From ba616cbbffee397580fabea815ae23499896fe2a Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Sun, 23 Aug 2026 17:11:49 +0200 Subject: [PATCH] Record model runtime smoke cut --- notes/epiphany-current-algorithmic-map.md | 8 +++++++- notes/epiphany-fork-implementation-plan.md | 7 ++++++- notes/fresh-workspace-handoff.md | 12 ++++++++++-- state/ledgers.msgpack | Bin 677806 -> 678177 bytes state/map.yaml | 3 ++- 5 files changed, 25 insertions(+), 5 deletions(-) diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index d579dace..9b5c2767 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -1,7 +1,7 @@ # Epiphany current algorithmic map Updated: 2026-08-23 -Latest committed implementation cut: `013c3bf1` on `codex/epiphany-shakedown-live` +Latest committed implementation cut: `ce90f911` on `codex/epiphany-shakedown-live` Current worktree cut: canonical map/evidence sync; Ox17 remains paused This document describes the live machine. Historical cuts, rejected paths, and @@ -139,6 +139,12 @@ temporary-store ritual. The runtime command retains bootstrap, bind, observe, and status; the 23 focused owner tests prove authenticated Body behavior and refusal paths directly. +Model-runtime physiology must come from an actual provider or a test fixture, +never a shipped command that writes synthetic evidence into a runtime store. +Exact `ce90f911` deletes the callerless `smoke` route, fake request/tool-call/ +completion sequence, `smoke_no_network` receipt, parser, options, and usage +claim. The retained commands execute or audit real typed model work. + Persisted cluster topology is also gone. Its writer became dead when the callerless seed bundle was removed, while the supervisor merely accepted any nonempty subset of seven fixed keys as “bootstrap” without authenticating Body diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index 20490c31..647a690b 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -224,7 +224,7 @@ Delete or demote: Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate 1 paused. Continue the source-subtraction and test-authority audit from exact -`013c3bf1`. The current sequence has deleted the semantic-memory/workspace-coverage +`ce90f911`. The current sequence has deleted the semantic-memory/workspace-coverage projection system, its local daemon supervisor, and the surviving generic RepoModel profile, impossible lifecycle, producerless receipt/summary, and decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state @@ -548,6 +548,11 @@ Cut in this order: the callerless `smoke` path and its temporary stores are deleted. The shipped binary keeps the four operational commands; 23 owner tests retain the actual bind, observation, projection, Git-semantics, and tamper invariants. +45. **Provider physiology cannot be counterfeited at `ce90f911`:** the + callerless model-runtime `smoke` command is deleted. It opened no provider; + it wrote synthetic request, tool-call, completion, and receipt documents into + a writable runtime store. Real execution and transcript-free decision audit + remain, and the release-owned model-runtime suite passes 12/12. Do not preserve the aggregate for compatibility, manufacture a bootstrap thread, release autonomous scheduling, register topology in `gamecult-ops`, diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 26d0e2de..253271b6 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -2,7 +2,7 @@ Updated: 2026-08-23 Branch: `codex/epiphany-shakedown-live` -Latest committed implementation cut: `013c3bf1` +Latest committed implementation cut: `ce90f911` Current worktree: canonical map/evidence sync; Ox17 remains paused ## Orientation @@ -101,6 +101,14 @@ shipped Body binary retains only bootstrap, bind, observe, and status. Its actua owner tests pass 23/23, including authenticated projection, tamper refusal, generation, Git semantics, and no repository mutation. +Exact `ce90f911` deletes the model runtime's callerless `smoke` route. That +route opened no provider transport: it wrote a synthetic request, synthetic tool +call, synthetic completed receipt, and `smoke_no_network` marker into a writable +runtime store, then reported `not-opened`. It could therefore manufacture +authentic-looking physiology without provider evidence. The real model-turn, +worker, follow-up, decision-list, and decision-audit commands remain; their +release-owned suite passes 12/12. + No Epiphany-owned Rider or Unity code, target, schema, or actuator exists. Brokkr owns Unity through Eve/CultMesh. A future Rider daemon owns Rider. Epiphany may consume their typed capabilities and receipts; it does not poke @@ -540,7 +548,7 @@ coordinator `12/12`, swarm `10/10`, and model-runtime `13/13`. ## Immediate next action The Ox17 deployment lane is paused. Continue the source/test-authority audit -from exact `013c3bf1`; do not compile or deploy through Idunn yet. Inspect the +from exact `ce90f911`; do not compile or deploy through Idunn yet. Inspect the remaining production modules and tests by owner, consumer, invariant, and failure mode. Delete an abstraction with the tests that merely animate it when it has no decision-bearing consumer. Preserve the keyed Mind, sealed reasoning, diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index c6df31de0d541ebc3a516ba018a3badb014850b5..b71feff3a69d21021f927aefea9ec1249acda8b2 100644 GIT binary patch delta 367 zcmXw!!7c+)6oyTynvoE@cI8M{qAk<1XvGQ(mZFi^)HQR&q%-$S?>(ceEG#^LG_$s~ zKv?hup2jnXGZKq0cX7`B|L;7%tUkW2zE+)i-|ua9PQRwSlb`pxGjg2eyGiMOQgVdi zofc+LyUZveR_P2U|zVzwV9@3ri;_m*n3K#psQCV!#xX@21#JKsN!Qy8jRn~&vUiaIr EUoKjGlmGw# delta 73 zcmZ3uNpszL%?