docs: Record dormant state vocabulary cut

notes/epiphany-current-algorithmic-map.md

@@ -1,8 +1,8 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-24
-Latest committed implementation cut: `fed4b857` on `codex/epiphany-shakedown-live`
-Current worktree cut: documentation/evidence for duplicate continuity-receipt deletion;
+Latest committed implementation cut: `a602fbdc` on `codex/epiphany-shakedown-live`
+Current worktree cut: documentation/evidence for dormant state-vocabulary deletion;
 Ox17 remains paused
 
 This document describes the live machine. Historical cuts, rejected paths, and
@@ -25,6 +25,17 @@ The fixed three-Verse trust policy and public-room directory are also direct
 local Verse projections; they are not written into CultCache as counterfeit
 mutable state.
 
+The shared state-model vocabulary is inhabited, not aspirational. Exact
+`a602fbdc` deletes fifteen DTO types with no external consumer: aggregate
+acceptance/runtime links, a second graph/frontier/checkpoint model, global
+retrieval and scratch state, generic job bindings, and churn telemetry. Keyed
+Mind/runtime receipts own decisions and lifecycle identity; keyed RepoModel
+documents own repository structure; scratch and retrieval inputs belong to
+sealed reasoning passes. Two callerless OpenAI-runtime mouths and eight
+definition-only type constants are also gone. The cut is 291 pure deletions;
+the state-model crate is 398 lines. It does not touch the still-unrun Atlas
+inter-swarm path.
+
 CultMesh contains no JSON-derived operator snapshot, coordinator receipt,
 Hands gate, role-review event, unauthenticated Odin/Eve provider row, or daemon
 tool directory. Native runtime and keyed Mind receipts remain the owners; old

notes/epiphany-fork-implementation-plan.md

@@ -337,6 +337,11 @@ Cut in this order:
    its entire module. Exact reorientation result, typed Mind decision/failure,
    sealed context, and commit receipt remain the sole recovery audit path.
    Runtime writable epoch is v25.
+   Exact `a602fbdc` removes fifteen unconsumed state-model DTO types, two
+   callerless OpenAI-runtime mouths, and eight definition-only type constants.
+   Exact keyed Mind/runtime receipts, RepoModel documents, pass-local reasoning,
+   and the release-owned observed worker route remain. No schema epoch changes
+   because none of the deleted vocabulary was registered or persisted.
 3. **Baseline transaction landed at `9f7b164f`; operator routing at `587c56d2`; Resident continuation and keyed acceptance at `478fb923`:** baseline Body Modeling is now thread-free from unresolved Body obligation through Launch/Wait/Review and exact Mind admission. Resident and operator callers consume the same family projection and acceptance owner. Thread ID remains immutable pass provenance only.
 4. **Proposal Modeling landed at `d1b031cb`:** its immutable request, worker launch, runtime attempt/result, and `Modeling.proposal_frontier` commit now own Launch/Wait/Review and admission. The aggregate launcher refuses proposal cargo; the old selector, validator, context builder, and generic-launch hint are deleted. Body and Proposal share only the exact-envelope launch CAS invariant, not a mutable family registry. Exact `b0a4978d` deletes the later duplicate launch-binding document entirely; the worker launch is the sole launch owner.
 5. **Continuation vocabulary landed at `e404c105` and was named truthfully at `fc5d1a4a`:** concrete pass families share one pure `EpiphanyAgentPassContinuationAction`; their semantic requests, projections, validators, and admission owners remain separate.

notes/fresh-workspace-handoff.md

@@ -2,8 +2,8 @@
 
 Updated: 2026-08-24
 Branch: `codex/epiphany-shakedown-live`
-Latest committed implementation cut: `fed4b857`
-Current worktree: documentation/evidence for duplicate continuity-receipt deletion;
+Latest committed implementation cut: `a602fbdc`
+Current worktree: documentation/evidence for dormant state-vocabulary deletion;
 Ox17 remains paused
 
 ## Orientation
@@ -15,7 +15,7 @@ Idunn's Yggdrasil CI/CD task with local compiler work, or wake resident
 cognition without an explicit operator resumption.
 
 Epiphany is a supervised engineering alpha. Exact source `d2ca6630` remains the
-production symlink body and is inactive. Exact `fed4b857` is the current
+production symlink body and is inactive. Exact `a602fbdc` is the current
 build-affecting source. Historical live proofs remain evidence; they do not
 authorize the next capstone or Gate 1.
 
