must have distinct validated ownership;
|
||||
- foreign, missing, extra, duplicated, reordered, or nonterminal observations
|
||||
must refuse byte-identically.
|
||||
|
||||
The preceding `08383c6d` run is retained as falsification evidence: it proved
|
||||
the typed Research lifecycle cut, then died with `ECHILD` because PID-only
|
||||
reaping let a historical worker claim steal a reused coordinator child's wait
|
||||
status. `f90f1186` removes the PID-only API and survived the same process
|
||||
turnover.
|
||||
|
||||
## Authority map
|
||||
|
||||
- Owner: causal work identity owns deterministic request identity.
|
||||
- Inputs: runtime identity plus the immutable proposal, admitted model/frontier,
|
||||
accepted result, candidate digest, or admission receipt appropriate to the
|
||||
explicit request family.
|
||||
- Outputs: deterministic typed request IDs.
|
||||
- Derived state: creation thread and timestamps are provenance; job, process,
|
||||
grant, model execution, and tool IDs own attempts beneath the request.
|
||||
- Forbidden writers: current coordinator thread, resident projection, launch
|
||||
callback, retry loop, and worker output cannot fork or repair request identity.
|
||||
- Shared paths: direct and resident launches consume the same derived identity;
|
||||
current admitted thread carries the launch without rewriting request provenance.
|
||||
- Cut line: family-local hash formulas, current-thread selection gates, and
|
||||
downstream thread-restoration behavior are removed or demoted.
|
||||
|
||||
- Owner: immutable public-source identity owns GitHub identity grammar and
|
||||
canonical rendering.
|
||||
- Inputs: owner, repository, exact 40-hex commit, and bounded repository path.
|
||||
- Outputs: canonical lowercase revision, repository ref, and source ref.
|
||||
- Derived state: provider URL and receipt display fields.
|
||||
- Forbidden writers: tool output and mutually consistent JSON strings cannot
|
||||
define source identity.
|
||||
- Shared paths: Modeling, Eyes, and Mind call the same typed owner.
|
||||
- Cut line: the runtime composite parser and provider-local validators are gone.
|
||||
|
||||
## Deliberately separate lifecycle authorities
|
||||
|
||||
Do not collapse these into one enum or service:
|
||||
|
||||
- Heartbeat schedules and consumes acknowledgements.
|
||||
- Resident Self owns grants, leases, cooldown, cancellation, and requeue.
|
||||
- Coordinator owns one process incarnation and its terminal receipt.
|
||||
- Runtime worker attempt owns launch, exact process claim, result, and archive.
|
||||
- Mind decides adoption; fulfillment is evidence, not admission.
|
||||
|
||||
The narrow `runtime_worker_attempt` module now owns the serialized process-status
|
||||
vocabulary, live/fulfilled/failed/retry classification, and the complete set of
|
||||
typed request families carried by one launch. Runtime, resident, and coordinator
|
||||
consumers call those predicates and accessors instead of maintaining local
|
||||
string sets and parallel family arrays. Persisted documents and transactions are
|
||||
unchanged; the lifecycle authorities above remain separate.
|
||||
|
||||
## Model Atlas rollout gates
|
||||
|
||||
1. Run isolated Epiphany, Odin, and Eve stores with impact ingress absent. Seed
|
||||
the local facts through ordinary Modeling, then run publishers/projector to
|
||||
establish signed publications, watermarks, rejection telemetry, and the
|
||||
canonical Eve tree. Engage all three Atlas brakes, rerun the publisher,
|
||||
projector, and first ingress cycles, and prove held writes/scheduling plus
|
||||
visibly stale read-only retained state.
|
||||
2. Release only Atlas Modeling/Soul wake scopes. Change the temporary Eve
|
||||
contract and prove Odin Modeling then Epiphany Modeling wake without an
|
||||
operator `Continue`; Hands remains under its existing gate.
|
||||
3. Put the organs under the daemon supervisor and sustain the three-repository
|
||||
pilot with lag, watermarks, cycles, rejections, and pending impacts visible
|
||||
through CultMesh/Eve.
|
||||
4. Register topology and recovery runbooks in `gamecult-ops` only after the
|
||||
sustained proof. Keep Yggdrasil and the public Verse outside V1.
|
||||
Retention must preserve direct reachability: worker attempt or Persona terminal
|
||||
to decision context to reasoning basis. No raw stream event, request family, or
|
||||
transcript may be required for that query after archival.
