Epiphany/notes/perfect-machine-audit-roadmap.md

Perfect Machine audit roadmap

Updated: 2026-08-11

Objective

Prove every Epiphany faculty both at its own authority boundary and in live coordination before treating the organism as deployment-ready. Tests prove only the seam they observe. Packaged Linux bodies, copied-state falsification, and the actual braked resident body are the live gates.

Current body

• Source branch: codex/epiphany-shakedown-live.
• Current pushed source: exact 43dc865e.
• Accepted live runtime implementation: exact 465af24d through resident PID 1 reaping across genuine Modeling and Imagination worker families.
• Audited/live release: sha256-089e000511f0420bfaab1136952b8cf94677a72d5c30a3fb3e6a26996bd3726f; witness sha256-20ca293589b33d3b2e6ea5a7411db544741fe18360ecbd4423cdfa000d1ad7c6.
• Actual c011: both owners are alive under the engaged cognitive brake at resident revision 384, with no active lease, no admitted work, and zero defunct children. Exact claimed worker PIDs 152 and 275 terminalized through Modeling and Imagination respectively, settled once, and were reaped by the resident PID 1 owner.
• Build body: Starfire. Yggdrasil is the small public crossing and never builds this graph.

Live authority matrix

Faculty	Owner	Accepted proof	Remaining live gate
Self	resident Self state machine	single-consumption Heartbeat grants, typed fulfillment, exact recovery/requeue, cooldown and brake behavior; actual c007h superseded one overtaken unlaunched continuation and accepted the recovered proposal-Modeling result exactly once	autonomous turnover from a genuinely new typed frontier; current awaitFrontierProposal is correctly idle
Substrate Gate	substrate_gate	immutable scoped grants now bind every advertised Eyes, Modeling, and Soul source operation through the outer worker launch; canonical brake covers direct daemon lifecycle actuation; non-repository process utilities retain explicit owners	packaged negative proof that an ungranted public request creates no network consequence
Eyes	Eyes gateway and authenticated source tools	challenged-claim Windows circuit, governed Linux tool circuit, and exact immutable GitHub reader with typed receipt derivation	package and adopt one broader public source through Eyes into Mind
Modeling	runtime-owned typed Modeling contracts	causal Eyes-to-Modeling acceptance, direct proposal Modeling, archived fulfillment	broader Body-map coverage across a changing live repository
Imagination	typed proposal/consideration producers	genuine packaged multi-option generation, proposal-only candidates, exact fulfillment, no Hands adoption leak	autonomous turnover from the next genuine eligible frontier
Hands	Hands gateway	bounded patch, command, commit, push, and changed-path receipts; Idunn, crossing, forge, IDE, repo-birth, and model-runtime processes retain separate owners; Unity method override is structurally refused	audit the next Soul verifier boundary rather than adding Hands gates around non-Hands owners
Soul	Soul gateway	consequence-bound verdict, causal Modeling route, retention and replay	collapse remaining verifier-specific broad projections into narrow receipt reads
Mind	canonical transactions and specialized admission	atomic RepoModel admission, launch-owned adjudication, semantic/runtime retention	audit remaining state families for legacy writers and run longer memory behavior
Persona	Persona turn, speech audit, public mouth	cross-host request/permit/receipt, signed failure and unknown no-repost behavior, conversation retention	one completed public consequence; currently blocked by absent Yggdrasil Discord credential
Continuity	runtime/resident recovery and retention	graceful shutdown, exact process-death recovery, session closure/archive, lifecycle retention, non-resurrection, bounded endurance, and receipt-derived recovery on the current body	later deployed restart supervision
Nervous system	Heartbeat, runtime spine, Idunn, CultMesh	detached scheduling, typed jobs, provider readiness, active/warming transitions across PID namespaces, bounded endurance, narrow local-Verse decision reads, bounded Docker logs, and causal grant turnover	audit non-repository actuator publication and command ownership
Body	Rust binaries, named-volume CultCache stores, model transport	deterministic 24-binary packaging, fast warm replay, named-volume interruption proof, and exact PID 1 reaping across two adopted worker kinds	deployment-sized endurance and remaining inspection surfaces

Accepted coordinated circuits

1. Substrate Gate -> Eyes -> Mind evidence admission.
2. Heartbeat -> Self -> coordinator -> runtime worker -> typed fulfillment -> exact resident settlement.
3. Eyes acceptance -> causal Modeling launch -> Modeling acceptance -> route consumption.
4. Imagination proposal -> Modeling -> Mind admission -> new direction pressure, without accidental Hands authority.
5. Hands consequence -> Soul verdict -> Modeling update -> Mind transaction.
6. Process death -> Continuity recovery -> canonical requeue or fulfilled settlement -> archive/retention without resurrection.
7. Persona feedback crossing -> bounded consideration -> speech audit -> signed permit/refusal/no-repost boundary.