@@ -45,6 +45,20 @@ authorize the next capstone or Gate 1.
 
 ## What just landed
 
+Exact `a602fbdc` deletes fifteen public state-model DTO types with no external
+consumer, two callerless OpenAI-runtime mouths, and eight definition-only type
+constants. Acceptance/runtime-link aggregates, duplicate graph and frontier
+DTOs, global retrieval and scratch state, generic job bindings, and churn state
+had no constructor, reader, writer, registry entry, test, or downstream
+consumer. Their live concepts already belong to keyed Mind/runtime receipts,
+keyed RepoModel documents, sealed reasoning passes, and exact runtime jobs. The
+standalone worker wrapper and direct model-request writer likewise had no
+caller; the release-owned observed worker path remains. State-model, core,
+OpenAI-runtime, and the packaged model-runtime entrypoint compile through the
+shared target. The cut removes 291 maintained lines, changes no writable
+schema, and leaves Atlas untouched. Live inter-swarm collaboration remains
+unproven.
+
 Exact `fed4b857` deletes the final duplicate Continuity recovery record. An
 accepted reorientation already persists its exact runtime result, sealed
 reasoning basis/context, typed Mind decision, strong-read admission, and Mind
@@ -183,7 +197,7 @@ the live resident fields. Runtime writable state advances to v20. JSON schemas
 parse; core check, old-epoch refusal, coordinator 5/5, and swarm 4/4 pass. The
 cut removes 59 maintained lines and leaves `runtime_spine.rs` at 9,807 lines.
 
-Continue the registered-type and test-liability audit after exact `fed4b857`. Model Atlas remains protected
+Continue the registered-type and test-liability audit after exact `a602fbdc`. Model Atlas remains protected
 for its first live inter-swarm collaboration trial.
 