|
||||
|
||||
## Immediate next action
|
||||
|
||||
Complete the persisted thread-state hard deletion described in the campaign
|
||||
plan. Exact `79346523` replaces the aggregate role prompt with a sealed v2 role
|
||||
projection assembled from the exact keyed Mind and RepoModel documents it
|
||||
names; the final native/provider request renders that projection, and baseline
|
||||
Modeling admission writes its Body-work decision receipt in the same Mind CAS
|
||||
as any graph mutation. Exact `2eb95df6` admits Body observations into keyed Mind
|
||||
before they can steer that projection. Exact `e42788c9` lands the shared pure
|
||||
`EpiphanyCurrentWorkProjection` and moves status consumption of Hands readiness,
|
||||
Eyes continuation, proposal Modeling, and planning stage onto it. Baseline Body
|
||||
work is visible there. Exact `9f7b164f` adds its atomic thread-free launch owner:
|
||||
one exact Body strong read commits the runtime job/request/event, family launch
|
||||
binding, and read-only Substrate Gate grant without a thread-state write. Exact
|
||||
`587c56d2` routes status and operator baseline Modeling through that owner while
|
||||
preserving distinct proposal/repair/verdict families. Exact `478fb923` completes
|
||||
the reference lifecycle: Resident Self derives exact Body pressure from the same
|
||||
current-work projection, coordinator receipts retain the exact runtime job,
|
||||
Launch/Wait/Review never consult a role lane, and operator/Resident acceptance
|
||||
share one `accept_body_modeling_result` MindMutation owner. The legacy aggregate
|
||||
acceptance branch delegates this exact family to that owner rather than retaining
|
||||
a second semantic opinion.
|
||||
1. Map and delete the generic Mind gateway/state-patch authority. Replace each
|
||||
genuinely live outcome with its concrete invariant-owned mutation; do not
|
||||
add a generic mutation registry.
|
||||
2. Require a sealed basis before model execution and an exact decision context
|
||||
before any structured role/reorient/Persona result or model-backed failure
|
||||
terminalizes.
|
||||
3. Derive provider requests internally and close the store-backed tool-
|
||||
observation substitution matrix.
|
||||
4. Preserve basis/context/decision links through worker, model-session, and
|
||||
Persona retention while allowing stream/transcript deletion.
|
||||
5. Bump the writable schema epoch and refuse old stores. Historical releases
|
||||
remain readers for historical proof stores; no migrator or dual path.
|
||||
6. Run fresh acceptance: concurrent Persona+Hands; evidence+Verification+
|
||||
unrelated Modeling-node writes; distinct graph writes; same-identity
|
||||
conflict; stale strong-read refusal; transcript deletion; restart/re-entry;
|
||||
and source guards for deleted aggregate/global revision paths.
|
||||
7. Only then package a fresh body and resume Model Atlas Gate 1 from a new
|
||||
external root.
|
||||
|
||||
Exact `d1b031cb` applies the same doctrine to Proposal Modeling without making a
|
||||
generic registry. The immutable proposal request, exact family launch binding,
|
||||
runtime attempt/result, and `Modeling.proposal_frontier` commit derive Launch,
|
||||
Wait, Review, and completion. Proposal intake no longer requires a current
|
||||
thread; thread ID is pass provenance only. Operator, status, and Resident use
|
||||
that projection, while `accept_proposal_modeling_result` alone owns semantic
|
||||
admission. The aggregate coordinator launcher now refuses proposal cargo; its
|
||||
proposal selector, validator, context builder, and generic-launch hint are
|
||||
deleted. A shared exact-envelope launch CAS remains because it protects the
|
||||
same atomic publication invariant for Body and Proposal, not because it owns
|
||||
family policy.
|
||||
## Operational state that matters
|
||||
|
||||
Exact `e404c105` removed the duplicate Body/Proposal continuation enums; exact
|
||||
`fc5d1a4a` names the shared vocabulary `EpiphanyAgentPassContinuationAction`.
|
||||
It names Launch, Wait, and Review; each
|
||||
family retains its own request, projection, validity rules, and admission owner.
|
||||
- Original c011 resident and Heartbeat containers are not running; both exited
|
||||
`255` on 2026-08-11. Their named volumes are quiescent historical evidence.
|
||||
- Historical accepted live release: source `465af24d`, c011 package SHA-256
|
||||
`089e0005`; it is not the current source body.
|
||||
- Starfire remains the cognition/build host. Yggdrasil remains the small public
|
||||
crossing body and never builds.
|
||||
- Bifrost public crossing remains active on Yggdrasil. A completed public
|
||||
Persona consequence is still unproven because the Yggdrasil Discord
|
||||
credential is absent.
|
||||
- Model Atlas code and isolated proofs remain accepted. Signed Gate 1 sight,
|
||||
brake freeze, autonomous cascade, partition exercise, and endurance remain
|
||||
open.
