Record live route continuity acceptance

This commit is contained in:
Meta Vens 2026-08-24 11:56:36 +02:00
commit 032e0ff9d4
4 changed files with 34 additions and 25 deletions

View file

@ -96,13 +96,13 @@ Yggdrasil is production. The Starfire writer and its old tunnel are stopped.
Do not start both writers.
- Executable release:
`b8d3fe69ee3ae433966623563bdcaaeab4b39861`
`06ed2c5ac27c7d9f32f51444e51b5acec3e1942b`
- Executable SHA-256:
`08ed0f76fd1e1037b8fd206567efed00c443680ceff4312406d61bcf9223fb88`
`4398b9947870a2ec7610c8f059e5790b67e7255e9fac11d40c53a69f3eff6a7b`
- Native client SHA-256:
`7a04eca6540aa98d62f506ca6816bc2b001766d76bf8ff7062ddac49bc4b4030`
`3a0556e46d78625c4c31509164fe15e6b8e3df28cbbaf0026fc9d57325d1d956`
- Artifact SHA-256:
`sha256-4c1984ab1c0b3e6516df78819e89d8b497895bb5510884d14165ee27bbbe030f`
`sha256-245c079762da925c30f02b539ef28e9aa1d619c395ddb9a90be71c5f1cf764ab`
- Eve release: `19c3dcf9173dce848a6253e975324ea239a02d24`
- Service: `ghostlight-dungeon.service`, running as `ghostlight:ghostlight`
- Listener: Yggdrasil loopback `127.0.0.1:8831`
@ -289,18 +289,26 @@ only after explicit acknowledgement; keep the transport and durable-snapshot
regressions in the fleet gate.
The live canary campaign `34929b8d-7b04-49af-9936-1c798fd79760` is at world
revision 69. Release `fb9c42c` bound player speech to exact response actors:
Member 1 retained the eastern-trails memory, Member 2 explicitly refused to
borrow it, and the third present Persona remained an autonomous observer.
Release `b8d3fe6` content-addressed the complete semantic assessment packet.
The first trust assessment at revision 68 took 25.7 seconds; stale confirmation
after a one-minute revision change returned in 1.04 seconds with byte-identical
DC, modifiers, stakes, and effects, a fresh digest, zero tokens, and a
`valid_cache_hit` receipt linked to the source receipt. The same assessment also
exposed the next owning failure: a relationship attempt acquired an unrelated
ration-law fact because foreground outcomes lack an independent semantic
effect verifier. Do not patch that with keywords; reuse the model-based causal
verification doctrine already protecting strategic cell effects.
revision 76. Release `99a2508` constrained the trust attempt to its independently
verified relationship lane. Stale confirmation recompiled against revision 71;
the server-side d20 rolled 10, applied +4 against DC 5, and committed Member 1's
increased trust without granting knowledge or mutating the other two present
Personas. All three appraised the public event through their exact perspectives.
The same campaign then exposed a topology authority split: canonical route keys
are local to their origin, while the transition overlay had flattened them into
one global map. A surface-advertised camp-to-junction route therefore collided
with unrelated routes sharing its local key. Release `fc5cce0` derives component
edge identity from `(origin_location_id, local_route_id)` and keeps surface
destinations exact. The old failed command had durably reached unanimous
governance approval without committing the world; release `06ed2c5` makes that
uncommitted unanimous state idempotently finalizable through the same approval
operation. The exact old proposal advanced revision 74 to 75, moved only Ash to
Kostolom Junction, and added fifteen minutes. An Idunn same-release restart
changed the daemon PID while preserving release, app session, campaign, and
revision. The return route then advanced to revision 76 and the encampment
rematerialized with the same persistent location, Refugee Convoy population,
Member 1, Member 2, Relay Volunteer, relationship outcome, and player ledger.
Acceptance witnesses live under `F:\GameCult\GhostlightDungeon\acceptance`.
Operational release and rollback truth remains in `gamecult-ops`.
@ -309,12 +317,11 @@ Operational release and rollback truth remains in `gamecult-ops`.
1. Continue adversarial play through the authenticated native CultMesh client;
its Heimdall grant and Ghostlight app session are persisted in CultCache.
2. Give foreground assessments an independent compact semantic effect verifier
so every typed mutation is causally entailed by the player's exact means and
intended effect. Preserve the content-addressed assessment cache and record
every verifier receipt; do not add keyword or lane-specific bans.
3. Replay departure, daemon restart, return, strategic time, permitted news,
and institution-pressure acceptance paths in the current canary.
2. Pressure institution self-interest, away-time strategic activity, and
character-accessible news in the current revision-76 canary. Prove that the
player is not puppeted and inaccessible remote facts remain private.
3. Compile an obscure Vault-grounded start or receive an explicit material-gap
preview without borrowing fixture cast, geography, or plot.
4. Then fork or compile a denser 20-plus-power
Aetheria skeleton and pressure budgets 1, 4, 8, and 32 with real provider
output, including nested refugee dispersal and later rematerialization.