Accepted endurance and current-body recovery

Historical c006 completed the detached plateau from iteration 572 to 1496. Thirty samples observed a 923-pulse delta with zero authority violations, exact-zero state/workspace growth, Heartbeat RSS 28.63-28.88 MiB, resident RSS 54.11-55.50 MiB, both role owners alive, and final authenticated readiness active under the engaged brake. Receipts: .epiphany-run/c006-endurance-16407f7e.

Exact c9a2a979 then completed two consecutive receipt-bound causal grants on actual c006. The first performed one exact Modeling failure-review supersession; the second refused stale action before consequence and settled on awaitFrontierProposal. Both grants terminalized, resident state returned idle at revision 34, protected consequence families stayed byte-identical, and the cognitive brake was re-engaged. Receipts: .epiphany-run/c006-continuation-c9a2a979.

Actual c007h runs exact 3a5d2b5e. It atomically superseded the preserved unlaunched launchModeling continuation without starting a process, issued the recovered reviewModelingResult route, accepted result-worker-8ddf57c1-96b4-4a60-ae8b-b24404e9ce2f exactly once, and returned to idle at revision 312. The cognitive brake is engaged; no pending proposal, Imagination frontier, active lease, or Hands consequence exists.

Exact candidate 3fdff19f retains daemon.lifecycle_poke whenever the canonical all-scope brake is engaged. Its 24-binary Linux release completed in 30.66s; an identical warm replay took 0.82s. The packaged Verse smoke passes. A forced supervisor reconciliation with operator-supplied /bin/sh against quarantined copied state refused exit 1, preserved the exact CultCache hash, and created no command marker. Receipts: .epiphany-run/forge-crosscommit-3fdff19f* and .epiphany-run/brake-actuator-proof-3fdff19f.

Completed narrow local Verse consumer audit

Lifecycle and single-target commands read only the state families that own their decisions. Managed-task install/control, generic service-runbook construction, and repo-work service audit read only the canonical brake. Single-daemon restart-policy writing reads exact daemon status. Direct reconciliation reads exact status, exact policy, and brake. Single-target poke-daemon reads exact status, brake, topology-family display metadata, and its exact written intent.

Every surviving production aggregate context read has an aggregate output:

Consumer	Why the aggregate is owned
coordinator launch context	assembles the bounded multi-organ prompt packet
supervisor scheduler tick	enumerates restart policies, daemon statuses, and brake scope
cluster daemon runbook	enumerates topology and matching status rows
seed and query	explicitly emit the complete local Verse projection
receipt directory	joins several receipt families into one operator report
bulk poke and swarm triage	enumerate non-ready daemons and topology
quarantined smokes/tests	falsify the aggregate projection itself without production authority

No remaining single-family decision reads the full context. Do not decompose these legitimate aggregates into ad hoc query piles.

Selected next bounded cut

Keep c011 alive and braked. Source now binds every governed model-derived tool intent to its outer worker launch and exact Substrate Gate grant. Eyes alone can see the bounded github_file provider, which accepts only one GitHub repository, exact 40-hex commit, repository path, 64 KiB UTF-8 body, no redirects, and no proxy. Runtime recomputes its identity and bytes before a typed EyesSourceLookupReceipt can share the Mind acceptance transaction. Focused hostile substitution is byte-identical and the exact upstream README reader is already proven from Starfire.

Package this source once on Starfire. On copied named-volume state, launch an actual Research lane that cites the returned sourceRef and evidenceReceiptId, accept it into Mind, and inspect the typed lookup plus Eyes packet in the committed snapshot. Then exercise an otherwise exact worker whose grant lacks publicSourceRead; require refusal before adapter/network execution and byte-identical runtime state. Only after both gates pass may c011 be replaced. Generic MCP transport remains transport and arbitrary URL fetching remains absent. Do not build on Yggdrasil.

Completion standard

The shakedown is complete only when every matrix row has current authoritative evidence, every explicit remaining gate is either proven or recorded as an operator-owned external dependency, the live coordinated circuit survives endurance and restart, and no stale roadmap claim is being mistaken for state.