Record deployed resolution boundary

notes/fresh-workspace-handoff.md

@@ -49,8 +49,8 @@ foundation checklist below. Existing Ghostlight fixtures remain regression
 evidence.
 
 The active immutable release is
-`c4a3d6f38bc6f95a94404a52cbb3401f24a89aab`, binary SHA-256
-`7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61`.
+`c509d2a95bb7683b10561abad7d4857aeab6277d`, binary SHA-256
+`041b85ed31e58f73cbd2e75d054cac32a5ad06a5944e1e129d39df5fb5e8df8e`.
 Manifest, process, typed health, persisted campaign count, CultMesh store,
 DeepSeek startup inference, and VoidBot retrieval agree. Periwinkle proved the
 private-LAN route and unauthenticated 401; Raven and Yggdrasil independently

notes/ghostlight-current-system-map.md

@@ -187,9 +187,9 @@ and operator inspection; the browser cannot reveal them before discovery.
 ## Current acceptance body
 
 Starfire currently serves immutable release
-`c4a3d6f38bc6f95a94404a52cbb3401f24a89aab`, executable SHA-256
-`7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61`,
-with rollback `5e198dfa872a710d31e581dcf2cd0851bef01966`.
+`c509d2a95bb7683b10561abad7d4857aeab6277d`, executable SHA-256
+`041b85ed31e58f73cbd2e75d054cac32a5ad06a5944e1e129d39df5fb5e8df8e`,
+with rollback `c4a3d6f38bc6f95a94404a52cbb3401f24a89aab`.
 
 Authenticated acceptance against the exact release has proved generated
 opening/role/approval compilation, a nonliteral canonical player actor ID,

state/evidence.jsonl

@@ -102,4 +102,5 @@
 {"ts":"2026-08-18T19:29:00Z","type":"security","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Cut an omniscient player-surface leak: the location card no longer enumerates every canonical institution posture and raw world clock. Remote developments remain operator state until player-local narration or an admitted information-channel NewsIssue exposes them. The player-owned ledger now includes the actor's own relationships. A negative regression plants secret remote posture/clock/consequence strings, proves all absent from the serialized player Eve surface, and proves an accessible public headline remains."}
 {"ts":"2026-08-18T19:33:00Z","type":"deployment","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Starfire activated immutable release c4a3d6f38bc6f95a94404a52cbb3401f24a89aab with executable SHA-256 7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61 and rollback 5e198dfa872a710d31e581dcf2cd0851bef01966. Typed health, manifest, active junction, PID 12164, four persisted campaigns, and DeepSeek readiness agree. Publication did not rotate or consume invitations."}
 {"ts":"2026-08-18T19:37:00Z","type":"security","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Restored resolution-control ownership at the player membrane. Players retain active_cell_budget control; ReplaceResolutionPins is rejected by the player HTTP boundary, the browser pin editor is deleted, and player projection exposes only pin_count rather than operator pin subjects/reasons. Player fission targets now contain only active population leaves at the canonical current location. Regressions prove remote pin bodies and a secret remote population name are absent while a local population remains available."}
+{"ts":"2026-08-18T19:41:00Z","type":"deployment","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Starfire activated immutable release c509d2a95bb7683b10561abad7d4857aeab6277d with executable SHA-256 041b85ed31e58f73cbd2e75d054cac32a5ad06a5944e1e129d39df5fb5e8df8e and rollback c4a3d6f38bc6f95a94404a52cbb3401f24a89aab. Typed health, manifest, active junction, PID 27396, four persisted campaigns, DeepSeek readiness, and served asset index-CXe_foJ-.js agree. Publication did not rotate or consume invitations."}
 {"ts":"2026-08-18T18:52:00Z","type":"verification","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Exact release 7916ab04936ba962720cfbf4af1b83f9aa8d8b24 made every selected named member exception a mandatory Projector perspective owner, closing the seam where aggregation could erase an actionable individual before Persona choice. The strict provider-backed budget-one golden placed 24 rivals in one arena, attributed migration to member:mira-venn, moved her between depth-two population lineages, produced nine sustained material consequences including seven typed outcomes across six other background subjects, preserved her delta and the player, and automatically promoted the same Mira on return with zero rejected pulses. Witness: F:\\GameCult\\GhostlightDungeon\\acceptance\\gestalt-dynamics-7916ab0-strict\\result.json."}

state/map.yaml

@@ -270,6 +270,6 @@ data_flow:
   - If state grows faster than understanding, cut it back.
 
 current_status:
-  summary: Starfire serves immutable release c4a3d6f38bc6f95a94404a52cbb3401f24a89aab with matching typed health, manifest, executable hash 7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61, DeepSeek readiness, four persisted campaigns, spoiler-safe player pressure projection, full public approval previews, canonical destination origin binding, and rollback 5e198df. The accepted runtime lineage passes generated opening/role/approval compilation, canonical nonliteral player identity, private assessment, confirmed d20, wait, restart continuity, fork, export, re-selection, and reset. The 24-subject cover passes budgets 1/4/8/32, including a corrected budget-8/provider-8 wave in 18.35 seconds. The strict budget-one rival-arena refugee golden migrates Mira across nested populations, preserves her exact delta and the player through sustained material background activity, and promotes the same person on return.
+  summary: Starfire serves immutable release c509d2a95bb7683b10561abad7d4857aeab6277d with matching typed health, manifest, executable hash 041b85ed31e58f73cbd2e75d054cac32a5ad06a5944e1e129d39df5fb5e8df8e, DeepSeek readiness, four persisted campaigns, spoiler-safe player pressure/pin/population projection, full public approval previews, canonical destination origin binding, and rollback c4a3d6f. The accepted runtime lineage passes generated opening/role/approval compilation, canonical nonliteral player identity, private assessment, confirmed d20, wait, restart continuity, fork, export, re-selection, and reset. The 24-subject cover passes budgets 1/4/8/32, including a corrected budget-8/provider-8 wave in 18.35 seconds. The strict budget-one rival-arena refugee golden migrates Mira across nested populations, preserves her exact delta and the player through sustained material background activity, and promotes the same person on return.
   next_action: With explicit approval to transmit one temporary invite credential to the local in-app browser, complete the visual authenticated journey and inspect the compiler, assessment, roll, wait, campaign lifecycle, and resolution controls; rotate two fresh invitations afterward. Then begin supervised human playtesting and treat confusion, composite consequences, latency, or low dramatic yield as evidence without weakening state admission.
   gestalt_population: Gestalt Personas own shared population baselines; persistent member deltas own named individuality; WorldKernel materialization and approval-gated fission preserve lineage and identity. Selected actionable member exceptions are mandatory Projector perspective owners, so aggregation cannot silently erase their decision. Presence projection is limited to nearby active leaves and exact-location dormant members, includes reciprocal player relationship evidence, and may propose an earned cast without committing it. Simulation cells are derived covers only.