Record concurrent Mind acceptance

notes/epiphany-current-algorithmic-map.md

@@ -1,7 +1,7 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-18
-Latest implementation cut: `01602fd3` on `codex/epiphany-shakedown-live`
+Latest implementation cut: `26b6a5bf` on `codex/epiphany-shakedown-live`
 
 This document describes the live machine. Historical cuts, rejected paths, and
 proof chronology belong in git, `state/ledgers.msgpack`, and bounded smoke
@@ -225,10 +225,10 @@ and the retained decision can still reach its basis/context without them.
 
 ## Verification and open gates
 
-Accepted through `01602fd3`:
+Accepted through `26b6a5bf`:
 
 - every Epiphany core target compiles;
-- core library `490/490`;
+- core library `491/491`;
 - OpenAI runtime library `24/24`;
 - model-runtime binary `10/10`;
 - OpenAI-runtime binary `10/10`.
@@ -236,9 +236,11 @@ Accepted through `01602fd3`:
 
 Open before Model Atlas Gate 1 resumes:
 
-1. prove disjoint Persona/Hands and graph writes merge, same-identity conflicts
-   refuse, transcripts can be deleted, restart reproduces obligations, and no
-   legacy authority resurrects;
+1. prove concurrent Persona/Hands through their concrete owners and restart
+   reproduces identical decisions and obligations without authority
+   resurrection. Concurrent disjoint graph writes, simultaneous
+   Verification+Modeling, same-identity conflict, exact replay, transcript
+   deletion, and old-epoch refusal are already accepted;
 2. run the fresh packaged capstone, then restart Model Atlas Gate 1 from a new
    external root.
 

notes/epiphany-fork-implementation-plan.md

@@ -211,8 +211,10 @@ Delete or demote:
 Keep the five-day shakedown and Model Atlas operational Gate 1 paused. Complete
 the remaining Decision-Auditable Concurrent Mind hard cut before another live
 coordinator run. Fresh Gate preflight exposed the aggregate ownership defect;
-the aggregate has now been structurally removed. The remaining gate is exact
-decision-context admission/retention plus fresh concurrent and restart proof.
+the aggregate has now been structurally removed. Decision-context admission,
+retention, writable-epoch refusal, and keyed graph/Verification concurrency are
+accepted. The remaining gate is concrete Persona+Hands concurrency plus fresh
+restart/re-entry proof.
 
 Cut in this order:
 
@@ -303,9 +305,13 @@ Cut in this order:
    split runtime stores refuse before registered writers see them; foreign
    physiology stores remain outside Mind ownership. No schema migrator or dual
    reader exists.
-17. Replay fresh-store disjoint concurrency, same-identity conflict, transcript
-   deletion, restart, and re-entry. Only then restart Model Atlas Gate 1 from a
-   new external root.
+17. **Keyed concurrency landed at `26b6a5bf`:** simultaneous disjoint
+   Modeling-node writes merge; simultaneous Verification admission and an
+   unrelated Modeling-node write merge; same-identity competitors yield one
+   winner and one typed conflict; exact replay returns the original receipt;
+   and reopening assembles one valid graph. Complete concrete Persona+Hands
+   concurrency plus restart/re-entry. Only then restart Model Atlas Gate 1 from
+   a new external root.
 
 Do not preserve the aggregate for compatibility, manufacture a bootstrap
 thread, release autonomous scheduling, register topology in `gamecult-ops`,

notes/fresh-workspace-handoff.md

@@ -2,7 +2,7 @@
 
 Updated: 2026-08-18
 Branch: `codex/epiphany-shakedown-live`
-Latest implementation cut: `01602fd3`
+Latest implementation cut: `26b6a5bf`
 
 ## Orientation
 
@@ -57,6 +57,13 @@ The global thread-state authority is gone.
   stores and split identities refuse byte-identically; unrelated Persona and
   coverage physiology stores remain outside this authority. There is no schema
   migrator or dual reader.
+- `26b6a5bf` closes the first fresh concurrency slice. Two independently
+  planned Modeling-node writes commit simultaneously and assemble into one
+  valid reopened graph; competing writes to one semantic identity yield one
+  winner and one typed conflict; exact winner replay returns the original
+  receipt. A real Verification admission also commits simultaneously with an
+  unrelated Modeling-node write. Raw mutation primitives are crate-private,
+  so external callers cannot manufacture generic Mind CAS plans.
 
