Record Body observation Mind admission

notes/epiphany-current-algorithmic-map.md

@@ -4863,3 +4863,28 @@ verdict Modeling remain distinct request families and cannot satisfy baseline
 Body work. Core 561/561 and OpenAI runtime 23/23 pass; an explicit negative
 proves the obsolete aggregate objective and `stateRevision` never reach model
 input.
+
+Exact `2eb95df6` closes the remaining external Body read at that boundary.
+Repository Body still owns scanning, manifests, and its authenticated generation
+chain, but it no longer supplies prompt state directly. Each accepted generation
+crosses once as `EpiphanyMindRepositoryBodyObservationDocument`, keyed by its
+semantic observation ID and carrying both the exact
+`RepositoryBodyObservationBasis` and the exact external observation envelope as
+typed provenance. `assemble_mind_view` validates the singular generation chain
+and derives the current observation from the highest admitted generation.
+
+Owner: runtime Mind owns the admitted Body observation used by reasoning and
+scheduling. Input: one exact Body-store observation already authenticated
+against the runtime route and manifest chain. Output: one immutable keyed Mind
+document plus its typed-organ Mind commit receipt. Derived state: the current
+Body basis is the highest admitted generation; the Body-store head remains
+physiology and transport authority only. Forbidden writers: prompt renderers,
+current-work selectors, status, and role launch code may not observe the
+repository or Body store to manufacture reasoning state. Shared path:
+`observe_runtime_repository_body_basis` and the repository-Body CLI both admit
+through the same Mind CAS primitive. Cut line: `current_body_modeling_work`
+reads only the admitted Mind view, and `put_reasoning_basis` requires a launch's
+Body basis to equal that sealed projection. Verification: current-work incurs
+zero Body-store/file reads; exact admission replays; a tampered external source
+refuses with the Mind store byte-identical; core 563/563 and OpenAI runtime
+23/23 pass.

notes/epiphany-fork-implementation-plan.md

@@ -220,11 +220,12 @@ Cut in this order:
    projection assembled from exact keyed Mind document versions. The final
    model request must render that projection; citing keyed sources while
    rendering the old thread snapshot is explicitly forbidden.
-2. Complete the pure typed current-work projection over keyed Mind/runtime receipts.
+2. **Body admission landed at `2eb95df6`; scheduling remains open:** complete the pure typed current-work projection over keyed Mind/runtime receipts.
    Modeling must derive from the current Body/RepoModel obligation; Eyes only
    from explicit external-evidence obligations. Body-generation Modeling
-   identity and atomic decision admission are landed; scheduling consumers are
-   not yet migrated.
+   identity, typed Body-to-Mind admission, sealed reasoning, and atomic decision
+   admission are landed. Current-work no longer reads the external Body store,
+   but scheduling consumers are not yet migrated.
 3. Move status and coordinator launch/review consumers to that projection and
    exact request/result identities. Thread ID remains immutable pass provenance
    only.

notes/fresh-workspace-handoff.md

@@ -11,8 +11,8 @@ cognition; Persona receives one lived stream only. Epiphany still owns typed
 effects, receipts, Mind admission, brakes, external consequence gates, and
 terminal commit. Focused core and OpenAI-runtime Persona suites pass.
 
-The five-day shakedown remains paused. The active source is exact `79346523` on
-`codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
+The five-day shakedown remains paused. The active branch includes exact
+`2eb95df6` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas
 vertical slice, ordinary Modeling authoring path, durable publisher identity,
 fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are
 landed. Historical aggregate RepoModel and partial Gate stores are evidence
@@ -50,8 +50,9 @@ canonical Eve schema IDs without dependency semantics. Eve exact `b597dab` and
 `076d212` provide the canonical Atlas provider advertisement and one
 `gamecult.eve.surface.v1` retained tree for GUI and TUI.
 
-Verification is green: Epiphany core 555/555, OpenAI runtime 23/23, coordinator
-18/18, and workspace all-target check; Odin Node 1/1 and Rust 15/15; Eve Atlas
+Verification is green at the latest ownership cut: Epiphany core 563/563,
+OpenAI runtime 23/23, and the OpenAI runtime all-target check. Earlier coordinator
+18/18 and workspace checks remain accepted; Odin Node 1/1 and Rust 15/15; Eve Atlas
 conformance 4/4 and Eve contracts 6/6. The workspace-wide all-features check
 still reaches an older feature-gated workspace-coverage recovery smoke whose
 already-absent API predates this slice; no compatibility shim was added.
@@ -146,6 +147,17 @@ runtime/Mind epoch identity, and a mutation gate that rejects non-Mind envelopes
 or semantic key drift. The keyed view is now the sole current RepoModel source;
 it does not read or translate historical aggregate stores.
 
