Epiphany/state/map.yaml

experiment:
  name: Epiphany
  body: F:\Projects\Epiphany
  purpose: Native, inspectable agent organism with typed state and explicit organ authority.

objective:
  current: Prove every Epiphany organ individually and in live coordination on the shakedown branch before treating the organism as deployment-ready.

architecture:
  body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
  mind: CultCache-backed typed state admitted through Mind-owned transactions.
  self: Routes pressure and work; does not inherit another organ's authority.
  eyes: Establishes source and observation provenance before change.
  modeling: Maintains the source-grounded RepoModel and Body map.
  imagination: Proposes futures without adopting or executing them.
  hands: Changes the Body only through an admitted action route and scoped gate.
  soul: Verifies consequences and invariants at the layer where failure appears.
  persona: Owns public cognition and speech eligibility.
  continuity: Owns recovery, compaction, sleep, and restart protocol.
  substrate_gate: Owns access grants, not state admission.
  crossings:
    bifrost: Owns governed external transport and its signed receipts.
    idunn: Owns deployment observation and actuation.
    cultmesh: Projects typed state without becoming its owner.
    codex: Retained only for OpenAI-compatible authentication and model transport.

invariants:
  - Mind is the sole durable state-admission authority.
  - Modeling maps the Body; Eyes establishes provenance; Hands acts; Soul verifies; Self routes.
  - Persona speech and external consequences require explicit typed authority and signed receipts.
  - Bifrost owns external transport; Idunn owns deployment actuation; neither may impersonate Epiphany cognition.
  - CultMesh and Eve are projections, never owners of project truth.
  - The canonical swarm brake blocks cognition and consequences while preserving read-only physiology and operator sight.
  - Corrupted Epiphany runtime state is an operator-enginseer intervention surface, not a permission boundary. Repair it proactively from authoritative evidence, preserve immutable evidence, and record exact before/after receipts; this standing repair authority does not bypass typed gates for new external consequences.
  - Evidence and git retain history; this map retains only state that changes future decisions.

current_status:
  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Live v53 remains a closed complete internal circuit. The native Persona crossing is deployed and its unique permit path is proven, but Yggdrasil still lacks the Discord credential needed for one completed public consequence. Exact authenticated 100d8854 packages 22 binaries including runtime-spine; its actuator closed all four v28 replay sessions, replayed idempotently, and refused post-close work. Typed live retention reduced heartbeat artifacts from 12,511 directories and 706.5 MB to 312 directories and 17.6 MB with 191 receipts while protecting current cognition. Authenticated 42bc665a then restored restart sequence continuity at pulse 012558 and automatically retired a named 64-directory batch at the hysteresis edge, leaving 258 directories while continuing cognition. Source-cache worktree identity is repaired; warm exact packaging now measures 1m12s stable plus 6.56s coordinator. Log rotation, endurance, the Persona consequence, stable Starfire firewall ownership, and Linux/Yggdrasil cognition remain open.
  operational_state:
    local_worktree: clean_at_live_retention_restart_proof
    operator_wireguard: restored
    yggdrasil: canonical_small_public_crossing_body
    starfire: temporary_epiphany_cognition_body
    starfire_runtime_identity: epiphany-starfire
    starfire_swarm_brake: released
    starfire_release: authenticated_55660d78_release_sha256_2f4a1712
    starfire_repository_body: bound_and_observed
    starfire_verse_topology: bound_to_current_repository_body
    starfire_native_status: supervised_shakedown_active
    bifrost: exact_cb3239aa_f67f5122_native_runtime_active_on_yggdrasil
    bifrost_persona_feedback: ready_on_yggdrasil
    bifrost_feedback_binding: gamecult_aquarium_to_epiphany_starfire
    bifrost_feedback_crossing: authenticated_transport_only
    bifrost_persona_mouth: active_on_yggdrasil_10_77_0_1_17876
    starfire_persona_permit: authenticated_prior_release_pid_19024_10_77_0_2_17877
    persona_first_live_consequence: signed_failed_expired_without_repost
    persona_second_live_consequence: signed_unknown_unreceipted_bridge_refusal_without_repost
    persona_permit_probe: unique_node_rust_node_request_completed
    persona_fresh_consequence: blocked_by_absent_yggdrasil_discord_credential
    yggdrasil_epiphany_services: absent
    resident_physiology: heartbeat_42bc665a_pid_19928_and_self_running
  unresolved_authority: Modeling launch still synchronously performs an authenticated two-pass raw Repository Body observation; the next live Modeling launch must show whether Body observation remains the dominant iteration cost. Keyed storage has not earned live migration. One completed Discord consequence remains blocked by the absent Yggdrasil credential, and Windows' stable path-independent permit rule remains unapplied. Continuity crash terminalization, session closure, bounded retention, and pulse-sequence restart recovery are exact-package live-proven. Resident stdout/stderr logs remain a separate unbounded supervisor-owned surface. Endurance and Linux cognition remain unproven.
  next_action: Bound supervisor-owned resident stdout/stderr logs without moving retention authority out of heartbeat, then continue endurance/resource plateau observation. When the operator-owned Discord token appears, install it root-only on Yggdrasil and run one entirely fresh Persona consequence; never retry the two sealed requests.

