Record operator surface collapse

notes/epiphany-current-algorithmic-map.md

@@ -1,7 +1,7 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-23
-Latest committed implementation cut: `7c9b0cf3` on `codex/epiphany-shakedown-live`
+Latest committed implementation cut: `78836f3b` on `codex/epiphany-shakedown-live`
 Current worktree cut: canonical map/evidence sync; Ox17 remains paused
 
 This document describes the live machine. Historical cuts, rejected paths, and
@@ -53,11 +53,15 @@ recommendation algorithm. Typed runtime-result interpretation remains shared by
 current work and reorientation. The keyed status composer is the sole CRRC
 recommendation projection; its DTO does not confer routing authority.
 
-Status emits each projection once. It has no nested duplicate `view`, inert
-auxiliary-mode switch, ignored cwd/transcript flags, or fixed synthetic job
-table. Role lanes derive directly from exact current-work obligations; they do
-not borrow authority or decoration from invented Body/RepoModel/Verification
-jobs. The operator thought-sealing boundary remains tested.
+Status projects only Mind identity, exact current work, one coordinator
+action/reason pair, and operator-readable role lanes. It has no nested duplicate
+`view`, inert auxiliary mode, ignored arguments, fixed synthetic jobs, second
+scene/planning Mind, or result/tool/pressure tableaux. Exact `2ce91461` and
+`78836f3b` remove 2,241 net lines and sixteen tests that guarded duplicate
+projections, unreachable pressure routing, manifest strings, or prompt keywords
+rather than a live consequence. Core 356/356, status 1/1, coordinator 8/8, and
+release construction 19/19 pass. The operator thought-sealing boundary remains
+tested.
 
 Persisted cluster topology is the sole local-Verse bootstrap witness. It carries
 the runtime-bound Body domain and declared daemon targets consumed by the
@@ -130,7 +134,7 @@ interface authority.
 | `reasoning_context.rs` Mind commit owner | invariant-owned strong reads and complete typed writes | atomic batch CAS plus `EpiphanyMindCommitReceipt` | Disjoint identities merge; same-identity or changed-strong-read conflicts refuse without partial mutation. |
 | concrete family admission owners | sealed decision context, exact family request/result chain, affected semantic documents | one family-specific `MindMutation` | The model cannot choose which stale state is safe to ignore. |
 | `current_work.rs` | keyed Mind view and exact runtime request/job/result/decision families | pure family scheduling and continuation projections | Events, timestamps, role lanes, and thread provenance cannot create or suppress work. |
-| coordinator policy/status | current-work projections, Resident pressure, and exact runtime receipts | one prioritized recommendation and read-only operator views | Coordinator presence is derived; no mutable coordinator head exists. |
+| coordinator policy/status | keyed Mind presence, exact current work, and the accepted continuity decision | one action/reason pair plus operator-readable role lanes | Coordinator presence is derived; no mutable coordinator head, pressure tableau, or duplicate policy wrapper exists. |
 | runtime worker attempt owner | immutable launch, exact process claim, typed result, job result, archival evidence | one terminal attempt authority | Scheduling, process liveness, and semantic admission remain distinct authorities. |
 | model-provider boundary | sealed native model request plus explicit provider configuration and injected credential | exact internally derived provider request and transport result | Provider selection cannot author a second request truth or admit Mind state. |
 | OpenAI Responses schema projector | full native typed output schema | one provider-legal strict generation schema | Provider formatting preserves useful supported constraints but never replaces native decoding or Mind admission. |
@@ -593,7 +597,7 @@ autonomous scheduling remain forbidden until their owning gates pass.
 - `epiphany-core/src/runtime_spine.rs`
 - `epiphany-core/src/resident_self.rs`
 - `epiphany-core/src/reorientation_work.rs`
-- `epiphany-core/src/surfaces/coordinator.rs`
+- `epiphany-core/src/surfaces/coordinator_decision.rs`
 - `epiphany-core/src/surfaces/worker_launch.rs`
 - `epiphany-openai-runtime/src/lib.rs`
 - `epiphany-openai-runtime/src/persona_executor.rs`

notes/fresh-workspace-handoff.md

@@ -738,14 +738,22 @@ mapping helpers, and its one test: 338 net lines. Role lanes and coordinator
 routing now derive directly from exact current work. Focused coordinator/status
 checks pass; the operator thought-sealing test remains 1/1.
 
