Restore Idunn CI CD ownership

notes/epiphany-current-algorithmic-map.md

@@ -49,6 +49,11 @@ lifecycle. The persisted Epiphany brake survives that recovery and continues to
 block cognition/consequence ingress. Treating the target brake as a deployer
 prerequisite reverses the owner and creates an unrecoverable cycle.
 
+Idunn's CI/CD loop also owns the source-change path on upgraded Yggdrasil:
+observe pushed commit, compile, test, construct the exact release, admit/deploy
+it, and publish service-health receipts. Starfire is an operator/source body;
+it does not run a parallel release build when Idunn owns the same change.
+
 ## Canonical Mind
 
 The runtime Mind `.cc` is the sole decision-bearing store. Other `.cc` files
@@ -314,19 +319,21 @@ Accepted at the `bb823c54` source boundary:
 
 Open before Model Atlas Gate 1 resumes:
 
-1. run the fresh exact-package capstone over a new store, including concurrent
+1. receive Idunn's exact Yggdrasil compile/test/package/deployment receipts for
+   pushed source `f5edfc9d`;
+2. run the fresh exact-package capstone over a new store, including concurrent
    Persona/repository work, complete decision inspection without transcripts,
    and process restart/re-entry. The equivalent source-level ownership,
    concurrency, refusal, and re-entry matrix is accepted;
-2. only then restart Model Atlas Gate 1 from a new
+3. only then restart Model Atlas Gate 1 from a new
    external root.
 
 Historical c011 and partial Gate roots remain read-only. The pre-upgrade
 Yggdrasil capacity/topology is obsolete; the upgraded host is the intended
-swarm body, with deployment preparation owned by a separate task. This source
-pass neither mutates that host nor treats its deployment state as capstone
-evidence. Operational topology registration and autonomous scheduling remain
-forbidden until their owning gates pass.
+swarm and CI/CD body, with Idunn deployment preparation owned by a separate
+task. This source pass neither mutates that host nor treats an unreceipted
+deployment as capstone evidence. Operational topology registration and
+autonomous scheduling remain forbidden until their owning gates pass.
 
 ## Primary source anchors
 

notes/epiphany-fork-implementation-plan.md

@@ -399,9 +399,9 @@ Cut in this order:
    concurrency/retention suites and core `496/496` pass. The complete native
    workspace/all-target suite also passes; the only ignored test is the
    explicitly live immutable-GitHub proof.
-24. **Build/run retention is bounded:** the current package path is native on
-   F: with one shared Cargo target/cache and one exact run root. Any future
-   containerized run must use exact run labels and remove disposable
+24. **Build/run retention is bounded:** Idunn on upgraded Yggdrasil owns the
+   source-triggered compile/test/package/deploy path. Starfire does not run a
+   parallel release build. Any containerized run must use exact run labels and remove disposable
    containers, copied-source volumes, and writable roots at terminal
    settlement. Accepted proof stores remain only when this plan or the handoff
    names the invariant they preserve.

notes/fresh-workspace-handoff.md

@@ -10,7 +10,8 @@ Current worktree: canonical documentation and evidence reconciliation only
 The five-day shakedown and Model Atlas operational Gate 1 are paused. Do not
 touch historical c011/proof volumes, reuse partial Gate roots, release
 autonomous scheduling, register operational topology in `gamecult-ops`, race
-the separate Yggdrasil deployment task, or call the organism deployment-ready.
+Idunn's Yggdrasil CI/CD task with local compiler work, or call the organism
+deployment-ready.
 
 Epiphany is a supervised engineering alpha. Historical live proofs remain
 valid evidence, but current source has advanced beyond the last packaged c011
@@ -266,10 +267,11 @@ A stopped build container or cloned source volume owns no durable proof.
 
 ## Immediate next action
 
-1. Commit, push, and package the fully native-accepted source from F: using the
-   shared native Cargo target and one exact run root.
-2. Run the fresh-store Decision-Auditable Concurrent Mind capstone against that
-   package: concurrent Persona/repository work, Body -> Modeling -> Mind,
+1. Observe Idunn on upgraded Yggdrasil consume pushed source `f5edfc9d`. Require
+   exact compile, test, package, deployment, and service-health receipts. Do not
+   run a competing release build on Starfire.
+2. Run the fresh-store Decision-Auditable Concurrent Mind capstone against the
+   Idunn-admitted package: concurrent Persona/repository work, Body -> Modeling -> Mind,
    explicit Eyes evidence where required, Hands -> Verification -> Mind,
    transcript-independent decision inspection, and process restart/re-entry
    with identical obligations and no resurrection.
@@ -286,9 +288,9 @@ A stopped build container or cloned source volume owns no durable proof.
 - Historical accepted live release: source `465af24d`, c011 package SHA-256
   `089e0005`; it is not the current source body.
 - The old Yggdrasil capacity measurement is obsolete. The upgraded host is the
-  intended swarm body; its current deployment truth belongs to the separate
-  deployment task. This source pass builds natively on F: and makes no claim
-  about Yggdrasil readiness.
+  intended swarm body and CI/CD machine. Idunn owns source-change compilation,
+  testing, release construction, deployment, and daemon survival there; its
+  current deployment truth belongs to the separate deployment task.
 - Bifrost public crossing remains active on Yggdrasil. A completed public
   Persona consequence is still unproven because the Yggdrasil Discord
   credential is absent.

