Record live Mind adoption and warm package proof

notes/epiphany-current-algorithmic-map.md

@@ -1822,5 +1822,36 @@ identities. The failed results remain sealed evidence and cannot be rewritten.
 Verification layer: `mind_ingress_derives_immutable_identity_from_launch_context`
 feeds five substituted identities and proves the emitted typed decision carries
 only the canonical launch identities. All 15 `epiphany-openai-runtime` library
-tests pass. Exact Linux package and one explicitly authorized resident retry are
-still required before this boundary is live-proven.
+tests pass. Exact Linux package `bd96305e` live-proved the boundary: typed review
+superseded failed job `8e5952fb`, authorized retry `2d2a3e8b` completed with the
+canonical request and candidate identities, and Self atomically committed adopt
+decision `repo-frontier-plan-decision-e7d7f3c7...`. The lifecycle is terminal;
+no tools or external consequence occurred.
+
+## Starfire package cache physiology (2026-08-09)
+
+Owner: the persistent Docker source, graph, and Cargo-home volumes own reusable
+build products. The exact release witness still owns package identity. Free disk
+and cache presence are preconditions for the fast path, not release evidence.
+
+A full `C:` disk exposed the physical failure boundary: the shared Windows
+Codex target occupied roughly 276 GiB, rustc faulted with SIGBUS, and Docker's
+backend also faulted until targeted Cargo cleanup restored about 252 GiB free
+and only the `docker-desktop` WSL body was restarted. The recovered package
+then paid a 25m12s cold release compile plus a 33.53s isolated coordinator pass.
+
+An identical package against `epiphany-linux-package-source`,
+`epiphany-linux-package-cache`, and `epiphany-linux-cargo-home` completed in
+9.65 seconds wall. Cargo phases were 0.81s and 0.65s and the run reproduced
+release `sha256-01dbed4b...` and witness `sha256-c3ab5a60...`. Therefore normal
+shakedown iteration must retain those volumes and inspect disk/cache health
+before compilation. Routine cache destruction, commit-partitioned graph caches,
+or Yggdrasil builds are forbidden writers of iteration latency.
+
+State stewardship currently sits outside that warm release surface. Building
+the unshipped `epiphany-state` binary against the same exact source and graph
+still recompiled a second dependency universe and took 7m11s merely to append a
+typed evidence record. This is not a request for another cache. Either the state
+steward must ship in the owned release graph or its narrow typed write port must
+move into an already-shipped native owner; canonical Mind maintenance must not
+require a second monolithic core build.

notes/fresh-workspace-handoff.md

@@ -1,5 +1,49 @@
 # Fresh workspace handoff
 
+## Resident Mind terminal adoption and warm package proof — 2026-08-09
+
+Exact pushed source `bd96305e60428b8ea2af822f1e1a233405c09c43` is packaged and
+published as
+`sha256-01dbed4b015dabccc6f17df49118bba90195993da002f109bafd73f23b1d3a8f`
+with witness
+`sha256-c3ab5a602de9c58e3ffb23cc5d316e5e36d94a013a697a113af01b4b2cf00808`.
+The first package completed its release graph in 25m12s and its isolated
+coordinator phase in 33.53s. It followed a host incident where
+`C:\Users\Meta\.cargo-target-codex` occupied roughly 276 GiB, filled `C:`, and
+caused rustc and Docker backend SIGBUS failures. `cargo clean --target-dir`
+reclaimed the target, restored roughly 252 GiB free, and Docker was recovered by
+terminating only `docker-desktop` WSL before restart. Preserve the preflight and
+SIGBUS receipts under `.epiphany-run/linux-package-bd96305e/`.
+
+The identical package was then rerun against persistent volumes
+`epiphany-linux-package-source`, `epiphany-linux-package-cache`, and
+`epiphany-linux-cargo-home`. It completed in 9.65 seconds wall; Cargo reported
+0.81s for the ordinary release graph and 0.65s for the isolated coordinator,
+and reproduced the exact release and witness. Receipts are under
+`.epiphany-run/linux-package-bd96305e-warm/`. This proves the fast shakedown
+path is stable cache retention plus free-disk/cache preflight. Do not clean or
+partition the shared package graph for routine iterations, and never build this
+graph on Yggdrasil.
+
+The typed evidence append exposed a separate build boundary: `epiphany-state`
+is not among the 22 shipped binaries, and building it standalone against the
+same exact source/cache took 7m11s. Do not solve this with another graph cache.
+Ship the state steward through the owned release graph or move its narrow typed
+ledger-write port into an already-shipped native owner.
+
+The published repair completed the resident frontier-planning chain. Typed
+failure review
+`frontier-planning-failure-review-4824d856-876f-432c-8fdd-664728938105`
+superseded failed Mind job `8e5952fb-0db6-460c-b061-c75d32410cc2` and authorized
+one retry. Mind job `2d2a3e8b-77f0-4f57-9125-ec3305a95843` returned a valid
+typed adopt judgment without tools or external consequence. Self committed
+terminal decision
+`repo-frontier-plan-decision-e7d7f3c79595e09f2d2cd9e7c4614909e803b1f9b509f0fc1482d3aaab2ad6d3`
+against the original candidate. The next typed action is
+`continueImplementation`; execute only that admitted Hands frontier. Do not
+recreate Eyes, Modeling, Imagination, either failed Mind attempt, or the
+successful retry.
+
 ## Packaged Body speed proof and resident Mind identity correction — 2026-08-09
 