|
||||
|
||||
Exact `20dd66c8` deletes claim-repair's request/binding/context schemas, runtime
|
||||
carriers, coordinator launch branch, reasoning projection, result cargo,
|
||||
exports, and OpenAI lowering. The Eyes claim-challenge fact remains because it
|
||||
still blocks unsafe planning. No Rust/TOML production symbol for the dormant
|
||||
family survives. During verification, the concurrent Proposal launch test
|
||||
exposed two-snapshot attempt derivation; Body and Proposal launchers now
|
||||
revalidate launchability and ordinal from the exact cache snapshot used by the
|
||||
CAS. Proposal convergence passes 20/20 stress iterations.
|
||||
## Git/worktree caution
|
||||
|
||||
Exact `d367e525` migrates frontier-verdict Modeling onto one atomic typed chain.
|
||||
Verification acceptance commits the exact Soul verdict and its deterministic
|
||||
Modeling request together. `EpiphanyCurrentWorkProjection`, operator/status,
|
||||
Resident pressure, deterministic attempt identity, sealed role projection, and
|
||||
`accept_frontier_verdict_modeling_result` carry that request through
|
||||
Launch/Wait/Review and `Modeling.frontier_verdict` admission. The request seals
|
||||
the exact routed frontier version. A disjoint keyed node commit after basis
|
||||
sealing merges; a changed frontier refuses with the store byte-identical, so
|
||||
model output is never silently rebased. Accepted Eyes state is display/audit
|
||||
input only and cannot manufacture Modeling work. The aggregate telemetry prompt,
|
||||
accepted-at Research boundary, latest Verification selector, parallel authority
|
||||
MessagePack, and generic role-lane review path are gone for this family.
|
||||
The shared worktree contains unrelated pre-existing modifications, including
|
||||
vendored Codex/CultMesh files and a dirty `vendor/cultnet-rs` submodule. Preserve
|
||||
them. Stage only intentional migration/documentation paths. Do not use reset or
|
||||
checkout to clean the tree.
|
||||
|
||||
Exact `c7412998` migrates frontier Research onto its v3 request, exact
|
||||
frontier/dependency document closure, deterministic attempt, sealed reasoning basis and
|
||||
decision context, request-bound `EyesEvidencePacket`, and
|
||||
`Eyes.frontier_research` Mind commit. The complete RepoModel projection is immutable
|
||||
audit cargo, not one global conflict head. A result may terminalize after its strong
|
||||
frontier changes so the decision remains auditable; admission then refuses byte-identically
|
||||
instead of rebasing the output. Disjoint keyed writes still merge. Research evidence,
|
||||
observations, and optional checkpoints are separate Mind documents, and accepted Eyes
|
||||
does not implicitly create Modeling work. The generic coordinator launch/acceptance and
|
||||
Self lane/timestamp paths now refuse or ignore Research authority.
|
||||
## Re-entry
|
||||
|
||||
The same pass exposed compact positional MessagePack as unsafe for nested structs with
|
||||
omitted middle optionals. CultCache exact `ba6a487` adds named nested preparation;
|
||||
Mind envelopes retain their typed numeric slots while nested document fields remain named.
|
||||
Objective, Body, and Research Mind writers now share that boundary.
|
||||
Read, in order:
|
||||
|
||||
Exact `fc5d1a4a` completes that Verification cut. The exact Hands commit and
|
||||
derived `RepoFrontierVerificationRequest` publish atomically; current-work owns
|
||||
Launch/Wait/Review; the sealed role projection carries the exact route,
|
||||
frontier, Hands authority and receipts; and `Soul.verification` admission writes
|
||||
the keyed audit, Soul verdict, deterministic frontier-Modeling request, and
|
||||
Mind commit receipt in one transaction. A disjoint keyed node commit merges,
|
||||
an exact-frontier change refuses byte-identically, and replay returns the
|
||||
original receipt. Generic Verification launch/acceptance, accepted-at/latest
|
||||
selection, dynamic telemetry prompt mutation, and model-authored causal IDs are
|
||||
gone.
