Pin unified graph to proven Codex compatibility

This commit is contained in:
Meta Vens 2026-08-09 04:37:50 +01:00
commit e9465c1120
5 changed files with 34 additions and 25 deletions

30
Cargo.lock generated
View file

@ -77,22 +77,22 @@ dependencies = [
[[package]]
name = "allocative"
version = "0.3.6"
version = "0.3.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "d8cf9afc79c83d514444b55df3935d317da54b1ce3b17a133c646889cc260de8"
checksum = "8fac2ce611db8b8cee9b2aa886ca03c924e9da5e5295d0dbd0526e5d0b0710f7"
dependencies = [
"allocative_derive",
"bumpalo",
"ctor",
"hashbrown 0.16.1",
"hashbrown 0.14.5",
"num-bigint",
]
[[package]]
name = "allocative_derive"
version = "0.3.6"
version = "0.3.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "614043c56c1173b800acb007b81fd0cbc0a0d7d717b71ba705fc2230d0760a23"
checksum = "fe233a377643e0fc1a56421d7c90acdec45c291b30345eb9f08e8d0ddce5a4ab"
dependencies = [
"proc-macro2",
"quote",
@ -1509,12 +1509,12 @@ dependencies = [
[[package]]
name = "ctor"
version = "1.0.12"
version = "0.1.26"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2d83cb7e7a873830708d6b02a78cd36a592c6fa14bf267b68725103b85c0d77f"
checksum = "6d2301688392eb071b0bf1a37be05c469d3cc4dbbd95df672fe28ab021e6a096"
dependencies = [
"link-section",
"linktime-proc-macro",
"quote",
"syn 1.0.109",
]
[[package]]
@ -3587,18 +3587,6 @@ dependencies = [
"vcpkg",
]
[[package]]
name = "link-section"
version = "0.19.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "5ee1a0d6e252afe82e7bc2db42fba60e02ddf3b1accaf8cb21d96e34ba61f3d4"
[[package]]
name = "linktime-proc-macro"
version = "0.2.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "348d0075b1fc163b26d72a7f75fc5141daf2fd1bdf128d873cbaf6785d495bdf"
[[package]]
name = "linux-keyutils"
version = "0.2.5"

View file

@ -1914,3 +1914,12 @@ including container startup. Eighteen release-contract tests pass. Their
one-time dev harness cost 5m33s, identical warm execution cost 4.43s, and a
subsequent packager source edit rebuilt/tested in 20.10s. Exact release witness
authority remains unchanged; a clean 23-binary package is the next boundary.
The first clean-package attempt exposed a lock migration incompatibility before
release construction. Fresh resolution selected `allocative 0.3.6` beside
vendored Starlark's older `hashbrown` integration; Rust rejected the missing
`Allocative` implementation. The lock owner now retains the previously proven
`allocative 0.3.4`, `allocative_derive 0.3.3`, and `ctor 0.1.26`. A locked
release-target check traversing Starlark through Codex login and
`epiphany-openai-auth-spine` completed successfully in 3m16s. This is lockfile
compatibility authority, not a source patch or relaxed gate.

View file

@ -2,6 +2,18 @@
## Unified Cargo authority and shipped state steward — 2026-08-09
The first exact `6808f3f5` package attempt failed before release construction:
the one-time `cargo generate-lockfile` had advanced `allocative` from 0.3.4 to
0.3.6 (and its derive/ctor companions), which is semver-accepted but
incompatible with vendored Starlark's `hashbrown` Allocative implementation.
No release or witness was emitted. The root lock is corrected to the previously
proven trio `allocative 0.3.4`, `allocative_derive 0.3.3`, and `ctor 0.1.26`.
A release-target `cargo check --release --locked -p
epiphany-openai-auth-spine` traversed Starlark, Codex protocol/login, and the
auth spine successfully in 3m16s. Commit and push this lock repair, then advance
the clean Linux package source and retry once; do not reuse the failed package
as evidence.
The root manifest is now the single first-party Cargo workspace and root
`Cargo.lock` is the sole dependency-resolution authority. Seven child lockfiles
and three now-ignored child patch declarations were deleted. Vendored Codex and

Binary file not shown.

