Record tool completion projection cut

notes/epiphany-current-algorithmic-map.md

@@ -1,7 +1,7 @@
 # Epiphany current algorithmic map
 
 Updated: 2026-08-23
-Latest committed implementation cut: `ce90f911` on `codex/epiphany-shakedown-live`
+Latest committed implementation cut: `0bb6a883` on `codex/epiphany-shakedown-live`
 Current worktree cut: canonical map/evidence sync; Ox17 remains paused
 
 This document describes the live machine. Historical cuts, rejected paths, and
@@ -145,6 +145,11 @@ Exact `ce90f911` deletes the callerless `smoke` route, fake request/tool-call/
 completion sequence, `smoke_no_network` receipt, parser, options, and usage
 claim. The retained commands execute or audit real typed model work.
 
+Tool execution stdout is a completion projection, not a schema catalogue or
+authority mirror. Exact `0bb6a883` removes the fixed adapter/schema fields and
+the caller-supplied store echo. The typed CultCache receipt remains canonical;
+stdout carries only intent ID, receipt ID, and terminal status.
+
 Persisted cluster topology is also gone. Its writer became dead when the
 callerless seed bundle was removed, while the supervisor merely accepted any
 nonempty subset of seven fixed keys as “bootstrap” without authenticating Body

notes/epiphany-fork-implementation-plan.md

@@ -224,7 +224,7 @@ Delete or demote:
 
 Keep the five-day shakedown, Ox17 deployment, and Model Atlas operational Gate
 1 paused. Continue the source-subtraction and test-authority audit from exact
-`ce90f911`. The current sequence has deleted the semantic-memory/workspace-coverage
+`0bb6a883`. The current sequence has deleted the semantic-memory/workspace-coverage
 projection system, its local daemon supervisor, and the surviving generic
 RepoModel profile, impossible lifecycle, producerless receipt/summary, and
 decorative scoring axes. Modeling consumes typed Body and keyed RepoModel state
@@ -553,6 +553,10 @@ Cut in this order:
    it wrote synthetic request, tool-call, completion, and receipt documents into
    a writable runtime store. Real execution and transcript-free decision audit
    remain, and the release-owned model-runtime suite passes 12/12.
+46. **Tool completion does not mirror static contracts at `0bb6a883`:** the
+   run summary loses its fixed adapter/schema catalogue and caller-supplied
+   store echo. Exact authority remains the typed receipt; stdout returns only
+   intent ID, receipt ID, and terminal status.
 
 Do not preserve the aggregate for compatibility, manufacture a bootstrap
 thread, release autonomous scheduling, register topology in `gamecult-ops`,

notes/fresh-workspace-handoff.md

@@ -2,7 +2,7 @@
 
 Updated: 2026-08-23
 Branch: `codex/epiphany-shakedown-live`
-Latest committed implementation cut: `ce90f911`
+Latest committed implementation cut: `0bb6a883`
 Current worktree: canonical map/evidence sync; Ox17 remains paused
 
 ## Orientation
@@ -109,6 +109,12 @@ authentic-looking physiology without provider evidence. The real model-turn,
 worker, follow-up, decision-list, and decision-audit commands remain; their
 release-owned suite passes 12/12.
 
+Exact `0bb6a883` narrows tool-runtime stdout to intent ID, receipt ID, and
+terminal status. The removed adapter ID, caller-supplied store path, and static
+intent/receipt schema map were display echoes; the model runtime did not read
+them and exact authority already lives in the typed CultCache receipt. The four
+release-owned tool-runtime tests remain green.
+
 No Epiphany-owned Rider or Unity code, target, schema, or actuator exists.
 Brokkr owns Unity through Eve/CultMesh. A future Rider daemon owns Rider.
 Epiphany may consume their typed capabilities and receipts; it does not poke
@@ -548,7 +554,7 @@ coordinator `12/12`, swarm `10/10`, and model-runtime `13/13`.
 ## Immediate next action
 
 The Ox17 deployment lane is paused. Continue the source/test-authority audit
-from exact `ce90f911`; do not compile or deploy through Idunn yet. Inspect the
+from exact `0bb6a883`; do not compile or deploy through Idunn yet. Inspect the
 remaining production modules and tests by owner, consumer, invariant, and
 failure mode. Delete an abstraction with the tests that merely animate it when
 it has no decision-bearing consumer. Preserve the keyed Mind, sealed reasoning,