+Exact `2eb95df6` closes the external Body prompt seam. A repository observation
+is first authenticated against the Body store, then admitted into the runtime
+Mind as one immutable semantic-key document containing its exact typed basis
+and exact source envelope. The Body organ's provenance is recorded in the same
+Mind commit receipt; no raw transcript or JSON sidecar participates. The
+highest authenticated Body generation is derived from those admitted
+documents. Baseline Body Modeling work and sealed role reasoning now read that
+Mind state only. A focused counter proves current-work projection performs zero
+Body-store and zero repository-file reads, and a substituted external
+observation refuses without changing the Mind bytes.
+
 Exact `bd5034cd` is the first live authority cut. Operator objective intake now
 atomically writes one semantic objective document, its immutable typed operator
 provenance, and one Mind commit receipt. It writes no thread-state aggregate;
@@ -313,7 +325,9 @@ plan. Exact `79346523` replaces the aggregate role prompt with a sealed v2 role
 projection assembled from the exact keyed Mind and RepoModel documents it
 names; the final native/provider request renders that projection, and baseline
 Modeling admission writes its Body-work decision receipt in the same Mind CAS
-as any graph mutation. Finish current-work routing, migrate status/coordinator
+as any graph mutation. Exact `2eb95df6` admits Body observations into keyed Mind
+before they can steer that projection. Build the shared typed current-work
+projection, finish baseline Modeling routing, migrate status/coordinator
 consumers and the remaining family acceptance paths, and delete the aggregate
 schema/transaction. Run the source
 guards and fresh-store concurrency/decision-context suite. Only after that may

state/map.yaml

@@ -40,9 +40,9 @@ invariants:
 current_status:
   summary: The keyed RepoModel hard cut, decision-context foundation, and Model Atlas code slice are complete on codex/epiphany-shakedown-live, but the broader Concurrent Mind cut is not. Persisted EpiphanyThreadStateEntry and its coordinator transaction still own production presence, routing, launch, and acceptance behavior. Fresh Gate preflight proved publisher identity, fresh organ Mind, atomic RepoModel projection bootstrap, and both semantic partitions, then correctly stopped when status called a ready keyed Mind missing without the legacy aggregate. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 is paused behind deletion of that obsolete authority.
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
-  latest_phase: Exact 79346523 makes role inference consume a sealed v2 keyed-Mind projection and atomically admits baseline Body Modeling decisions. Exact source selection now matches the documents actually projected and includes RepoModel-owned Atlas sources; aggregate role state and global revision no longer cross the model-request boundary. Core 561/561 and OpenAI runtime 23/23 pass. Gate 1 remains paused because status, coordinator routing/launch/review, Resident Self continuation, and several selectors still use EpiphanyThreadStateEntry as behavioral authority.
+  latest_phase: Exact 79346523 makes role inference consume a sealed v2 keyed-Mind projection and atomically admits baseline Body Modeling decisions. Exact 2eb95df6 adds the missing Body-to-Mind boundary: each authenticated external Repository Body observation is admitted as its own immutable keyed Mind document with the exact source envelope and a typed Mind commit receipt. Current Body Modeling work and role reasoning now consume only that admitted Mind document; they perform no live Body-store or repository reads. Core 563/563, OpenAI runtime 23/23, and the OpenAI runtime all-target check pass. Gate 1 remains paused because status, coordinator routing/launch/review, Resident Self continuation, and several selectors still use EpiphanyThreadStateEntry as behavioral authority.
   operational_state:
-    local_worktree: clean_after_2ba6b9dc_documentation_sync
+    local_worktree: clean_at_latest_documentation_handoff
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -74,7 +74,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
   unresolved_authority: Persisted EpiphanyThreadStateEntry and coordinator_state_transaction remain live production authorities across status, launch, acceptance, resident continuation, and request selection. This contradicts the intended concurrent keyed Mind and blocks fresh organisms. Model Atlas code and isolated proofs remain accepted, but Gate 1 signed sight/brake acceptance, autonomous cascade, partition exercise, and sustained physiology remain unproven. Operational registration in gamecult-ops remains forbidden. Historical shakedown evidence remains valid; c011 and partial Gate roots remain untouched/read-only. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Route baseline Modeling from unresolved Body-generation work and its exact decision receipts, then migrate status/coordinator routing/launch/review and remaining family acceptance. Delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every production behavioral reader/writer; refuse old writable stores and prove fresh concurrent/restart behavior. Only then restart Model Atlas Gate 1 from a new external root. Do not add a compatibility aggregate, dual reader, or migrator.
+  next_action: Build the pure typed current-work projection over admitted Body observations, keyed RepoModel state, and exact request/result/decision receipts; route baseline Modeling from its unresolved Body-generation work. Then migrate status/coordinator routing/launch/review and remaining family acceptance. Delete EpiphanyThreadStateEntry, coordinator_state_transaction, global expected revisions, and every production behavioral reader/writer; refuse old writable stores and prove fresh concurrent/restart behavior. Only then restart Model Atlas Gate 1 from a new external root. Do not add a compatibility aggregate, dual reader, or migrator.
 
 active_subgoals:
   - Delete persisted thread-state authority and complete the concurrent keyed Mind cut before any further operational Gate run.