Record active cognition continuity findings

This commit is contained in:
Meta Vens 2026-08-09 20:34:34 +01:00
commit de2e8ad527
3 changed files with 52 additions and 4 deletions

View file

@ -1360,6 +1360,20 @@ the lease once and return its exact pressure to Heartbeat; invalid or
substituted evidence closes as `unfulfilled`. Coordinator process closure is
therefore evidence, never cognitive completion authority.
Terminal completion owns its cooldown in that same resident-state and
acknowledgement CAS. `next_eligible_at_millis` is persisted from the configured
cooldown before the active lease disappears. The serve loop's sleep is only a
process-efficiency detail; restart cannot become a second eligibility owner.
One Heartbeat coordinator turn owns at most one resident grant. Grant issuance
first refuses any prepared or active Self authority, then atomically advances
the singleton `ResidentSelfState` revision with the exact pressure-to-grant
transition. That state envelope is the cardinality fence: two pressures cannot
be issued under one schedule/action after the first grant has been consumed by
preparation, and concurrent issuers cannot win disjoint pressure CASes. Pressure
arriving during a prepared or active turn stays pending until Heartbeat closes
the exact acknowledgement and schedules a later coordinator turn.
Imagination candidate time is part of that causal contract. A candidate must
have a valid RFC3339 timestamp at or after its request timestamp. A
well-shaped candidate from before the request cannot close resident authority.

View file

@ -1244,3 +1244,37 @@ absent, and exact replay did not advance the head or create work. Active c005
remained running and untouched. Coordinator receipt retention is accepted.
Next settle supervisor log ownership and packaged Heartbeat retention, then run
the measured idle/active endurance plateau.
## Active cognition continuity fault and repaired ownership (2026-08-09)
Exact `e09104a7` produced warning-free 24-binary release
`sha256-40d4971a3b7ecf4debf558621b80c6384c6c1a155971e42aecf44bf05d13e418`
with witness
`sha256-5f68e73e0b9ad2dff7e7cfa912455bd7e27f1a653c2a2eecd8bf5a012f146c68`.
Receipts are under `.epiphany-run/active-cognition2-e09104a7`. On a fresh copy
of the accepted idle body, exact Heartbeat launched the valid Eyes cognitive
runtime/thread. Self remained `awaiting-fulfillment` after coordinator exit,
accepted the exact typed Imagination result, wrote one terminal acknowledgement,
and Heartbeat consumed it. This live causal fulfillment seam is accepted.
The 900-pulse run then exposed two coupled continuity faults. Completion cleared
the active lease without persisting the configured 180-second cooldown, leaving
`nextEligibleAtMillis=0`. Separately, grant issuance checked only unconsumed
grants. Once preparation marked the first grant consumed, later pressure could
receive another grant under the same still-running Heartbeat schedule/action.
The first acknowledgement then closed that Heartbeat turn while Self retained
the companion grant. Three cognitive turns ran instead of the intended single
turn plus cooldown. Final Heartbeat and Self exits were both zero, but this body
is rejected as bounded-turn/endurance proof. The detached sampler also died
mid-run and was restarted append-only; the visible sampling gap is preserved.
Pushed commit `90648073` moves both decisions to their proper owners. Terminal
completion persists `next_eligible_at_millis` in the same CAS as lease closure
and acknowledgement publication. Heartbeat grant issuance refuses prepared or
active Self authority and advances the singleton resident-state revision in the
same pressure-to-grant CAS, so disjoint pressures cannot share a Heartbeat turn.
Twenty-four resident tests and eight swarm binary tests pass. Package exact
`90648073`, authenticate it, then replay from another fresh accepted-idle copy.
Require exactly one grant per Heartbeat turn, later pressure pending through the
persisted cooldown (including restart), typed fulfillment once, bounded return
to plateau, and clean zero exits. Active c005 remains untouched.