 There is no compatibility aggregate, dual reader, bootstrap thread, or
 migrator. Thread identifiers may survive only as immutable pass-creation
@@ -65,7 +72,7 @@ provenance; they do not own identity, currentness, or conflict.
 Verification at this boundary:
 
 - every Epiphany core target compiles;
-- core library `490/490`;
+- core library `491/491`;
 - OpenAI runtime library `24/24`;
 - model-runtime binary `10/10`;
 - OpenAI-runtime binary `10/10`;
@@ -135,10 +142,12 @@ transcript may be required for that query after archival.
 
 ## Immediate next action
 
-1. Run fresh acceptance: concurrent Persona+Hands; evidence+Verification+
-   unrelated Modeling-node writes; distinct graph writes; same-identity
-   conflict; stale strong-read refusal; transcript deletion; restart/re-entry;
-   and source guards for deleted aggregate/global revision paths.
+1. Complete the remaining fresh acceptance: concurrent Persona+Hands through
+   their concrete owners, then restart/re-entry with identical decisions and
+   obligations. Distinct graph writes, same-identity conflict, stale
+   strong-read refusal, simultaneous Verification+Modeling, transcript
+   deletion, writable-epoch refusal, and aggregate/global-revision source
+   guards are already accepted.
 2. Only then package a fresh body and resume Model Atlas Gate 1 from a new
    external root.
 

state/map.yaml

@@ -4,7 +4,7 @@ experiment:
   purpose: Native, inspectable agent organism with typed state and explicit organ authority.
 
 objective:
-  current: Complete the Decision-Auditable Concurrent Mind hard cut by proving exact context integrity, writable-epoch refusal, and fresh concurrent/restart behavior before resuming Model Atlas Gate 1.
+  current: Complete the Decision-Auditable Concurrent Mind hard cut by proving concrete Persona+Hands concurrency and fresh restart/re-entry before resuming Model Atlas Gate 1.
 
 architecture:
   body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
@@ -38,11 +38,11 @@ invariants:
   - Evidence and git retain history; this map retains only state that changes future decisions.
 
