From d6340f2a0d7df0876523d303b9aa72cf2aed6469 Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Sun, 23 Aug 2026 12:04:06 +0200 Subject: [PATCH] Record Bifrost authority cut --- notes/epiphany-current-algorithmic-map.md | 12 ++++++++---- notes/fresh-workspace-handoff.md | 12 +++++++++++- state/ledgers.msgpack | Bin 667130 -> 667609 bytes state/map.yaml | 3 ++- 4 files changed, 21 insertions(+), 6 deletions(-) diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index af13bde9..1ee76d34 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -101,10 +101,14 @@ supervisor and prompt projection. The former singleton CultMesh status row was a duplicate “bootstrap happened” sentinel with no independent invariant; its schema, writer, loader, supervisor check, and serialization test are deleted. -`EpiphanyLocalVerseContext` projects Bifrost publication state but no aggregate -daemon lifecycle head. Family-specific latest/exact loaders called only by -tests are deleted. The two specialized projector policy writers are the only -writers; no test-only generic writer recreates the forbidden policy path. +`EpiphanyLocalVerseContext` does not invent Bifrost publication state. Exact +`203bcc41` deletes the producerless body-change/GitHub publication contracts, +singleton latest heads, writers, validators, advertisement, projection, and five +tests that manufactured both sides. Bifrost owns its real Persona +feedback/delivery stores and signed crossing receipts; Epiphany consumes those +provider-owned documents instead of publishing a substitute protocol. The two +specialized projector policy writers remain the only writers for their actual +local service policies; no test-only generic writer recreates that path. Idunn deployment truth is not mirrored into invented Epiphany-local envelopes. Odin/Idunn owns `gamecult.idunn.deployment_manifest.v3` and signed daemon-health diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 6b539498..1f04c73c 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -780,8 +780,18 @@ derive the provider request through the production adapter. This removes sixty net lines and makes test ancestry obey the same one-way ownership rule as live inference; focused typed-storage and tool-followup tests pass. +Exact `203bcc41` deletes Epiphany's fabricated Bifrost body-change and GitHub +publication family: four CultMesh document types, three singleton latest heads, +their constructors, validators, writers, local-Verse advertisement and +projection, public exports, and five tests that manufactured both ends of the +crossing. A cross-repository producer audit found no live Bifrost or +`gamecult-ops` owner for any of these types. The real Bifrost Persona +feedback/delivery stores and signed crossing receipts remain owned by Bifrost. +Core checks, release-bundle checks, and the remaining CultMesh suite pass 13/13. + Next continue the test-authority audit, beginning with remaining direct schema, -prompt-rendering, CLI-parser, and CultMesh projection tests. Retain a test only +prompt-rendering, CLI-parser, and CultMesh projection tests. Audit every claimed +cross-service contract against its real producer before preserving it. Retain a test only when it reaches Epiphany validation, ownership, authentication, monotonicity, CAS conflict, replay, projection, or an externally visible consequence; delete test-only APIs and fixtures with the tests they animate. diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 4ad7eae98252c7df05ff80b47be9c94460082117..598f230b4a2eb248d18dafd49fe868f108113184 100644 GIT binary patch delta 442 zcmXYt&n^T(5XQ|ecCC;&;3O&`vBLf{Y-A-4#L!s_Xme>))^H=TG%zHkfWTJI%1O)js(csnp+Imx8Mxn7kbn z?goW`$ZL@pCB}$xqC}L5iT6RFf@|5sVr6PaR#^W7 D0Ckzc delta 76 zcmcb4U*p$pjSZrVd>R%R?@WaMg|%G5rUi4llFG&2yh05K~N TvjH(X5OV-A=k}>gT&dasxM3F^ diff --git a/state/map.yaml b/state/map.yaml index 4a80f30e..27a12ccc 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -50,10 +50,11 @@ current_status: package_baseline: Exact d2ca66301fb6af4e7d2d27fff0b772b0f0fccdf4 remains the admitted production source and current symlink target. Its native serialized full-workspace gate passed with receipt SHA-256 de0fc6b360ce03493b13208d917dc8349801f03364617d966152c85846c47482. Idunn sealed 26 root-owned non-writable binaries plus release-witness.ccmp as release sha256-46407552b4a0937f63d2b7f2bd09a1dacb89d671a6e3807c97209159541aef06; witness-file SHA-256 is 348785ffb0fc3130d3b4538329870c6e6f8442a8da4a01b32fa9b7ffb1f01357. Source 9b9b5c85 also passed Idunn's native test gate under receipt SHA-256 6c6a71359f8c31297419665d2872f6982a89f84e197d71fc5b36a7fc86216093 and remains sealed as release sha256-30a910785a380224bbdbd56a7b742c8d058fa70cb72dab3562e3907903e0d191 with witness-file SHA-256 75bf52d31c56ea3b08e1a702273301c1db12a4b1ffae45e3d948ce8a29b50e1d. A foreign-target helper restarted Idunn during the Epiphany transaction; rollback restored d2ca, removed deployment.env, and left production Epiphany units inactive. OpenRouter model stealth/ox-alpha and its systemd-injected credential are readiness-proven. Idunn is active with zero restarts and its deployment brake is engaged. summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. Exact 7c2ebd81 moves Persona state-note admission from the legacy agent-memory aggregate into keyed Mind documents and proves a concrete Hands consequence can commit simultaneously. Exact 79c0e373 seals the assembled Persona input and observed source versions in Mind before inference. Exact d3300bba authenticates that input through its one exact Mind commit, refuses naked typed documents, re-enters without external observation or model inference, and proves current-work reconstruction is identical and read-only across Launch, Wait, completed, and post-Research boundaries. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The source-level Decision-Auditable Concurrent Mind migration is accepted; the fresh exact-package capstone remains open. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused. public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets. - latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 4d0db2c7 deletes the final heartbeat scheduler and twenty-one low-value tests. Exact 67a3a57b deletes all nineteen remaining Rust self-source inspection tests plus two argument-vector mirrors. Exact bbe5fcf1 deletes four CultMesh tableaux and their production-absent seven-cluster fixture world. Exact f236e1cd makes each organ's CultNet factory the sole contract author by deleting six parallel CultMesh families. Exact fe591b33 removes persisted fixed Verse/room policy and two literal-copy tests. Exact 4ed3a6e0 deletes four JSON-derived CultMesh mirrors, five unauthenticated legacy provider/tool families, prompt branches, retirement paths, one supervisor migration command, and ten tests: 2,398 net lines. Exact e8bc0382 deletes unused Persona-speech-audit and Weksa-lowering CultMesh shadows plus four tests: 432 lines. Exact db6a7131 deletes unused CultMesh operator-run intent/receipt and generic work-loop telemetry shadows, runtime declarations, prompt branch, and two tests: 829 pure deletions. Exact 75ead942 deletes the abandoned RepoWork aggregates, service-audit helper, Bifrost artifact/metrics/public-proof families, and tests that alone animated them: 1,410 net lines. Exact 753707ff deletes the duplicate CultMesh status bootstrap sentinel so persisted runtime-bound cluster topology alone owns bootstrap: 99 net lines. Exact 967743cc deletes seven test-only daemon-poke/Bifrost loader APIs in favor of the runtime-consumed LocalVerseContext: 85 net lines. Exact 1ab0859b deletes two obsolete tableau tests: 78 lines. Exact ab5b16ec deletes the test-only generic managed-service writer that recreated a forbidden path: 28 lines. Exact c977d149 deletes two counterfeit Idunn receipt families after external audit proved no live producer or consumer: 151 lines. Native runtime, keyed Mind, Persona, Weksa, live Bifrost body-change receipts, topology, specialized policy writers, and Odin/Idunn's actual deployment manifest/signed health remain owners. Non-test core, CultMesh 27/27, prompt 1/1, affected readiness/Persona tests, and supervisor 10/10 are clean. Old stores containing deleted envelopes refuse; there is no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume. + latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 4d0db2c7 deletes the final heartbeat scheduler and twenty-one low-value tests. Exact 67a3a57b deletes all nineteen remaining Rust self-source inspection tests plus two argument-vector mirrors. Exact bbe5fcf1 deletes four CultMesh tableaux and their production-absent seven-cluster fixture world. Exact f236e1cd makes each organ's CultNet factory the sole contract author by deleting six parallel CultMesh families. Exact fe591b33 removes persisted fixed Verse/room policy and two literal-copy tests. Exact 4ed3a6e0 deletes four JSON-derived CultMesh mirrors, five unauthenticated legacy provider/tool families, prompt branches, retirement paths, one supervisor migration command, and ten tests: 2,398 net lines. Exact e8bc0382 deletes unused Persona-speech-audit and Weksa-lowering CultMesh shadows plus four tests: 432 lines. Exact db6a7131 deletes unused CultMesh operator-run intent/receipt and generic work-loop telemetry shadows, runtime declarations, prompt branch, and two tests: 829 pure deletions. Exact 75ead942 deletes the abandoned RepoWork aggregates, service-audit helper, Bifrost artifact/metrics/public-proof families, and tests that alone animated them: 1,410 net lines. Exact 753707ff deletes the duplicate CultMesh status bootstrap sentinel so persisted runtime-bound cluster topology alone owns bootstrap: 99 net lines. Exact 967743cc deletes seven test-only daemon-poke/Bifrost loader APIs in favor of the runtime-consumed LocalVerseContext: 85 net lines. Exact 1ab0859b deletes two obsolete tableau tests: 78 lines. Exact ab5b16ec deletes the test-only generic managed-service writer that recreated a forbidden path: 28 lines. Exact c977d149 deletes two counterfeit Idunn receipt families after external audit proved no live producer or consumer: 151 lines. Native runtime, keyed Mind, Persona, Weksa, the real provider-owned