Correct projection boundary in Munder analysis
This commit is contained in:
parent
7179fabf83
commit
b33244bee4
3 changed files with 101 additions and 57 deletions
|
|
@ -889,6 +889,14 @@ Body-binding, provider, federation, and willingness-to-pay experiments; none is
|
|||
adopted roadmap authority. The test-authority audit and Ox17 brake remain
|
||||
unchanged.
|
||||
|
||||
Interface correction: Epiphany does not currently expose its internal faculty
|
||||
and ecosystem vocabulary through a general operator UI. Beyond engineering
|
||||
tools, the concrete human-facing surface is Persona projection into shared
|
||||
asynchronous chat. CultMesh remains the projection-neutral state API. A social
|
||||
Aquarium, dense operator cockpit, TUI, and audit surface may use distinct Eve
|
||||
compositions and interaction models over the same provider-owned facts; no one
|
||||
projection should fossilize its layout into shared truth.
|
||||
|
||||
## Operational state that matters
|
||||
|
||||
- Original c011 resident and Heartbeat containers are not running; both exited
|
||||
|
|
|
|||
|
|
@ -59,10 +59,10 @@ buyers have accepted them.
|
|||
|
||||
The immediate product hypothesis worth testing is narrow:
|
||||
|
||||
> Can one packaged Epiphany golden path make current work, human decisions,
|
||||
> Body identity, consequences, and verification as immediately legible as
|
||||
> Munder's moving office—without asking the user to learn the internal anatomy
|
||||
> first?
|
||||
> Can a bounded projection over Epiphany state make current work, human
|
||||
> decisions, Body identity, consequences, and verification as immediately
|
||||
> legible as Munder's moving office—without bending CultMesh around one
|
||||
> interface or asking the user to learn the internal anatomy first?
|
||||
|
||||
## Evidence discipline
|
||||
|
||||
|
|
@ -648,23 +648,35 @@ Munder has:
|
|||
|
||||
Epiphany has stronger internal contracts in several areas, but its public
|
||||
[positioning](../docs/positioning.md) correctly calls it a supervised
|
||||
engineering alpha. Aquarium's canonical Eve/CultMesh lowering, sustained
|
||||
production use, public visitor experience, complete attribution, and a simple
|
||||
first-hour product remain unfinished. A coherent internal organism is not a
|
||||
competitive product until an ordinary user can reach useful work through it.
|
||||
engineering alpha. Aquarium's first complete Eve/CultMesh projections,
|
||||
sustained production use, public visitor experience, complete attribution, and
|
||||
a simple first-hour product remain unfinished. A coherent internal organism is
|
||||
not a competitive product until an ordinary user can reach useful work through
|
||||
it.
|
||||
|
||||
### 7.2 Epiphany has too many nouns at the front door
|
||||
### 7.2 Epiphany has not yet chosen an operator interface
|
||||
|
||||
Epiphany, Aquarium, CultCache, CultNet, CultMesh, Eve, Odin, Bifrost, Idunn,
|
||||
Huginn, Model Atlas, Persona, Mind, Self, Eyes, Modeling, Hands, Soul. Internally
|
||||
these names carry authority boundaries. Externally they can look like the same
|
||||
category error Munder makes with fictional employees: a rich ontology the user
|
||||
must decode before solving a problem.
|
||||
Epiphany has many internal names, but it does not currently put them at a
|
||||
user-facing front door because that front door mostly does not exist. Beyond
|
||||
engineering and operator tooling, its concrete human-facing surface is Persona
|
||||
projection into shared asynchronous conversation such as Discord. Treating the
|
||||
internal vocabulary as a shipped onboarding burden invents an interface that
|
||||
has not been built.
|
||||
|
||||
The product has to compress to one sentence and one action. Dual labels such as
|
||||
“Eyes / Research” and “Soul / Verification” can preserve the local language
|
||||
without demanding conversion before use. CultMesh should be infrastructure the
|
||||
product uses, not a prerequisite concept in the first-run tutorial.