 current_status:
-  summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The broader Concurrent Mind cut remains incomplete only behind the fresh concurrent/restart capstone. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused.
+  summary: The keyed RepoModel hard cut, decision-context foundation, Model Atlas code slice, complete Body, Proposal, frontier-verdict Modeling, frontier Research, frontier Verification, frontier Planning/PlanMind, Reorientation, and Persona decision-context lifecycles are landed on codex/epiphany-shakedown-live. Keyed Mind plus exact runtime receipts own coordinator presence, work discovery, deterministic launch, job-bound continuation, review, typed failure, semantic admission, and retained decision reachability. Exact 07d891ba and ec1431ff delete the persisted/global thread aggregate and its generic coordinator/prompt/revision surfaces. Exact f7948795 deletes MindGatewayReview, MindStateCommitReceipt v0, the generic interpreter prompt, runtime registration/read APIs, false thought/state-effect/adoption CultNet mouths, and stale launch proof profiles. CultMesh now projects only reasoning basis, decision context, and exact Mind commit receipt, read-only. Exact 1c9aafd8 seals the terminal decision context before model-backed frontier-Planning failure and binds the typed failure plus generic job result to it. Exact e0e75a30 deletes the residual aggregate role patch/parser/policy surface, gives Research one closed typed decision, and deletes the unowned generic Imagination planning patch. Exact 12b1b285 makes runtime model/tool binding validation the shared owner for execution and decision sealing; hostile provider, receipt, and stored-binding substitutions refuse, while retained basis/context audit survives transcript-delta deletion. Exact 01602fd3 advances Mind/runtime to v2/v1 and refuses historical or split writable identity pairs before registered writers see them. Exact 26b6a5bf proves simultaneous disjoint Modeling writes, simultaneous Verification+Modeling admission, same-identity conflict, exact replay, and reopened graph assembly; raw mutation primitives are crate-private. No compatibility reader, bootstrap aggregate, schema migrator, or dual reader survives. The broader Concurrent Mind cut remains incomplete only behind concrete Persona+Hands concurrency and fresh restart/re-entry. The machine remains a supervised engineering alpha; Model Atlas operational Gate 1 stays paused.
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
-  latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate coordinator machinery; exact ec1431ff removes another 4,547 lines of thread schema, prompt, revision, freshness, and graph-context authority. Exact f7948795 removes 754 lines net around the dead generic Mind gateway and replaces its mutation-shaped contracts with three read-only decision-audit projections. Exact 1c9aafd8 repairs model-backed frontier-Planning failure ordering: context first, typed failure second, generic job closure third, with one shared context ID. Exact e0e75a30 deletes 612 lines and adds one narrow Research decision contract; runtime result/output contracts advance to v4, and generic patch source guards pass. Exact 12b1b285 replaces partial context-side binding checks with shared exact runtime model/tool validators and proves provider/tool substitution refusal plus transcript-independent retained audit. Exact 01602fd3 advances Mind epoch to v2 and runtime-spine schema to v1; a claimed runtime store must expose one exact current pair, while unrelated physiology stores remain outside Mind ownership. Family launches proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only, stateRevision is absent, and no generic Mind review or patch can authorize mutation. Core library 490/490, all core targets, OpenAI runtime 24/24, and binary 10/10 pass. Gate 1 remains paused behind fresh-store concurrent/restart acceptance.
+  latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate coordinator machinery; exact ec1431ff removes another 4,547 lines of thread schema, prompt, revision, freshness, and graph-context authority. Exact f7948795 removes 754 lines net around the dead generic Mind gateway and replaces its mutation-shaped contracts with three read-only decision-audit projections. Exact 1c9aafd8 repairs model-backed frontier-Planning failure ordering: context first, typed failure second, generic job closure third, with one shared context ID. Exact e0e75a30 deletes 612 lines and adds one narrow Research decision contract; runtime result/output contracts advance to v4, and generic patch source guards pass. Exact 12b1b285 replaces partial context-side binding checks with shared exact runtime model/tool validators and proves provider/tool substitution refusal plus transcript-independent retained audit. Exact 01602fd3 advances Mind epoch to v2 and runtime-spine schema to v1; a claimed runtime store must expose one exact current pair, while unrelated physiology stores remain outside Mind ownership. Exact 26b6a5bf proves actual concurrent disjoint-node merge, Verification+Modeling merge, same-key conflict, exact replay, and restart assembly while demoting raw mutation formulation to crate-internal machinery. Family launches proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only, stateRevision is absent, and no generic Mind review or patch can authorize mutation. Core library 491/491, all core targets, OpenAI runtime 24/24, and binary 10/10 pass. Gate 1 remains paused behind concrete Persona+Hands concurrency and fresh restart/re-entry acceptance.
   operational_state:
-    local_worktree: source_head_01602fd3_pushed_fresh_store_capstone_active
+    local_worktree: source_head_26b6a5bf_pushed_persona_hands_restart_capstone_active
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: canonical_small_public_crossing_body
@@ -73,11 +73,11 @@ current_status:
     starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
-  unresolved_authority: The persisted/global thread aggregate, generic Mind gateway, aggregate role patch, partial decision-context binding checks, and writable old-epoch path are gone. Native/provider request equality is internally derived; runtime execution and context sealing share exact model/tool binding owners; model-backed frontier-Planning failure plus role/reorient/Persona archive reachability are context-bound; retained basis/context audit survives transcript-delta deletion. The fresh concurrent/restart capstone remains open. Model Atlas isolated proofs remain accepted, but Gate 1 remains paused. Operational registration in gamecult-ops is forbidden; historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Run fresh disjoint-write, same-identity conflict, transcript-deletion, restart, and re-entry acceptance before Model Atlas Gate 1. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, or transcript authority.
+  unresolved_authority: The persisted/global thread aggregate, generic Mind gateway, aggregate role patch, partial decision-context binding checks, writable old-epoch path, and external generic Mind mutation mouth are gone. Native/provider request equality is internally derived; runtime execution and context sealing share exact model/tool binding owners; model-backed frontier-Planning failure plus role/reorient/Persona archive reachability are context-bound; retained basis/context audit survives transcript-delta deletion. Keyed graph and Verification concurrency are accepted. Concrete Persona+Hands concurrency and fresh restart/re-entry remain open. Model Atlas isolated proofs remain accepted, but Gate 1 remains paused. Operational registration in gamecult-ops is forbidden; historical c011 and partial Gate roots stay untouched/read-only.
+  next_action: Prove concurrent Persona+Hands through their concrete owners, then prove fresh restart/re-entry reproduces identical decisions and obligations before Model Atlas Gate 1. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, or transcript authority.
 
 active_subgoals:
-  - Complete exact decision-context admission, retention, epoch refusal, and fresh concurrent/restart proofs before any further operational Gate run.
+  - Complete concrete Persona+Hands concurrency and fresh restart/re-entry proof before any further operational Gate run.
   - Prove the ordered Model Atlas Gate 1 with real isolated stores: establish signed sight before engaging all brakes, then prove frozen read-only state and no local Modeling or Soul wakes.
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
   - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.