|
||||
1. `state/map.yaml`
|
||||
2. this handoff
|
||||
3. `notes/epiphany-current-algorithmic-map.md`
|
||||
4. `notes/epiphany-fork-implementation-plan.md`
|
||||
|
||||
Exact `c9329ed6` completes frontier Planning and PlanMind. The Planning request
|
||||
seals the exact frontier/dependency documents and per-claim obligation guards;
|
||||
current-work owns deterministic Imagination and Mind launches; and the terminal
|
||||
candidate plus PlanMind decision context are the only model-authored inputs to
|
||||
Mind adoption. Claim challenges now replace the exact per-node obligation
|
||||
document in the same transaction as the challenge, so a concurrent challenge
|
||||
physically conflicts with stale plan adoption while unrelated graph documents
|
||||
still merge. Plan adoption writes only the exact frontier and receipt. Replay
|
||||
authenticates the immutable request/result chain and the already-adopted
|
||||
consequence rather than requiring the obsolete pre-adoption frontier. Generic
|
||||
Planning/PlanMind launch constructors and validators, role-lane failure review,
|
||||
thread-derived request identity, and aggregate coordinator routing are gone.
|
||||
|
||||
Exact `d5df53ae` completes Reorientation. One immutable request seals the exact
|
||||
typed continuity projection and source document versions; thread is creation
|
||||
provenance only. Current-work owns deterministic Launch/Wait/Review attempts,
|
||||
the worker reasoning basis uses the request's exact source documents, and
|
||||
`Continuity.reorientation` alone admits a typed resume/regather decision plus
|
||||
continuity receipt. A model-backed terminal failure retains its exact decision
|
||||
context in a typed Mind failure document before retry. Unrelated Mind inserts
|
||||
merge, exact source replacement refuses admission byte-identically, accepted
|
||||
decisions support later reorientation over otherwise identical state, and
|
||||
replay returns the original receipt. Status and coordinator routing consume the
|
||||
same current-work projection. The aggregate launcher/acceptor, latest binding,
|
||||
checkpoint/freshness recommender, global revision acceptance gate, and
|
||||
accepted-at comparison are deleted.
|
||||
|
||||
Delete the aggregate schema/transaction next. Replace only genuinely live
|
||||
objective/focus/mode/planning mutations with keyed Mind owners; derive scene,
|
||||
planning, jobs, roles, and operator status from keyed Mind plus exact runtime
|
||||
receipts. Run source guards and the fresh-store concurrency/decision-context
|
||||
suite. Only after that may Model Atlas Gate 1 restart from a new external root.
|
||||
Keep the current fresh and partial roots read-only; do not release scheduling,
|
||||
register operational topology, touch the original c011 volumes, or build on
|
||||
Yggdrasil.
|
||||
Then run the shared-target `epiphany-state.exe status`. Persisted next action is
|
||||
orientation, not automatic authority to resume a live Gate.
|
||||
|
|
|
|||
Binary file not shown.
|
|
@ -4,7 +4,7 @@ experiment:
|
|||
purpose: Native, inspectable agent organism with typed state and explicit organ authority.
|
||||
|
||||
objective:
|
||||
current: Complete the Decision-Auditable Concurrent Mind hard cut by replacing persisted thread-state routing, launch, and acceptance authority with keyed Mind plus exact runtime receipts; then resume Model Atlas Gate 1 from a fresh external root.
|
||||
current: Complete the Decision-Auditable Concurrent Mind hard cut by binding every model-backed terminal outcome and concrete Mind mutation to its sealed reasoning basis and decision context; then prove fresh concurrent/restart behavior before resuming Model Atlas Gate 1.
|
||||
|
||||
architecture:
|
||||
body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
|
||||
|
|
@ -38,11 +38,11 @@ invariants:
|
|||
- Evidence and git retain history; this map retains only state that changes future decisions.
|
||||
|
||||
current_status:
|
||||
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, and Reorientation lifecycles are landed on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Keyed Mind now owns these families' work discovery, deterministic launch, exact job-bound continuation, review, typed failure, and semantic admission without persisted thread state. EpiphanyThreadStateEntry and its coordinator transaction remain obsolete production authorities only for generic coordinator presence, legacy objective/state mutation, role-board/status projection, and residual unmigrated callers. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of the remaining aggregate authority.
|
||||
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, and Reorientation lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts now own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, and semantic admission. Exact 07d891ba deletes persisted EpiphanyThreadStateEntry, coordinator_state_transaction, generic coordinator launch/acceptance/state-update services, and their aggregate writers. Exact ec1431ff deletes EpiphanyThreadState itself, global launch revision cargo, generic launch requests, aggregate prompt/freshness/context surfaces, and the historical prompt smoke. No compatibility reader, bootstrap aggregate, or migrator survives. The broader Concurrent Mind cut remains incomplete because the generic Mind gateway/state-patch mouth and several terminal model/Persona/retention paths do not yet require the exact sealed decision context. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind fresh-store concurrency, context-integrity, restart, and old-epoch refusal proofs.
|
||||
public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
|
||||
latest_phase: Exact d5df53ae migrates Reorientation onto one keyed continuity request and current-work lifecycle. The request seals the exact typed Mind projection and carries thread only as creation provenance; deterministic attempts bind an exact reasoning basis and terminal decision context. Continuity.reorientation alone admits resume/regather decisions and a continuity receipt through keyed Mind CAS. Model-backed failures retain the exact decision context in a typed Mind failure document before retry; transport cancellation may retry without impersonating a decision. Unrelated Mind inserts merge, changed exact objective/frontier sources refuse admission byte-identically, accepted decisions become immutable basis cargo for a later request over otherwise identical state, and replay returns the original receipt. Status, operator launch, result review, and coordinator routing consume the keyed current-work projection. The aggregate reorientation launcher/acceptor, checkpoint/freshness recommender, latest role-lane selector, global expected revision gate, and accepted-at comparison are deleted. Core library 552/552, OpenAI runtime library 23/23 plus both runtime binaries 10/10, coordinator runtime 18/18, status 3/3, and relevant all-target checks pass. Gate 1 remains paused behind final aggregate deletion.
|
||||
latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate transaction, service, launch, acceptance, interrupt, proposal, and update machinery. Exact ec1431ff removes another 4,547 lines: the EpiphanyThreadState schema and prompt renderer, generic launch/interrupt/revision contracts, aggregate freshness and graph-context surfaces, obsolete Repo graph importer, and prompt-context smoke. Family launches now proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only and stateRevision is absent. Core all-target compilation passes, core library 489/489 passes, and OpenAI runtime 43/43 passes. Gate 1 remains paused behind the remaining decision-context/admission/retention cut and fresh-store acceptance.
|
||||
operational_state:
|
||||
local_worktree: clean_at_latest_documentation_handoff
|
||||
local_worktree: source_head_ec1431ff_pushed_documentation_refresh_active
|
||||
operator_wireguard: restored
|
||||
starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
|
||||
yggdrasil: canonical_small_public_crossing_body
|
||||
|
|
@ -73,11 +73,11 @@ current_status:
|
|||
starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
|
||||
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
|
||||
resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
|
||||
unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities for generic coordinator presence, objective/state mutation, role-board/status assembly, and residual launch/result consumers. They own none of the migrated Body, Modeling, Research, Verification, Planning, or Reorientation families, and the dormant claim-repair carrier family no longer exists. The residual aggregate still contradicts concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
|
||||
next_action: Delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, aggregate update APIs, generic role-lane routing, and every residual behavioral reader/writer. Replace only genuinely live objective/focus/mode/planning writes with keyed MindMutation owners; assemble operator scene, planning, jobs, roles, and status as non-persisted views over keyed Mind and exact runtime receipts. Refuse old writable stores and prove fresh concurrent/restart behavior before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, dual reader, bootstrap thread, migrator, or generic work registry.
|
||||
unresolved_authority: The persisted/global thread aggregate is gone. The remaining live migration wound is narrower: MindGatewayReview, MindStateCommitReceipt v0, and EpiphanyRoleStatePatchDocument still describe a generic state-effect admission mouth outside the concrete invariant-owned MindMutation path; several generic role, reorient, Persona, model-failure, and retention paths do not yet make exact decision_context_id binding structurally mandatory. Native/provider request equality and governed tool-observation coverage also need the full store-backed refusal matrix. Old writable-store epoch refusal and the fresh concurrent/restart capstone remain open. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
|
||||
next_action: Replace the generic Mind gateway/state-patch mouth with concrete invariant-owned MindMutation admissions bound to exact decision contexts. Require reasoning_basis_id at model opening, derive provider requests internally, bind every structured role/reorient/Persona outcome or typed pass failure to decision_context_id, preserve those links through archival, and add store-backed substitution/tool-coverage negatives. Then bump/refuse the old writable epoch and run fresh disjoint-write, same-identity conflict, restart, and transcript-deletion acceptance before restarting Model Atlas Gate 1. Do not add a compatibility aggregate, generic mutation registry, dual reader, or transcript authority.
|
||||
|
||||
active_subgoals:
|
||||
- Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.
|
||||
- Complete exact decision-context admission, retention, epoch refusal, and fresh concurrent/restart proofs before any further operational Gate run.
|
||||
- Prove the ordered Model Atlas Gate 1 with real isolated stores: establish signed sight before engaging all brakes, then prove frozen read-only state and no local Modeling or Soul wakes.
|
||||
- Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
|
||||
- Prove a live coordinated path from source gathering through the Hands gate and post-action verification.
|
||||
|
|
|
|||
Reference in a new issue