EveUnity/docs/aetheria-released-package-witness.md

# Aetheria released-package witness

## Current integration gate

The generic `ReleaseConsumerProject` is pinned to released Git packages:

- `org.gamecult.eve.unity-scene` `0.3.100`, commit
  `3632bfb3354065b78a90b921d7025c4c3fa92be4`, and
  `org.gamecult.eve.surface` `0.2.4`, commit
  `e08fa08335f99e9edddeb706912eecfad07cb281`;
- `org.gamecult.eve.plugin-fields` `0.2.3`, commit
  `c5a4a75c1b727499b16c2dae1895f29e2a9f72f0`;
- `org.gamecult.eve.unity-uitoolkit` `0.1.1`, commit
  `4d0cbe0185bdc4fc65eb63503a7c5cb578539669`;
- `org.gamecult.cultlib` `1.0.43`, commit
  `f67f5122ed1bd11da016e7b820ed60145ccd0299`.

The hand-run integration gates are the cold lowering proof and the warm
full-session proof:

```powershell
pwsh -File .\scripts\run-aetheria-daemon-world-witness.ps1 `
  -CultLibRoot E:\Projects\CultLib-codex-cultmesh-reliability `
  -CacheState cold `
  -AssetCacheDirectory artifacts\cultlib-1043-scene-03100-cold-cache `
  -OutputDirectory artifacts\cultlib-1043-scene-03100-cold `
  -SkipAssetBundleBuild
```

Both connect directly to the Aetheria daemon. Control, subscriptions, commands,
and receipts use `cultnet+tcp`; provider files use `cultmesh-content+tcp`;
same-machine entity state uses a mapped SoA body; and the released native QUIC
client receives the advertised latest-only realtime body. No Odin hop or
Aetheria-specific gameplay code participates in the Unity runtime.

The current cold proof is
`artifacts/cultlib-1043-scene-03100-cold5/runtime-witness.cold.json`. It began
with no bodies or partials and passed in 57.8 seconds end to end (14.9 seconds
inside PlayMode). The client materialized nine requested bundles totaling
56,872,521 bytes: shaders, core resources, UI, Longinus, tractor beam, the three
visible celestial types, and the visible asteroid. Every body matches the
current provider file by SHA-256 and length; no partial remained. Unused ships,
stations, shield, mine, turret, pickup, lightning, and explosion bundles stayed
unloaded. This cold profile owns content transfer, world lowering, fog and
Stardust execution, and pilot/map camera isolation. It deliberately issues no
gameplay command into the paused Terminus fixture.

The current warm full-session proof is
`artifacts/cultlib-1043-scene-03100-warm/runtime-witness.warm.json`. It passed in
70.7 seconds end to end (27.9 seconds inside PlayMode). The generic client docks,
buys and sells one typed item, resumes and undocks, moves, targets, aims, holds
and releases the tractor beam, destroys the proof hostile, and collects the
resulting loot exactly once through daemon-owned XZ proximity. All eight
retained receipts are provider-owned and reconciled. Eleven on-demand bundles
totaling 74,191,724 bytes were present by the end; gameplay loaded only the
additional content it exercised. The pilot camera excludes all eleven map
renderers and the map camera includes them.

The pilot capture proves that provider fog, Stardust, celestial meshes, and ship
meshes reach URP, but it is not final visual approval: hulls remain crushed to
black and the cloud frame remains too hot and cyan-grey. Those are provider
visual-lever and shader-calibration issues, not concealed transport failures.
The map capture is clean and contains only map-channel glyphs on its dark map
background.

## Historical witness ledger

An earlier released-package cold world witness passed with:

- `org.gamecult.eve.unity-scene` `0.3.63`, commit
  `3135d24bb84f40719b121b51634811c85af0a7af`;
- `org.gamecult.eve.plugin-fields` `0.2.3`, commit
  `c5a4a75c1b727499b16c2dae1895f29e2a9f72f0`;
- `org.gamecult.eve.surface` `0.2.2`, commit
  `140e1bd963a0033e66777a3b2c5fe6e9c97dfe32`;
- `org.gamecult.eve.unity-uitoolkit` `0.1.1`, commit
  `4d0cbe0185bdc4fc65eb63503a7c5cb578539669`;
- `org.gamecult.cultlib` `1.0.15`, commit
  `419053ebe2325848051c4f4d8ba352cd4286c424`;
- the generic `ReleaseConsumerProject` client connected directly to the
  Aetheria daemon.

The cold `0.3.59` witness in
`artifacts/aetheria-daemon-adaptive-exposure-cold` resolves the tagged package,
transfers and lowers the 56,170,916-byte provider bundle
`34dd156038c9c55b96136e10805f35f2bc7f2aa4e8dda8a519e57aa5a83329c8`, and
passes in 53.3 seconds. EveUnity lowers Aetheria's advertised historical
histogram exposure as a provider-agnostic camera semantic; the bundled static
volume profile remains neutral and is no longer a competing exposure owner.
Average pilot-frame luminance fell from `0.8716` in the restored-scattering
camera witness to `0.5096`, recovering visible cloud structure. The capture is
still cyan and visibly posterized, so temporal/color parity remains open.
Map-channel isolation also passes: the pilot camera excludes the 11 map
renderers and the map camera includes them.

The subsequent released `0.3.61` warm witness in
`artifacts/aetheria-daemon-temporal-bootstrap-warm` restores two temporal
details from the fossil renderer as explicit provider-program semantics. The
fog history projects the previous view through the current projection, and the
first history frame uses the provider-advertised `ultra` quality before
settling to the scene's serialized `high` quality. Average luminance remains
effectively unchanged while mean neighboring-pixel variation falls from
`0.0332` to `0.0174` and Laplacian high-frequency energy falls from `0.1050`
to `0.0531`. This proves the temporal history is accumulating and that its
bootstrap seed mattered. The remaining cyan/tonemap mismatch is still open.

The cold HD witness in `artifacts/aetheria-daemon-fog-alpha-cold-hd` then
transfers the rebuilt 56,168,970-byte provider bundle
`a829e57731fbe08f4564fa131468148e99f6b4204708ad3e64498885532b5091`
through `SharedFileMapping` and captures after 128 temporal composites at
1280x720. It restores the historical fog history ABI: the temporal pass stores
density directly in alpha, so the composite consumes that density directly
instead of decoding it as the raymarch pass's packed distance/density payload.
The flat grey opacity slabs disappear. The released client test passes in 52.7
seconds with 238 fog composites and Stardust draws; the pilot camera still
excludes map renderers and the map camera includes them. Remaining visual work
is color/composition parity, not broken fog opacity or an unsettled witness.

The released `0.3.62` warm HD witness in
`artifacts/aetheria-daemon-hdr-grading-warm-hd` lowers the provider's
`hdr-before-tonemap.v1` grading-space contract. This restores the fossil
profile's HDR ordering—grading before ACES—rather than inheriting the released
consumer project's default LDR grading after tonemapping. EveUnity restores the
consumer's prior pipeline mode when the camera is released and fails closed
when the requested grading space cannot be lowered.

The asserted rerun in `artifacts/aetheria-daemon-hdr-grading-asserted-warm-hd`
also completes the live destruction-loot path on the same released client. One
daemon destruction produces the canonical pickup; tractor power reaches `1`
and returns to `0`; one Ymir `begin` fact produces exactly one
`pickup.collected` event; cargo changes from `0` to `1`; and no client pickup
command participates in the transaction. The event identity begins
`ymir-fact:` and contains the retained Box3D session, step, contact episode,
and begin-fact identity.

The released `0.3.63` warm HD witness in
`artifacts/aetheria-daemon-temporal-projection-0363-warm-hd` makes the native
volume history projection convention an explicit provider-program semantic.
Aetheria advertises the non-render-target projection convention used by its
historical `Graphics.Blit` temporal pass; the generic URP lowerer applies that
convention without naming Aetheria or interpreting fog. The witness captures
the naturally rendered camera target after 359 volume composites instead of
issuing a second out-of-band `Camera.Render()`. Package tests pass 105/105 and
the released gameplay witness still proves movement, combat, destruction loot,
one Ymir contact collection, held tractor input, and camera-channel isolation.
The remaining visual controls (fog parameters, stellar tint, ambient intensity,
histogram exposure, grading, and temporal settings) remain provider-owned
levers; this proof does not claim a final art grade.

