Close aggregate Verse reader audit

notes/epiphany-current-algorithmic-map.md

@@ -3695,3 +3695,7 @@ owns post-write confirmation. Two aggregate queries and the obsolete
 context-shaped brake/topology wrappers are deleted. Bulk poke and triage remain
 aggregate enumeration paths. The complete 19-test verse-query binary suite
 passes without warnings.
+
+The full classified batch then passed 669 library tests with one intentional
+ignore, 29 daemon-supervisor tests, and 19 verse-query tests. Detached logs and
+exit-zero status live under `.epiphany-run/narrow-verse-readers-161c6ec8`.

notes/fresh-workspace-handoff.md

@@ -30,6 +30,11 @@ now-dead context wrappers are deleted. Bulk poke, triage, and operator reports
 retain aggregate reads because they enumerate daemon state. All 19 verse-query
 tests pass with zero warnings.
 
+The complete batch verification is green: 669 library tests passed with one
+intentional ignore, 29 daemon-supervisor tests passed, and all 19 verse-query
+tests passed. Cargo emitted no warnings. Detached receipts are under
+`.epiphany-run/narrow-verse-readers-161c6ec8`.
+
 ## Actual receipt-bound turnover accepted - 2026-08-11
 
 Exact pushed `c9a2a979` is now the active actual c006 body. Under a bounded

notes/perfect-machine-audit-roadmap.md

@@ -72,27 +72,39 @@ at revision 34, protected consequence families stayed byte-identical, and the
 cognitive brake was re-engaged. Receipts:
 `.epiphany-run/c006-continuation-c9a2a979`.
 
-## Active rite
+## Completed narrow local Verse consumer audit
 
-### Narrow local Verse consumers
+Lifecycle and single-target commands read only the state families that own
+their decisions. Managed-task install/control, generic service-runbook
+construction, and repo-work service audit read only the canonical brake.
+Single-daemon restart-policy writing reads exact daemon status. Direct
+reconciliation reads exact status, exact policy, and brake. Single-target
+`poke-daemon` reads exact status, brake, topology-family display metadata, and
+its exact written intent.
 
-Lifecycle commands may read only the state family that owns their decision.
-Managed-task install/control, service-runbook construction, and repo-work
-service audit now load only the canonical swarm brake instead of the whole
-local Verse. Cluster reconciliation retains broader context only where it
-actually enumerates daemon rows. Continue classifying remaining
-`query_epiphany_local_verse_context` production callers by output ownership;
-do not replace a legitimate aggregate projection with a pile of ad hoc reads.
+Every surviving production aggregate context read has an aggregate output:
+
+| Consumer | Why the aggregate is owned |
+|---|---|
+| coordinator launch context | assembles the bounded multi-organ prompt packet |
+| supervisor scheduler tick | enumerates restart policies, daemon statuses, and brake scope |
+| cluster daemon runbook | enumerates topology and matching status rows |
+| `seed` and `query` | explicitly emit the complete local Verse projection |
+| receipt directory | joins several receipt families into one operator report |
+| bulk poke and swarm triage | enumerate non-ready daemons and topology |
+| quarantined smokes/tests | falsify the aggregate projection itself without production authority |
+
+No remaining single-family decision reads the full context. Do not decompose
+these legitimate aggregates into ad hoc query piles.
 
 ## Selected next bounded cut
 
-Finish classifying production whole-Verse readers by the state families they
-actually own. Aggregate operator projections, cluster reconciliation, and
-commands that genuinely enumerate topology may retain the complete context.
-Single-daemon policy writes and lifecycle gates must use exact daemon-status
-and brake loaders instead of reading unrelated Persona, Hands, receipt, and
-telemetry families. Cut one owner at a time with source-order negatives; do not
-replace a legitimate aggregate with a collection of accidental queries.
+Run the full affected Rust suites, commit the classified source batch, package
+one exact Linux release through the persistent Starfire cache, and exercise the
+narrow loaders against copied state. The live gate is read isolation: adding
+unrelated hostile or malformed state families must not change policy,
+reconciliation, or single-target poke decisions. Actual c006 remains braked
+until the copied gate passes.
 
 ## Completion standard
 

state/map.yaml

@@ -36,7 +36,7 @@ invariants:
 
