diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 7ca1b319..e8da8d13 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -1,10 +1,9 @@ # Epiphany current algorithmic map Updated: 2026-08-25 -Latest committed implementation cut: `a721b763` on `codex/epiphany-shakedown-live` -Current pass: one native model event/receipt family and one model-adapter -package own provider projection; audit the library-only model-runtime package -next. Ox17 remains paused +Latest committed implementation cut: `ed4ca58c` on `codex/epiphany-shakedown-live` +Current pass: source subtraction is complete; `state/map.yaml` owns the fresh +Ox17 package-capstone direction. Atlas Gate 1 and production remain paused. This document describes the live machine. Historical cuts, rejected paths, and proof chronology belong in git, `state/ledgers.msgpack`, and bounded smoke diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index 5974d78e..cd10025b 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -258,10 +258,16 @@ Exact `e7b66b35` demotes that entire causal-ID surface without changing the digest law. Continue the same class audit through internal prompt rendering, supersession, and Resident Self policy/completion helpers; keep entrypoints that are actually consumed by release binaries or sibling packages public. -Exact `9f189871` lands that cut and removes the dead prompt root alias. Continue -by deleting `RepoFrontierAdoptedPlan::effective_action` and -`effective_command`: both merely return their public fields and currently make -the Hands route look as though a second derivation law exists. +Exact `9f189871` lands that cut and removes the dead prompt root alias. Exact +`ed4ca58c` then deletes `RepoFrontierAdoptedPlan::effective_action` and +`effective_command`; the operator projection and Hands consequence validation +read the owning public fields directly. A bounded closing audit found no +further unearned public function across `runtime_spine`, `state_model`, +`current_work`, `resident_readiness`, and `resident_self`; every survivor has a +production consumer, and the sole low-fanout candidate protects resident +objective authentication. Source subtraction has reached diminishing returns. +Prepare the fresh exact Ox17 package capstone next; `state/map.yaml` owns its +current direction. Resident startup now has one health decision. `derive_resident_cognition_readiness` loads the exact provider row, probes the process singleton, and obtains the diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index dfa246c3..f1c4442a 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -2,10 +2,11 @@ Updated: 2026-08-25 Branch: `codex/epiphany-shakedown-live` -Latest committed Epiphany source cut: `9f189871` +Latest committed Epiphany source cut: `ed4ca58c` Current connector source: `6dc80f6d266db4d82566d2434adcc55a48e8ecad` -Current pass: adjacent single-consumer cognition helpers are private; delete -the adopted-plan effective-action/command field wrappers next. +Current pass: source subtraction has reached diminishing returns. Prepare the +fresh exact Ox17 package capstone next; canonical direction lives in +`state/map.yaml`. Ox17 and Atlas Gate 1 remain paused ## Orientation @@ -17,7 +18,7 @@ Idunn's Yggdrasil CI/CD task with local compiler work, or wake resident cognition without an explicit operator resumption. Epiphany is a supervised engineering alpha. Exact source `d2ca6630` remains the -production symlink body and is inactive. Exact `9f189871` is the current +production symlink body and is inactive. Exact `ed4ca58c` is the current build-affecting source on this branch. Historical live proofs remain evidence; they do not authorize the next capstone or Gate 1. @@ -47,6 +48,16 @@ they do not authorize the next capstone or Gate 1. ## What just landed +Exact `ed4ca58c` deletes `RepoFrontierAdoptedPlan::effective_action` and +`effective_command`; the operator projection and Hands consequence validator +read the owning public fields directly. The closing audit found no further +unearned public function in the five high-risk ownership modules. Every +survivor has a production consumer, and the only low-fanout candidate protects +resident objective authentication. Source subtraction stops here. The staged +diff check passed; no mixed-worktree compilation is claimed. Prepare the fresh +exact Ox17 package capstone next while production and Atlas Gate 1 remain +paused. + Exact `9f189871` removes the admitted-direction prompt alias from the crate root, makes its renderer and supersession check crate-internal, and makes the Resident Self policy digest and death-completion helper private to their sole diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 05c4b77e..7f1dfcbf 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index 3e6e980f..aebb080d 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -4,7 +4,7 @@ experiment: purpose: Native, inspectable agent organism with typed state and explicit organ authority. objective: - current: Complete the source-subtraction and test-authority audit before admitting a fresh Ox17 package. Production remains braked and historical Ox roots are never resumed. + current: Admit a fresh exact Ox17 package as the first whole-body proof after the completed source-subtraction and test-authority audit. Production remains braked and historical Ox roots are never resumed. architecture: body: Repository, runtime, service processes, stores, interfaces, and deployment substrate. @@ -226,7 +226,8 @@ current_status: resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 vendored_codex_eviction: Exact 7a125d78 deletes all 3,592 tracked vendored Codex files and 851,099 lines after Cargo metadata and manifest/source guards prove no build consumer. The seven dirty files contained only rustfmt and blank-line churn, so no semantic work was discarded or preserved as a counterfeit artifact. The root workspace exclusion, obsolete AGENTS search recipes, vendor-specific license clauses, and two superseded live migration notes are gone. The independent Connector contract remains the sole Codex-facing compile