 Exact pushed source `217dd4b96746536e01dc8991b5e6f31c2c588af0` is packaged as

state/map.yaml

@@ -35,16 +35,16 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. The persistent c005 Linux body proves heartbeat, Self coordination, governed Eyes-to-Modeling cognition, causal routing, and a native Imagination result without external consequence. Exact pushed 217dd4b9 is packaged and its shared private Repository Body index reduced an unchanged exact packaged observation from the old 160183ms coordinator job-commit boundary to 94521ms at the observer boundary. Imagination result f62738f1 reached dedicated Mind review; two immutable Mind attempts failed closed because model-authored identity echoes diverged from the authenticated launch. The source runtime now derives all executable Mind request/candidate identity from the launch projection and leaves only judgment and rationale to the model; 15 runtime library tests pass. Yggdrasil remains the small public crossing body and is not a release forge. Resident crash/restart, long-duration plateau, log ownership, the corrected Mind replay, and stable Starfire firewall ownership remain open.
-  latest_phase: Exact release sha256-3dab68c572519501c3401a8b737603e312349a4052f69f7f751478fa2631aaf3 with witness sha256-2278ec15ed44a21e4bc4d20b4f64d67fb530c4bc2bc44cd1cd9d775b16838f74 packages 217dd4b9. Its exact observer reported unchanged Body generation 1/tree 4d1f8a23558d53622ed21be0bb51db456b532f48 in 94521ms. Self then completed startFrontierPlanning, Imagination job f62738f1 produced candidate 28f59741, and dedicated Mind request 90e8c199 was committed. Mind jobs 411e73bb and 8e5952fb failed without authority; the latter's misleading request-disappeared error was disproven by direct binary-store inspection of the canonical request key. Runtime adapter identity ownership is corrected in source and awaits package/replay.
+  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. The persistent c005 Linux body proves heartbeat, Self coordination, governed Eyes-to-Modeling cognition, causal routing, native Imagination, and dedicated Mind adoption without external consequence. Exact pushed bd96305e is packaged and published; its launch-owned identity repair carried the original candidate through one authorized Mind retry and a terminal Self decision. The same exact release rebuilt warm in 9.65 seconds after a 25m12s cold compile, proving stable Docker source/graph/Cargo-home retention is the fast iteration path. Yggdrasil remains the small public crossing body and is not a release forge. Resident crash/restart, long-duration plateau, log ownership, the admitted Hands frontier, and stable Starfire firewall ownership remain open.
+  latest_phase: Exact release sha256-01dbed4b015dabccc6f17df49118bba90195993da002f109bafd73f23b1d3a8f with witness sha256-c3ab5a602de9c58e3ffb23cc5d316e5e36d94a013a697a113af01b4b2cf00808 packages and publishes bd96305e. Failed Mind job 8e5952fb was superseded by typed review receipt frontier-planning-failure-review-4824d856-876f-432c-8fdd-664728938105. Authorized retry 2d2a3e8b completed, and Self committed adopt decision repo-frontier-plan-decision-e7d7f3c79595e09f2d2cd9e7c4614909e803b1f9b509f0fc1482d3aaab2ad6d3 against the original candidate; the lifecycle is terminal and the next typed action is continueImplementation. The cold package followed system-disk exhaustion and cache recovery; C cargo target cleanup reclaimed roughly 276 GiB and restored Docker. An identical warm package then completed in 9.65 seconds wall with 0.81s and 0.65s Cargo phases and reproduced the exact release/witness.
   operational_state:
-    local_worktree: launch_owned_mind_identity_fix_ready_to_commit
+    local_worktree: resident_mind_replay_complete_state_receipts_pending_commit
     operator_wireguard: restored
     yggdrasil: canonical_small_public_crossing_body
     starfire: temporary_epiphany_cognition_body
     starfire_runtime_identity: epiphany-starfire
     starfire_swarm_brake: released
-    starfire_release: exact_217dd4b9_sha256_3dab68c5_published_resident_c005_still_serving
+    starfire_release: exact_bd96305e_sha256_01dbed4b_published_to_resident_c005
     starfire_repository_body: bound_and_observed
     starfire_verse_topology: bound_to_current_repository_body
     starfire_native_status: supervised_shakedown_active
@@ -67,9 +67,9 @@ current_status:
     starfire_linux_role_cognition: eyes_and_modeling_tools_results_and_acceptance_proven_zero_consequence
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
-    resident_physiology: c005_swarm_and_217dd_worker_helper_running
-  unresolved_authority: Repository Body observation still performs two authenticated full-tree Git index/manifest passes; exact 217dd packaged observer evidence improved the same unchanged Body boundary to 94.521 seconds, but a coordinator-to-coordinator jobCommit replay has not been possible because the typed route advanced to Imagination. Mind judgment ingress previously let model JSON author five immutable identities; two live attempts failed closed and are sealed. The source adapter now derives those identities from the authenticated launch, but exact packaging and one authorized retry remain unproven. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. Resident stdout/stderr logs remain an unbounded supervisor-owned surface. Root and epiphany-core Cargo lock graphs independently own version-skewed dependency caches.