%Qa+y>@WM&?n+7`Vc^H!Cw1GBV0FPi1PK%ESo7AetG7S%8=oh}nRc Q9f&!Am~;D7CN9ZP06>5hZvX%Q diff --git a/state/map.yaml b/state/map.yaml index f50682b4..cc49c677 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -64,6 +64,7 @@ current_status: test_authority_cut: Exact bf2f39eb deletes a causal-ID test that compared identical calls and mislabeled the equality provenance independence, plus a duplicate unknown-field test for an already deleted generic patch field. Exact 104bf390 deletes the tool runtime's duplicate immutable-GitHub identity test and a permanently ignored live-network probe pinned to historical README prose. Exact keyed request identities remain exercised through family lifecycle and admission tests; strict ingress unknown-field refusal remains exercised by runtime-owned Body identity substitution; immutable GitHub parsing remains tested once in epiphany-core. Core, OpenAI-runtime, and tool-MCP all-target checks pass for their respective cuts. tool_runtime_status_cut: Exact 777dd1a5 deletes the callerless epiphany-tool-mcp-runtime smoke command, its fixed JSON self-description, parser branch, and self-affirming branding test. Signed daemon health owns liveness; typed invocation intents and exact receipts own tool execution. With one live command remaining, the one-variant CLI enum collapses into a direct run parser. The four retained release-owned tests pass and exercise typed execution, receipt persistence, Resident-state binding, and unbound refusal. repository_body_smoke_cut: Exact 013c3bf1 deletes the callerless epiphany-repository-body smoke command and its temporary-store self-test path. The shipped Body binary retains bootstrap, bind, observe, and status. Authenticated Body binding, exact projection, generation, Git worktree semantics, no repository mutation, and tamper refusal remain proven by 23 focused owner tests. + model_runtime_smoke_cut: Exact ce90f911 deletes the callerless epiphany-model-runtime smoke route. It opened no provider transport; it wrote a synthetic model request, tool call, completed receipt, and smoke_no_network marker into a writable runtime store, then reported not-opened. Real model-turn, worker, follow-up, decision discovery, and decision audit commands remain. The release-owned model-runtime suite passes 12/12. bifrost_authority_cut: Exact 203bcc41 deletes Epiphany's producerless Bifrost body-change/GitHub publication family: four document types, three singleton latest heads, constructors, validators, writers, local-Verse advertisement/projection, public exports, and five tests that manufactured both ends. Bifrost owns the real Persona feedback/delivery stores and signed crossing receipts; Epiphany does not publish an alternate Bifrost protocol. Core and release-bundle checks pass; the remaining CultMesh suite passes 13/13. hands_pr_authority_cut: Exact 11d99de1 deletes the producerless HandsPrReceipt type, registration, dead test-only writer, read path, exports, relinquishment branch, and two contract advertisements. Hands owns local patch, command, and commit consequences; exact remote publication evidence belongs to the provider/Bifrost crossing. Core and release-bundle checks pass, and the rebuilt 43-entry schema catalog contains no deleted PR family. local_verse_contract_cut: Exact a4af4734 deletes six organ-specific contract DTO/factories, the callerless LocalVerseContext query/seed bundle, fixed Verse/room policy prose, the mind-contract self-test, and persisted cluster topology. The topology writer had no caller; supervision accepted any nonempty fixed-key subset without authenticating Body domain, completeness, or runtime binding. That false bootstrap gate, loader, exports, and its diagnostic test are gone. Exact 03140a47 later deletes the remaining standalone runtime contract mirror; live providers own their CultMesh/CultNet catalogs. Exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health remain supervisor prerequisites. The cut removes 1,005 net source lines; core/release checks, CultMesh 12/12, and supervisor 4/4 pass. @@ -114,7 +115,7 @@ current_status: yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 unresolved_authority: Generic command, legacy lineage, caller-authored identity, behaviorless policy fields, global lifecycle latest state, timestamp election, Windows Task Scheduler authority, and their false proofs are gone. Semantic and workspace launch owners are separate over shared process mechanics. The remaining daemon supervisor still combines the service loop, aggregate signed-health publication, semantic reconciliation, and the large workspace recovery state machine. Continue decomposing only where ownership becomes smaller; do not create family frameworks or adapters. The false persisted cluster-topology bootstrap sentinel is gone; supervisor admission remains bound to exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Continue the source/test-authority audit after exact 013c3bf1. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, static status CLI, manual smoke command, editor bridge, keyword tribunal over natural language, tautological test, duplicate parser proof, or ignored live-network anecdote. Do not run a local full-workspace compile, package, deployment, or Ox root. + next_action: Continue the source/test-authority audit after exact ce90f911. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, static status CLI, manual smoke command, counterfeit provider physiology, editor bridge, keyword tribunal over natural language, tautological test, duplicate parser proof, or ignored live-network anecdote. Do not run a local full-workspace compile, package, deployment, or Ox root. runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains.