From a24c5d9ae35c7aac0504ff8adfb71af76d78dd13 Mon Sep 17 00:00:00 2001
From: Meta Vens <rwvens@hotmail.com>
Date: Mon, 10 Aug 2026 02:57:54 +0100
Subject: [PATCH] Accept live model-turn JSON ingress

---
 notes/epiphany-current-algorithmic-map.md |  10 +++++++
 notes/fresh-workspace-handoff.md          |  33 ++++++++++++++++++++++
 state/ledgers.msgpack                     | Bin 593708 -> 594215 bytes
 state/map.yaml                            |  10 +++----
 4 files changed, 48 insertions(+), 5 deletions(-)

diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md
index 54de75cc..c59ff4d3 100644
--- a/notes/epiphany-current-algorithmic-map.md
+++ b/notes/epiphany-current-algorithmic-map.md
@@ -2510,6 +2510,16 @@ CultCache persistence path.
   shapes and negative array/unknown/ToolCall cases. Exact package inspection and
   copied-live execution remain required before acceptance.
 
+Exact `eea15e82` closes that acceptance boundary. Its authenticated 24-binary
+release is
+`sha256-6a45bef43ef9f4ecbdc2ba69b8dfee9edf9bb085ce0d482c1ad1649b35464186`
+with witness
+`sha256-088393f4eb9784819250f6a6b44d73bc92c9d889c4eaa2a0a13868c6c71f7cda`.
+A published native object completed on copied live state through direct Responses
+transport and persisted its exact typed request. The positional persistence
+array failed before mutation, produced no request identity, and preserved the
+runtime file hash exactly. The boundary is accepted live.
+
 The coordinator receipt accumulator is implemented in source. Runtime owns the
 typed head, cumulative status counts, chained digest, and full-snapshot-fenced
 replacement/deletion. Resident Self supplies the cross-store preservation set
diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md
index 05b4b417..5a1e9afd 100644
--- a/notes/fresh-workspace-handoff.md
+++ b/notes/fresh-workspace-handoff.md
@@ -1607,3 +1607,36 @@ also passes warning-free. The source is not accepted until its exact pushed
 commit is packaged from Starfire's warm cache and a copied-live run proves one
 published object completes while the old positional array cannot mutate state.
 Active c005 remains outside this rite; Yggdrasil never builds.
+
+## Model-turn JSON boundary accepted live — 2026-08-10
+
+Exact pushed source `eea15e82` produced a warning-free 24-binary release
+`sha256-6a45bef43ef9f4ecbdc2ba69b8dfee9edf9bb085ce0d482c1ad1649b35464186`
+with witness
+`sha256-088393f4eb9784819250f6a6b44d73bc92c9d889c4eaa2a0a13868c6c71f7cda`.
+Construction and inspection receipts are under
+`.epiphany-run/linux-package-eea15e82`.
+
+The persistent package source was refreshed from an immutable Git bundle after
+the Windows bind-mounted object store lost a temporary pack. Packaging then
+found a 48,104,292-byte cached source worktree whose `.git` pointed at a vanished
+source repo. That exact cache entry was removed under
+`.epiphany-run/interventions/package-cache-stale-worktree-20260810T0145Z`;
+Cargo home and graph artifacts remained. The reconstructed package completed in
+8m43s. Both preflight refusals and the contaminated old-source launch are
+preserved beside the accepted logs.
+
+Copied-live receipts are under `.epiphany-run/model-json-ingress-eea15e82`.
+The exact packaged binary accepted one published native JSON object and completed
+it through `epiphany_direct_responses_http` in 5.9 seconds: pass verdict, two
+events, zero tools, and the exact typed request persisted. Its copied session was
+then closed. The old positional CultCache array exited 1 with `model-turn request
+must be an object with string schema_id`, created no request, and left runtime
+SHA-256
+`944494eeb6416e3123a2cb65e00e9e130c130f7c1ec8988f810bb48d55dc83da`
+unchanged. JSON ingress is accepted; CultCache remains persistence-only.
+
+Next map semantic and conversation-wide history retention before editing. Name
+the producer, live-authority preservation set, closure predicate, retirement
+evidence, and negative non-resurrection proof for each family. Active c005 stays
+untouched and Yggdrasil never builds.
diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack
index 484cf47aa5e920b09738d63732b826f5891e5528..a2c0f7d281c05b5c80be2635a8069a1e045f76ae 100644
GIT binary patch
delta 542
zcmXw$zit#U5XRXf{5ge!f`UjXERl92+iUymP@xkI1xP?eH@0VQ9ro7CdN+{j3JP9;
z({&UyX;OeF5HCQ-JK-x*{4~<c=$rXwuD_jJeLwl}xHy!HGa=voy)}P$@aswOp(v)$
z+u4`xtjO%+?aV>uPUddrUgrMq?QFh#@aXFwPPr<nE*X7G+1XxeS3H{?ZT>y~1a2gV
zz$9u;dT{Syg`PknT$DC+FkF(<0GFy%Af&}wR9Kr@ptIg_3(8pSYea*-Hr7%t9a1ke
zcMLpJ!q`d*C74#^V;DP3=|+$0jjl|UrL0+Kp_$>5)(Vsr!Y?Z840pzBZJa;=4is3W
zm3GQ4SiNu_PRTO%0e#tq3ncwy+mM>P{EIiQUXp0fF<WzS-M2XAY!7+#*bH%6HN=M@
zS2yG}rapEF(^JyN6vhxcXvuPF$0fK12@C^Vk^$=}Wr^%Q4oKG12>Z^xp@s}oH-<Hm
z22w+e5W)yVn;k2x7_Wdkt0YpIFT^V9GI@E1P8)r!Yt5*&LVGE_)0GD@b*_Of|6up?
ZaDH^Wjvm|cJjJdI-D=3^D{sDa`XBQks=ELH

