Record manual regather authority boundary

notes/epiphany-current-algorithmic-map.md

@@ -4302,3 +4302,27 @@ Soul binding, and split-admission replay.
   request once, accepted its review, completed native admitted-direction
   Imagination, and completed two resulting proposal Modeling families. The
   brake is engaged at revision 364 with no active lease.
+
+## Manual regather authority boundary (2026-08-11)
+
+- Owner: the operator owns approval to cross a current Self-derived
+  `regatherManually` boundary. Self owns the recommendation; Heartbeat owns only
+  typed scheduling pressure.
+- Inputs: the exact current coordinator action and one explicit
+  `--approve-manual-regather` launch capability. The approval helper refuses
+  every other current action.
+- Outputs: one launch-local rewrite to `launchResearch`, consumed once by the
+  coordinator loop. It does not create durable resident pressure.
+- Derived state: Heartbeat's `reorientation` work-role label and coordinator
+  scene projections are observations, not grant authority.
+- Forbidden writers: Heartbeat, resident Self, historical failed
+  Reorientation, generic operator objective text, and retry loops may not mint
+  manual approval or Eyes pressure.
+- Shared path and cut line: direct coordinator operation currently carries the
+  explicit approval flag. Any future resident operator path must define typed,
+  authenticated approval ingress and make the flag only its launch carrier; it
+  must not parse prose or auto-convert idle status.
+- Verification: source inspection confirms exact-action refusal, single use,
+  and the hostile unrelated-action regression. Resident safe-continuation
+  routing excludes manual regather. c010 remains alive, braked, and without an
+  active lease after native Imagination produced no admitted work.

notes/fresh-workspace-handoff.md

@@ -3955,3 +3955,15 @@ now braked at resident revision 372 with no active lease. The next live gap is
 coordination, not transport: status still says `regatherManually` because the
 historical Reorientation result failed, but Heartbeat/Self have no typed Eyes
 or Reorientation pressure. Map that owner before adding any route.
+
+Source inspection closes that apparent gap as an intentional authority
+boundary. `apply_manual_regather_approval` accepts only a current Self-derived
+`regatherManually` action and produces one `launchResearch` only when the
+coordinator receives explicit `--approve-manual-regather`. Resident safe
+continuation deliberately excludes this action; Heartbeat's reorientation role
+label is display derivation, not grant authority. Operator owns approval, Self
+owns the recommendation, and Heartbeat schedules only typed pressure. Generic
+operator objective text cannot impersonate approval. c010 is therefore
+correctly alive, idle, and braked at revision 372. Continue retention,
+supervisor/log ownership, and endurance. A live regather is a separate operator
+decision or a future mapped typed operator-ingress cut.

state/map.yaml

@@ -70,7 +70,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: c010_exact_d3e433fc_alive_braked_revision372_after_causal_thread_recovery_two_reviews_and_two_native_imagination_turns
   unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, all three packaged fulfilled-before-receipt lanes, genuine packaged Imagination option generation, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, normal coordinator lifecycle opening/error closure/legacy repair/archival, co-resident resident lifecycle retention, authenticated outer-worker attempt retention, deployed supervisor/projector journald ownership, Docker named-volume atomic snapshot visibility, deterministic incremental release construction, and canonical-brake refusal of direct daemon lifecycle actuation are accepted. Starfire's Docker Desktop F: bind is rejected for mutable authority after an exact packaged lockless reader observed an empty published snapshot during writer interruption. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. One completed Discord consequence remains blocked by the absent Yggdrasil credential. Exact aa841873 also makes legacy coordinator repair one full-snapshot transaction so a later hostile family cannot leave an earlier partial repair.
-  next_action: Keep c010 alive and the cognitive brake engaged. The exact Modeling review is accepted and the latest Imagination turn created no new admitted work. Map the idle coordination gap: coordinator status remains regatherManually because the historical Reorientation result failed, while Heartbeat/Self have no typed Eyes or Reorientation pressure. Identify the owner, inputs, outputs, forbidden writers, and deletion line before editing; do not synthesize operator pressure or add a retry loop. Then continue retention, supervisor/log ownership, and longer coordinated endurance from this proven body. Do not build on Yggdrasil.
+  next_action: Keep c010 alive and the cognitive brake engaged. The idle regather boundary is source-grounded: regatherManually is an operator approval boundary, not Heartbeat pressure, and Self must not synthesize Eyes or Reorientation work from it. Do not add an automatic route or translate generic operator objective text into approval. Continue bounded retention and supervisor/log ownership, then measured idle and active endurance. A future live regather requires an explicit operator decision through the existing approval contract or a separately mapped typed operator ingress. Do not build on Yggdrasil.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.