 Exact `3ed1d564` deletes the public

state/map.yaml

@@ -73,6 +73,7 @@ current_status:
   generic_planning_mirror_cut: Exact 2e3489c4 deletes the empty generic planning mirror. Four registered Mind document families—planning captures, backlog items, roadmap streams, and objective drafts—had no constructor, writer, admission owner, or consumer, yet were read and injected empty into every reasoning projection. Their document types, registry/validation/projection branches, reasoning field, and 256-line issue-tracker-shaped state-model vocabulary are gone. Real planning remains in frontier planning requests, candidates, Mind review, adopted decisions, checkpoints, Hands receipts, and exact admission paths. Mind/runtime writable epochs advance to v9/v24. State model and core compile; sealed reasoning 8/8, old-epoch refusal, model runtime 23/23, and coordinator 5/5 pass. The cut removes 350 net maintained lines without touching Atlas.
   persona_quarantine_mirror_cut: Exact a6f73fc4 deletes the write-only Persona quarantine mirror. A blocked turn already atomically writes one terminal receipt containing exact crossing status/reason and mention digest, then marks each mention quarantined and binds it to that receipt. The duplicate blocked-pressure payload, wrapper document, construction branch, type constant, registry entry, and decoder are gone; nothing read them after the earlier duplicate projection was deleted. Core compiles, Persona consequence/retention 5/5 pass, and the feature-gated Persona service compiles. The cut is 63 pure deletions without touching Atlas.
   continuity_recovery_mirror_cut: Exact fed4b857 deletes the final duplicate Continuity recovery record. Accepted reorientation already persists its exact runtime result, sealed reasoning basis/context, typed Mind decision, strong-read admission, and Mind commit receipt. ContinuityRecoveryReceipt copied the same job/result, mode, checkpoint validity, summary, next move, files, and timestamp, and no reader consumed it. The entire continuity-gateway module, runtime registration, and derived-companion write are gone; success and failure use the ordinary exact Mind commit primitive. Runtime writable epoch advances to v25. Core compiles; decision-auditable reorientation 1/1, old-epoch refusal, and coordinator 5/5 pass. The cut removes 80 net maintained lines without touching Atlas.
+  dormant_state_vocabulary_cut: Exact a602fbdc deletes fifteen public state-model DTO types with no external consumer, two callerless OpenAI-runtime mouths, and eight definition-only type constants. Acceptance receipts and runtime links are derived from exact runtime/Mind receipts; RepoModel owns its keyed graph; retrieval and scratch belong to sealed passes; runtime jobs own their own typed identity. The old aggregate graph/frontier/checkpoint, retrieval, scratch, generic job-binding, and churn vocabulary has no remaining source reference. State-model is 398 lines. Focused state-model, core, OpenAI-runtime, and release-owned model-runtime checks pass. The cut removes 291 maintained lines, does not alter a writable schema, and leaves the complete unrun Atlas vertical slice untouched.
   supervisor_subtraction: Exact 856648de completes the supervisor deletion. Epiphany owns no local generic daemon supervisor, semantic projector service, workspace-coverage projector, Windows Task Scheduler integration, or service-policy/lifecycle/heartbeat/recovery mirror. Idunn on Yggdrasil owns source-triggered compilation, testing, packaging, deployment, signed health, and daemon survival. The canonical Epiphany brake gates Epiphany cognition and consequence authority, not Idunn startup or unrelated lifecycle.
   launch_dependency_cut: Exact 2aeab7a9 deletes the generic organ dependency matrix, generic receipt catalogue/proof profiles, persisted worker-launch cargo, Persona prompt injection, evaluator, and three self-certifying tests: 700 net lines. Family admission owners derive exact dependencies from typed state. Worker-launch schema v2 and Persona projector prompt v1 refuse the old writable shape. Core 378/378, OpenRouter runtime 27/27, packaged runtime 13/13, and Persona re-entry 1/1 pass.
   operator_surface_subtraction: Exact ef92e853 deletes the callerless view-lens registry, legacy acceptance-bundle builders, test-only raw-JSON result interpreters, and six tests: 797 net lines. Exact a292979d and 77e817c1 delete the duplicate CRRC recommendation algorithm, its unused input model, and four tests: 206 lines. Exact 3b94bf6e and 59c5e3a6 delete the nested duplicate status view, false auxiliary mode, and ignored status arguments. Exact 7c9b0cf3 deletes the fixed synthetic job table, role-board job cargo/mappers, and its test: 338 net lines. Exact 2ce91461 deletes the scene/planning Mind reconstructions, duplicate self-policy crate, unused prompt templates, four counterfeit schemas, and ten producer/source-text tests: 1,723 net lines. Exact 78836f3b deletes eight unconsumed status tableaux, the pressure calculator production only called without telemetry, its unreachable compaction action, one counterfeit schema, and six tests: 518 net lines. Exact f10f7fb3 deletes the final twelve epiphany.surface.* schemas and ten catalog entries after every one proved producerless and consumerless: 692 pure deletions. Exact ab3cacfb deletes thirty-one more producerless contracts, the false runtime-session mutation mouth, every Epiphany-owned Rider/Unity command schema, a callerless prompt-context module, its test-only specialist prompt system, and four self-affirming tests: 3,514 net lines. Exact 16d85b1b deletes six duplicate JSON-schema builder tests and two OpenAI-runtime self-source searches: 209 pure test-line deletions. Exact 06f93f70 deletes the test-only inverse OpenAI-to-native request mapper and makes two retained tests follow canonical native-to-provider derivation: sixty net lines. Exact 0091e0e1 later removes two unread adapter-status schemas and catalog entries; the local catalog now has twenty live or portable contracts. Brokkr owns Unity capabilities through CultMesh/Eve; a future Rider daemon owns Rider. Status retains Mind identity, exact current work, one action/reason decision, readable role lanes, and operator thought sealing. Core checks cleanly; retained provider and focused request-flow tests pass.
@@ -134,8 +135,8 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
-  unresolved_authority: `runtime_spine.rs` remains the largest central liability at 9,730 lines, 53 public functions, and 25 public structs; it still mixes immutable identity, sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. Sessions and jobs now carry only lifecycle identity/status; terminal result documents own summaries and artifacts. The lenient duplicate session ensure writer is gone; the strict diagnostic creator refuses identity collisions. All persisted family launch-binding documents, the standalone verdict-driven Modeling writer, and coordinator artifact/status cargo are gone; immutable worker launches plus typed family requests and atomic admission receipts own launch ancestry and downstream work creation. Continue splitting only by deleting callerless or duplicate authority and auditing tests against consequential behavior; do not create family frameworks or adapters. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Bifrost's Discord delivery path is a real consumer of Epiphany's short-lived request-bound permit signature, so the distinct permit identity/process remains an earned privilege boundary; current Ygg deployment doctrine still points that crossing at the old Starfire endpoint and installs no issuer unit, which the Idunn lane must repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Resume the registered-type and test-liability audit after exact fed4b857. Trace each remaining registered document and verifier to a producer, reader, and consequential invariant; delete complete dead authority slices, duplicate decision companions, write-only mirrors, unread projections, and self-affirming tests. Preserve exact identity, decision audit, conflict/replay, retry ancestry, retention fences, terminal Self provenance, typed frontier planning, exact Persona terminal consequences, exact provider requests/receipts, and the complete unrun Model Atlas inter-swarm vertical slice. Do not mistake component tests for collaboration acceptance. Do not run a local full-workspace compile, package, deployment, Ox root, or Model Atlas Gate run.
+  unresolved_authority: `runtime_spine.rs` remains the largest central liability at 9,723 lines, 53 public functions, and 25 public structs; it still mixes immutable identity, sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and narrow identity/schema reads. Sessions and jobs now carry only lifecycle identity/status; terminal result documents own summaries and artifacts. The lenient duplicate session ensure writer is gone; the strict diagnostic creator refuses identity collisions. All persisted family launch-binding documents, the standalone verdict-driven Modeling writer, coordinator artifact/status cargo, and uninhabited aggregate state-model DTO families are gone; immutable worker launches plus typed family requests and atomic admission receipts own launch ancestry and downstream work creation. Continue splitting only by deleting callerless or duplicate authority and auditing tests against consequential behavior; do not create family frameworks or adapters. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Bifrost's Discord delivery path is a real consumer of Epiphany's short-lived request-bound permit signature, so the distinct permit identity/process remains an earned privilege boundary; current Ygg deployment doctrine still points that crossing at the old Starfire endpoint and installs no issuer unit, which the Idunn lane must repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only.
+  next_action: Resume the registered-type and test-liability audit after exact a602fbdc. Trace each remaining registered document, public runtime surface, and verifier to a producer, reader, and consequential invariant; delete complete dead authority slices, duplicate decision companions, write-only mirrors, unread projections, re-export-only API, and self-affirming tests. Preserve exact identity, decision audit, conflict/replay, retry ancestry, retention fences, terminal Self provenance, typed frontier planning, exact Persona terminal consequences, exact provider requests/receipts, and the complete unrun Model Atlas inter-swarm vertical slice. Do not mistake component tests for collaboration acceptance. Do not run a local full-workspace compile, package, deployment, Ox root, or Model Atlas Gate run.
 