 current_status:
   summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Exact b8138a6b active-child SIGTERM and restart, exact 9f369528 deterministic warm packaging, exact c930f505 cross-container ownership, exact ed15f83a resident lifecycle retention, exact 16c4b19f coordinator receipt and Heartbeat artifact retention, exact cce2b8ac narrow model-generation retention, exact eea15e82 model-turn JSON ingress, exact b1e8c89a semantic unattempted-generation retention, exact 6bc3ec3f semantic physical-epoch retirement, and exact 44230a05 Persona conversation retention are proven. Gamecult-ops 059821f owns Yggdrasil stream retention and exact 6ee08a4 owns stable Starfire Persona-permit firewall ingress. Exact 16c4b19f genuine idle and exact a987d2f7 active cognition completed 900-pulse bounded plateaus. Runtime-owned typed fulfillment is accepted live under exact 6dd9b132. Yggdrasil is the small public crossing body, never the release forge.
-  latest_phase: Exact c9a2a979 is live and braked on actual c006 after accepted two-grant receipt-bound turnover at resident revision 34. The nervous-system source audit has narrowed restart-policy writing, direct single-daemon reconciliation, and single-target Verse poke to exact status/policy/brake/intent families. Aggregate scheduler, runbook, bulk poke, triage, and report paths retain context because they enumerate multiple owners. Focused tests and all 19 verse-query tests pass without warnings.
+  latest_phase: Exact c9a2a979 is live and braked on actual c006 after accepted two-grant receipt-bound turnover at resident revision 34. The nervous-system source audit has narrowed restart-policy writing, direct single-daemon reconciliation, and single-target Verse poke to exact status/policy/brake/intent families. All surviving aggregate readers own explicit multi-family projections. The complete batch passes 669 library tests with one intentional ignore, 29 supervisor tests, and 19 verse-query tests without warnings.
   operational_state:
     local_worktree: exact_c9a2a979_actual_internal_turnover_accepted_next_organ_audit
     operator_wireguard: restored
@@ -70,7 +70,7 @@ current_status:
     yggdrasil_epiphany_service_contract: repaired_in_gamecult_ops_812b427_not_installed
     resident_physiology: c006_exact_c9a2a979_alive_braked_revision_34_after_two_receipt_bound_continuation_grants
   unresolved_authority: Coordinator receipt, Heartbeat pulse-artifact, genuine-idle and active resource plateaus, exact-grant terminality, restart-persistent cooldown refusal, schedule/action issuance cardinality, runtime-owned typed fulfillment, all three packaged fulfilled-before-receipt lanes, narrow model-generation retention, published model-turn JSON ingress, semantic logical/physical retention, Persona conversation retention, stable Starfire firewall ownership, completed model-adapter session archival, normal coordinator lifecycle opening/error closure/legacy repair/archival, co-resident resident lifecycle retention, authenticated outer-worker attempt retention, deployed supervisor/projector journald ownership, and Docker named-volume atomic snapshot visibility are accepted live. Starfire's Docker Desktop F: bind is rejected for mutable authority after an exact packaged lockless reader observed an empty published snapshot during writer interruption. Historical migrated semantic attempts without recorded physical namespace remain durable and non-retirable. One completed Discord consequence remains blocked by the absent Yggdrasil credential.
-  next_action: Keep actual c006 exact c9a2a979 alive under its cognitive brake. Continue classifying the remaining production `query_epiphany_local_verse_context` callers outside the supervisor and single-target poke. Preserve genuine prompt/report/topology aggregation; cut single-family decision or post-write confirmation paths one owner at a time. Package only after this bounded nervous-system batch closes. Yggdrasil never builds.
+  next_action: Keep actual c006 exact c9a2a979 alive under its cognitive brake. Commit/push the completed narrow local-Verse reader audit, then package one exact Linux release through the persistent Starfire cache. On copied state, prove unrelated hostile state families cannot change policy, direct reconciliation, or single-target poke decisions before considering actual replacement. Yggdrasil never builds.
 
 active_subgoals:
   - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.

state/scratch.md

@@ -4,8 +4,8 @@ Disposable working memory for one bounded rite.
 
 ## Current Subgoal
 
-Classify the remaining production aggregate local-Verse readers outside the
-completed supervisor and single-target poke cuts.
+Verify, publish, package, and copied-state falsify the completed narrow
+local-Verse reader batch.
 
 ## Accepted actual finding
 
@@ -15,21 +15,19 @@ refused stale action with no consequence. Resident state is idle at revision
 34, protected consequence families are byte-identical, readiness is active,
 and the cognitive brake is engaged.
 
-## Authority map for remaining classification
+## Authority map for batch verification
 
-- Owner: each command's output contract decides whether one typed family or an
-  aggregate projection is legitimate.
-- Inputs: remaining production aggregate-query callers and their actual output
-  fields.
-- Outputs: a keep/cut classification, followed by one bounded owner cut when
-  justified.
-- Derived state: aggregate context is legitimate for prompts, operator reports,
-  and multi-daemon topology enumeration only.
-- Forbidden writers: convenience and post-write reassurance cannot justify
-  unrelated state-family reads.
-- Shared paths: single-target and bulk commands must remain distinct where
-  their information needs differ.
-- Cut line: delete context-shaped wrappers after their last legitimate caller
-  disappears.
-- Verification: source negatives for narrowed commands and complete affected
-  binary suites without warnings.
+- Owner: exact typed family loaders own single-target decisions; aggregate
+  context owns only explicit multi-family projections.
+- Inputs: exact status/policy/brake/topology/intent rows and unrelated hostile
+  envelopes in copied state.
+- Outputs: unchanged single-target decisions and receipts despite unrelated
+  state-family variation.
+- Derived state: aggregate reports are sight, not mutation authority.
+- Forbidden writers: hostile Persona, Hands, receipt, or telemetry envelopes
+  cannot influence the narrowed commands.
+- Shared paths: source unit tests, exact packaged binaries, and copied-state
+  probes must exercise the same loaders.
+- Cut line: no actual c006 body replacement before copied read-isolation proof.
+- Verification: full library/supervisor/verse-query suites, exact package
+  authentication, then before/after copied-state decision equality.