Epiphany/notes/perfect-machine-audit-roadmap.md

Perfect Machine audit roadmap

Updated: 2026-08-11

Objective

Prove every Epiphany faculty both at its own authority boundary and in live coordination before treating the organism as deployment-ready. Tests prove only the seam they observe. Packaged Linux bodies, copied-state falsification, and the actual braked resident body are the live gates.

Current body

• Source branch: codex/epiphany-shakedown-live.
• Current source: exact 3fdff19f.
• Accepted runtime implementation: exact 3a5d2b5e.
• Linux release: sha256-84af3da8d2a2e170aa0611e48367eac4ecf5f66b2a2da763dc3045c5ad360177.
• Witness: sha256-589ff2ca11392b02fee9cb5d3a0209d958fc47cc3695f82bb6e5bed08d4c4463.
• Actual c007h: Heartbeat and resident Self alive in distinct containers, cognitive brake engaged, resident revision 312, authenticated readiness, no active lease, and action awaitFrontierProposal.
• Audited candidate release: sha256-bd0062904fa8e7097946c6fd735191de43ff04a89d1c3c29c0c86f876815fb31; witness sha256-a051980f70b13d9dafa014fedc7fc636eb075a9fc85dc53e3a94081bcc3fe3e0.
• Build body: Starfire. Yggdrasil is the small public crossing and never builds this graph.

Live authority matrix

Faculty	Owner	Accepted proof	Remaining live gate
Self	resident Self state machine	single-consumption Heartbeat grants, typed fulfillment, exact recovery/requeue, cooldown and brake behavior; actual c007h superseded one overtaken unlaunched continuation and accepted the recovered proposal-Modeling result exactly once	autonomous turnover from a genuinely new typed frontier; current awaitFrontierProposal is correctly idle
Substrate Gate	substrate_gate	scoped read/mutation grants on Eyes and Hands paths; canonical brake now covers direct daemon lifecycle actuation	finish classifying utility and compatibility actuators by their actual owner
Eyes	Eyes gateway and authenticated source tools	challenged-claim Windows circuit and governed Linux tool circuit accepted into Mind	one broader foreign/public Verse evidence adoption path
Modeling	runtime-owned typed Modeling contracts	causal Eyes-to-Modeling acceptance, direct proposal Modeling, archived fulfillment	broader Body-map coverage across a changing live repository
Imagination	typed proposal/consideration producers	genuine packaged multi-option generation, proposal-only candidates, exact fulfillment, no Hands adoption leak	autonomous turnover from the next genuine eligible frontier
Hands	Hands gateway	bounded patch, command, commit, push, and changed-path receipts; Idunn restart commands remain separate typed deployment authority and now brake closed	finish non-repo actuator classification for bridges, bootstrap, crossing, and forge paths
Soul	Soul gateway	consequence-bound verdict, causal Modeling route, retention and replay	collapse remaining verifier-specific broad projections into narrow receipt reads
Mind	canonical transactions and specialized admission	atomic RepoModel admission, launch-owned adjudication, semantic/runtime retention	audit remaining state families for legacy writers and run longer memory behavior
Persona	Persona turn, speech audit, public mouth	cross-host request/permit/receipt, signed failure and unknown no-repost behavior, conversation retention	one completed public consequence; currently blocked by absent Yggdrasil Discord credential
Continuity	runtime/resident recovery and retention	graceful shutdown, exact process-death recovery, session closure/archive, lifecycle retention, non-resurrection, bounded endurance, and receipt-derived recovery on the current body	later deployed restart supervision
Nervous system	Heartbeat, runtime spine, Idunn, CultMesh	detached scheduling, typed jobs, provider readiness, active/warming transitions across PID namespaces, bounded endurance, narrow local-Verse decision reads, bounded Docker logs, and causal grant turnover	audit non-repository actuator publication and command ownership
Body	Rust binaries, named-volume CultCache stores, model transport	deterministic 24-binary packaging, fast warm replay, named-volume interruption proof	deployment-sized endurance and remaining inspection surfaces

Accepted coordinated circuits

1. Substrate Gate -> Eyes -> Mind evidence admission.
2. Heartbeat -> Self -> coordinator -> runtime worker -> typed fulfillment -> exact resident settlement.
3. Eyes acceptance -> causal Modeling launch -> Modeling acceptance -> route consumption.
4. Imagination proposal -> Modeling -> Mind admission -> new direction pressure, without accidental Hands authority.
5. Hands consequence -> Soul verdict -> Modeling update -> Mind transaction.
6. Process death -> Continuity recovery -> canonical requeue or fulfilled settlement -> archive/retention without resurrection.
7. Persona feedback crossing -> bounded consideration -> speech audit -> signed permit/refusal/no-repost boundary.

