diff --git a/notes/epiphany-current-algorithmic-map.md b/notes/epiphany-current-algorithmic-map.md index 35b2602e..575b5db0 100644 --- a/notes/epiphany-current-algorithmic-map.md +++ b/notes/epiphany-current-algorithmic-map.md @@ -335,6 +335,13 @@ interface authority. | Brokkr / editor providers | provider-owned editor capability documents and exact receipts | typed CultMesh/Eve observations and governed actuation results | Epiphany does not own Unity or Rider bridges. Brokkr owns Unity; a future Rider daemon owns Rider. | | CultMesh/Eve | typed provider-owned documents and deterministic views | private/local/public projections | Visibility and rendering never create authority. | +Exact `40d00bc5` removes Self's parallel planning-eligibility tableau. Its +detailed candidate blocker fields had no reader; the only consumer reduced the +projection to whether one current Imagination frontier was actionable. Hands +and Imagination now use the same pure frontier predicate with an explicit +unchallenged-target requirement. No diagnostic DTO is allowed to become a +second routing algorithm merely because it can explain the first one. + External lifecycle boundary: Idunn remains available when Epiphany is missing, failed, or braked. Epiphany's swarm brake is an input only to an Idunn transaction that changes Epiphany's deployed body; it cannot gate Idunn startup, diff --git a/notes/fresh-workspace-handoff.md b/notes/fresh-workspace-handoff.md index 832cfbd7..7d11c782 100644 --- a/notes/fresh-workspace-handoff.md +++ b/notes/fresh-workspace-handoff.md @@ -1128,6 +1128,25 @@ retention helpers. Preserve immutable identity, exact job/session terminality, decision audit, model/tool binding, atomic Hands-to-Verification admission, conflict/replay, and retention fences that prevent authority resurrection. +Exact `1fea7bde` completes that immediate reader cut: the timestamp-selected +Hands-chain query and its selector are gone, and the summary is private cargo +used only while the commit owner derives its exact Verification request. Exact +`40d00bc5` then removes the detailed planning-eligibility tableau, its two DTOs, +and two public APIs. No consumer read its per-candidate blocker fields; Self +reduced the entire projection to a boolean already owned by the shared +actionable-frontier predicate. Hands and Imagination both still require +unchallenged target claims. The focused keyed lifecycle proof passes. The +runtime spine now has 10,820 lines, 70 public functions, and 29 public structs. + +The next suspected false surface is the user/Persona/Bifrost proposal source +family. `RepoFrontierUserProposalInput`, its writer, and its selector are called +only by the broad current-work test; production proposals are promoted from an +exact Imagination direction result. Do not amputate the test blindly: it also +proves downstream proposal admission, Hands-to-Verification atomicity, and +concurrent Persona/Hands writes. A coherent cut must rebuild that verifier from +live Imagination provenance or replace it with smaller consequence-level +proofs, not introduce a test-only authority bypass. + ## Competitive Eyes/Imagination pass `notes/munder-difflin-launch-intelligence-2026-08-23.md` distills the diff --git a/state/ledgers.msgpack b/state/ledgers.msgpack index d5ba9572..bf427019 100644 Binary files a/state/ledgers.msgpack and b/state/ledgers.msgpack differ diff --git a/state/map.yaml b/state/map.yaml index a9013667..f6d97f3b 100644 --- a/state/map.yaml +++ b/state/map.yaml @@ -115,9 +115,9 @@ current_status: yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255 unresolved_authority: The local daemon-supervisor, semantic projector, workspace-coverage projector, generic event authority, Rider/Unity editor organs, and their false proofs are gone. `runtime_spine.rs` remains the largest central liability at 10,990 lines and still mixes immutable identity, sessions/jobs, process claims, model/tool execution binding, family request admission, consequence receipts, retention, and operator status. Continue splitting only by deleting callerless or duplicate authority; do not create family frameworks or adapters. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Its Discord delivery path is a real consumer of Epiphany's short-lived request-bound permit signature, so the distinct permit identity/process is retained as an earned privilege boundary; current Ygg deployment doctrine still points that crossing at the old Starfire endpoint and installs no issuer unit, which the Idunn lane must repair before Persona consequence readiness. Historical c011 and partial Gate roots stay untouched/read-only. - next_action: Continue the runtime-spine audit after exact 25d4d1fa. Delete the last callerless Hands receipt-chain reader and demote its private summary cargo, then audit single-caller archive/status/retention helpers against anti-resurrection and operator-sight consequences. Preserve immutable runtime identity, exact job/session terminality, decision contexts and failures, model/tool bindings and receipts, atomic Hands-to-Verification admission, conflict/replay, and retention fences. Do not run a local full-workspace compile, package, deployment, or Ox root. + next_action: Continue the runtime-spine/test-authority audit after exact 40d00bc5. Trace the test-only user-proposal intake and four-variant proposal source-kind surface against the sole live Imagination promotion owner. Do not delete the broad downstream proposal/Hands concurrency proof or add a test-only authority bypass; either rebuild that proof from live Imagination provenance or retain it until a smaller verifier exists. Also demote individually exported archive actuators that are consumed only by their retention owners. Preserve immutable runtime identity, exact job/session terminality, decision contexts and failures, model/tool bindings and receipts, atomic Hands-to-Verification admission, conflict/replay, and retention fences. Do not run a local full-workspace compile, package, deployment, or Ox root. - runtime_spine_surface_cut: Exact 25d4d1fa deletes twenty-four callerless public runtime readers, mutation wrappers, status projections, their exports, and the tool-invocation status DTO. It also deletes the entirely unconsumed Hands route-relinquishment writer, refusal receipt, Mind relinquishment receipt, schema registration, and validation branch. The live consequence owner remains intent/review/grant plus exact patch, command, and commit receipts; commit admission atomically creates the keyed Verification request. The cut removes 800 source lines, adds no replacement, leaves 73 public functions and 30 public structs in the 10,990-line spine, compiles without warnings, and passes the focused keyed lifecycle proof including concurrent Persona and Hands commits. + runtime_spine_surface_cut: Exact 25d4d1fa deletes twenty-four callerless public runtime readers, mutation wrappers, status projections, their exports, and the tool-invocation status DTO. It also deletes the entirely unconsumed Hands route-relinquishment writer, refusal receipt, Mind relinquishment receipt, schema registration, and validation branch. Exact 1fea7bde deletes the final callerless Hands-chain timestamp reader and demotes the chain summary to private commit cargo: 77 more lines. Exact 40d00bc5 deletes the unconsumed detailed planning-eligibility tableau, its two DTOs, and its two public APIs; Hands and Imagination now share the existing actionable-frontier predicate with the same unchallenged-target rule. The live consequence owner remains intent/review/grant plus exact patch, command, and commit receipts; commit admission atomically creates the keyed Verification request. Across these three cuts the spine loses 997 net source lines and falls to 10,820 lines, 70 public functions, and 29 public structs. Core compiles without warnings, and the focused keyed lifecycle proof passes including concurrent Persona and Hands commits. runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains. diff --git a/state/scratch.md b/state/scratch.md index e6b31390..d09baffe 100644 --- a/state/scratch.md +++ b/state/scratch.md @@ -122,8 +122,18 @@ and janitors may reduce the symptom but cannot substitute for deleting code. the wholly unconsumed Hands route-relinquishment lifecycle: 800 source lines with no replacement. The surviving keyed lifecycle still proves atomic Hands-to-Verification admission and concurrent Persona/Hands writes. -20. Next: delete the last callerless Hands receipt-chain reader, demote its - private summary cargo, then audit single-caller archive/status/retention - helpers against anti-resurrection and operator-sight consequences. -21. Run focused tests after each cut. Only after source subtraction stabilizes +20. Done: exact `1fea7bde` deletes the last callerless Hands receipt-chain + reader and timestamp selector, then demotes the summary to private atomic- + commit cargo: 77 lines. +21. Done: exact `40d00bc5` collapses the 100-line planning-eligibility tableau + and its two DTOs onto the shared actionable-frontier predicate. Hands and + Imagination retain the same unchallenged-target rule; the keyed lifecycle + proof passes. +22. Next: trace the test-only user-proposal intake and four-variant proposal + source-kind surface against the sole live Imagination promotion owner. Do + not delete the broad downstream concurrency proof or add a test-only + authority bypass; rebuild it from live provenance or first find a smaller + verifier. Demote individually exported archive actuators owned only by the + retention loops. +23. Run focused tests after each cut. Only after source subtraction stabilizes should Idunn's build scratch contract be reconsidered.