The released `0.3.63` warm rejection witness in
`artifacts/aetheria-daemon-cargo-rejection-0363-warm` selects the daemon-owned
`cargo-capacity-rejection-proof` scenario. The controlled ship begins with all
generated cargo bays filled from typed item volume and bay capacity. Combat
creates the salvage pickup normally; player Ymir Begin contacts emit
`pickup.rejected` with `cargo-capacity`, preserve cargo at `5` items, and leave
the pickup live. The final run observed two later player recontacts with two
distinct `ymir-fact:` identities and no player collection event. The generic
witness correlates feedback through advertised SoA `SourceIndex` and feedback
`TargetEntityIndex`; events from other ships are not attributed to the pilot.

Current released-package evidence is in
`artifacts/aetheria-daemon-mapped-body-cold`; despite that retained directory
name, `runtime-witness.warm.json` is the current passing run. The warm PlayMode test
passed and recorded provider-owned reconciled movement, look, targeting,
tractor press, tractor release, contact-gated cargo collection, and action
receipts. The fingerprinted April 2021 catalog recovery now restores the
distinct common `Longinus`, rare `LonginusX`, and `Djinni` rows plus the missing
turn-thruster equipment needed to outfit ordinary hulls. This run generated the
player as a common directional-thruster `Longinus`; the other six presented
ships were `Djinni`, and no `LonginusX` appeared. The player moved 14.34 world
units and completed its authoritative hardware-driven look before combat.
The daemon-owned look direction reached the SoA body rotation,
and the generic aim presentation rendered at the advertised 50-unit minimum
convergence distance. Aetheria derives ambient color from daemon-owned stellar
`LightColor` values and advertises `studio2` only as the reflection cubemap; the
gravity-fog raymarch owns the visible frame. The released lowerer records flat
ambient mode, color `(1.46,1.2556,0.8468)`, ambient-probe energy `4.6354`, and
custom reflection texture `studio2`. No skybox asset or key light is advertised,
and the generic camera rig records zero live directional intensity. The earlier
invented `0.75` light and false skybox authority were deleted rather than retained
as material-conversion compensators.
Aetheria also advertises the original undocked `ARPG.unity` Third Person Rig:
entity-forward perspective follow, `30` unit distance, `60` degree vertical
field of view, canonical bottom-origin target screen position `0.64,0.19`, zero position damping, and
`1`-`4096` clip planes. Its generic `aim.convergence-point.v1` relation makes
the optical axis reach the daemon-published aim point while preserving that
entity framing. The generic camera rig lowers both constraints without
Aetheria-specific camera code. The distinct `70` unit Docked Rig no longer
incorrectly owns the flight view.
Aetheria's pilot surface also publishes a transparent cockpit overlay. The
released generic UI Toolkit lowerer produced seven native `ProgressBar` elements
for hull, shield, capacitor, weapon cooldown, target lock, and target state. Daemon frame,
player, and command diagnostics remain available in the document but lower
with `display: none` in the pilot presentation. The runnable generic-client
launcher mounts the same advertised document and forwards its typed commands;
it contains no Aetheria gameplay or client-authored world light.

The same surface publishes a `field.volume3d` node over four canonical Eve
Fields splat layers. Its surface contract contains logical ports such as
`surfaceHeight`, `patch`, and `tint`; it contains no Unity `_Nebula*` property
names or pass indices. The selected `unity-scene` provider asset variant owns
that concrete shader ABI through `unity.volume.*` metadata. The released
generic lowerer resolved the provider shader and dither texture, rasterized all
 four layers, and composited `195` pilot-camera frames through daemon frame `491`.
The provider variant advertises the fossil shader's raymarch, temporal-history,
and composite passes plus their logical ports. EveUnity allocates and resets the
history targets generically; a partial temporal ABI fails closed.

The two PNGs below are deliberate camera-channel captures, not a composited
screen capture, so they prove world/map isolation rather than HUD pixels. The
native cockpit proof is the asserted UI Toolkit visual tree recorded as
`cockpitProgressCount: 7` in the witness facts. The same run records completed
daemon lock progress `1.0`; Unity does not manufacture or smooth that value.