dependency. Gamecult-ops exact cb63e77 corrects the Yggdrasil inventory from the extinct Epiphany-branded/Ghostlight-owned daemon to the independent `yggdrasil-codex-connector` Idunn target. Historical archive notes and the explicitly dated June Body whitepaper remain inert history. No compilation or deployment mutation was required. unresolved_authority: `runtime_spine.rs` remains the largest central liability; it still mixes immutable identity, minimal model sessions/jobs, process claims, model/tool execution binding, family admission, consequence receipts, retention, and resurrection fences. Exact a01c6842 removes the counterfeit Hands review; route, Substrate Gate grant, minimal intent, frontier authority, and exact consequences now own that chain. No production actuator authors those receipts, so the coordinator truthfully stops at `awaitingHandsExecutor`. Exact c37cae8b closes the two-stage Codex request seam, exact 7a125d78 removes the excluded implementation corpse, exact 7374be5e removes split-snapshot current-work projection, exact 5f1bea39 removes the second fulfillment/replay store snapshot, and exact 2bcbf268 makes current work the sole coordinator scheduling projection. Ghostlight exact 8e7d980 pins the same Connector source contract. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Continue source subtraction from exact 9f189871 by deleting `RepoFrontierAdoptedPlan::effective_action` and `effective_command`. They only return the public `action` and `command` fields, so the coordinator and Hands validation should read those fields directly. Preserve the exact planned-action/command consequence checks and operator projection. Stage only those semantic hunks from the already dirty state-model file; do not touch Model Atlas or unrelated formatting. + next_action: Prepare the fresh exact Ox17 package capstone from exact ed4ca58c. Prove the downsized source as one packaged body before any Model Atlas Gate 1 work or production admission; keep all historical Ox roots read-only and production braked. + source_subtraction_audit_complete: Exact ed4ca58c deletes the final adopted-plan action/command forwarding wrappers and makes the operator projection plus Hands consequence validation read the owning public fields directly. The bounded closing audit found no further unearned public function in runtime_spine, state_model, current_work, resident_readiness, or resident_self: every survivor has a production consumer, and the sole low-fanout candidate authenticates the resident coordinator objective against its prepared grant or active lease. Further helper shaving has crossed into diminishing returns. The campaign stops with 2,111 net code/manifest/test lines removed across the evaluated thirty-commit downsizing sequence, two Cargo package boundaries retired, and no replacement authority, schema, process, or target added. The exact staged diff passed `git diff --cached --check`; no mixed-worktree compilation was claimed. single_snapshot_current_work_cut: Exact 7374be5e makes one pulled CultCache snapshot the sole input to Mind assembly, keyed RepoModel assembly, current-work Research and Planning lifecycles, Hands readiness, Modeling launches, reasoning-basis assembly, and Reorientation request projection. Three path-based wrappers and numerous repeated open/pull sequences are gone; Research and Verification admission also reuse their already authenticated cache for review and public-source consequence checks. The public Codex Connector client remains the earned ABI stub: deleting it would duplicate authenticated encryption and framing in every consumer, while no daemon/auth/HTTP/SSE implementation compiles into Epiphany. The cut is one net maintained line smaller, adds no schema, dependency, target, or process, and passes Core check, current-work 3/3, reasoning-context 8/8, Reorientation 1/1, Mind determinism 1/1, and RepoModel determinism 1/1. The focused run produced 2.0 GiB across 2,867 files; cleanup restored exactly the 1,776,640-byte inspector at SHA-256 DD38855C6F092C2C53D2212A938E737643F41130F4681708840BA6075320A04E. single_snapshot_fulfillment_cut: Exact 5f1bea39 makes typed fulfillment replay consume the caller's already pulled runtime Mind snapshot. Research, Verification, Proposal Modeling, PlanMind continuation, fulfilled-worker archival, and Resident Self completion no longer reopen the same `.cc` file while validating one immutable result. The generic path-based fulfillment wrapper is deleted. The public provider-runtime role-result function remains the sole path-based CAS writer; cache-local fulfillment can only replay the exact result already present in its supplied snapshot. The cut adds 17 maintained lines net to remove repeated physical reads while adding no schema, dependency, target, process, or decision authority. Core check, current-work 3/3, reasoning-context 8/8, structured-failure refusal, and the release-owned swarm entrypoint pass. Verification produced 2.2 GiB across 3,189 files; cleanup restored the exact authenticated state inspector. single_projection_coordinator_cut: Exact 2bcbf268 makes the current-work projection the sole scheduling input for operator status and Resident Self. An accepted reorientation decision's real manual-regather obligation is projected once with Body, Research, Planning, Modeling, Verification, Imagination, and Hands work. Status no longer opens and assembles Mind separately, and Resident Self no longer hard-codes a contradictory Continue value. `EpiphanyCrrcAction`, its five impossible transition variants, the parallel coordinator-input field, and the second Mind read are gone. The existing reorientation lifecycle now proves the durable regather decision reaches the user-visible coordinator action. The cut removes 12 maintained lines net, adds no persisted schema, dependency, target, or process, and passes Core check, current-work 3/3, Reorientation 1/1, operator-sanitization 1/1, and the release-owned coordinator compile. Verification produced 1.6 GiB across 2,924 files; cleanup restored the exact authenticated state inspector.