Record test authority cut

notes/epiphany-current-algorithmic-map.md

@@ -1,7 +1,7 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-23
-Latest committed implementation cut: `63939fa2` on `codex/epiphany-shakedown-live`
+Latest committed implementation cut: `bf2f39eb` on `codex/epiphany-shakedown-live`
 Current worktree cut: canonical map/evidence sync; Ox17 remains paused
 
 This document describes the live machine. Historical cuts, rejected paths, and
@@ -115,6 +115,11 @@ private stage results. The Interpreter's closed effect enum, allowed-channel
 set, cardinality and size bounds, exact decision context, and Mind admission
 own consequence safety. Prompt-substring tests do not.
 
+Tests must falsify an owner or consequence. Exact `bf2f39eb` deletes an
+identical-call causal-ID tautology and a duplicate unknown-field check for an
+extinct generic patch. Exact family lifecycles and runtime-owned identity
+substitution remain the behavioral proofs.
+
 Persisted cluster topology is also gone. Its writer became dead when the
 callerless seed bundle was removed, while the supervisor merely accepted any
 nonempty subset of seven fixed keys as “bootstrap” without authenticating Body

notes/epiphany-fork-implementation-plan.md

@@ -224,7 +224,7 @@ Delete or demote:
 
 Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate
 1 paused. Continue the source-subtraction and test-authority audit from exact
-`63939fa2`. The current sequence has deleted the semantic-memory/workspace-coverage
+`bf2f39eb`. The current sequence has deleted the semantic-memory/workspace-coverage
 projection system, its local daemon supervisor, and the surviving generic
 RepoModel profile, impossible lifecycle, producerless receipt/summary, and
 decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state
@@ -532,6 +532,10 @@ Cut in this order:
    consequence. The tribunal, test-only prompt wrapper, prompt-substring test,
    and forbidden-word test are deleted; exact stage/context and typed-effect
    refusal tests remain.
+41. **Tests must falsify live behavior at `bf2f39eb`:** an identical-call
+   causal-ID tautology and a duplicate unknown-field check for extinct generic
+   patch cargo are deleted. Family lifecycle/admission and runtime-owned
+   identity-substitution checks retain the actual invariants.
 
 Do not preserve the aggregate for compatibility, manufacture a bootstrap
 thread, release autonomous scheduling, register topology in `gamecult-ops`,

notes/fresh-workspace-handoff.md

@@ -2,7 +2,7 @@
 
 Updated: 2026-08-23
 Branch: `codex/epiphany-shakedown-live`
-Latest committed implementation cut: `63939fa2`
+Latest committed implementation cut: `bf2f39eb`
 Current worktree: canonical map/evidence sync; Ox17 remains paused
 
 ## Orientation
@@ -73,6 +73,13 @@ words. Three-stage execution and replay, channel-escape refusal, substituted
 provider/model refusal, typed-effect validation, and all OpenAI-runtime targets
 pass.
 
+Exact `bf2f39eb` deletes two tests that could not falsify live behavior: one
+compared identical causal-ID calls and named the equality provenance
+independence; the other repeated generic unknown-field refusal for a field
+whose production path is already gone. Family lifecycle/admission tests still
+exercise exact request identity, and Body substitution still exercises strict
+ingress refusal. Core and OpenAI-runtime all-target checks pass.
+
 No Epiphany-owned Rider or Unity code, target, schema, or actuator exists.
 Brokkr owns Unity through Eve/CultMesh. A future Rider daemon owns Rider.
 Epiphany may consume their typed capabilities and receipts; it does not poke

