From edfa1dab8b9d66793b8cc2c974bddf331df470a4 Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Tue, 18 Aug 2026 00:36:44 +0200 Subject: [PATCH] Record keyed Research Mind migration --- notes/epiphany-current-algorithmic-map.md | 50 +++++++++++++++++++++ notes/epiphany-fork-implementation-plan.md | 15 +++++-- notes/fresh-workspace-handoff.md | 35 +++++++++++---- state/ledgers.msgpack | Bin 629181 -> 630071 bytes state/map.yaml | 12 ++--- 5 files changed, 95 insertions(+), 17 deletions(-) diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 9426c31c..962315db 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -5047,3 +5047,53 @@ strong state. The focused lifecycle proves deterministic two-launch convergence, sealed context, terminal result, review, admission, disjoint merge, and byte-identical stale refusal. Core library 561/561, OpenAI runtime 43/43, Self policy 26/26, and coordinator runtime 18/18 pass. + +## Keyed frontier Research lifecycle (2026-08-18) + +Exact `c7412998` removes Research from the aggregate coordinator state machine. +The immutable v3 `RepoFrontierResearchRequest` seals the exact current frontier +document and its dependency closure. The complete keyed RepoModel view remains +inside the reasoning projection as audit cargo, but it is not a global strong +read and unrelated graph changes cannot stale the pass. + +- Owner: `project_current_work` derives the exact Research continuation; + `launch_current_frontier_research_work` publishes its deterministic attempt; + `accept_frontier_research_result` alone admits its decision under + `Eyes.frontier_research`. +- Inputs: one explicit external-evidence frontier, its exact dependency document + versions, immutable request and launch, terminal runtime result, sealed + reasoning basis and decision context, and exact governed public-source + receipts actually supplied to the model. +- Outputs: separate keyed evidence, observation, and optional investigation + checkpoint documents; one request/context-bound `EyesEvidencePacket`; and one + atomic `EpiphanyMindCommitReceipt`. +- Derived state: accepted-at timestamps, role boards, latest-result slots, + events, generic Research status, and coordinator thread are display or + transport projections only. +- Forbidden writers: generic `roleAccept`, aggregate thread-state mutation, + CRRC regather, Modeling regather hints, accepted Eyes state, and a stale role + lane cannot create, suppress, review, retry, or admit Research. Eyes acceptance + cannot create or gate Modeling work. +- Shared paths: operator and Resident consume the same exact current-work + lifecycle. Runtime fulfillment and archival use the same typed Research + request reference as live review. +- Cut line: Research has no aggregate launch or acceptance fallback. The old + accepted/failure/timestamp routing branches are deleted; a missing explicit + external-evidence obligation cannot be repaired into Eyes work. +- Verification: the complete decision remains durable if its strong frontier + changes after inference, but admission refuses byte-identically and never + reinterprets the output. A disjoint keyed RepoModel change merges; an exact + frontier change conflicts. Exact replay returns the original commit, archived + fulfillment requires that commit, and accepted Eyes produces no Modeling + obligation. CultCache 42/42 active tests, core library 561/561, Self policy + 26/26, OpenAI runtime 43/43, coordinator runtime 18/18, and all-target core + compilation pass. + +The proof exposed a substrate-level encoding invariant. Compact positional +MessagePack is unsafe for nested structs whose middle optional fields are +omitted: later fields can occupy the wrong schema positions. CultCache exact +`ba6a487` adds `prepare_entry_named`, which retains the typed numeric-slot +`DatabaseEntry` envelope while encoding ordinary nested document fields as +named maps. `prepare_mind_document` is the single Mind boundary, and objective, +Body, and Research writers use it. This is an encoding owner, not a second state +format or compatibility path. diff --git a/notes/epiphany-fork-implementation-plan.md b/notes/epiphany-fork-implementation-plan.md index 8b0541bc..74965e29 100644 --- a/notes/epiphany-fork-implementation-plan.md +++ b/notes/epiphany-fork-implementation-plan.md @@ -239,14 +239,23 @@ Cut in this order: accepts disjoint keyed changes but refuses a changed strong frontier without mutation. Accepted Eyes timestamps, latest-result slots, aggregate prompt construction, and generic role lanes cannot create or suppress this work. - Migrate Research, Verification, planning, and reorientation next from +8. **Frontier Research landed at `c7412998`:** the v3 request seals the exact + frontier/dependency document closure, while the full RepoModel projection is + audit cargo only. One deterministic attempt, terminal decision context, + request-bound Eyes packet, and `Eyes.frontier_research` Mind mutation own + Launch/Wait/Review/admission. Stale terminal decisions remain durable, exact + strong-state changes refuse admission byte-identically, and disjoint keyed + writes merge. Accepted Eyes, role lanes, timestamps, generic regather, and + Modeling hints cannot launch Eyes or gate Modeling. CultCache `ba6a487` + supplies the shared named nested-document encoding boundary used by Mind. + Migrate Verification, planning, and reorientation next from aggregate state patches and generic role lanes to family-owned current-work projections, exact job identities, `MindMutation` plans, and exact commit receipts. Reuse pure invariant primitives, not a generic mutable registry. -8. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global +9. Delete `EpiphanyThreadStateEntry`, `coordinator_state_transaction`, global expected revisions, aggregate update APIs, and all source references from production. Refuse old writable stores; add no dual reader or migrator. -9. Replay fresh-store concurrency and decision-context acceptance. Only then +10. Replay fresh-store concurrency and decision-context acceptance. Only then restart Model Atlas Gate 1 from a new external root. Do not preserve the aggregate for compatibility, manufacture a bootstrap diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 38614efb..8aa91ddc 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -1,6 +1,6 @@ # Fresh workspace handoff -Updated: 2026-08-17 +Updated: 2026-08-18 ## Current state @@ -12,7 +12,7 @@ effects, receipts, Mind admission, brakes, external consequence gates, and terminal commit. Focused core and OpenAI-runtime Persona suites pass. The five-day shakedown remains paused. The active branch includes exact -`d367e525` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas +`c7412998` on `codex/epiphany-shakedown-live`: the keyed Mind foundation, federated Model Atlas vertical slice, ordinary Modeling authoring path, durable publisher identity, fresh seven-organ Mind bootstrap, and atomic RepoModel projection bootstrap are landed. Historical aggregate RepoModel and partial Gate stores are evidence @@ -22,9 +22,11 @@ or repair path can restore their authority. This is not yet the full Concurrent Mind cut. Persisted `EpiphanyThreadStateEntry`, its coordinator transaction, and multiple unmigrated launch/acceptance/status readers remain live production authorities. -Baseline Body, Proposal, and frontier-verdict Modeling are no longer among them: +Baseline Body, Proposal, frontier-verdict Modeling, and frontier Research are no longer among them: keyed Mind owns their work projections, operator and Resident launch, exact job-bound -continuation, review, and semantic admission. Fresh Gate +continuation, review, and semantic admission. Research is driven only by an explicit +external-evidence obligation; accepted Eyes state, timestamps, generic regather, and +role lanes cannot launch Eyes or gate Modeling. Fresh Gate preflight proved the consequence: both keyed semantic partitions reached ready, but status still called the organism missing because no thread aggregate existed. Model Atlas Gate 1 is therefore paused behind that deletion, not merely @@ -386,10 +388,27 @@ input only and cannot manufacture Modeling work. The aggregate telemetry prompt, accepted-at Research boundary, latest Verification selector, parallel authority MessagePack, and generic role-lane review path are gone for this family. -Map and migrate Research acceptance next onto its exact request/launch, -EyesEvidencePacket, decision context, and family-owned Mind commit. Continue -with Verification, -planning, and reorientation; then delete the aggregate schema/transaction. Run the source +Exact `c7412998` migrates frontier Research onto its v3 request, exact +frontier/dependency document closure, deterministic attempt, sealed reasoning basis and +decision context, request-bound `EyesEvidencePacket`, and +`Eyes.frontier_research` Mind commit. The complete RepoModel projection is immutable +audit cargo, not one global conflict head. A result may terminalize after its strong +frontier changes so the decision remains auditable; admission then refuses byte-identically +instead of rebasing the output. Disjoint keyed writes still merge. Research evidence, +observations, and optional checkpoints are separate Mind documents, and accepted Eyes +does not implicitly create Modeling work. The generic coordinator launch/acceptance and +Self lane/timestamp paths now refuse or ignore Research authority. + +The same pass exposed compact positional MessagePack as unsafe for nested structs with +omitted middle optionals. CultCache exact `ba6a487` adds named nested preparation; +Mind envelopes retain their typed numeric slots while nested document fields remain named. +Objective, Body, and Research Mind writers now share that boundary. + +Map and migrate Verification next onto its exact Hands consequence, request/launch, +terminal decision context, typed audit, Soul verdict, and family-owned Mind commit. Delete +generic role launch/acceptance, latest-result, accepted-at, and thread-state authority for +that family. Continue with planning and reorientation, then delete the aggregate +schema/transaction. Run the source guards and fresh-store concurrency/decision-context suite. Only after that may Model Atlas Gate 1 restart from a new external root. Keep the current fresh and partial roots read-only; do not release scheduling, register operational diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index 415393c3a0618afb210ba19dc016fa7fdaf4173a..a3ad1d11bcfcf7c19b4994d278a44a547584435e 100644 GIT binary patch delta 797 zcmZ9KL2DC16vy4xs4Ivd8W0s9h`~eCG}|;u+hfU55cTAx%+9Z?&c6Q$U-~avId^>5Ker>CIv(q6q6U#bt^H#TAOH6xU7{OYxKH=Hg4Tmh{_e!