Record Heartbeat shutdown acceptance

notes/fresh-workspace-handoff.md

@@ -1,5 +1,32 @@
 # Fresh workspace handoff
 
+## Heartbeat graceful SIGTERM accepted on Linux — 2026-08-10
+
+Exact pushed source `bfb92cbb96e8ac085222844d3aa51681d15e18d1`
+packaged in 6m12s without warnings as 24-binary release
+`sha256-6f1f4eff32fab17cf3ffa2c7be7b911138c18cc09fad7d3271e1ca02559fe54f`
+with witness
+`sha256-fda39e34d6f30a606f19736f96769613262997a35db63560165049a7db2e12da`.
+Independent inspection authenticated exact source, runtime, witness, destination,
+and all 24 sibling binaries. Package receipts are under
+`.epiphany-run/linux-package-bfb92cbb/`.
+
+On copied c006 state, packaged Heartbeat authenticated the published release and
+mounted cognitive runtime, observed the engaged cognitive brake, and emitted no
+grant. SIGTERM arrived during its configured 30-second interval. The process
+stopped in 0.358 seconds with exit zero and no OOM; its final
+`epiphany.heartbeat.serve_receipt.v0` states `stopped-cleanly` and
+`shutdownRequested:true`. Resident, runtime, and cognitive local-Verse SHA-256
+values were byte-identical before and after. Receipts are under
+`.epiphany-run/heartbeat-sigterm-bfb92cbb/`.
+
+Heartbeat graceful termination is accepted. Actual c006 remains braked and its
+old resident/Heartbeat containers remain stopped. Next resume copied
+receipt-free coordinator death: prove the pre-open boundary and then resolve the
+post-open split between already-authenticated typed fulfillment and an orphaned
+immutable worker launch. Do not manufacture retry authority or delete launch
+history. Yggdrasil never builds.
+
 ## Heartbeat graceful SIGTERM source complete — 2026-08-10
 
 Heartbeat `serve` now owns SIGINT/SIGTERM with one process-local atomic signal

state/map.yaml

@@ -36,9 +36,9 @@ invariants:
 
 current_status:
   summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, exact 6bc3ec3f semantic physical-epoch retirement, and exact 44230a05 Persona conversation retention are proven. Gamecult-ops 059821f owns Yggdrasil stream retention and exact 6ee08a4 owns stable Starfire Persona-permit firewall ingress. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Yggdrasil is the small public crossing body, never the release forge.
-  latest_phase: Exact pushed c693aaea and release sha256-fd46323a settled copied and actual c006 attempt-two authority without resurrection; the cognitive brake remains engaged and old processes remain stopped. Heartbeat graceful shutdown is now source-complete: serve owns SIGINT/SIGTERM, observes it before each pulse, interrupts every interval wait, and converges bounded or signalled closure on one typed receipt with shutdownRequested. Six focused binary tests and warning-free check pass. Exact packaging and copied Linux SIGTERM replay remain.
+  latest_phase: Exact pushed bfb92cbb packages Heartbeat graceful shutdown as warning-free 24-binary release sha256-6f1f4eff with witness sha256-fda39e34. On copied c006 state under the mounted cognitive brake, continuous Heartbeat emitted no grant, accepted SIGTERM during a 30-second interval, stopped in 0.358 seconds with exit zero/no OOM, and emitted one final typed shutdownRequested receipt. Resident, runtime, and cognitive local-Verse hashes remained byte-identical. Exact c693aaea actual c006 settlement remains accepted; the actual brake stays engaged and old processes stay stopped.
   operational_state:
-    local_worktree: heartbeat_graceful_sigterm_source_verified_pending_commit
+    local_worktree: heartbeat_graceful_sigterm_accepted_live_pending_mind_commit
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -70,7 +70,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: c006_exact_c693aaea_settled_braked_no_active_lease_no_attempt_three_old_processes_stopped
   unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, and normal coordinator lifecycle opening/error closure/legacy repair/archival are accepted live. Receipt-free hard-death recovery is source- and package-accepted but its live kill matrix remains unproven because the first copied run exposed non-atomic storage publication. A typed worker launch without valid terminal fulfillment deliberately remains active awaiting an owner for exact orphan-worker death and supersession; it is not retryable yet. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Mutable Starfire bind storage is not accepted as resident authority until the packaged CultCache repair and recovery replay pass. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Commit and push the Heartbeat graceful SIGTERM cut, package exact source once with the persistent Starfire cache, then run exact Linux Heartbeat serve against copied c006 state under the cognitive brake. Require SIGTERM exit zero, final typed shutdownRequested receipt, no new grant, and byte-identical resident/runtime authority. Then resume the copied receipt-free death and orphan-worker Continuity matrix. Do not release the c006 brake. Yggdrasil never builds.
+  next_action: Resume the copied receipt-free coordinator death and orphan-worker Continuity matrix from exact bfb92cbb. Prove the pre-open death boundary, then classify post-open typed fulfillment versus orphaned immutable worker launch without inventing retry authority. Preserve distinct cognitive-thread, launch, session, process, and artifact incarnation evidence; keep actual c006 braked. Yggdrasil never builds.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.