Accept semantic physical epoch retirement

notes/epiphany-current-algorithmic-map.md

@@ -2758,6 +2758,26 @@ endpoint no longer present in current managed policy remains pending rather
 than turning canonical state into arbitrary network deletion authority. Exact
 package and copied-live Qdrant proof remain the acceptance boundary.
 
+Exact `6bc3ec3f` closes that boundary. Release
+`sha256-fb1bf9258a7d977fd92d6f8ee17bb540fa870477cdf1d3cea9707ec8d582d4aa`
+with witness
+`sha256-b42dba7296739dc48ecf0d8014a16f9d232cd723ed0292830d50879f546c0e6d`
+passed exact 24-binary inspection. In copied live state, the packaged daemon
+deleted two points in the exact old `(swarm, partition, obligation, claim,
+epoch)` namespace while preserving a same-obligation foreign epoch and a
+same-claim foreign obligation. It compacted all logical and physical lifecycle
+rows only after the terminal receipt; replay was inert. With Qdrant absent, the
+same package preserved the durable obligation without a receipt or attempted
+logical compaction; restart consumed that same authority and completed exactly
+once. Ordinary Mind health and all canonical hashes remained unchanged.
+
+Semantic retention is therefore bounded at both logical and physical layers for
+new namespace-bearing attempts. Historical migrated attempts without recorded
+endpoint/collection remain deliberately durable; no inference path may retire
+them. This is honest residual evidence, not active growth. The next retention
+organ is Persona conversation history, followed by the remaining broad organ
+matrix and stable Starfire network ownership.
+
 The copied-live physical audit sharpened the next ownership boundary. A durable
 physical-retirement obligation must be emitted before an attempted lifecycle can
 retire. It must carry exact collection name, obligation ID, claim ID, claim

notes/fresh-workspace-handoff.md

@@ -1815,3 +1815,44 @@ and an isolated Qdrant body to prove physical points disappear, unrelated
 namespaces remain byte/ID-identical, failure retries, ordinary semantic health
 survives, and replay is inert. Active `c005` remains untouchable; Yggdrasil never
 builds.
+
+## Semantic physical retirement accepted live — 2026-08-10
+
+Exact pushed source `6bc3ec3f2493c75b6fa7f61ad3b675b10b67ab0f`
+packaged warning-free in 8m11s with 24 binaries as release
+`sha256-fb1bf9258a7d977fd92d6f8ee17bb540fa870477cdf1d3cea9707ec8d582d4aa`
+and witness
+`sha256-b42dba7296739dc48ecf0d8014a16f9d232cd723ed0292830d50879f546c0e6d`.
+The exact packaged inspector authenticated source, destination, witness, and all
+24 sibling binaries. Package receipts are under
+`.epiphany-run/linux-package-6bc3ec3f`.
+
+The isolated copied-live proof under
+`.epiphany-run/semantic-physical-6bc3ec3f` seeded one old failed Modeling epoch
+and four Qdrant points: two in its exact five-field namespace, one with a foreign
+claim epoch, and one with a foreign obligation. Exact packaged execution deleted
+only the two target points. Both hostile neighbors survived. The old obligation,
+attempt, grant, physical obligation, and terminal receipt then compacted into a
+revision-1 head with four retired generations, eight retired envelopes, and
+digest
+`sha256:eb447221ee3344eb75e50cc47097c42aa6479a7afe9f3be9a87dba352f51a01b`.
+All physical proof rows were absent afterward; replay reported zero retention
+mutations and preserved both hostile Qdrant points.
+
+A second pristine copy proved failure continuity. With Qdrant stopped, exact
+packaged execution reported one physical retention fault, preserved all three
+old lifecycle rows plus one durable physical obligation, wrote no terminal
+receipt, and refused logical compaction of that attempted epoch. After the same
+Qdrant body restarted, the next exact pulse deleted only the target namespace,
+wrote the receipt, and compacted the family into revision-2 digest
+`sha256:113c5057dc66f6393a4548d89ad3d177e4d43cce2a4cd12bc340430f013df2c7`.
+The two hostile points again survived.
+
+Mind remained byte-identical at
+`sha256:d9d9e61af5fe3f71272754e8fa07dde2a94083fc4bc2c1cbf086d4691bf9a19e`
+and exact packaged health remained ready with its original obligation, receipt,
+hashes, generation 1, 43 documents, and 1024 dimensions. Modeling retained its
+exact canonical obligation/hash/generation and remained failed only because the
+copied proof deliberately withheld Ollama. The temporary Qdrant container was
+removed after its persisted proof data was sealed. Active `c005` was untouched;
+Yggdrasil did not build.

state/map.yaml

@@ -35,10 +35,10 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, and exact b1e8c89a fail-closed semantic unattempted-generation retention are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Attempted semantic/physical retirement and Persona conversation retention remain separate. Stable Starfire firewall ownership remains open. Yggdrasil is the small public crossing body, never the release forge.
-  latest_phase: Exact b1e8c89a remains the accepted live semantic logical-retention boundary. Current source adds typed physical retirement: attempt-owned endpoint/collection identity, full-snapshot authorization, exact five-field Qdrant deletion, current-policy endpoint gating before I/O, terminal receipt admission, retry preservation, and logical compaction only after every attempted epoch is receipted. The complete library sweep passes 644 tests with one intentional ignored helper. Exact packaging and isolated copied-live Qdrant proof remain open; therefore attempted physical retirement is implemented but not yet accepted live.
+  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, and exact 6bc3ec3f semantic physical-epoch retirement are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Persona conversation retention remains open. Stable Starfire firewall ownership remains open. Yggdrasil is the small public crossing body, never the release forge.
+  latest_phase: Exact 6bc3ec3f packaged warning-free with 24 binaries as release sha256-fb1bf9258a7d977fd92d6f8ee17bb540fa870477cdf1d3cea9707ec8d582d4aa and witness sha256-b42dba7296739dc48ecf0d8014a16f9d232cd723ed0292830d50879f546c0e6d. Exact copied-live Qdrant proof deleted only two points in the full old namespace while preserving foreign epoch and obligation neighbors; lifecycle and physical authority compacted only after the terminal receipt; replay was inert. A Qdrant-down pass preserved one retryable obligation without receipt or attempted compaction, and restart completed it exactly once. Mind remained byte-identical and exactly ready. Receipts are under .epiphany-run/semantic-physical-6bc3ec3f and .epiphany-run/linux-package-6bc3ec3f.
   operational_state:
-    local_worktree: semantic_physical_retirement_implemented_uncommitted
+    local_worktree: semantic_physical_retirement_accepted_mind_refresh_uncommitted
     operator_wireguard: restored
     yggdrasil: canonical_small_public_crossing_body
     starfire: temporary_epiphany_cognition_body
@@ -68,8 +68,8 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: authenticated_9b8df0b4_c005_bound_to_eyes_tools_nervous_system_with_217dd_and_bd96305e_helpers_running
-  unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, narrow model-generation retention, published model-turn JSON ingress, and semantic unattempted-generation retention are accepted. Attempted semantic lifecycle and physical Qdrant epochs remain unbounded until a durable cleanup obligation preserves exact collection/claim/epoch identity across crash and backend failure. Conversation-wide runtime histories remain separate/unbounded. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Commit and push the typed semantic physical-retirement circuit, then package the exact source on Starfire and prove it against copied canonical state plus isolated Qdrant: exact old namespace deleted, foreign namespace unchanged, failed deletion retryable, health unchanged, logical compaction receipted, replay inert. Preserve active c005. Yggdrasil never builds.
+  unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, narrow model-generation retention, published model-turn JSON ingress, and semantic logical/physical retention are accepted. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. Persona conversation histories and broader conversation-wide runtime histories remain separate/unbounded. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
+  next_action: Audit Persona conversation history ownership and bound only terminal delivery/speech lifecycles without deleting pending feedback, ambiguous consequence quarantine, consent/disclosure authority, or relationship memory. Map owners, limits, and negative non-resurrection before editing. Preserve active c005. Yggdrasil never builds.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.