View file

@ -36,9 +36,9 @@ invariants:
current_status:
summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. The persistent c005 Linux body proves heartbeat, Self coordination, governed Eyes-to-Modeling cognition, causal routing, native Imagination, dedicated Mind adoption, and typed Hands relinquishment without external consequence. Self causally demotes pre-relinquishment CRRC history while preserving raw operator sight. One root Cargo workspace and lock now own all first-party dependency resolution; the core-owned state steward joins the witnessed release as a required 23rd binary. Yggdrasil remains the small public crossing body and is not a release forge. Exact 23-binary packaging, resident crash/restart, long-duration plateau, log ownership, and stable Starfire firewall ownership remain open.
latest_phase: Seven child Cargo locks and three dead child patch declarations were deleted; vendor workspaces remain explicitly excluded. The exact policy regression paid one 5m02s workspace migration then reran in 4.47s. Core-owned epiphany-state built on the same target in 23.20s and appended typed evidence without another graph. The native packager now builds and witnesses state-steward as binary 23. All 18 focused release-contract tests pass; the one-time dev harness cost 5m33s, warm execution 4.43s, and the final source edit rebuilt/tested in 20.10s. A source guard rejects omitted members and regrown child locks.
latest_phase: Seven child Cargo locks and three dead child patch declarations were deleted; vendor workspaces remain explicitly excluded. The policy regression reruns warm in 4.47s, core-owned epiphany-state built in 23.20s, and all 18 release-contract tests pass. The first exact 6808f3f5 package failed before release construction because fresh lock resolution selected allocative 0.3.6, incompatible with vendored Starlark's hashbrown integration. Root lock authority now retains the previously proven allocative 0.3.4, allocative_derive 0.3.3, and ctor 0.1.26. A locked release-target check through Starlark, Codex login, and epiphany-openai-auth-spine passes in 3m16s. No failed release or witness exists.
operational_state:
local_worktree: unified_cargo_authority_and_state_steward_proven_pending_commit
local_worktree: unified_lock_compatibility_repair_proven_pending_commit
operator_wireguard: restored
yggdrasil: canonical_small_public_crossing_body
starfire: temporary_epiphany_cognition_body
@ -68,8 +68,8 @@ current_status:
starfire_linux_modeling_peak: 109887488_bytes_resident_body_plus_modeling_circuit
yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
resident_physiology: c005_swarm_with_217dd_and_bd96305e_worker_helpers_running
unresolved_authority: The unified graph has not yet been packaged from a clean commit, so the required 23-binary release and identical warm witness remain unproven. The Docker contract still depends on explicit target and Cargo-home bindings, though the native release packager owns them correctly. Repository Body observation still performs two authenticated full-tree Git index/manifest passes; exact 217dd packaged observer evidence improved the same unchanged Body boundary to 94.521 seconds. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. Resident stdout/stderr logs remain an unbounded supervisor-owned surface.
next_action: Commit and push the unified Cargo authority, package the exact clean commit with all 23 required binaries, and rerun the identical package warm to prove the state steward shares the release graph. Then resume resident crash/restart, retention, and endurance work from awaitFrontierProposal without recreating relinquished route 817bf422.
unresolved_authority: The repaired unified lock has not yet been packaged from a clean commit, so the required 23-binary release and identical warm witness remain unproven. The Docker contract still depends on explicit target and Cargo-home bindings, though the native release packager owns them correctly. Repository Body observation still performs two authenticated full-tree Git index/manifest passes; exact 217dd packaged observer evidence improved the same unchanged Body boundary to 94.521 seconds. Execute-mode workers require a persistent process body. Keyed storage has not earned live migration. One Discord consequence remains blocked by the absent Yggdrasil credential. Resident stdout/stderr logs remain an unbounded supervisor-owned surface.
next_action: Commit and push the proven lock compatibility repair, advance the clean Linux package source, package all 23 required binaries once, and rerun identically warm. Publish only after exact witness validation. Then resume resident crash/restart, retention, and endurance work from awaitFrontierProposal without recreating relinquished route 817bf422.
active_subgoals:
- Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.