View file

@ -35,8 +35,8 @@ invariants:
- Evidence and git retain history; this map retains only state that changes future decisions.
current_status:
summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, and exact 16c4b19f coordinator receipt and Heartbeat artifact retention are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. The exact 16c4b19f genuine-idle control completed 900 refused pulses with constant state, zero artifacts, flat RSS, and clean direct-PID exits. Typed active cognition endurance, broad session/model/event/tool retention, and stable Starfire firewall ownership remain open. Yggdrasil is the small public crossing body, never the release forge.
latest_phase: Exact 30a63d63 packaged as release sha256-a1e8a0985573f7bacf5316c62080ed4bfb8b00c7214331e0baf775d24a7a50a4 with witness sha256-473482113ac16e6656e2cb02582ee5696818b3255a7184960e8839aa291bf3b9, 24 Linux ELF binaries, and zero warnings. The first real active-cognition attempt failed closed before launch because resident preparation compared the valid Eyes cognitive-runtime request identity epiphany-starfire-linux-eyes-tools to the separate release-publication runtime epiphany-starfire-linux. Source now makes the mounted runtime store's immutable identity own request validation, coordinator --runtime-id, and plain-work thread identity; release identity remains binary authentication only and Persona feedback target identity remains crossing-owned. Twenty-four resident and eight swarm binary tests pass; the cut is uncommitted and unpackaged.
summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, and exact 16c4b19f coordinator receipt and Heartbeat artifact retention are proven. Gamecult-ops 059821f makes journald the sole Yggdrasil supervisor/projector stream-retention owner. The exact 16c4b19f genuine-idle control completed 900 refused pulses with constant state, zero artifacts, flat RSS, and clean direct-PID exits. Exact e09104a7 proved live typed fulfillment and exposed two continuity faults; pushed 90648073 repairs their source ownership, but an exact-package replay remains required. Broad session/model/event/tool retention and stable Starfire firewall ownership remain open. Yggdrasil is the small public crossing body, never the release forge.
latest_phase: Exact e09104a7 packaged as warning-free 24-binary release sha256-40d4971a3b7ecf4debf558621b80c6384c6c1a155971e42aecf44bf05d13e418 with witness sha256-5f68e73e0b9ad2dff7e7cfa912455bd7e27f1a653c2a2eecd8bf5a012f146c68. Its 900-pulse copied-state active run launched the valid cognitive-runtime request, retained Self authority after coordinator exit, accepted exact typed fulfillment, and exited Heartbeat/Self zero. The run then falsified cooldown and grant exclusion: terminal completion left nextEligibleAtMillis zero, and Heartbeat issued later pressure under the still-open schedule after the first grant was consumed. Three turns ran where one bounded turn plus cooldown was intended. Commit 90648073 atomically persists the cooldown deadline and makes grant issuance contend on ResidentSelfState while refusing prepared or active authority. Twenty-four resident and eight swarm tests pass; exact packaging and live replay are open.
operational_state:
local_worktree: coordinator_receipt_retention_packaged_proven
operator_wireguard: restored
@ -68,8 +68,8 @@ current_status:
starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
resident_physiology: authenticated_9b8df0b4_c005_bound_to_eyes_tools_nervous_system_with_217dd_and_bd96305e_helpers_running
unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, and the genuine-idle resource plateau are accepted. Broader semantic/runtime histories remain unbounded pending a typed archived-session owner. Active cognition fulfillment and return-to-plateau remain unproven on an exact package. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
next_action: Commit and push the tested cognitive-runtime identity ownership cut, then package and authenticate that exact source with the persistent Starfire cache. Rerun active cognition from a fresh accepted-idle copy, never the failed active body; prove the valid Eyes-runtime request launches, coordinator exit cannot acknowledge before typed fulfillment, one exact result closes one grant, cooldown returns to plateau, stores/artifacts remain bounded, no external consequence occurs, and direct-PID shutdown is clean. Preserve active c005. Do not compact session/model/event/tool history until typed archived-session ownership exists.
unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, deployed supervisor/projector log retention, genuine-idle resource plateau, and one exact live typed-fulfillment closure are accepted. The e091 endurance body is rejected as bounded-turn proof because one Heartbeat turn issued multiple sequential grants and persisted no cooldown. Commit 90648073 is tested source only. Broader semantic/runtime histories remain unbounded pending a typed archived-session owner. Repository Body observation still performs two authenticated full-tree Git index/manifest passes. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential.
next_action: Package and authenticate exact 90648073 with the persistent Starfire cache. From a fresh accepted-idle copy, replay active cognition and require one Heartbeat schedule to issue exactly one grant; later pressure must remain pending until the first typed acknowledgement closes and the persisted cooldown expires. Prove restart cannot bypass nextEligibleAtMillis, one exact result closes one exact grant, return-to-plateau and retention are bounded, both direct-PID bodies exit zero, and no external consequence occurs. Preserve active c005. Do not compact session/model/event/tool history until typed archived-session ownership exists.
active_subgoals:
- Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.