-  next_action: Commit and package the launch-owned Mind identity correction once. Explicitly review/supersede failed Mind result 8e5952fb, launch one authorized retry, accept the first valid decision, and verify Self commits or refuses the candidate through the typed lifecycle without external consequence. Preserve both failed attempts and the direct request-presence receipt. Then inspect the next typed action and continue resident crash/restart, retention, and endurance work.
+    resident_physiology: c005_swarm_with_217dd_and_bd96305e_worker_helpers_running
+  unresolved_authority: Repository Body observation still performs two authenticated full-tree Git index/manifest passes; exact 217dd packaged observer evidence improved the same unchanged Body boundary to 94.521 seconds, but a coordinator-to-coordinator jobCommit replay has not been possible because the typed route advanced. Execute-mode workers require a persistent process body. Docker source/graph/Cargo-home cache retention is now measured build authority for iteration speed, while disk/cache preflight and bounded cleanup are not yet native package orchestration. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. Resident stdout/stderr logs remain an unbounded supervisor-owned surface. Root and epiphany-core Cargo lock graphs independently own version-skewed dependency caches.
+  next_action: Execute the exact adopted Hands frontier from decision repo-frontier-plan-decision-e7d7f3c79595e09f2d2cd9e7c4614909e803b1f9b509f0fc1482d3aaab2ad6d3 through typed authority; do not reopen Eyes, Modeling, Imagination, or Mind. Preserve the 9.65-second warm-package receipt and make cache/disk preflight an inspectable package boundary before another cold build. Then continue resident crash/restart, retention, and endurance work.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
@@ -85,7 +85,7 @@ organ_readiness:
   imagination: proven for three bounded live circuits. The resident Linux chain completed native job f62738f1 and produced one typed candidate for the smallest coordinated cognition proof; Self committed a dedicated Mind request without adopting it or granting Hands. Broader option generation remains open.
   hands: proven for bounded consequences; native patch, command, commit, push, and typed receipts bind reviewed path ceilings to exact changed-path subsets.
   soul: proven for the current bounded route-chain consequence; exact d3bfbda0 launched Verification through typed plan-decision provenance, result f23fe2b6 was accepted at revision 57, and Self then derived Modeling before any repeated Hands authority.
-  mind: partial; RepoModel admission, thread-state admission, gateway review, state commit, first-valid verdict incorporation, bounded supervisor acceptance correction, and dedicated frontier-plan review requests are live. Two resident Linux Mind attempts failed closed on model-authored identity divergence. Source now makes launch context the sole identity owner; exact packaged adjudication remains open.
+  mind: proven for launch-owned resident frontier adjudication; two historical attempts failed closed, exact bd96305e derived immutable identity from authenticated launch, authorized retry 2d2a3e8b completed, and Self atomically committed terminal adopt decision e7d7f3c7. Broader memory retention and long-duration behavior remain open.
   continuity: partial; authenticated 55660d78 terminalized the copied v28 dead worker once and refused duplicate restart, while sealed v28 remained unchanged. Exact 100d8854 Continuity closes only all-terminal sessions, emits one deterministic event, refuses post-close jobs, and moved the disposable v28 copy from four active sessions to zero. Exact 42bc665a proves bounded retention and restart sequence recovery. A digest-pinned Linux runtime-spine at b5140288 independently repeated open-job closure refusal, terminal completion, idempotent session closure, and post-close refusal on Yggdrasil. Long-duration plateau and full resident crash/restart behavior remain open.
   nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Exact c0055772 proves Linux heartbeat acknowledgement/regrant, Self single-consumption launch, authenticated plan coordinator completion, and a persistent resident body. It also proves detached model workers cannot survive a one-shot container PID 1 exit. The accepted Linux Eyes-to-Modeling circuit proves detached role workers, native read-only tool loops, typed admission, and causal next-organ routing at a measured 109887488-byte peak. Modeling job commit spent 160183ms in two cold Repository Body scans. A source cut now reuses one private index across both equality scans; 25 focused observer tests pass and a live-worktree mechanism benchmark reduced the pair from 3832ms to 1537ms. Packaged coordinator timing remains open. Authenticated d910158f isolates Self policy behind one root-graph optional coordinator feature; warm policy invalidation is 6.02s. Root Linux packaging is 12m33s cold and 9.08s warm with persistent caches. Long-duration pressure and resource plateau remain open. Yggdrasil is not a release forge at its current memory budget.