Epiphany/state/map.yaml

experiment:
  name: Epiphany
  body: F:\Projects\Epiphany
  purpose: Native, inspectable agent organism with typed state and explicit organ authority.

objective:
  current: Prove every Epiphany organ individually and in live coordination on the shakedown branch before treating the organism as deployment-ready.

architecture:
  body: Repository, runtime, service processes, stores, interfaces, and deployment substrate.
  mind: CultCache-backed typed state admitted through Mind-owned transactions.
  self: Routes pressure and work; does not inherit another organ's authority.
  eyes: Establishes source and observation provenance before change.
  modeling: Maintains the source-grounded RepoModel and Body map.
  imagination: Proposes futures without adopting or executing them.
  hands: Changes the Body only through an admitted action route and scoped gate.
  soul: Verifies consequences and invariants at the layer where failure appears.
  persona: Owns public cognition and speech eligibility.
  continuity: Owns recovery, compaction, sleep, and restart protocol.
  substrate_gate: Owns access grants, not state admission.
  crossings:
    bifrost: Owns governed external transport and its signed receipts.
    idunn: Owns deployment observation and actuation.
    cultmesh: Projects typed state without becoming its owner.
    codex: Retained only for OpenAI-compatible authentication and model transport.

invariants:
  - Mind is the sole durable state-admission authority.
  - Modeling maps the Body; Eyes establishes provenance; Hands acts; Soul verifies; Self routes.
  - Persona speech and external consequences require explicit typed authority and signed receipts.
  - Bifrost owns external transport; Idunn owns deployment actuation; neither may impersonate Epiphany cognition.
  - CultMesh and Eve are projections, never owners of project truth.
  - The canonical swarm brake blocks cognition and consequences while preserving read-only physiology and operator sight.
  - Evidence and git retain history; this map retains only state that changes future decisions.

current_status:
  summary: Epiphany is a supervised engineering alpha on Starfire, not deployment-ready. Live v53 carries RepoModel revision 6, an exact amended Hands consequence, and an accepted Soul pass. Exact release 61e8be38 now prevents verdict-bound Modeling from escaping into generic Evolution. Live retry proved the remaining schema wound: revise_frontier did not expose or const-bind the adopted plan, so model output implicitly removed execution anatomy and Mind rejected it. Job a89fe1ea-a88b-4108-a299-c99ca9b65fb7 is completed and awaits a coherent typed-authority repair before review. Persona consequence, retention, endurance, restart closure, and Linux/Yggdrasil cognition remain open.
  operational_state:
    local_worktree: clean_after_partial_verdict_schema_proof
    operator_wireguard: restored
    yggdrasil: canonical_small_public_crossing_body
    starfire: temporary_epiphany_cognition_body
    starfire_runtime_identity: epiphany-starfire
    starfire_swarm_brake: released
    starfire_release: authenticated_61e8be38_release_sha256_67ed6c8d
    starfire_repository_body: bound_and_observed
    starfire_verse_topology: bound_to_current_repository_body
    starfire_native_status: supervised_shakedown_active
    bifrost: base_application_active_on_yggdrasil
    bifrost_persona_feedback: ready_on_yggdrasil
    bifrost_feedback_binding: gamecult_aquarium_to_epiphany_starfire
    bifrost_feedback_crossing: authenticated_transport_only
    yggdrasil_epiphany_services: absent
    resident_physiology: heartbeat_and_self_running
  unresolved_authority: The local execution amendment is user-authorized and packet-hash bound, not Bifrost-signed. Soul passed the amended consequence but reported that derived reorientation checkpoints carry empty evidence_ids; Modeling must preserve that limitation rather than overstate source provenance. The adopted Mind decision also carries a model-supplied 2025 timestamp; coordinator commit-time timestamp ownership remains open. Exact packaging still takes 6m59s after core changes. Removing one redundant RepoModel pull left worker appearance near 48s and full coordinator launch near 83s, so repeated whole-store transactions remain the dominant 40 MiB launch-path defect.
  next_action: Carry the exact routed RepoFrontierItem plus RepoFrontierModelingRequest as one typed verdict-modeling launch authority. Specialize the worker schema so every identity-bearing frontier field, including adopted_plan, is const-bound; only status, evidence_refs, gap, and updated_at may vary. Then explicitly supersede invalid completed job a89fe1ea-a88b-4108-a299-c99ca9b65fb7 and launch one corrected attempt. Preserve the 45.77-second jobCommit timing as the launch-store optimization receipt.