Accepted endurance and current-body recovery

Historical c006 completed the detached plateau from iteration 572 to 1496. Thirty samples observed a 923-pulse delta with zero authority violations, exact-zero state/workspace growth, Heartbeat RSS 28.63-28.88 MiB, resident RSS 54.11-55.50 MiB, both role owners alive, and final authenticated readiness active under the engaged brake. Receipts: .epiphany-run/c006-endurance-16407f7e.

Exact c9a2a979 then completed two consecutive receipt-bound causal grants on actual c006. The first performed one exact Modeling failure-review supersession; the second refused stale action before consequence and settled on awaitFrontierProposal. Both grants terminalized, resident state returned idle at revision 34, protected consequence families stayed byte-identical, and the cognitive brake was re-engaged. Receipts: .epiphany-run/c006-continuation-c9a2a979.

Actual c007h runs exact 3a5d2b5e. It atomically superseded the preserved unlaunched launchModeling continuation without starting a process, issued the recovered reviewModelingResult route, accepted result-worker-8ddf57c1-96b4-4a60-ae8b-b24404e9ce2f exactly once, and returned to idle at revision 312. The cognitive brake is engaged; no pending proposal, Imagination frontier, active lease, or Hands consequence exists.

Exact candidate 3fdff19f retains daemon.lifecycle_poke whenever the canonical all-scope brake is engaged. Its 24-binary Linux release completed in 30.66s; an identical warm replay took 0.82s. The packaged Verse smoke passes. A forced supervisor reconciliation with operator-supplied /bin/sh against quarantined copied state refused exit 1, preserved the exact CultCache hash, and created no command marker. Receipts: .epiphany-run/forge-crosscommit-3fdff19f* and .epiphany-run/brake-actuator-proof-3fdff19f.

Completed narrow local Verse consumer audit

Lifecycle and single-target commands read only the state families that own their decisions. Managed-task install/control, generic service-runbook construction, and repo-work service audit read only the canonical brake. Single-daemon restart-policy writing reads exact daemon status. Direct reconciliation reads exact status, exact policy, and brake. Single-target poke-daemon reads exact status, brake, topology-family display metadata, and its exact written intent.

Every surviving production aggregate context read has an aggregate output:

Consumer	Why the aggregate is owned
coordinator launch context	assembles the bounded multi-organ prompt packet
supervisor scheduler tick	enumerates restart policies, daemon statuses, and brake scope
cluster daemon runbook	enumerates topology and matching status rows
seed and query	explicitly emit the complete local Verse projection
receipt directory	joins several receipt families into one operator report
bulk poke and swarm triage	enumerate non-ready daemons and topology
quarantined smokes/tests	falsify the aggregate projection itself without production authority

No remaining single-family decision reads the full context. Do not decompose these legitimate aggregates into ad hoc query piles.

Selected next bounded cut

Finish mapping the surviving non-repository process actuators. The supervisor boundary is now classified: specialized managed children bind witnessed executables and typed policies; explicit generic service launch is operator CLI authority; restart reconciliation is Idunn authority under status, policy, cooldown, brake, intent, and receipt; unauthenticated v0 tool capabilities are ignored and publish no invocation command. Continue with Rider, Unity, Persona/Bifrost, repo bootstrap, release construction, process observation, and model-runtime launch paths. Cut only a demonstrated autonomous bypass; do not wrap coherent operator, crossing, forge, or cognition authority in another gate. Actual c007h remains braked and untouched during the source audit.

Completion standard

The shakedown is complete only when every matrix row has current authoritative evidence, every explicit remaining gate is either proven or recorded as an operator-owned external dependency, the live coordinated circuit survives endurance and restart, and no stale roadmap claim is being mistaken for state.