From a0e53d4e0ae565ede93ba41397e06ec53063043b Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Sun, 21 Jun 2026 19:17:14 +0100 Subject: [PATCH] Clarify Bifrost public proof wrapper output --- notes/fresh-workspace-handoff.md | 2 +- state/ledgers.msgpack | Bin 385105 -> 385783 bytes state/map.yaml | 4 ++-- tools/epiphany_local_run.ps1 | 16 ++++++++++++---- 4 files changed, 15 insertions(+), 7 deletions(-) diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 352aeaef..aba40066 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -119,7 +119,7 @@ remembers doctrine; the branch remembers the blade. - 2026-06-20: Public proof export is live. `epiphany-work export-proof` calls overview, distills the local `epiphany.repo_work_proof_bundle.v0` into redacted `epiphany.repo_work_public_proof_bundle.v0`, and writes `.epiphany/public/proof-bundles/repo-work-public-proof-.json` by default without raw receipt bodies, local receipt paths, expected paths, worker thought, publication authority, or private Verse exposure. Disposable proof `.epiphany-smoke\checklist-note-20260620-031347\13-export-proof.json` reported eight artifact rows, three publication rows, zero artifact path fields, `rawReceiptBodies=false`, and `private=false`. The next cut is deeper model-authored closure review, further non-planning action classes, or Idunn-owned queue-run service execution; not another local public-proof export wrapper. - 2026-06-20: Richer repo-work closure review is live. `epiphany-work close` now writes `epiphany.repo_work_closure_review.v0` beside the close receipt, recording verification command/exit code, stdout/stderr artifacts, declared Hands paths, actual git commit paths, path-scope match truth, compact commit stat, optional `--closure-model-ref` / `--model-authored` provenance, committed-content safe-family assertions, and authority seals. Soul only passes when the verification command succeeds, actual git changed paths match the Hands-declared path scope, and known safe-family assertions pass. Disposable proof `.epiphany-smoke\closure-review-20260620-135009` ran task-card work through close with `--closure-model-ref smoke-closure-review-v0 --model-authored`, producing Soul `passed`, `pathScopeMatched=true`, closure-review proof rows in overview/export, and `privateStateExposed=false`; a tampered execute receipt declaring `README.md` while the commit changed `notes/epiphany-work/closure-review-request-task-card.toml` produced `verification-failed`, Soul `failed`, `pathScopeMatched=false`, and no private-state exposure. Deeper assertion proof `.epiphany-smoke\closure-assertions-20260620-141401` showed a good `repo.status_section` close with `familyAssertions.status=passed`, then a path-scoped bad README override where `pathScopeMatched=true` but `familyAssertions.status=failed`, Soul `failed`, and missing marker/summary/private-seal assertions blocked closure with `privateStateExposed=false`. - 2026-06-20: The first repo-visible non-planning safe family is live. `epiphany-work derive-plan --action-family repo-status-section` lowers accepted Persona/Bifrost pressure into a marker-bounded README status section with safe family `repo.status_section`, model provenance, candidate/public refs, verification asks, rollback hints, and authority seals forbidding publication, merge, service lifecycle, elevation, cross-repo mutation, durable-state admission, and private-state exposure. Disposable proof `.epiphany-smoke\repo-status-section-20260620-140245` ran init -> online -> accept -> derive-plan with `--model-ref smoke-imagination-v0 --model-authored` -> run -> adopt -> execute -> close -> overview; Hands committed only `README.md`, Soul passed with `pathScopeMatched=true`, both Epiphany status markers were present, and `privateStateExposed=false`. -- 2026-06-20: Public proof local Verse transport, Bifrost publication closure, and the standard wrapper mouth are live. `epiphany-work export-proof --local-verse-store \.epiphany\local-verse.ccmp` mirrors each redacted export as `epiphany.cultmesh.repo_work_public_proof.v0` under `gamecult-local/repo-work-public-proof/latest`, with compact `PUBLIC-PROOF` TUI rows, artifact/publication row counts, public proof artifact ref, SHA-256, upstream-main sync truth, and `privateStateExposed=false`. `epiphany-verse-query swarm-overview` reads those rows as `repoWorkPublicProofRows` / `repoWorkPublicProofTuiRows`, exposes `latestRepoWorkPublicProof`, and adds non-mutating/non-elevated `repo-work-public-proof` action rows owned by Gjallar sight while Bifrost owns publication/credit consequence. `tools/epiphany_local_run.ps1 -Mode repo-work-public-proof` now wraps that export path for operator use. `epiphany-verse-query bifrost-public-proof` and `tools/epiphany_local_run.ps1 -Mode bifrost-public-proof` write `gamecult.bifrost.public_proof_publication_receipt.v0` from an existing redacted proof row with public Verse target, public room, ledger, review, credit, proof ref/SHA, and private-state refusal; `bifrost-ledger` and `receipt-directory` read it back. Disposable proofs `.epiphany-smoke\checklist-note-20260620-031347\14-export-proof-verse.json`, `15-swarm-overview-public-proof.json`, `21-bifrost-public-proof-publication.json`, `22-bifrost-ledger-after-public-proof-publication.json`, `23-receipt-directory-after-public-proof-publication.json`, wrapper artifact `local-20260620-132418-144-62ba9369`, and `24-bifrost-ledger-after-wrapper-public-proof.json` reported latest `repo-work-public-proof-checklist-request`, publication receipt `bifrost-public-proof-publication-wrapper-checklist`, SHA-256 `e781e09c2ba340c8818d3ef95e54085ccd0c92c6a3b5f73cc4878fb224e49dff`, `publicProofPublicationCount=1`, and `private=false`. The next cut is deeper model-authored closure review, further non-planning action classes, or Idunn-owned queue-run service execution. +- 2026-06-20: Public proof local Verse transport, Bifrost publication closure, and the standard wrapper mouth are live. `epiphany-work export-proof --local-verse-store \.epiphany\local-verse.ccmp` mirrors each redacted export as `epiphany.cultmesh.repo_work_public_proof.v0` under `gamecult-local/repo-work-public-proof/latest`, with compact `PUBLIC-PROOF` TUI rows, artifact/publication row counts, public proof artifact ref, SHA-256, upstream-main sync truth, and `privateStateExposed=false`. `epiphany-verse-query swarm-overview` reads those rows as `repoWorkPublicProofRows` / `repoWorkPublicProofTuiRows`, exposes `latestRepoWorkPublicProof`, and adds non-mutating/non-elevated `repo-work-public-proof` action rows owned by Gjallar sight while Bifrost owns publication/credit consequence. `tools/epiphany_local_run.ps1 -Mode repo-work-public-proof` now wraps that export path for operator use. `epiphany-verse-query bifrost-public-proof` and `tools/epiphany_local_run.ps1 -Mode bifrost-public-proof` write `gamecult.bifrost.public_proof_publication_receipt.v0` from an existing redacted proof row with public Verse target, public room, ledger, review, credit, proof ref/SHA, and private-state refusal; `bifrost-ledger` and `receipt-directory` read it back. The launcher classifies this as compact operator-context work rather than read-only, and the wrapper summary prints item, target public Verse, public room, proof SHA-256, review refs, and credit refs without claiming merge or upstream sync. Disposable proofs `.epiphany-smoke\checklist-note-20260620-031347\14-export-proof-verse.json`, `15-swarm-overview-public-proof.json`, `21-bifrost-public-proof-publication.json`, `22-bifrost-ledger-after-public-proof-publication.json`, `23-receipt-directory-after-public-proof-publication.json`, wrapper artifact `local-20260620-132418-144-62ba9369`, and `24-bifrost-ledger-after-wrapper-public-proof.json` reported latest `repo-work-public-proof-checklist-request`, publication receipt `bifrost-public-proof-publication-wrapper-checklist`, SHA-256 `e781e09c2ba340c8818d3ef95e54085ccd0c92c6a3b5f73cc4878fb224e49dff`, `publicProofPublicationCount=1`, and `private=false`. The next cut is deeper model-authored closure review, further