state/map.yaml

@@ -62,7 +62,7 @@ current_status:
   coordinator_status_cut: Exact 500125d5 deletes the unconsumed packaged epiphany-mvp-status executable. Its live projection and operator-sanitization functions move from a binary source textually included by the coordinator into one epiphany-core module. The dead CLI parser, default store, result-file writer, release role, and redundant release assertion are gone. Cargo has 20 executable targets and zero duplicate binary-source owners; the release-owned coordinator checks, the operator thought-sealing test passes, and release construction remains 17/17.
   persona_language_tribunal_cut: Exact 63939fa2 deletes Persona's keyword-based projector-output tribunal, its test-only no-transcript prompt wrapper, and two tests that blessed prompt phrases and forbidden words rather than a consequence. Projector and Persona outputs remain inert private cognition sealed into exact stage contexts. Only the Interpreter's closed typed effect enum can propose state or speech; its channel, cardinality, size, schema, and exact-context validation remain. The three-stage execution/replay, channel-escape refusal, substituted provider/model refusal, retained typed-effect validation, and OpenAI-runtime all-target checks pass.
   test_authority_cut: Exact bf2f39eb deletes a causal-ID test that compared identical calls and mislabeled the equality provenance independence, plus a duplicate unknown-field test for an already deleted generic patch field. Exact 104bf390 deletes the tool runtime's duplicate immutable-GitHub identity test and a permanently ignored live-network probe pinned to historical README prose. Exact keyed request identities remain exercised through family lifecycle and admission tests; strict ingress unknown-field refusal remains exercised by runtime-owned Body identity substitution; immutable GitHub parsing remains tested once in epiphany-core. Core, OpenAI-runtime, and tool-MCP all-target checks pass for their respective cuts.
-  tool_runtime_status_cut: Exact 777dd1a5 deletes the callerless epiphany-tool-mcp-runtime smoke command, its fixed JSON self-description, parser branch, and self-affirming branding test. Signed daemon health owns liveness; typed invocation intents and exact receipts own tool execution. With one live command remaining, the one-variant CLI enum collapses into a direct run parser. The four retained release-owned tests pass and exercise typed execution, receipt persistence, Resident-state binding, and unbound refusal.
+  tool_runtime_status_cut: Exact 777dd1a5 deletes the callerless epiphany-tool-mcp-runtime smoke command, its fixed JSON self-description, parser branch, and self-affirming branding test. Exact 0bb6a883 removes the run summary's fixed adapter/schema catalogue and caller-supplied store echo; stdout now carries only intent ID, receipt ID, and terminal status. Signed daemon health owns liveness; typed invocation intents and exact receipts own tool execution. With one live command remaining, the one-variant CLI enum collapses into a direct run parser. The four retained release-owned tests pass and exercise typed execution, receipt persistence, Resident-state binding, and unbound refusal.
   repository_body_smoke_cut: Exact 013c3bf1 deletes the callerless epiphany-repository-body smoke command and its temporary-store self-test path. The shipped Body binary retains bootstrap, bind, observe, and status. Authenticated Body binding, exact projection, generation, Git worktree semantics, no repository mutation, and tamper refusal remain proven by 23 focused owner tests.
   model_runtime_smoke_cut: Exact ce90f911 deletes the callerless epiphany-model-runtime smoke route. It opened no provider transport; it wrote a synthetic model request, tool call, completed receipt, and smoke_no_network marker into a writable runtime store, then reported not-opened. Real model-turn, worker, follow-up, decision discovery, and decision audit commands remain. The release-owned model-runtime suite passes 12/12.
   bifrost_authority_cut: Exact 203bcc41 deletes Epiphany's producerless Bifrost body-change/GitHub publication family: four document types, three singleton latest heads, constructors, validators, writers, local-Verse advertisement/projection, public exports, and five tests that manufactured both ends. Bifrost owns the real Persona feedback/delivery stores and signed crossing receipts; Epiphany does not publish an alternate Bifrost protocol. Core and release-bundle checks pass; the remaining CultMesh suite passes 13/13.
@@ -115,7 +115,7 @@ current_status:
     yggdrasil_epiphany_service_contract: idunn_source_change_owner_eve_and_local_typed_operator_surfaces_no_discord_control_plane
     resident_physiology: historical_c011_exact_465af24d_zero_zombie_proof_accepted_current_containers_exited_255
   unresolved_authority: Generic command, legacy lineage, caller-authored identity, behaviorless policy fields, global lifecycle latest state, timestamp election, Windows Task Scheduler authority, and their false proofs are gone. Semantic and workspace launch owners are separate over shared process mechanics. The remaining daemon supervisor still combines the service loop, aggregate signed-health publication, semantic reconciliation, and the large workspace recovery state machine. Continue decomposing only where ownership becomes smaller; do not create family frameworks or adapters. The false persisted cluster-topology bootstrap sentinel is gone; supervisor admission remains bound to exact runtime/store identity, packaged release, brake, service policy, process identity, and signed health. The current gamecult-ops Epiphany unit has retired agent-store and daemon-id argv that its owning lane must fix before deployment. Fresh exact-package Ox17 and Model Atlas Gate 1 remain paused until subtraction closes. Bifrost remains Persona and governed external-consequence transport. Historical c011 and partial Gate roots stay untouched/read-only.
-  next_action: Continue the source/test-authority audit after exact ce90f911. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, static status CLI, manual smoke command, counterfeit provider physiology, editor bridge, keyword tribunal over natural language, tautological test, duplicate parser proof, or ignored live-network anecdote. Do not run a local full-workspace compile, package, deployment, or Ox root.
+  next_action: Continue the source/test-authority audit after exact 0bb6a883. Retain only code and tests that reach decision admission, validation, authentication, keyed CAS conflict/replay, exact projection, provider lowering, or an externally visible consequence. Delete test-only APIs and fixtures with the tests they animate. Preserve sealed decision audit, direct typed Body-to-Modeling flow, provider-owned CultMesh/Eve documents, keyed Persona state, exact current work, immutable runtime identity, single-package binary ownership, family admission owners, and typed Persona effect validation. Epiphany owns no local daemon supervisor, standalone schema service, static status CLI, manual smoke command, counterfeit provider physiology, duplicate completion catalogue, editor bridge, keyword tribunal over natural language, tautological test, duplicate parser proof, or ignored live-network anecdote. Do not run a local full-workspace compile, package, deployment, or Ox root.
 
   runtime_event_cut: Exact 27fe11ae deletes persisted generic runtime events, their registry and CultNet contract, CLI/status surfaces, coordinator and lifecycle shadows, archival dependencies, and the obsolete legacy coordinator repair path. Exact d66baa27, 058751fb, and 573ddc8b first removed provider-event duplication, the arbitrary event writer, and paired lifecycle events. Runtime session/job state plus exact typed results, failures, coordinator run receipts, and coordinator death recoveries solely own terminal facts. Events cannot route work, authenticate terminality, or resurrect authority because no runtime-event document remains.