Camera-channel facts:

- provider-authored player renderers: `7` active, with no embedded shield renderer;
- pilot changed pixels: `217,323`;
- pilot average luminance: `0.1322155`;
- pilot bright pixels: `101,510`;
- map-channel renderers: `10`;
- map changed pixels: `3,179`;
- native cockpit progress bars: `7`;
- daemon tractor power at capture: `1.0` after the held input completed its
  authored ramp;
- daemon tractor power after the advertised release: `0`;
- provider tractor particle systems: `1`;
- pickup entities before/after destruction and collection: `0` / `0`;
- provider `pickup.collected` events: exactly `1`;
- collected item and quantity: one canonical `aetheria.item_definition:*` key,
  quantity `1`;
- authoritative cargo quantity before/after: `0` / `1`;
- the pilot camera excludes the advertised map layer;
- the player prefab's embedded layer-14 map icon contributes exactly `0` pilot
  pixels;
- the map camera renders exactly the advertised map layer.

The daemon also publishes the current zone's celestial presentation through the
same generic entity SoA generation as ordinary world entities. The current warm
witness records eleven sun/planet/gas-giant rows and eighteen asteroid rows.
Every row resolved a provider asset with enabled native renderers, and seven
celestial instances intersected the pilot frustum. These identities are
presentation-only and cannot receive gameplay commands. EveUnity contains no
Aetheria or celestial branch; release `0.3.55` includes the generic prefab wrapper
so semantic instance scale composes with, rather than overwrites, provider-local
scale.

Provider prefab construction now removes the fossil shield renderer embedded in
each ship. That renderer's custom shader performs collision-local dither clipping;
flattening it to ordinary opaque URP Lit had produced the large black ellipsoids
previously mistaken for celestial bodies. Shield state remains daemon truth and
shield impacts use the separately advertised receipt-driven effect. Material
conversion also preserves source lighting models: the map icon's unlit source
now becomes `Universal Render Pipeline/Unlit`, so map glyphs remain readable
without resurrecting the false scene light.

Visual inspection confirms that map glyphs are absent from the pilot frame and
present in the map-only frame. This is transport, authority, field-production,
and lowering proof, not visual parity: the current pilot capture contains the
blue fog field and the provider's magenta-and-gold Longinus hull with no opaque
shield ellipsoid. The celestial composition still lacks the fossil capture's
readable close body. Release
`0.3.57` includes generic lowering for Eve Fields `0.2.3`'s
`AnimatedRadialCosine` source alongside `PowerPulse`, dither-scale,
temporal-history, and finite-look-at semantics. Aetheria publishes the fossil
global animated simplex/cellular/ambient producer stack, body-owned radial wave
frequency, separate negative `gravity.height` and positive
`fog.surface_height`, and the authored `ARPG.unity` zone-brush extent. The
  witness records player Y `-101.5035` and camera Y `-84.7369`; Unity does not
sample terrain to invent either value. The four rasterized field layers and HDR
raymarch/history targets are populated, so the remaining failure is in native
presentation/composition or provider art calibration rather than missing state
delivery. Color, lighting, patch structure, readable world geometry, and
gravity-wave visual parity remain open. EveUnity must not compensate with
Aetheria-specific lighting or fog rules.

The `0.3.57` run also closes two camera-contract omissions. Aetheria advertises
the fossil pilot camera's neutral temporal-reprojection values; the released
generic lowerer applies URP TAA with `0.99` history blend, `0.1` jitter scale,
high quality, and zero sharpening. Fog and Stardust now consume one generic
camera-relative viewport-frame resolver rather than projecting the same splat
document independently. The live witness fails unless their snapped grid
centers are identical; the latest run resolved both to `(-6,-6)` after movement.
The provider HLSL now consumes Eve Fields' positive world-axis viewport directly;
it no longer retains the two-axis compensation once required by the deleted
fossil gravity camera. An asymmetric GPU fixture fails unless positive-world X
samples positive texture X, while the existing one-cell remap proof still keeps
705 overlapping world particles bit-identical.
The capture is still visibly rough and is not a visual-parity claim.