|
||||
The live design wager is projection neutrality. CultMesh should expose clean,
|
||||
source-owned state without baking in one renderer's information hierarchy. A
|
||||
social Aquarium can embody Epiphany state as cute characters, presence, and
|
||||
relationships. A serious operator dashboard can maximize plans, obligations,
|
||||
blockers, decisions, consequences, provenance, and uncertainty per unit of
|
||||
attention. TUI, audit, accessibility, and future room projections can make
|
||||
different choices again.
|
||||
|
||||
The risk is therefore not that users currently face too many nouns. It is that
|
||||
the first compelling projection could fossilize its metaphor into the shared
|
||||
API, or that every later projection could be forced through one composition
|
||||
designed for another job. Each projection should choose its vocabulary,
|
||||
density, and interaction model for its audience while preserving the same
|
||||
underlying identities, meanings, provenance, and authority boundaries.
|
||||
|
||||
### 7.3 Governance may be overhead users do not value on simple work
|
||||
|
||||
|
|
@ -713,11 +725,14 @@ changes.
|
|||
|
||||
### 8.1 Epiphany core
|
||||
|
||||
Keep the current distinction between organizational truth, work discovery,
|
||||
routing, execution, verification, and admission—but stop expecting users to
|
||||
care about those nouns before they see value.
|
||||
Epiphany core should keep the distinction between organizational truth, work
|
||||
discovery, routing, execution, verification, and admission. It does not
|
||||
currently own or prescribe a general operator interface. Its interface
|
||||
responsibility is to expose enough clean, source-owned state that downstream
|
||||
projections do not have to reconstruct truth from logs or invent it from visual
|
||||
activity.
|
||||
|
||||
The product surface should begin with:
|
||||
One candidate information priority for a serious operator projection is:
|
||||
|
||||
```text
|
||||
objective
|
||||
|
|
@ -729,18 +744,21 @@ objective
|
|||
```
|
||||
|
||||
The deeper chain in the
|
||||
[current algorithmic map](./epiphany-current-algorithmic-map.md) should become
|
||||
visible on demand, especially when something is blocked, disputed, or risky.
|
||||
It should not become the onboarding lecture.
|
||||
[current algorithmic map](./epiphany-current-algorithmic-map.md) should be
|
||||
available for projections to reveal when something is blocked, disputed, or
|
||||
risky. That does not require every projection to expose the chain, use the same
|
||||
labels, or share an onboarding flow.
|
||||
|
||||
Specific pressures:
|
||||
|
||||
- Make a human dependency a first-class obligation with rationale, options,
|
||||
downstream impact, and an answer receipt.
|
||||
- Separate role templates, worker attempts, Personas, and persistent memory in
|
||||
the public vocabulary as well as in code.
|
||||
- Provide one conversational Face without forcing explicit accept, refuse,
|
||||
reprioritize, or revoke actions to be paraphrased by a model.
|
||||
- Expose a human dependency as a first-class obligation with rationale,
|
||||
options, downstream impact, and an answer receipt.
|
||||
- Keep role templates, worker attempts, Personas, and persistent memory
|
||||
semantically distinct so each projection can combine or separate them
|
||||
deliberately.
|
||||
- Where a projection offers conversational Face interaction, do not force
|
||||
explicit accept, refuse, reprioritize, or revoke actions to be paraphrased by
|
||||
a model.
|
||||
- Measure whether exact state and verification reduce rework and supervision;
|
||||
do not market architectural properties as outcomes.
|
||||
- Expect lightweight direct-agent use to win on small tasks; route Epiphany to
|
||||
|
|
@ -748,13 +766,14 @@ Specific pressures:
|
|||
|
||||
### 8.2 Aquarium and Eve/CultUI
|
||||
|
||||
The market signal favors truthful operator visualization. It is ambivalent
|
||||
about an immersive habitat: some users find space an excellent compression
|
||||
device, while the strongest hands-on critique preferred a dense decision
|
||||
cockpit. Aquarium therefore has a real product hypothesis to prove, not a
|
||||
market mandate.
|
||||
The market signal favors truthful projection but does not select one canonical
|
||||
interface. Some users find spatial embodiment an excellent social and
|
||||
orientation device; the strongest hands-on critique preferred a dense decision
|
||||
cockpit. A social Aquarium and a serious operator dashboard are different
|
||||
products over shared Epiphany state, not two skins competing to become the one
|
||||
true interface.
