Record sole Proposal launch authority

This commit is contained in:
Meta Vens 2026-08-24 01:20:59 +02:00
commit bae9d338e4
6 changed files with 39 additions and 31 deletions

View file

@ -1,8 +1,8 @@
# Epiphany current algorithmic map
Updated: 2026-08-24
Latest committed implementation cut: `6831eb69` on `codex/epiphany-shakedown-live`
Current worktree cut: Proposal-Modeling launch-binding subtraction; Ox17 remains paused
Latest committed implementation cut: `b0a4978d` on `codex/epiphany-shakedown-live`
Current worktree cut: Proposal-Modeling launch-authority deletion; Ox17 remains paused
This document describes the live machine. Historical cuts, rejected paths, and
proof chronology belong in git, `state/ledgers.msgpack`, and bounded smoke
@ -212,11 +212,13 @@ Body/domain binding, and canonical Modeling request; validation reads those
facts from their owning immutable documents instead of copying them into the
join record.
Proposal-Modeling launch provenance is also a narrow join. Exact `6831eb69`
reduces its persisted binding from twelve fields to schema, request ID, job ID,
and exact launch-document digest. The request owns proposal/runtime/thread; the
launch owns role/binding/document; the binding key derives from the job ID.
Fulfillment and archival read that exact key rather than scanning every binding.
Proposal-Modeling has no second launch record. Exact `b0a4978d` deletes the
persisted binding after its minimized form proved to own nothing. The immutable
worker launch carries the typed request reference, job, role, binding, and sealed
document; current-work, retry counting, fulfillment, coordinator actuation, and
archival all read that owner directly. Body Modeling, Planning, PlanMind,
Imagination consideration, and Reorientation bindings remain under the same
audit; family-specific semantic requests remain mandatory.
Bifrost owns its private feedback-signing identity. Exact `94098223` deletes
Epiphany's host-identity executable and the private signer, persisted identity,
@ -827,7 +829,7 @@ Accepted through the local `5b799b12` source boundary:
Open before Model Atlas Gate 1 resumes:
1. let Idunn compile, test, and seal exact build-affecting source `6831eb69`;
1. let Idunn compile, test, and seal exact build-affecting source `b0a4978d`;
2. use that exact package in private fresh-store Ox17; stop after three
provider failures total, and prove direct Body Modeling, typed
refusal-to-retry if exercised, Hands through Verification, exact context