The fossil Stardust material used a screen-space coverage mask that changes on
every rendered frame and depends on TAA to reconstruct stable subpixel stars.
The earlier URP port had replaced that with a fixed alpha threshold and
additive blending. Aetheria now advertises the provider dither texture,
viewport scale, and logical render-frame port; generic EveUnity binds them
without knowing their product meaning. The live witness resolves those native
ports from provider metadata and checks the actual material instance. The
provider bundle source gate requires the temporal clip, overwrite blend, and
depth write and rejects `_AlphaClip`.

Substance is not part of this path; later texture baking belongs in Blender.
Aetheria currently bundles ambientCG's 1K `Metal012` color, normal, and
metalness maps under CC0. The same pre-generated maps now replace dead
Substance archive sub-assets on the brushed aluminium, tinted car paint,
cockpit, steel, black-metal, and radiator materials. The released witness
  resolves textured native URP materials in `8` distinct player-material slots,
up from `3`, without adding another texture payload. This is temporary provider
art with recorded provenance, not a replacement texture pipeline.

The tractor proof is structural, not yet a native-look victory lap. The daemon
publishes `beam.presentation` and advertises `pilot.scoop` as a
`button-hold.v1` value action. The generic client routes scalar `1` on press and
scalar `0` on release through the advertised `SetTractorPower` operation. Both
commands receive provider-owned reconciled receipts, and the daemon ramps the
published power from `1.0` at capture to exactly `0` after release. The provider
build removes the fossil's embedded tractor object from player/ship prefabs, so
the standalone `beam.presentation` prefab is the only tractor renderer. Its
cyan/yellow dotted band is visible in the pilot capture and absent from the map
capture.
The current `0.3.72` warm gameplay run is retained in
`artifacts/aetheria-daemon-0372-warm5`. It begins with no pickup. A
daemon-authoritative shot destroys the deterministic salvage target and creates
one provider-owned pickup carrying a canonical generated cargo item. Held
tractor input causes Ymir-owned attraction; collection itself is an
authoritative XZ proximity transaction and does not depend on a contact fact.
The daemon removes the pickup once, changes cargo from `0` to `1`, and emits one
stable `zone:0:pickup:0:collected` feedback event. No client pickup command or
Ymir contact receipt owns cargo mutation.

The same run records 709 URP field-volume composites, 65,536 stateless field
particles, and 11 map-channel renderers. The pilot camera excludes every map
renderer and the map camera includes them. The serialized consumer renderer now
contains `EveUnityRendererFeature`; the configuration utility marks
`UniversalRendererData` dirty before saving so batch and editor cameras use the
same URP scheduling path. The captures are integration evidence, not a final art
grade: the pilot frame remains overexposed and the hull reads nearly black.
Effect tuning remains provider art work; the runtime must not compensate with
an Aetheria-specific beam.

Primary artifacts:

- `results.xml`: one passing PlayMode witness;
- `runtime-witness.json`: package, content, receipt, aim, combat, and
  camera facts;
- `aetheria-daemon-world.png`: pilot-camera capture;
- `aetheria-daemon-map.png`: map-only capture.

## Cold delivery status

Cold CDN transfer is part of the passing readiness gate. The released `0.3.91`
run in `artifacts/cold-release-0391` began with zero cached bodies and partials,
received only the typed manifest through snapshot state, transferred bounded
content chunks through the managed CultMesh content session, and atomically
promoted one `56,204,750`-byte body named by SHA-256
`f2c8acf938998703799e909cbf0c6e3ed9ad5d6f83b708a0b7b6e76ee33f7160`.
It left zero partials and selected `SharedFileMapping` over the verified file.

The cold-only failure exposed by `0.3.90` was a bootstrap ownership race, not a
bulk snapshot transfer: live SoA subscriptions began before the blocking cold
asset acquisition, so their retained capability expired before Unity pumped it.
`0.3.91` resolves the surface first, completes provider-asset acquisition, and
only then starts live subscriptions. A fresh current generation therefore owns
the first lowered frame. No retry timer or stale-body reinterpretation exists.

This proves cold acquisition and local mapped reuse, not provider-to-client
network zero-copy, shared-memory delivery, or GPU zero-copy. Managed remote
chunks are still copied and fragmented before the transfer owner commits the
mapped file; network-body streaming and copy-volume profiling remain open.