Bifrost Persona crossing, topology, specialized policy writers, and Odin/Idunn's actual deployment manifest/signed health remain owners. Non-test core, CultMesh 27/27, prompt 1/1, affected readiness/Persona tests, and supervisor 10/10 are clean. Old stores containing deleted envelopes refuse; there is no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume. supervisor_subtraction: Exact 30c66080, 008bd493, 7e16e758, and 3312880e delete generic commands, legacy lifecycle lineage, fallback/finite launch, and caller-authored supervisor identity for 596 net lines. Exact afb223da deletes two implementation-mirror tests, their recovery wrapper, and five behaviorless policy fields; managed-service policy v1 refuses historical writable rows. Exact ffe707ff deletes the global lifecycle latest mirror, receipt-history scan, timestamp election, local-Verse slot, and two more false proofs. Each service now owns one exact current receipt head. Exact 47454e61 splits semantic/workspace launch ownership and deletes Epiphany's Windows Task Scheduler deployment/continuity authority and its argv test: another 463 net lines. Exact 803e3447 deletes the unused semantic status JSON mirror. Exact da8ed840 deletes console-shaped scheduler/reconcile state machines and makes authentication refusal fail the command: 484 net lines. The supervisor is 2,104 lines; its four remaining tests cross live brake, process-identity, or signed-health boundaries. launch_dependency_cut: Exact 2aeab7a9 deletes the generic organ dependency matrix, generic receipt catalogue/proof profiles, persisted worker-launch cargo, Persona prompt injection, evaluator, and three self-certifying tests: 700 net lines. Family admission owners derive exact dependencies from typed state. Worker-launch schema v2 and Persona projector prompt v1 refuse the old writable shape. Core 378/378, OpenRouter runtime 27/27, packaged runtime 13/13, and Persona re-entry 1/1 pass. operator_surface_subtraction: Exact ef92e853 deletes the callerless view-lens registry, legacy acceptance-bundle builders, test-only raw-JSON result interpreters, and six tests: 797 net lines. Exact a292979d and 77e817c1 delete the duplicate CRRC recommendation algorithm, its unused input model, and four tests: 206 lines. Exact 3b94bf6e and 59c5e3a6 delete the nested duplicate status view, false auxiliary mode, and ignored status arguments. Exact 7c9b0cf3 deletes the fixed synthetic job table, role-board job cargo/mappers, and its test: 338 net lines. Exact 2ce91461 deletes the scene/planning Mind reconstructions, duplicate self-policy crate, unused prompt templates, four counterfeit schemas, and ten producer/source-text tests: 1,723 net lines. Exact 78836f3b deletes eight unconsumed status tableaux, the pressure calculator production only called without telemetry, its unreachable compaction action, one counterfeit schema, and six tests: 518 net lines. Exact f10f7fb3 deletes the final twelve epiphany.surface.* schemas and ten catalog entries after every one proved producerless and consumerless: 692 pure deletions. Exact ab3cacfb deletes thirty-one more producerless contracts, the false runtime-session mutation mouth, every Epiphany-owned Rider/Unity command schema, a callerless prompt-context module, its test-only specialist prompt system, and four self-affirming tests: 3,514 net lines. Exact 16d85b1b deletes six duplicate JSON-schema builder tests and two OpenAI-runtime self-source searches: 209 pure test-line deletions. Exact 06f93f70 deletes the test-only inverse OpenAI-to-native request mapper and makes two retained tests follow canonical native-to-provider derivation: sixty net lines. The local catalog now has twenty-three live or portable contracts. Brokkr owns Unity capabilities through CultMesh/Eve; a future Rider daemon owns Rider. Status retains Mind identity, exact current work, one action/reason decision, readable role lanes, and operator thought sealing. Core checks cleanly; retained provider and focused request-flow tests pass. + bifrost_authority_cut: Exact 203bcc41 deletes Epiphany's producerless Bifrost body-change/GitHub publication family: four document types, three singleton latest heads, constructors, validators, writers, local-Verse advertisement/projection, public exports, and five tests that manufactured both ends. Bifrost owns the real Persona feedback/delivery stores and signed crossing receipts; Epiphany does not publish an alternate Bifrost protocol. Core and release-bundle checks pass; the remaining CultMesh suite passes 13/13. persona_social_cut: Pending mentions, immutable requests, terminal receipts, quarantine records, retention heads, and retention plans are separate keyed CultCache documents. Persona derives its own deterministic work identity, reserves and terminalizes through exact batch CAS, cites the exact request envelope as pass-input provenance, and retries failed mentions without a timestamp or global revision. No scheduler can launch, block, retain, or provide pass provenance for Persona work. operational_state: local_worktree: source_subtraction_commits_landed_ox17_and_deployment_paused