delta 69
zcmZ3!NM+4Dl?@V%)6es8va&@TW8mcD+^o!4$jDgIJe8?^Dib3RgJ@<TW&vVWAZ7z%
Ob|B{1K9z}cIu8KlrxZ~D

diff --git a/state/map.yaml b/state/map.yaml
index 98f4afdc..2c85a6e1 100644
--- a/state/map.yaml
+++ b/state/map.yaml
@@ -35,10 +35,10 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, and exact cce2b8ac narrow model-generation retention are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Stable Starfire firewall ownership and broader semantic/conversation retention remain open. Yggdrasil is the small public crossing body, never the release forge.
-  latest_phase: The model-turn xenos boundary now has explicit schema-shaped DTOs for the published epiphany.model_request.v0 and epiphany.openai_model_request.v0 objects. It dispatches by schema_id, converts only published fields into the typed request, rejects positional CultCache arrays, unknown fields, malformed input variants, and unpublished ToolCall cargo, and leaves DatabaseEntry serialization solely on the persistence side. All nine model-runtime binary tests and a production cargo check pass. Exact packaging and copied-live object ingress remain the acceptance boundary.
+  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, and exact eea15e82 model-turn JSON ingress are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Stable Starfire firewall ownership and broader semantic/conversation retention remain open. Yggdrasil is the small public crossing body, never the release forge.
+  latest_phase: Exact eea15e82 packaged warning-free with 24 binaries as release sha256-6a45bef43ef9f4ecbdc2ba69b8dfee9edf9bb085ce0d482c1ad1649b35464186 and witness sha256-088393f4eb9784819250f6a6b44d73bc92c9d889c4eaa2a0a13868c6c71f7cda. On copied live state, a published epiphany.model_request.v0 object completed in 5.9 seconds through direct Responses transport with pass verdict, two events, and zero tools; the exact request persisted and its session closed. The old positional CultCache array exited 1 at JSON parsing, created no request, and left runtime SHA-256 944494eeb6416e3123a2cb65e00e9e130c130f7c1ec8988f810bb48d55dc83da unchanged. A stale cached release worktree was removed with receipts after its vanished gitdir blocked packaging; the stable cache worktree is reconstructed.
   operational_state:
-    local_worktree: model_turn_json_boundary_implemented_tests_green_uncommitted
+    local_worktree: model_turn_json_boundary_packaged_live_proven_acceptance_refresh_uncommitted
     operator_wireguard: restored
     yggdrasil: canonical_small_public_crossing_body
     starfire: temporary_epiphany_cognition_body
@@ -68,8 +68,8 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: authenticated_9b8df0b4_c005_bound_to_eyes_tools_nervous_system_with_217dd_and_bd96305e_helpers_running
-  unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, and narrow model-generation retention are accepted. Semantic and conversation-wide runtime histories remain separate/unbounded. The repaired model-turn JSON object contract is source- and test-proven but not yet accepted under an exact packaged copied-live run. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Commit and push the explicit model-turn JSON boundary, package and authenticate that exact source using Starfire's persistent cache, then use copied state to prove a published object-shaped request completes while the positional CultCache array refuses before mutation. Preserve active c005. Yggdrasil never builds.
+  unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, narrow model-generation retention, and published model-turn JSON ingress are accepted. Semantic and conversation-wide runtime histories remain separate/unbounded. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
+  next_action: Map bounded retention for semantic and conversation-wide runtime histories before editing: name each producer, liveness authority, closure predicate, retention head/tombstone, exact deletion set, and non-resurrection proof. Then implement the smallest coherent owner cut and exercise it only on copied state. Preserve active c005. Yggdrasil never builds.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.