From beff45719a4508c66bf557c61dd61bbe8bd541fc Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Wed, 16 Sep 2026 01:09:54 +0200 Subject: [PATCH] Rule Q6-Q9: declared identity, WireGuard, collapse, shared Qdrant Operator ruling (2026-09-16, "all recommendations ok"): instance identity is declared attribution rather than signed authentication on a single-operator LAN; the workstation reaches the organ over WireGuard, because RUDP is UDP; TypedCommitStore collapses now that its second profile lives in another repo; and the organ shares voidbot's Qdrant with the coupling declared as an Idunn dependency. Co-Authored-By: Claude Opus 5 --- notes/eureka-pipeline-state-cut.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/notes/eureka-pipeline-state-cut.md b/notes/eureka-pipeline-state-cut.md index 0e1058ae..a1fd0d0a 100644 --- a/notes/eureka-pipeline-state-cut.md +++ b/notes/eureka-pipeline-state-cut.md @@ -74,6 +74,16 @@ superseded by 14-17; see History. collections and indexes at admission time. Embeddings come from Ollama. 17. **Huginn is the memory organ.** The dormant `.cc`-to-Eve CLI is retired and generic `.cc` inspection belongs to CultCache Studio in CultLib. +18. **Instance identity is declared, not signed** (Q6 A). On a single-operator + LAN this is attribution, not authentication. Hands does not invent a + credential system; the trust boundary is the network and the host. +19. **The workstation reaches the organ over WireGuard** (Q7 A), because the + organ speaks RUDP over UDP and the existing SSH forward carries TCP only. +20. **`TypedCommitStore` collapses** (Q8 A). Its second profile moved to another + repo, leaving a one-implementation abstraction. Cut 5 must preserve the Mind + path's fail-closed order and validation before replay (finding S6). +21. **The organ shares voidbot's Qdrant** (Q9 A), with the coupling declared as + an Idunn dependency rather than left implicit. ## Probes and source reads this pass