GameCult/Epiphany
Archived
Watch
9
0
Fork
You've already forked Epiphany
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prove proposal Modeling receipt-free settlement

Browse source
This commit is contained in:
Meta Vens 2026-08-10 17:00:08 +01:00
commit b2d3f85c2f
5 changed files with 181 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
notes/epiphany-current-algorithmic-map.md
View file

@ -3308,3 +3308,13 @@ reopening authority. This proves the candidate companion remains producer-owned:
the first fixture attempt without it failed closed before resident settlement.
Proposal Modeling remains separate because its fulfillment validator also owns
the immutable proposal payload, Modeling context, and Evolution patch shape.
The proposal Modeling variant now crosses the full resident boundary in source
verification by reusing the runtime admission fixture rather than copying its
policy. Runtime remains owner of proposal/request/payload, Body-bound launch
context and hash, successful Modeling result, Evolution patch, and the single
safe routeable frontier. Resident Self sees only authenticated fulfillment and
owns exact zero-receipt death settlement, replay refusal, lifecycle retirement,
and non-resurrection. Core 663/1 ignored and swarm 7 pass. Direct packaged proof
still requires Linux-native construction because the worker launch's Body basis
cannot truthfully be minted under a Windows path and rebound later.

21
notes/fresh-workspace-handoff.md
View file

@ -2601,3 +2601,24 @@ Next: proposal Modeling is the remaining fulfilled-before-receipt variant. Its
immutable proposal/request/context/patch/launch/result chain is stronger and
must be mapped before constructing live state. Runtime terminal-attempt
retention follows. Actual c006 remains braked and stopped.
## Proposal Modeling fulfilled-before-receipt source gate — 2026-08-10
The real runtime proposal-admission fixture now crosses the resident boundary.
It preserves the full immutable chain: user proposal and payload, selected
request, runtime/thread/Body-bound Modeling context, exact launch binding and
launch-document hash, successful Modeling result, Evolution patch, and one
safe proposal-citing routeable frontier. No parallel fulfillment schema exists.
With zero coordinator receipts, resident Self verifies that runtime-owned chain,
records exact coordinator death recovery, closes the original grant once, and
refuses replay with byte-identical resident state. Heartbeat consumes the ack;
retention removes the lifecycle; and no later grant can appear. Full core tests
pass 663 with one intentional ignore and all seven swarm tests pass.
Direct packaged proposal evidence remains open. Unlike the two consideration
lanes, its immutable worker launch includes authenticated repository Body basis,
so a faithful fixture must construct it inside the Linux path namespace after
packaged Body binding. Do not add a test-only production writer merely to make
that receipt convenient. Next map terminal-worker-attempt retention and then
choose the smallest Linux-native construction path.