   runtime_spine_surface_cut: `runtime_spine.rs` owns immutable runtime identity, exact sessions/jobs and process claims, model/tool execution bindings, family admission, consequence receipts, retention, and identity-resurrection fences. Session/job documents carry only lifecycle identity and status; terminal job results carry summaries, evidence, artifacts, and decision-context identity. The sole standalone diagnostic session creator refuses identity collisions; there is no lenient ensure/rebase mouth. It exposes no aggregate status head, mutable adapter-status shadow, uninhabited generic planning mirror, duplicate Continuity recovery copy, global revision, generic role patch, caller-authored mutation surface, duplicate prompt-state projection, persisted family launch-binding document, standalone verdict-driven Modeling writer, coordinator artifact/status cargo, public typed-fulfillment machinery, or producerless Imagination review contract. Completed model-session retention writes one private resurrection tombstone. Archived worker retention writes one decision-bearing historical record with exact request/terminal identity, deletion digest, decision context, structured role result, and terminal job records; duplicate IDs, timestamps, count summaries, and returned archive vectors own nothing and are absent. Coordinator terminal receipts retain only terminal Self decision and exact resident-launch provenance. Mind/runtime writable epochs are v9/v25, runtime session/job catalog schemas are v1, archived-session schema is v1, archived-worker-attempt schema/type is v2, coordinator-run-receipt schema/type is v1, and claim-obligation schema is v3. The spine is 9,723 lines with 53 public functions and 25 public structs. Continue subtraction by tracing each remaining public surface and verifier to a live consumer and consequential invariant; do not replace deleted authority with registries, adapters, compatibility readers, or summary DTOs.