|
||||
|
||||
A five-second glance should answer:
|
||||
A serious operator projection should aim to answer at a five-second glance:
|
||||
|
||||
1. What work is active?
|
||||
2. What is blocked, and by what missing fact or authority?
|
||||
|
|
@ -762,18 +781,24 @@ A five-second glance should answer:
|
|||
4. What changed, and has it been verified?
|
||||
5. Which repository Body, runtime, provider, and version are involved?
|
||||
|
||||
The same Eve composition graph should lower into:
|
||||
The same authoritative CultMesh state can support distinct consumer-owned Eve
|
||||
compositions:
|
||||
|
||||
- an immersive habitat for orientation, identity, and ambient state;
|
||||
- a social Aquarium for presence, identity, relationship, personality, and
|
||||
ambient state;
|
||||
- a dense decision cockpit for plans, questions, dependencies, cost, and
|
||||
consequences;
|
||||
- a compact TUI for expert operation and agent access;
|
||||
- a plain audit view for accessibility and review.
|
||||
|
||||
The modes should not maintain separate state. Synthetic/demo events should
|
||||
enter the same projection path and remain visibly synthetic. Unknown must look
|
||||
unknown. A creature can be charming; it may not launder absent receipts into a
|
||||
healthy animation.
|
||||
These projections do not need to share one composition graph, layout, density,
|
||||
or local interaction state. They do need to agree on the meaning and provenance
|
||||
of the source facts they consume. A projection may own filters, camera state,
|
||||
layout, animation, and other ephemeral view state; it may not become a competing
|
||||
owner of work status. Synthetic or demo data must remain visibly synthetic and
|
||||
must not enter authoritative state as observation. Unknown must look unknown. A
|
||||
creature can be charming; it may not launder absent receipts into a healthy
|
||||
animation.
|
||||
|
||||
Munder issue #193 supplies a concrete design principle worth adopting: use
|
||||
environmental objects for fleet-level information that users otherwise have to
|
||||
|
|
@ -803,6 +828,13 @@ state should have excellent human-readable inspection through the state CLI,
|
|||
Eve, and TUI. A binary or typed substrate that users cannot inspect will lose a
|
||||
trust advantage even if it is more correct internally.
|
||||
|
||||
Projection neutrality is the important ecosystem constraint. Aquarium should
|
||||
not deform shared state around sprites, and a serious dashboard should not
|
||||
deform it around cards, tables, or alert queues. Providers own their facts;
|
||||
CultMesh carries them; consumer projections select, compose, and render them.
|
||||
Eve compositions may themselves travel through CultMesh, but they remain
|
||||
interface projections rather than replacements for provider-owned truth.
|
||||
|
||||
### 8.4 Bifrost, Persona, and social use
|
||||
|
||||
The “clone of you” narrative is commercially potent and socially hazardous.
|
||||
|
|
@ -960,19 +992,23 @@ restart, and re-entry.
|
|||
names an actionable owner; no manual state-file repair or internal vocabulary is
|
||||
required.
|
||||
|
||||
### Experiment B: decision space versus office space
|
||||
### Experiment B: social habitat and operator cockpit
|
||||
|
||||
**Hypothesis:** Aquarium's immersive view can improve orientation without
|
||||
slowing causal judgment.
|
||||
**Hypothesis:** independent projections can optimize different human jobs
|
||||
without forking the meaning of Epiphany state.
|
||||
|
||||
**Test:** with at least ten target operators in randomized mode order, lower the
|
||||
same Eve graph as immersive habitat and dense cockpit. Give each operator five
|
||||
lookup tasks per mode: active Body, blocker, requested decision, last verified
|
||||
consequence, and current cost uncertainty.
|
||||
**Test:** render the same recorded and live CultMesh scenarios through separate
|
||||
consumer-owned Eve compositions: a social Aquarium and a dense operator
|
||||
cockpit. Test the cockpit on active Body, blocker, requested decision, last
|
||||
verified consequence, and current uncertainty. Test Aquarium on identity,
|
||||
presence, relationship, ambient change recognition, and desire to return or
|
||||
engage. Include cross-view checks after state changes.