View file

@ -127,4 +127,5 @@
{"branch": "codex/ghostlight-dungeon-mvp", "note": "Adversarial Session Zero play exposed two authority defects and Yggdrasil now serves their exact repair at Ghostlight 257b6429c52c796167125bd81d923a605ac065df with Eve 23eaf32eae76204357c1406b4a7d01bcece6b815, OpenRouter stealth/ox-alpha ready, seven campaigns, one persistent Session Zero, zero daemon restarts, 171 hosted Linux tests, and the Idunn deployment brake re-engaged. A counterproposal can no longer rewrite visible prose while retaining the stale typed bargain: the kernel clears the old payload, durably records the counter in its permitted channel, removes Accept, rejects forged acceptance, and requires a same-epoch fresh decision before atomically retiring the pending counter. Generated opening and role suggestions are non-material and may be ignored for a custom draft; conversely a blank transcript-only contract or character is rejected locally with explicit missing inputs before world compilation. The live browser campaign remains intact, but its local Heimdall claim expired during the next private-message attempt; Discord reauthentication is pending and no claim or credential was bypassed.", "status": "accepted", "ts": "2026-08-22T11:22:30Z", "type": "verification"}
{"note": "Yggdrasil release 41a1950f1dcb2215b07cee484151ca5f09a59a10 repaired Heimdall continuity: each scheduled refresh uses a fresh encrypted-command identity, refresh verification binds the signed access claim to the exact returned session without requiring the initial-login account summary, and the local wrapped claim rotates by CAS. The 171-test hosted gate passed; live due-session refresh emitted no failure across startup and the next scheduler pulse; the authenticated browser returned to Session Zero revision 18 after daemon replacement; binary SHA-256 b4544027e9ce19e17aae53b27abe146c96006e667c8f7d3d92b45c6545024050, NRestarts=0, brake engaged.", "status": "ok", "ts": "2026-08-22T16:37:44+00:00", "type": "verification"}
{"note": "Yggdrasil release 801d4c exposes a loopback-only Heimdall-backed native CultMesh player boundary. Odin returned the redacted provider route; a forged app session produced the canonical denial receipt and left every campaign store byte-identical. One human Discord approval remains before actor-filtered direct play.", "status": "ok", "ts": "2026-08-23T18:54:53+00:00", "type": "verification"}
{"ts": "2026-08-23T19:14:47+00:00", "type": "verification", "status": "ok", "note": "Native auth pressure found that a second begin could replace the client pending handle after Discord completed it. Release 447f402 refuses overwrite, clears terminal owned attempts, and supports stdin-only completed-handle recovery. Three focused tests and Idunn full 265-test Linux gate passed; daemon and native listener are healthy."}
{"note": "Native auth pressure found that a second begin could replace the client pending handle after Discord completed it. Release 447f402 refuses overwrite, clears terminal owned attempts, and supports stdin-only completed-handle recovery. Three focused tests and Idunn full 265-test Linux gate passed; daemon and native listener are healthy.", "status": "ok", "ts": "2026-08-23T19:14:47+00:00", "type": "verification"}
{"ts": "2026-08-24T09:56:23+00:00", "type": "live_acceptance", "status": "accepted", "note": "Revision 74-76 canary proved route keys are origin-local: composite transition edge identity removed cross-location collisions; an already-unanimous uncommitted travel proposal finalized idempotently, survived an Idunn same-release restart, and returned Ash to the same encampment cast and ledger after exactly 30 fictional minutes."}