active_subgoals:
  - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
  - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.
  - Bound artifact retention and prove supervised restart, crash recovery, session closure, and long-duration resource behavior.
  - Keep cognition and release builds on Starfire until measured runtime demand supports a deliberate Yggdrasil size.

organ_readiness:
  persona: partial; cross-host request/receipt/permit organs, distinct identities, exact release admission, unique permit completion, signed failure/unknown receipts, and no-repost behavior are live. Exact Bifrost cb3239aa fixes positional permit bodies and binds the Discord bridge command receipt to the signed request. A completed public consequence remains unproven because Yggdrasil has no Discord bot credential.
  self: partial; proposal recovery, Mind admission, current-model Hands routing, Soul lifecycle precedence, verdict incorporation, proposal preemption, challenge-aware Eyes routing, in-process status ownership, and causal Research/Soul-to-Modeling routing are live. Broader autonomous frontier turnover remains open.
  eyes: proven for one bounded challenged-claim circuit; exact 84f00929 launched Research and Mind accepted the first source-gap packet with typed evidence/checkpoint, exact 148d4527 accepted its causal reorientation, and exact 6f019cf8 proved downstream Modeling consumption.
  modeling: proven for the current bounded circuit; proposal-bound source inspection, Mind admission, exact routed identity preservation, and first-valid verdict incorporation completed without retry churn. Broader Body-map coverage remains open.
  imagination: proven for two bounded live circuits; the current c35272c9 circuit was caused by fresh Modeling, selected the typed frontier over stale manual-regather display state, completed Imagination job 2a5701fe, and committed a dedicated Mind request without adopting the candidate. Broader option generation remains open.
  hands: proven for bounded consequences; native patch, command, commit, push, and typed receipts bind reviewed path ceilings to exact changed-path subsets.
  soul: proven for the current bounded route-chain consequence; exact d3bfbda0 launched Verification through typed plan-decision provenance, result f23fe2b6 was accepted at revision 57, and Self then derived Modeling before any repeated Hands authority.
  mind: partial; RepoModel admission, thread-state admission, gateway review, state commit, first-valid verdict incorporation, bounded supervisor acceptance correction, and dedicated frontier-plan review requests are live. The current plan candidate awaits Mind adjudication.
  continuity: partial; authenticated 55660d78 terminalized the copied v28 dead worker once and refused duplicate restart, while sealed v28 remained unchanged. The newly implemented Continuity owner closes only all-terminal sessions, emits one deterministic event, refuses post-close jobs, and moved the disposable v28 copy from four active sessions to zero. Exact packaging/publication and bounded retention remain open.
  nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Fresh Modeling context assembly was below 250ms. The prior 51.637s job-commit label included synchronous two-pass Repository Body observation; historical CAS receipts show snapshot persistence itself at about one second. Parallel raw-manifest construction cuts direct authenticated Body observation from 92.30s to 49.52s but still needs packaged launch confirmation. Separate owner builds were rejected. Authenticated d910158f isolates Self policy behind one root-graph optional coordinator feature while core explicitly owns 74 non-coordinator binaries. Its cold stable phase took 17m38s, isolated coordinator phase 30.31s, and a real warm policy-source invalidation rebuilt only policy plus coordinator in 6.02s with all 20 stable packaged executables unchanged. Long-duration pressure and resource plateau remain open. Yggdrasil is not a release forge at its current memory budget.

forbidden_actions:
  - Do not issue a speculative deployment grant.
  - Do not reboot Yggdrasil as part of diagnosis.
  - Do not build the complete governed stack on constrained Yggdrasil until its disk and memory budget has been deliberately increased.
  - Do not treat stored status, process liveness, or an old receipt as current authority.

memory_policy:
  canonical_map: state/map.yaml
  live_handoff: notes/fresh-workspace-handoff.md
  durable_evidence: state/ledgers.msgpack
  historical_provenance: Git history and archived notes
  rule: If a fact does not constrain a current decision or explain a live invariant, it does not belong in the active Mind.