non-planning action classes, or Idunn-owned queue-run service execution. - 2026-06-20: `notes/epiphany-repo-swarm-mvp-contract.md` now has the explicit functional-swarm answer. The current seventeen front doors are real proof surfaces, not decorative wrapper smoke, but Epiphany is not fully online until the typed artery can run as a living repo organism: deeper model-authored closure review, further non-planning action classes, Idunn-owned queue-run service lifecycle under explicit operator authority. Use that section when answering whether Epiphany is headed toward a functional swarm. - 2026-06-20: Gjallar/swarm-overview now exposes repo-work overview history as first-class compact sight, Persona's public Eve surface lowers the same queue for peer-readable collaboration, and Self has a first runnable queue surface over it. `SwarmOverviewOutput` and `SwarmTriageOutput` include `repoWorkOverviewCount`, `repoWorkOverviewRows`, `repoWorkOverviewTuiRows`, `latestRepoWorkOverview`, `latestRepoWorkGate`, `latestRepoWorkBlocker`, and `latestRepoWorkNextSafeMove`; the shared `swarmActionRows` queue gets priority 35 `repo-work-overview` rows owned by Gjallar, hosted body `repo-work`, authority gate `repo.work.overview`, effect class `repo-work-readback`, no mutation, no elevation, proof-bundle ref, and private-state seal. `eve-surfaces`, direct `connect-eve`, and the globally invokable Persona `eve-connect` daemon tool readback expose public `REPO-WORK-PEER` rows with item, gate, blocker, next safe move, branch, publication, sync, and `private=false`. `epiphany-work queue-run` reads the same typed queue, selects current-repo rows at `ready-to-run`, `ready-to-adopt`, `ready-to-execute`, or `awaiting-closure`, delegates to `tick`, refreshes overview after real advancement, and wrapper `repo-work-queue-run` exposes the operator surface. Disposable proofs `.epiphany-smoke\gjallar-repo-work-queue-20260620-012027`, `.epiphany-smoke\eve-repo-work-queue-20260620-013322`, `.epiphany-smoke\queue-run-20260620-014314`, and wrapper artifact `local-20260620-014627-174-aada0241` prove two-item queue sight, Eve lowering, direct queue-run advancement, and wrapper dry-run without publication, merge, service lifecycle mutation, elevation, cross-repo mutation, or private-state exposure. The next cut is deeper model-authored closure review, further non-planning action classes, or Idunn-owned queue-run service execution; not another queue display surface. - 2026-06-20: Durable repo-work map admission now has local Verse/Gjallar sight. `epiphany-work close` still admits the accepted latest-per-item map into `.epiphany/state/repo-work-map.msgpack` only after Soul and Mind pass, then mirrors the accepted fact as `epiphany.cultmesh.repo_work_map_entry.v0` under `gamecult-local/repo-work-map/latest`. `epiphany-verse-query gjallar` now returns `repoWorkMapCount`, `repoWorkMapRows`, `repoWorkMapTuiRows`, and `latestRepoWorkMapEntry`, sealed to safe family, changed-path count, Soul/Mind ids, Bifrost gate, source map store ref, and `privateStateExposed=false`. Proof `.epiphany-smoke\repo-close-mind-adoption-guard-20260620-203717` shows counterfeit Mind adoption refused without map write, successful close projected the map row, and independent Gjallar readback returned one `REPO-WORK-MAP` row. The outer cargo-run smoke timed out just before child return, but `summary.json` is `status=ok` and the direct Gjallar readback is the terminal proof. The next repo-map work is richer semantic review/map lenses, not first projection. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 683d4acc84e29702aeb601805b1eb73a9d141512..11c03b87156b2117f480502fe79fe9721a21b28c 100644 GIT binary patch delta 558 zcmX|7F>4e-6m~avHd-d+&?pbm7`QpJ8}HOuNYLUc3l$4FklEe0cLOu?CNr~HuS#JN zu=d!$aiAcAg^iX%z&4_df5B2`BWLk=@ZR^m?|a|rr_JA=Hzjro{xh{bG3@up9 zQ5er^E4+u1qm$@qY!!%-OGk-$2%()FQro?9%0 zKOYQQrYJ>_mb}uzg9XFGt($EK61^Y|bt~tIBr8Pt*Hd%yZmoAEO;~a_*-LM;y>!U3 zWSFJ-khcoW@>jgxe0>;Q+n%5iX2$hAglKUxdBE+I2A-5${raLgIP3JbfH5gDxRC~Z n=djorz$1cjH5FPn@S}Tut1`}q