|
||||
|
||||
**Pass:** at least 90% of lookups are correct with a median under ten seconds in
|
||||
both modes; immersive mode must materially improve at least one orientation
|
||||
task without materially degrading another or be demoted to ambient display.
|
||||
**Pass:** both projections report every shared fact consistently and expose
|
||||
unknowns honestly. The cockpit reaches at least 90% correct operational lookups
|
||||
with a median under ten seconds. Aquarium must improve at least one named social
|
||||
or orientation outcome over a neutral control without emitting false work
|
||||
state. It does not have to impersonate the cockpit to earn its keep.
|
||||
|
||||
### Experiment C: orchestration earns its overhead
|
||||
|
||||
|
|
|
|||
|
|
@ -50,7 +50,7 @@ current_status:
|
|||
package_baseline: Exact d2ca66301fb6af4e7d2d27fff0b772b0f0fccdf4 remains the admitted production source and current symlink target. Its native serialized full-workspace gate passed with receipt SHA-256 de0fc6b360ce03493b13208d917dc8349801f03364617d966152c85846c47482. Idunn sealed 26 root-owned non-writable binaries plus release-witness.ccmp as release sha256-46407552b4a0937f63d2b7f2bd09a1dacb89d671a6e3807c97209159541aef06; witness-file SHA-256 is 348785ffb0fc3130d3b4538329870c6e6f8442a8da4a01b32fa9b7ffb1f01357. Source 9b9b5c85 also passed Idunn's native test gate under receipt SHA-256 6c6a71359f8c31297419665d2872f6982a89f84e197d71fc5b36a7fc86216093 and remains sealed as release sha256-30a910785a380224bbdbd56a7b742c8d058fa70cb72dab3562e3907903e0d191 with witness-file SHA-256 75bf52d31c56ea3b08e1a702273301c1db12a4b1ffae45e3d948ce8a29b50e1d. A foreign-target helper restarted Idunn during the Epiphany transaction; rollback restored d2ca, removed deployment.env, and left production Epiphany units inactive. OpenRouter model stealth/ox-alpha and its systemd-injected credential are readiness-proven. Idunn is active with zero restarts and its deployment brake is engaged.
|
||||
summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused.
|
||||
public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
|
||||
competitive_launch_signal: The 2026-08-22 Munder Difflin launch analysis in notes/munder-difflin-launch-intelligence-2026-08-23.md is the current Eyes/Imagination owner for this category signal. It establishes strong demand to try a packaged, local, visual multi-agent control plane and supplies repeated qualitative demand for a global operator-attention surface over plans, questions, blockers, decisions, consequences, and liveness; it does not establish retention, reliable autonomy, or paid product-market fit. Munder is materially ahead in installation, cross-platform reach, provider reuse, category compression, community formation, and feedback velocity. Its public failures make renderer-owned physiology, cross-Body restoration, proxy safety metrics, false consequence receipts, provider parity, and marketed-but-unavailable federation concrete falsification targets. A one-hour golden path, Aquarium immersive+dense lowerings, and managed continuity/federation remain evidence-led options rather than adopted roadmap authority; the source-subtraction and test-authority audit remains next.
|
||||
competitive_launch_signal: The 2026-08-22 Munder Difflin launch analysis in notes/munder-difflin-launch-intelligence-2026-08-23.md is the current Eyes/Imagination owner for this category signal. It establishes strong demand to try a packaged, local, visual multi-agent control plane and supplies repeated qualitative demand for an operator-attention surface over plans, questions, blockers, decisions, consequences, and liveness; it does not establish retention, reliable autonomy, or paid product-market fit. Munder is materially ahead in installation, cross-platform reach, provider reuse, category compression, community formation, and feedback velocity. Its public failures make renderer-owned physiology, cross-Body restoration, proxy safety metrics, false consequence receipts, provider parity, and marketed-but-unavailable federation concrete falsification targets. Epiphany does not yet own a general operator UI: Persona projection into shared asynchronous chat is the concrete human surface, while CultMesh remains projection-neutral. Social Aquarium, a dense operator cockpit, TUI, and audit surfaces may use distinct Eve compositions over the same provider-owned facts. A one-hour projection experiment and managed continuity/federation remain evidence-led options rather than adopted roadmap authority; the source-subtraction and test-authority audit remains next.
|
||||
latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 4d0db2c7 deletes the final heartbeat scheduler and twenty-one low-value tests. Exact 67a3a57b deletes all nineteen remaining Rust self-source inspection tests plus two argument-vector mirrors. Exact bbe5fcf1 deletes four CultMesh tableaux and their production-absent seven-cluster fixture world. Exact f236e1cd deletes six parallel CultMesh families; exact a4af4734 later deletes the callerless organ factories and local-Verse projection left behind. Exact fe591b33 removes persisted fixed Verse/room policy and two literal-copy tests. Exact 4ed3a6e0 deletes four JSON-derived CultMesh mirrors, five unauthenticated legacy provider/tool families, prompt branches, retirement paths, one supervisor migration command, and ten tests: 2,398 net lines. Exact e8bc0382 deletes unused Persona-speech-audit and Weksa-lowering CultMesh shadows plus four tests: 432 lines. Exact db6a7131 deletes unused CultMesh operator-run intent/receipt and generic work-loop telemetry shadows, runtime declarations, prompt branch, and two tests: 829 pure deletions. Exact 75ead942 deletes the abandoned RepoWork aggregates, service-audit helper, Bifrost artifact/metrics/public-proof families, and tests that alone animated them: 1,410 net lines. Exact 753707ff deletes the duplicate CultMesh status bootstrap sentinel; exact a4af4734 later proves the remaining topology was another non-authenticating sentinel and deletes it too. Exact 967743cc deletes seven test-only daemon-poke/Bifrost loader APIs; exact a4af4734 later deletes the callerless LocalVerseContext itself. Exact 1ab0859b deletes two obsolete tableau tests: 78 lines. Exact ab5b16ec deletes the test-only generic managed-service writer that recreated a forbidden path: 28 lines. Exact c977d149 deletes two counterfeit Idunn receipt families after external audit proved no live producer or consumer: 151 lines. Native runtime, keyed Mind, Persona, Weksa, the real provider-owned Bifrost Persona crossing, specialized policy writers, and Odin/Idunn's actual deployment manifest/signed health remain owners. Non-test core, CultMesh 27/27, prompt 1/1, affected readiness/Persona tests, and supervisor 10/10 are clean. Old stores containing deleted envelopes refuse; there is no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume.
|
||||
supervisor_subtraction: Exact 30c66080, 008bd493, 7e16e758, and 3312880e delete generic commands, legacy lifecycle lineage, fallback/finite launch, and caller-authored supervisor identity for 596 net lines. Exact afb223da deletes two implementation-mirror tests, their recovery wrapper, and five behaviorless policy fields; managed-service policy v1 refuses historical writable rows. Exact ffe707ff deletes the global lifecycle latest mirror, receipt-history scan, timestamp election, local-Verse slot, and two more false proofs. Each service now owns one exact current receipt head. Exact 47454e61 splits semantic/workspace launch ownership and deletes Epiphany's Windows Task Scheduler deployment/continuity authority and its argv test: another 463 net lines. Exact 803e3447 deletes the unused semantic status JSON mirror. Exact da8ed840 deletes console-shaped scheduler/reconcile state machines and makes authentication refusal fail the command: 484 net lines. The supervisor is 2,104 lines; its four remaining tests cross live brake, process-identity, or signed-health boundaries.
|
||||
launch_dependency_cut: Exact 2aeab7a9 deletes the generic organ dependency matrix, generic receipt catalogue/proof profiles, persisted worker-launch cargo, Persona prompt injection, evaluator, and three self-certifying tests: 700 net lines. Family admission owners derive exact dependencies from typed state. Worker-launch schema v2 and Persona projector prompt v1 refuse the old writable shape. Core 378/378, OpenRouter runtime 27/27, packaged runtime 13/13, and Persona re-entry 1/1 pass.
|
||||
|
|
|
|||
Reference in a new issue