View file

@ -129,3 +129,4 @@
{"key": "2026-08-22T163744Z0000-0124-0fd9bbe87b49", "payload": "eyJub3RlIjogIllnZ2RyYXNpbCByZWxlYXNlIDQxYTE5NTBmMWRjYjIyMTViMDdjZWU0ODQxNTFjYTVmMDlhNTlhMTAgcmVwYWlyZWQgSGVpbWRhbGwgY29udGludWl0eTogZWFjaCBzY2hlZHVsZWQgcmVmcmVzaCB1c2VzIGEgZnJlc2ggZW5jcnlwdGVkLWNvbW1hbmQgaWRlbnRpdHksIHJlZnJlc2ggdmVyaWZpY2F0aW9uIGJpbmRzIHRoZSBzaWduZWQgYWNjZXNzIGNsYWltIHRvIHRoZSBleGFjdCByZXR1cm5lZCBzZXNzaW9uIHdpdGhvdXQgcmVxdWlyaW5nIHRoZSBpbml0aWFsLWxvZ2luIGFjY291bnQgc3VtbWFyeSwgYW5kIHRoZSBsb2NhbCB3cmFwcGVkIGNsYWltIHJvdGF0ZXMgYnkgQ0FTLiBUaGUgMTcxLXRlc3QgaG9zdGVkIGdhdGUgcGFzc2VkOyBsaXZlIGR1ZS1zZXNzaW9uIHJlZnJlc2ggZW1pdHRlZCBubyBmYWlsdXJlIGFjcm9zcyBzdGFydHVwIGFuZCB0aGUgbmV4dCBzY2hlZHVsZXIgcHVsc2U7IHRoZSBhdXRoZW50aWNhdGVkIGJyb3dzZXIgcmV0dXJuZWQgdG8gU2Vzc2lvbiBaZXJvIHJldmlzaW9uIDE4IGFmdGVyIGRhZW1vbiByZXBsYWNlbWVudDsgYmluYXJ5IFNIQS0yNTYgYjQ1NDQwMjdlOWNlMTllMTdhYWU1M2IyN2FiZTE0NmM5NjAwNmU2NjdjOGY3ZDNkOTJiNDVjNjU0NTAyNDA1MCwgTlJlc3RhcnRzPTAsIGJyYWtlIGVuZ2FnZWQuIiwgInN0YXR1cyI6ICJvayIsICJ0cyI6ICIyMDI2LTA4LTIyVDE2OjM3OjQ0KzAwOjAwIiwgInR5cGUiOiAidmVyaWZpY2F0aW9uIn0=", "stored_at": "2026-08-22T16:37:44.247751+00:00", "type": "ghostlight.evidence_record.v0"}
{"key": "2026-08-23T185453Z0000-0128-add35cb85f1d", "payload": "eyJub3RlIjogIllnZ2RyYXNpbCByZWxlYXNlIDgwMWQ0YyBleHBvc2VzIGEgbG9vcGJhY2stb25seSBIZWltZGFsbC1iYWNrZWQgbmF0aXZlIEN1bHRNZXNoIHBsYXllciBib3VuZGFyeS4gT2RpbiByZXR1cm5lZCB0aGUgcmVkYWN0ZWQgcHJvdmlkZXIgcm91dGU7IGEgZm9yZ2VkIGFwcCBzZXNzaW9uIHByb2R1Y2VkIHRoZSBjYW5vbmljYWwgZGVuaWFsIHJlY2VpcHQgYW5kIGxlZnQgZXZlcnkgY2FtcGFpZ24gc3RvcmUgYnl0ZS1pZGVudGljYWwuIE9uZSBodW1hbiBEaXNjb3JkIGFwcHJvdmFsIHJlbWFpbnMgYmVmb3JlIGFjdG9yLWZpbHRlcmVkIGRpcmVjdCBwbGF5LiIsICJzdGF0dXMiOiAib2siLCAidHMiOiAiMjAyNi0wOC0yM1QxODo1NDo1MyswMDowMCIsICJ0eXBlIjogInZlcmlmaWNhdGlvbiJ9", "stored_at": "2026-08-23T18:54:53.555209+00:00", "type": "ghostlight.evidence_record.v0"}
{"key": "2026-08-23T191447Z0000-0129-29a44b235721", "payload": "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", "stored_at": "2026-08-23T19:14:47.404364+00:00", "type": "ghostlight.evidence_record.v0"}
{"key": "2026-08-24T095623Z0000-0130-40c02d58385c", "payload": "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", "stored_at": "2026-08-24T09:56:23.222503+00:00", "type": "ghostlight.evidence_record.v0"}