*+M@GD)i4 zU(5HZA8+I9^XS9qkZ})u(Ca3fn?uOu#4?W###SpY(ZX|d$Sj|N*C4%vavd!07wG&7 zV14-_wIk4=5~%nLoTvK}%4EW=04ZcB!p>d=`#$nK^IP`QXpu zxNu~giCnt6y#wi|Bta)BbJYDdFwW6<6ph+XH9U^*SFNM?;jRBBMN_Y$XN@NNWSDa( zen*>s$5C@=*Bm&B*9i`Gip=jYVgS8_%6M6ZK3qUBGSZOY8R51FnM^ISGuY^NI~3LK zyZBDEe;hZfkH_)dIT6dUwr6&N^g6-?B4lJ%Gd{y9Kf Q2E^<@%&~nc6Q{;>073&68vp Persona -> Interpreter loop now consumes Ghostlight's exact-revision generalized projection membrane, and the Persona receives only one lived narrative stream rather than parallel raw transcript, memory, mention, activity, or typed-state authorities. Epiphany retains stage receipts, effect validation, Mind admission, brakes, Bifrost consequence gates, and terminal commit. Cross-host request/receipt/permit organs, distinct identities, exact release admission, unique permit completion, signed failure/unknown receipts, and no-repost behavior are live. Exact Bifrost cb3239aa fixes positional permit bodies and binds the Discord bridge command receipt to the signed request. A completed public consequence remains unproven because Yggdrasil has no Discord bot credential. - self: partial; proposal recovery, Mind admission, current-model Hands routing, Soul lifecycle precedence, verdict incorporation, proposal preemption, challenge-aware Eyes routing, in-process status ownership, causal Research/Soul-to-Modeling routing, and grant-owned lifecycle projection are live. Exact d367e525 makes the Soul-to-Modeling route a deterministic typed current-work lifecycle and proves accepted Eyes alone cannot manufacture Modeling. Exact d4907ee8 proves first-attempt proposal Modeling fulfillment, exact grant terminalization, and one terminal downstream review whose receipt carries the post-transaction awaitFrontierProposal action without replay. - eyes: local and copied Linux source-gathering circuits are proven. Immutable GitHub identity, execution revalidation without a grant, frontier-owned continuation, and request-owned exact public-source coverage share typed owners. Exact 3d13b1ea rejects zero, partial, or unrequested public lookup sets. Exact c40aa286 shares terminal receipt validation across provider and Mind. Exact 40beb6a9 and 08383c6d make one Research lifecycle own launch/review projection across Self, status, and coordinator. Exact packaged f90f1186 completed two immutable public lookup and Mind-acceptance cycles, advanced authenticated tool receipts from 53 to 61, produced no Hands consequence, survived process turnover, and stopped braked with both daemons exiting zero. + self: partial; proposal recovery, Mind admission, current-model Hands routing, Soul lifecycle precedence, verdict incorporation, proposal preemption, explicit-obligation Eyes routing, in-process status ownership, causal Soul-to-Modeling routing, and grant-owned lifecycle projection are live. Exact c7412998 removes accepted Eyes, generic regather, role lanes, and Modeling hints from Research launch authority; the exact Research lifecycle alone drives Launch/Wait/Review, and accepted Eyes alone cannot manufacture Modeling. Exact d4907ee8 proves first-attempt proposal Modeling fulfillment, exact grant terminalization, and one terminal downstream review whose receipt carries the post-transaction awaitFrontierProposal action without replay. + eyes: local and copied Linux source-gathering circuits are proven. Immutable GitHub identity, execution revalidation without a grant, frontier-owned continuation, request-owned exact public-source coverage, sealed decision context, and keyed evidence/observation admission share typed owners. Exact c7412998 makes one Research lifecycle own launch, terminal decision durability, review, and Eyes.frontier_research admission; full RepoModel state is audit cargo while the exact frontier closure owns conflicts. Exact 3d13b1ea rejects zero, partial, or unrequested public lookup sets. Exact c40aa286 shares terminal receipt validation across provider and Mind. Exact packaged f90f1186 completed two immutable public lookup and Mind-acceptance cycles, advanced authenticated tool receipts from 53 to 61, produced no Hands consequence, survived process turnover, and stopped braked with both daemons exiting zero. modeling: proven for the current bounded Windows circuit, the causal Linux resident Eyes-to-Modeling route, governed live directory observation, typed resident grant sight, first-attempt proposal-frontier publication, and single-consumption coordinator review. Exact d367e525 proves the full frontier-verdict lifecycle from atomic Soul request through deterministic launch, sealed decision, disjoint keyed merge, same-frontier refusal, and Modeling.frontier_verdict admission. Exact d4907ee8 proves one outer proposal job, one terminal review, post-transaction awaitFrontierProposal publication, and no replay. Broader Body-map coverage remains open. imagination: proven for three bounded live circuits, exact packaged receipt-free settlement, and genuine packaged model-produced option generation. Exact acd91e6e accepted signed public feedback into one proposal-only request, derived all causal identity and quoted-evidence references from authenticated runtime context, atomically published worker result plus candidate companion, settled Self once without retry, and neither adopted the proposal nor granted Hands. The rejected b661ec4b copied run remains evidence that model-authored evidence identifiers were an illicit provenance mouth; its three failed attempts were braked and sealed. hands: proven for bounded consequences; native patch, command, commit, push, and typed receipts bind reviewed path ceilings to exact changed-path subsets.