state/map.yaml

@@ -61,6 +61,7 @@ current_status:
   runtime_registry_authority_cut: Exact 03140a47 deletes the 649-line epiphany-runtime-spine operator/debug CLI, its packaged release role, its callerless Hello/schema-catalog service facsimile, the 600-line hand-maintained mutation-contract mirror, and the source-shape test that guarded that mirror. CultCache exact fdbf3bf exposes its registered type identities, so runtime status and model preflight derive accepted documents from the same registration used to open the Mind store. Executable targets fall from 22 to 21 with zero duplicate source owners. Core checks without warnings and release construction passes 17/17. Editor actuation remains entirely provider-owned: Brokkr owns Unity through CultMesh/Eve and a future Rider daemon owns Rider.
   coordinator_status_cut: Exact 500125d5 deletes the unconsumed packaged epiphany-mvp-status executable. Its live projection and operator-sanitization functions move from a binary source textually included by the coordinator into one epiphany-core module. The dead CLI parser, default store, result-file writer, release role, and redundant release assertion are gone. Cargo has 20 executable targets and zero duplicate binary-source owners; the release-owned coordinator checks, the operator thought-sealing test passes, and release construction remains 17/17.
   persona_language_tribunal_cut: Exact 63939fa2 deletes Persona's keyword-based projector-output tribunal, its test-only no-transcript prompt wrapper, and two tests that blessed prompt phrases and forbidden words rather than a consequence. Projector and Persona outputs remain inert private cognition sealed into exact stage contexts. Only the Interpreter's closed typed effect enum can propose state or speech; its channel, cardinality, size, schema, and exact-context validation remain. The three-stage execution/replay, channel-escape refusal, substituted provider/model refusal, retained typed-effect validation, and OpenAI-runtime all-target checks pass.
+  test_authority_cut: Exact bf2f39eb deletes a causal-ID test that compared identical calls and mislabeled the equality provenance independence, plus a duplicate unknown-field test for an already deleted generic patch field. Exact keyed request identities remain exercised through family lifecycle and admission tests; strict ingress unknown-field refusal remains exercised by runtime-owned Body identity substitution. Core and OpenAI-runtime all-target checks pass.
   bifrost_authority_cut: Exact 203bcc41 deletes Epiphany's producerless Bifrost body-change/GitHub publication family: four document types, three singleton latest heads, constructors, validators, writers, local-Verse advertisement/projection, public exports, and five tests that manufactured both ends. Bifrost owns the real Persona feedback/delivery stores and signed crossing receipts; Epiphany does not publish an alternate Bifrost protocol. Core and release-bundle checks pass; the remaining CultMesh suite passes 13/13.
   hands_pr_authority_cut: Exact 11d99de1 deletes the producerless HandsPrReceipt type, registration, dead test-only writer, read path, exports, relinquishment branch, and two contract advertisements. Hands owns local patch, command, and commit consequences; exact remote publication evidence belongs to the provider/Bifrost crossing. Core and release-bundle checks pass, and the rebuilt 43-entry schema catalog contains no deleted PR family.
   local_verse_contract_cut: Exact a4af4734 deletes six organ-specific contract DTO/factories, the callerless LocalVerseContext query/seed bundle, fixed Verse/room policy prose, the mind-contract self-test, and persisted cluster topology. The topology writer had no caller; supervision accepted any nonempty fixed-key subset without authenticating Body domain, completeness, or runtime binding. That false bootstrap gate, loader, exports, and its diagnostic test are gone. Exact 03140a47 later deletes the remaining standalone runtime contract mirror; live providers own their CultMesh/CultNet catalogs. Exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health remain supervisor prerequisites. The cut removes 1,005 net source lines; core/release checks, CultMesh 12/12, and supervisor 4/4 pass.
@@ -111,7 +112,7 @@ current_status:
     yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
   unresolved_authority: Generic command, legacy lineage, caller-authored identity, behaviorless policy fields, global lifecycle latest state, timestamp election, Windows Task Scheduler authority, and their false proofs are gone. Semantic and workspace launch owners are separate over shared process mechanics. The remaining daemon supervisor still combines the service loop, aggregate signed-health publication, semantic reconciliation, and the large workspace recovery state machine. Continue decomposing only where ownership becomes smaller; do not create family frameworks or adapters. The false persisted cluster-topology bootstrap sentinel is gone; supervisor admission remains bound to exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Continue the source/test-authority audit after exact 63939fa2. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, status CLI, editor bridge, or keyword tribunal over natural language. Do not run a local full-workspace compile, package, deployment, or Ox root.
+  next_action: Continue the source/test-authority audit after exact bf2f39eb. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, status CLI, editor bridge, keyword tribunal over natural language, or tautological test. Do not run a local full-workspace compile, package, deployment, or Ox root.
 
   runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains.