Record fulfilled-before-receipt Linux proof

This commit is contained in:
Meta Vens 2026-08-10 16:00:44 +01:00
commit dc358cf391
4 changed files with 41 additions and 3 deletions

View file

@ -3250,3 +3250,12 @@ only after exact native process observation.
pressure, byte-identical replay refusal, and no Heartbeat retry. Source passes
661 core tests with one ignore plus seven swarm tests. Exact package and copied
Linux proof remain.
Exact `2e66433f` closes the source and Linux function-level gate. Its release is
`sha256-1863385b` with witness `sha256-02f1d04f`, 24 binaries, and zero warnings.
The Linux fixture proved fulfillment with zero coordinator receipts, one
recovered-fulfilled original grant, consumed pressure, byte-identical replay
refusal, exact closed-lifecycle retention, and no retry before or after
retention. The fixture linked exact pushed source; it did not execute the
packaged swarm CLI. Direct packaged-binary provenance remains open alongside
the proposal Modeling and Imagination variants.

View file

@ -2477,3 +2477,32 @@ refused with byte-identical resident state, and Heartbeat cannot issue a retry.
Full core verification passes 661 tests with one intentional ignore; all seven
swarm tests pass without warnings. Commit, exact package, and copied Linux proof
remain. Actual c006 is still braked and stopped.
## Fulfilled-before-receipt Linux fixture accepted — 2026-08-10
Source `2e66433f519327623614d26e46ac8ff5d75bbd0a` is pushed. Exact package
`sha256-1863385b98acfb2017eb9df8401941073fef59f08ce0555c396fbd612f35ff73`
with witness
`sha256-02f1d04fb10f804206302dbe20ea0298af7690a4887fc6eddd12cfc7d2d68822`
authenticated 24 binaries with zero warnings. Cargo took 7m03s and the successful
container took 7m14s. The first package invocation failed before Cargo because
the source volume was read-only; that receipt is preserved beside the success
under `.epiphany-run/linux-package-2e66433f`.
A fresh quarantined Linux fixture linked against exact source `2e66433f` built
an authenticated admitted-model-direction request, launch, and terminal result;
atomically opened the exact resident coordinator incarnation; and confirmed
typed fulfillment with zero coordinator receipts. Resident settlement returned
`completed`, wrote one `recovered-fulfilled` grant/ack, left the pressure
consumed by the original grant, and cleared the lease. Replay exited 1 with a
byte-identical resident store. After Heartbeat consumed the ack, retention
retired exactly one lifecycle and still produced no retry grant. Accepted
receipts are under `.epiphany-run/fulfilled-before-receipt-2e66433f-r4`; r1-r3
are preserved fixture failures that exposed missing cache-pull, consumed-grant,
and immutable-child-claim setup.
The Linux transition was executed by a fixture linked against exact pushed
source, while the corresponding release was separately authenticated. Do not
claim packaged CLI execution yet. Next drive the same state through the exact
packaged `epiphany-swarm`, then cover proposal Modeling and Imagination and
runtime retention of terminal worker attempts. Actual c006 stays braked.

Binary file not shown.

View file

@ -36,9 +36,9 @@ invariants:
current_status:
summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, exact 6bc3ec3f semantic physical-epoch retirement, and exact 44230a05 Persona conversation retention are proven. Gamecult-ops 059821f owns Yggdrasil stream retention and exact 6ee08a4 owns stable Starfire Persona-permit firewall ingress. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Yggdrasil is the small public crossing body, never the release forge.
latest_phase: Exact pushed 7637b1cf packages and proves atomic terminal-failure, canonical requeue, and a distinct same-request retry without dual live authority. The next source cut moves receipt-free coordinator settlement out of binary-local policy into resident Self, which owns the grant transition. An authenticated admitted-model-direction path now proves a valid typed result may precede coordinator death and receipt absence: exact runtime death recovery closes the original grant recovered-fulfilled, leaves its pressure consumed, refuses replay without state change, and emits no Heartbeat retry. Full core verification passes 661/1 ignored and all 7 swarm tests pass. This owner cut is source-complete but uncommitted/unpackaged. Actual c006 remains braked and stopped.
latest_phase: Exact pushed 2e66433f moves receipt-free coordinator settlement from binary-local policy into resident Self. Full core verification passes 661/1 ignored and all 7 swarm tests pass. Exact package release sha256-1863385b98acfb2017eb9df8401941073fef59f08ce0555c396fbd612f35ff73 with witness sha256-02f1d04fb10f804206302dbe20ea0298af7690a4887fc6eddd12cfc7d2d68822 authenticates 24 binaries with zero warnings. A fresh exact-source Linux fixture proved valid admitted-model-direction fulfillment with zero coordinator receipts closes the original grant recovered-fulfilled, keeps the pressure consumed, refuses replay byte-identically, and yields no retry. Resident retention then retired exactly that closed lifecycle and still yielded no retry. The live transition used an exact-source fixture linked to 2e66433f, not the packaged swarm CLI; packaged CLI provenance remains a separate final gate. Receipts are under .epiphany-run/linux-package-2e66433f and .epiphany-run/fulfilled-before-receipt-2e66433f-r4. Actual c006 remains braked and stopped.
operational_state:
local_worktree: fulfilled_before_receipt_owner_source_complete
local_worktree: fulfilled_before_receipt_linux_fixture_accepted_packaged_cli_open
operator_wireguard: restored
starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
yggdrasil: canonical_small_public_crossing_body
@ -70,7 +70,7 @@ current_status:
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
resident_physiology: c006_exact_c693aaea_settled_braked_no_active_lease_no_attempt_three_old_processes_stopped
unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, and normal coordinator lifecycle opening/error closure/legacy repair/archival are accepted live. Receipt-free coordinator and worker death recovery are source-grounded, but the exact packaged Linux kill matrix is not yet accepted. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Mutable Starfire bind storage still needs the packaged randomized interruption/read-loop proof before recovered c005 authority may be trusted. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
next_action: Commit and push the resident-owned receipt-free settlement cut, package the exact source once, then prove valid typed result before coordinator receipt closes the original grant exactly once on copied Linux state. Afterward prove retention cannot resurrect terminal worker attempts or their settled grants, and exercise the remaining proposal Modeling, Imagination, and admitted-model-direction matrix. Keep actual c006 braked. Yggdrasil never builds.
next_action: Drive the same pre-fulfilled receipt-free state through the exact packaged epiphany-swarm CLI so binary provenance is direct, then exercise proposal Modeling and Imagination variants and runtime retention of terminal worker attempts. Preserve exact-source Linux receipts as accepted function-level evidence. Keep actual c006 braked. Yggdrasil never builds.
active_subgoals:
- Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.