View file

@ -310,6 +310,6 @@ data_flow:
- If state grows faster than understanding, cut it back.
current_status:
summary: Yggdrasil serves immutable Ghostlight release b8d3fe69ee3ae433966623563bdcaaeab4b39861 with Eve 19c3dcf9173dce848a6253e975324ea239a02d24, daemon SHA-256 08ed0f76fd1e1037b8fd206567efed00c443680ceff4312406d61bcf9223fb88, native-client SHA-256 7a04eca6540aa98d62f506ca6816bc2b001766d76bf8ff7062ddac49bc4b4030, artifact sha256-4c1984ab1c0b3e6516df78819e89d8b497895bb5510884d14165ee27bbbe030f, and model connector 7d384a6277c74fb35b8e51297ffbccda59746ce9. Idunn's locked 287-test Linux package gate, release build, active symlink, signed health, and zero-restart daemon agree. The authenticated native CultMesh client persists its Heimdall-backed Ghostlight app session and the canary is at revision 69. Exact speech addressing made Member 1 retain the eastern-trails memory, Member 2 refuse to borrow it, and the third present Persona remain an autonomous observer. Content-addressed assessment reuse turned a 25.7-second first assessment into a 1.04-second stale recompilation with byte-identical DC, itemized modifiers, stakes, and effects, a fresh revision digest, zero tokens, and an exact source-receipt link. The same trust assessment exposed an unrelated ration-law knowledge mutation: foreground effect shape is structurally bounded but lacks the independent semantic causal verifier already used for strategic cell actions. Existing mutation, Gestalt, topology, knowledge, privacy, no-puppeting, and atomicity invariants remain authoritative. Starfire remains retired as a writer.
next_action: Add one compact model-based semantic effect-verification membrane to foreground assessments, record its receipts, and feed mismatch guidance into the existing one same-snapshot correction so typed mutations must follow the exact means and intended effect. Do not add keyword or lane-specific bans. Replay the trust assessment, then continue departure/restart/return, strategic news, institution resistance, the 20-plus-power Aetheria skeleton, nested refugee continuity across budgets 1, 4, 8, and 32, expansion of the 36-case agency corpus toward 300 reviewed cases, and multi-account co-op proof. Preserve the revision-12 Mira movement scar as history; do not weaken actor, privacy, approval, atomicity, or no-puppeting invariants.
summary: Yggdrasil serves immutable Ghostlight release 06ed2c5ac27c7d9f32f51444e51b5acec3e1942b with Eve 19c3dcf9173dce848a6253e975324ea239a02d24, daemon SHA-256 4398b9947870a2ec7610c8f059e5790b67e7255e9fac11d40c53a69f3eff6a7b, native-client SHA-256 3a0556e46d78625c4c31509164fe15e6b8e3df28cbbaf0026fc9d57325d1d956, artifact sha256-245c079762da925c30f02b539ef28e9aa1d619c395ddb9a90be71c5f1cf764ab, and unchanged model connector 7d384a6277c74fb35b8e51297ffbccda59746ce9. Idunn's locked Linux package gate, release build, active symlink, signed health, and zero-restart services agree. The authenticated native CultMesh client persists its Heimdall-backed app session and the canary is at revision 76. A scoped, independently verified trust attempt rolled 10+4 against DC 5 and changed only Member 1's relationship to Ash; all three present Personas appraised it without sharing private knowledge. Route keys are now correctly local to each origin while transition edges use collision-free composite identity. The exact unanimous travel proposal stranded by the former collision was retried through WorldKernel, committed once, survived an Idunn same-release restart, and returned Ash to the same encampment, cast, population, ledger, and relationship state after exactly thirty fictional minutes. Existing mutation, Gestalt, topology, knowledge, privacy, no-puppeting, and atomicity invariants remain authoritative. Starfire remains retired as a writer.
next_action: Continue adversarial play from revision 76 through institution resistance, away-time strategic activity, and character-accessible news while proving no player puppeting or remote-information leakage. Then compile an obscure Vault-grounded start or explicit evidence-gap preview, pressure a 20-plus-power Aetheria skeleton and nested refugee continuity across budgets 1, 4, 8, and 32, expand the 36-case agency corpus toward 300 reviewed cases, and run multi-account co-op proof. Preserve historical scars rather than repairing them out of band; do not weaken actor, privacy, approval, atomicity, topology, knowledge, or no-puppeting invariants.
gestalt_population: Gestalt Personas own shared population baselines; persistent member deltas own named individuality; WorldKernel materialization and approval-gated fission preserve lineage and identity. Materialisation/folding changes only representation and the exact member delta, advances resolution epoch, and retires the old cover; it has no Gestalt-wide effect authority. Selected actionable member exceptions are mandatory Projector perspective owners, so aggregation cannot silently erase their decision. Presence projection is limited to nearby active leaves and exact-location dormant members, includes reciprocal player relationship evidence, and may propose an earned cast without committing it. Simulation cells are derived covers only.