state/map.yaml

@@ -4,7 +4,7 @@ experiment:
   purpose: Native, inspectable agent organism with typed state and explicit organ authority.
 
 objective:
-  current: Finish the positive provider-backed Decision-Auditable Concurrent Mind capstone before resuming Model Atlas Gate 1.
+  current: Let Idunn on upgraded Yggdrasil build, test, deploy, and receipt the pushed Decision-Auditable Concurrent Mind source before the positive capstone and Model Atlas Gate 1.
 
 architecture:
   body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
@@ -21,7 +21,7 @@ architecture:
   substrate_gate: Owns access grants, not state admission.
   crossings:
     bifrost: Owns governed external transport and its signed receipts.
-    idunn: Owns deployment observation and actuation.
+    idunn: Owns source-change CI/CD observation, compilation, testing, release construction, deployment, and daemon survival.
     cultmesh: Projects typed state without becoming its owner.
     codex: Retained only for OpenAI-compatible authentication and model transport.
 
@@ -47,12 +47,12 @@ current_status:
   public_positioning: docs/positioning.md is the current public claim owner. Epiphany is the organizational layer above frontier AI workers; global coherence collapse is the primary failure; prompts are bounded projections of governed organizational state; humans retain purpose, judgment, authority, disagreement, exceptions, and acceptance. GameCult is the forge and longitudinal evidence program for a target federation of one locally owned Epiphany project organism per living project Body. Model Atlas carries typed offers, claims, evidence, and derived technical relationships; Bifrost is the intended external work, membership, governance, attribution, and identity-linked receipt rail. Public Persona relationships and visitor surfaces are intended social infrastructure, while private Mind and consequence authority remain local. The fleet, real three-repository Gate 1, complete Bifrost attribution, sustained autonomous production, visitor experience, and external design-partner pilots remain gated alpha targets.
   latest_phase: Exact 1662a012 makes coordinator policy a pure priority projection over keyed Mind and exact current work. Exact 07d891ba removes 5,441 lines of persisted aggregate coordinator machinery; exact ec1431ff removes another 4,547 lines of thread schema, prompt, revision, freshness, and graph-context authority. Exact f7948795 removes 754 lines net around the dead generic Mind gateway and replaces its mutation-shaped contracts with three read-only decision-audit projections. Exact 1c9aafd8 repairs model-backed frontier-Planning failure ordering: context first, typed failure second, generic job closure third, with one shared context ID. Exact e0e75a30 deletes 612 lines and adds one narrow Research decision contract; runtime result/output contracts advance to v4, and generic patch source guards pass. Exact 12b1b285 replaces partial context-side binding checks with shared exact runtime model/tool validators and proves provider/tool substitution refusal plus transcript-independent retained audit. Exact 01602fd3 advances Mind epoch to v2 and runtime-spine schema to v1; a claimed runtime store must expose one exact current pair, while unrelated physiology stores remain outside Mind ownership. Exact 26b6a5bf proves actual concurrent disjoint-node merge, Verification+Modeling merge, same-key conflict, exact replay, and restart assembly while demoting raw mutation formulation to crate-internal machinery. Exact 7c2ebd81 gives Persona state-note effects one keyed Mind owner under the Interpreter decision context, deletes the aggregate agent-memory writer from that path, and proves concrete Hands+Persona concurrency. Exact 79c0e373 admits the full Persona pass input once, binds all three stages to its exact Mind version, refuses substituted plans, removes direct Git prompt inspection, and excludes Persona-private documents from generic role projections. Exact d3300bba makes one validated `EpiphanyMindCommitReceipt` the re-entry proof for that input, seals plan construction behind the authenticated loader, refuses a naked typed input, performs no external reads or model call on terminal replay, and proves current-work projection is stable without mutation after store reopen. The current worktree makes provider lowering internal-only, derives terminal transport ownership from the sealed context, and applies one failure closure path to role, reorient, and Persona cognition. Family launches proceed directly from keyed obligations to typed launch documents; thread is pass-local provenance only, stateRevision is absent, and no generic Mind review or patch can authorize mutation. Modeling cache operations authenticate the complete keyed namespace before acting, so a disjoint insert cannot be misclassified as stale work. The complete native workspace/all-target suite passes; core library is 496/496. Gate 1 remains paused behind the fresh exact-package capstone.
   operational_state:
-    local_worktree: source_head_bb823c54_committed_decision_auditable_concurrent_mind_terminal_and_semantic_authority_repairs_full_native_workspace_acceptance_passed_docs_pending
+    local_worktree: source_head_f5edfc9d_pushed_decision_auditable_concurrent_mind_full_native_source_acceptance_passed_waiting_for_idunn_yggdrasil_cicd
     docker_engine_access: not_used_by_current_native_source_pass_no_docker_artifacts_created
     operator_wireguard: restored
     starfire_persona_permit_firewall: persistent_exact_gamecult_ops_6ee08a4
     yggdrasil: upgraded_intended_swarm_host_deployment_preparation_owned_by_separate_operator_agent
-    starfire: current_source_and_native_build_body
+    starfire: operator_workstation_and_source_checkout_not_cicd_build_body
     starfire_runtime_identity: epiphany-starfire
     starfire_swarm_brake: original_c011_quiescent_exited_255_f90_copied_proof_body_braked_and_stopped_exit_zero
     starfire_release: exact_465af24d_sha256_089e0005_historical_c011_not_running
@@ -80,7 +80,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
   unresolved_authority: The persisted/global thread aggregate, generic Mind gateway, aggregate role patch, partial decision-context binding checks, writable old-epoch path, external generic Mind mutation mouth, Persona aggregate memory writer, direct Persona prompt ingress, Persona re-entry reformulation path, bootstrap-only semantic obligation, caller-authored provider store, generic reorientation-failure admission, and subset-only Modeling semantic basis checks are gone. Native/provider request equality is internally derived; runtime execution and context sealing share exact model/tool binding owners; model-backed failures have one shared context-bound terminal record and session-closure primitive; current Modeling semantic work derives from the complete exact keyed basis and is full-snapshot fenced against namespace phantoms. Keyed graph, Verification, concrete Persona+Hands concurrency, sealed Persona input, source-level restart/re-entry, keyed semantic regeneration, and a live transcript-free provider-failure replay are accepted. Positive provider-backed package cognition remains open because the local packaged runtime still lacks an authorized provider path. Model Atlas Gate 1 remains paused. Historical c011 and partial Gate roots stay untouched/read-only. Yggdrasil deployment preparation is owned by another agent and is not evidence for or against this source cut.
-  next_action: Commit and push the fully native-accepted worktree, then package that exact clean source natively on F:. Run a new fresh-store positive Decision-Auditable Concurrent Mind capstone through Persona, Body-Modeling-Mind, optional explicit Eyes evidence, Hands-Verification-Mind, context-ID audit, and restart. Add only the narrow packaged audit enumeration and fresh Persona mouth trust anchor required to make that capstone operator-reproducible; do not invent a generic harness or transplant historical proof authority. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, transcript authority, role-specific provider exception, synthetic semantic head, or shipped proof-only binary.
+  next_action: Observe Idunn on upgraded Yggdrasil ingest pushed source f5edfc9d, then require its exact compile, test, package, deployment, and service-health receipts. Starfire must not run a parallel package build. After Idunn admits the release, run the fresh-store positive Decision-Auditable Concurrent Mind capstone through Persona, Body-Modeling-Mind, optional explicit Eyes evidence, Hands-Verification-Mind, context-ID audit, and restart. Add only the narrow packaged audit enumeration and fresh Persona mouth trust anchor required to make that capstone operator-reproducible; do not invent a generic harness or transplant historical proof authority. Do not add a compatibility aggregate, generic mutation registry, dual reader, schema migrator, transcript authority, role-specific provider exception, synthetic semantic head, or shipped proof-only binary.
 
 active_subgoals:
   - Complete the fresh exact-package Decision-Auditable Concurrent Mind capstone before any further operational Gate run.
@@ -88,7 +88,7 @@ active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
   - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.
   - Bound artifact retention and prove supervised restart, crash recovery, session closure, and long-duration resource behavior.
-  - Keep this source/package pass native on F:. Let the separate deployment task establish the upgraded Yggdrasil swarm body without racing it from this worktree.
+  - Keep source editing on F:. Idunn on upgraded Yggdrasil owns source-triggered compilation, testing, packaging, deployment, and daemon survival; do not duplicate that work on Starfire.
 
 organ_readiness:
   model_atlas: code-complete and locally verified; ordinary Modeling uses runtime-authored proposal v2, authenticated Body-manifest evidence, derived opaque IDs, and exact CAS. Publishers revalidate Body evidence; signed transport, deterministic enriched projection, one Eve tree, local impact admission, Resident Self lane pressure, brakes, partition staleness, cycle policy, and no-Hands boundary pass. Real ordered Starfire Gate 1 and sustained dogfood remain open.