-Next audit the remaining scene and planning projections against their actual
-operator output. Preserve readable projections over typed Mind/current work;
-cut duplicated Mind payload, legacy state vocabulary, and tests that merely
-reconstruct their producer. Then inspect role-board/coordinator DTO overlap.
-Preserve cluster topology while it owns the runtime-bound Body domain and
-bootstrap evidence. Do not run a full-workspace compile, package, deployment,
-or Ox root until the subtraction audit closes. Never resume Ox10, Ox12, Ox13,
-Ox15, or Ox16.
+Exact `2ce91461` deletes the duplicate scene/planning Mind reconstructions,
+`epiphany-self-policy`, unused prompt templates, four counterfeit surface
+schemas, and ten tests that guarded producers or source text rather than a
+consequence: 1,723 net lines. Exact `78836f3b` deletes eight more unconsumed
+status tableaux, the pressure calculator production only invoked without
+telemetry, its unreachable compaction route, one counterfeit schema, and six
+tests: another 518 net lines. Status now contains Mind identity, exact current
+work, one action/reason decision, and readable role lanes. Core 356/356, status
+1/1, coordinator 8/8, and release construction 19/19 pass.
+
+Next audit every remaining `epiphany.surface.*` schema against a concrete typed
+producer and consumer. Delete catalog entries that merely describe historical
+status JSON. Preserve exact current work, the operator text projection, cluster
+topology, and the four consequence-bearing supervisor tests. Do not run a
+full-workspace compile, package, deployment, or Ox root until subtraction
+closes. Never resume Ox10, Ox12, Ox13, Ox15, or Ox16.
 
 ## Operational state that matters
 

state/map.yaml

@@ -51,7 +51,7 @@ current_status:
   latest_phase: The fresh-package Ox17 lane remains paused for source subtraction. Exact 4d0db2c7 deletes the final heartbeat scheduler and twenty-one low-value tests. Exact 67a3a57b deletes all nineteen remaining Rust self-source inspection tests plus two argument-vector mirrors. Exact bbe5fcf1 deletes four CultMesh tableaux and their production-absent seven-cluster fixture world. Exact f236e1cd makes each organ's CultNet factory the sole contract author by deleting six parallel CultMesh families. Exact fe591b33 removes persisted fixed Verse/room policy and two literal-copy tests. Exact 4ed3a6e0 deletes four JSON-derived CultMesh mirrors, five unauthenticated legacy provider/tool families, prompt branches, retirement paths, one supervisor migration command, and ten tests: 2,398 net lines. Exact e8bc0382 deletes unused Persona-speech-audit and Weksa-lowering CultMesh shadows plus four tests: 432 lines. Exact db6a7131 deletes unused CultMesh operator-run intent/receipt and generic work-loop telemetry shadows, runtime declarations, prompt branch, and two tests: 829 pure deletions. Exact 75ead942 deletes the abandoned RepoWork aggregates, service-audit helper, Bifrost artifact/metrics/public-proof families, and tests that alone animated them: 1,410 net lines. Exact 753707ff deletes the duplicate CultMesh status bootstrap sentinel so persisted runtime-bound cluster topology alone owns bootstrap: 99 net lines. Exact 967743cc deletes seven test-only daemon-poke/Bifrost loader APIs in favor of the runtime-consumed LocalVerseContext: 85 net lines. Exact 1ab0859b deletes two obsolete tableau tests: 78 lines. Exact ab5b16ec deletes the test-only generic managed-service writer that recreated a forbidden path: 28 lines. Exact c977d149 deletes two counterfeit Idunn receipt families after external audit proved no live producer or consumer: 151 lines. Native runtime, keyed Mind, Persona, Weksa, live Bifrost body-change receipts, topology, specialized policy writers, and Odin/Idunn's actual deployment manifest/signed health remain owners. Non-test core, CultMesh 27/27, prompt 1/1, affected readiness/Persona tests, and supervisor 10/10 are clean. Old stores containing deleted envelopes refuse; there is no migrator or dual reader. No Idunn build, package, deployment, or Ox root is authorized yet. Ox16 remains sealed historical evidence and must never resume.
   supervisor_subtraction: Exact 30c66080, 008bd493, 7e16e758, and 3312880e delete generic commands, legacy lifecycle lineage, fallback/finite launch, and caller-authored supervisor identity for 596 net lines. Exact afb223da deletes two implementation-mirror tests, their recovery wrapper, and five behaviorless policy fields; managed-service policy v1 refuses historical writable rows. Exact ffe707ff deletes the global lifecycle latest mirror, receipt-history scan, timestamp election, local-Verse slot, and two more false proofs. Each service now owns one exact current receipt head. Exact 47454e61 splits semantic/workspace launch ownership and deletes Epiphany's Windows Task Scheduler deployment/continuity authority and its argv test: another 463 net lines. Exact 803e3447 deletes the unused semantic status JSON mirror. Exact da8ed840 deletes console-shaped scheduler/reconcile state machines and makes authentication refusal fail the command: 484 net lines. The supervisor is 2,104 lines; its four remaining tests cross live brake, process-identity, or signed-health boundaries.
   launch_dependency_cut: Exact 2aeab7a9 deletes the generic organ dependency matrix, generic receipt catalogue/proof profiles, persisted worker-launch cargo, Persona prompt injection, evaluator, and three self-certifying tests: 700 net lines. Family admission owners derive exact dependencies from typed state. Worker-launch schema v2 and Persona projector prompt v1 refuse the old writable shape. Core 378/378, OpenRouter runtime 27/27, packaged runtime 13/13, and Persona re-entry 1/1 pass.
-  operator_surface_subtraction: Exact ef92e853 deletes the callerless view-lens registry, legacy acceptance-bundle builders, test-only raw-JSON result interpreters, and six tests: 797 net lines. Exact a292979d and 77e817c1 delete the duplicate CRRC recommendation algorithm, its unused input model, and four tests: 206 lines. Exact 3b94bf6e and 59c5e3a6 delete the nested duplicate status view, false auxiliary mode, and ignored status arguments. Exact 7c9b0cf3 deletes the fixed synthetic job table, role-board job cargo/mappers, and its test: 338 net lines. Typed runtime-result interpretation, keyed CRRC, exact current work, role lanes, and operator thought sealing remain. Core 372/372; focused coordinator/status checks pass.
+  operator_surface_subtraction: Exact ef92e853 deletes the callerless view-lens registry, legacy acceptance-bundle builders, test-only raw-JSON result interpreters, and six tests: 797 net lines. Exact a292979d and 77e817c1 delete the duplicate CRRC recommendation algorithm, its unused input model, and four tests: 206 lines. Exact 3b94bf6e and 59c5e3a6 delete the nested duplicate status view, false auxiliary mode, and ignored status arguments. Exact 7c9b0cf3 deletes the fixed synthetic job table, role-board job cargo/mappers, and its test: 338 net lines. Exact 2ce91461 deletes the scene/planning Mind reconstructions, duplicate self-policy crate, unused prompt templates, four counterfeit schemas, and ten producer/source-text tests: 1,723 net lines. Exact 78836f3b deletes eight unconsumed status tableaux, the pressure calculator production only called without telemetry, its unreachable compaction action, one counterfeit schema, and six tests: 518 net lines. Status retains Mind identity, exact current work, one action/reason decision, readable role lanes, and operator thought sealing. Core 356/356, status 1/1, coordinator 8/8, and release construction 19/19 pass.
   persona_social_cut: Pending mentions, immutable requests, terminal receipts, quarantine records, retention heads, and retention plans are separate keyed CultCache documents. Persona derives its own deterministic work identity, reserves and terminalizes through exact batch CAS, cites the exact request envelope as pass-input provenance, and retries failed mentions without a timestamp or global revision. No scheduler can launch, block, retain, or provide pass provenance for Persona work.
   operational_state:
     local_worktree: source_subtraction_commits_landed_ox17_and_deployment_paused
@@ -95,7 +95,7 @@ current_status:
     yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
   unresolved_authority: Generic command, legacy lineage, caller-authored identity, behaviorless policy fields, global lifecycle latest state, timestamp election, Windows Task Scheduler authority, and their false proofs are gone. Semantic and workspace launch owners are separate over shared process mechanics. The remaining daemon supervisor still combines the service loop, aggregate signed-health publication, semantic reconciliation, and the large workspace recovery state machine. Continue decomposing only where ownership becomes smaller; do not create family frameworks or adapters. Cluster topology remains persisted because its Body domain and bootstrap evidence are runtime-bound and consumed by supervision. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Audit remaining scene and planning projections against actual operator output. Preserve readable projections over typed Mind/current work; delete duplicated Mind payload, legacy state vocabulary, and tests that only reconstruct their producer. Then inspect role-board/coordinator DTO overlap. Preserve cluster topology and the four consequence-bearing supervisor tests. Do not run a local full-workspace compile, package, deployment, or Ox root.
+  next_action: Audit every remaining epiphany.surface.* schema against a concrete typed producer and consumer; delete catalog entries that merely describe historical status JSON. Preserve exact current work, the operator text projection, cluster topology, and the four consequence-bearing supervisor tests. Do not run a local full-workspace compile, package, deployment, or Ox root.
 
 active_subgoals:
   - Complete the fresh exact-package Decision-Auditable Concurrent Mind capstone before any further operational Gate run.