active_subgoals:
  - Prove Persona, Self, Eyes, Modeling, Imagination, Hands, Soul, Mind, Continuity, and nervous-system behavior individually.
  - Prove a live coordinated path from source gathering through the Hands gate and post-action verification.
  - Bound artifact retention and prove supervised restart, crash recovery, session closure, and long-duration resource behavior.
  - Keep cognition and release builds on Starfire until measured runtime demand supports a deliberate Yggdrasil size.

organ_readiness:
  persona: partial; authenticated feedback transport is live, but public cognition and speech consequence still need a fresh end-to-end proof.
  self: partial; proposal recovery, Mind admission, current-model Hands routing, Soul lifecycle precedence, verdict incorporation, proposal preemption, challenge-aware Eyes routing, in-process status ownership, and causal Research/Soul-to-Modeling routing are live. Broader autonomous frontier turnover remains open.
  eyes: proven for one bounded challenged-claim circuit; exact 84f00929 launched Research and Mind accepted the first source-gap packet with typed evidence/checkpoint, exact 148d4527 accepted its causal reorientation, and exact 6f019cf8 proved downstream Modeling consumption.
  modeling: proven for the current bounded circuit; proposal-bound source inspection, Mind admission, exact routed identity preservation, and first-valid verdict incorporation completed without retry churn. Broader Body-map coverage remains open.
  imagination: proven for one bounded live circuit; exact 4338b033 selected the admitted canonical frontier, launched Imagination, persisted its typed candidate, and handed it to dedicated Mind without overrides. Broader option generation remains open.
  hands: proven for bounded consequences; native patch, command, commit, push, and typed receipts bind reviewed path ceilings to exact changed-path subsets.
  soul: proven for the current bounded amended consequence; exact release sha256-d2e7205a resumed the immutable verification job, produced a valid result, and coordinator acceptance advanced thread state to revision 31. Self then derived Modeling before any repeated Hands authority.
  mind: partial; RepoModel admission, thread-state admission, gateway review, state commit, first-valid verdict incorporation, and dedicated frontier-plan adoption are live; broader stale or overstated frontier correction remains open.
  continuity: partial; heartbeat and resident Self survive sequential cycles. v28 proved an ordinary bounded worker error could leave a runtime job falsely running after process death; the owner-local terminalization repair passes focused tests but still needs packaged crash/restart/closure proof.
  nervous_system: partial; detached scheduling, runtime jobs, typed feedback, ordinary Windows coverage-store identity, and operator projection work. Exact 6f3cdc61 packaging rebuilt 21 first-party release binaries in 6m59s despite the stable graph/source cache, and a 40 MiB live runtime store made Modeling launch-context assembly take roughly 90s. Compilation fan-out, projection cost, long-duration pressure, and resource plateau remain open. Yggdrasil is not a release forge at its current memory budget.

forbidden_actions:
  - Do not issue a speculative deployment grant.
  - Do not reboot Yggdrasil as part of diagnosis.
  - Do not build the complete governed stack on constrained Yggdrasil until its disk and memory budget has been deliberately increased.
  - Do not treat stored status, process liveness, or an old receipt as current authority.

memory_policy:
  canonical_map: state/map.yaml
  live_handoff: notes/fresh-workspace-handoff.md
  durable_evidence: state/ledgers.msgpack
  historical_provenance: Git history and archived notes
  rule: If a fact does not constrain a current decision or explain a live invariant, it does not belong in the active Mind.