Record deployed player information membrane

notes/fresh-workspace-handoff.md

@@ -49,8 +49,8 @@ foundation checklist below. Existing Ghostlight fixtures remain regression
 evidence.
 
 The active immutable release is
-`5e198dfa872a710d31e581dcf2cd0851bef01966`, binary SHA-256
-`d511629d9a05ef5210edc7dedf38bd842b4dc15cb3e8b43467a6ac54d2d26646`.
+`c4a3d6f38bc6f95a94404a52cbb3401f24a89aab`, binary SHA-256
+`7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61`.
 Manifest, process, typed health, persisted campaign count, CultMesh store,
 DeepSeek startup inference, and VoidBot retrieval agree. Periwinkle proved the
 private-LAN route and unauthenticated 401; Raven and Yggdrasil independently

notes/ghostlight-current-system-map.md

@@ -187,9 +187,9 @@ and operator inspection; the browser cannot reveal them before discovery.
 ## Current acceptance body
 
 Starfire currently serves immutable release
-`5e198dfa872a710d31e581dcf2cd0851bef01966`, executable SHA-256
-`d511629d9a05ef5210edc7dedf38bd842b4dc15cb3e8b43467a6ac54d2d26646`,
-with rollback `f9b0ffb90e6a8b3e1505d81995e81e09a9c58cd7`.
+`c4a3d6f38bc6f95a94404a52cbb3401f24a89aab`, executable SHA-256
+`7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61`,
+with rollback `5e198dfa872a710d31e581dcf2cd0851bef01966`.
 
 Authenticated acceptance against the exact release has proved generated
 opening/role/approval compilation, a nonliteral canonical player actor ID,

state/evidence.jsonl

@@ -100,4 +100,5 @@
 {"ts":"2026-08-18T19:18:00Z","type":"implementation","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"The player surface now projects the canonical current location ID beside the canonical actor ID. The destination form binds that ID read-only rather than asking the player to transcribe internal state, and its approval receipt shows proposed containment, routes, persistent features, and material gaps. Fission approval shows each child leaf, partition value including other/unknown, and home location. Focused surface regression and Vite production build passed."}
 {"ts":"2026-08-18T19:24:30Z","type":"deployment","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Starfire activated immutable release 5e198dfa872a710d31e581dcf2cd0851bef01966 with executable SHA-256 d511629d9a05ef5210edc7dedf38bd842b4dc15cb3e8b43467a6ac54d2d26646 and rollback f9b0ffb90e6a8b3e1505d81995e81e09a9c58cd7. Typed health, manifest, active junction, PID 1888, four persisted campaigns, DeepSeek readiness, and served assets index-DbDnq-RC.js / index-B7Qh0xAi.css agree. The unauthenticated rendered browser gate remained coherent. Publication did not rotate or consume invitations."}
 {"ts":"2026-08-18T19:29:00Z","type":"security","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Cut an omniscient player-surface leak: the location card no longer enumerates every canonical institution posture and raw world clock. Remote developments remain operator state until player-local narration or an admitted information-channel NewsIssue exposes them. The player-owned ledger now includes the actor's own relationships. A negative regression plants secret remote posture/clock/consequence strings, proves all absent from the serialized player Eve surface, and proves an accessible public headline remains."}
+{"ts":"2026-08-18T19:33:00Z","type":"deployment","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Starfire activated immutable release c4a3d6f38bc6f95a94404a52cbb3401f24a89aab with executable SHA-256 7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61 and rollback 5e198dfa872a710d31e581dcf2cd0851bef01966. Typed health, manifest, active junction, PID 12164, four persisted campaigns, and DeepSeek readiness agree. Publication did not rotate or consume invitations."}
 {"ts":"2026-08-18T18:52:00Z","type":"verification","status":"ok","branch":"codex/ghostlight-dungeon-mvp","note":"Exact release 7916ab04936ba962720cfbf4af1b83f9aa8d8b24 made every selected named member exception a mandatory Projector perspective owner, closing the seam where aggregation could erase an actionable individual before Persona choice. The strict provider-backed budget-one golden placed 24 rivals in one arena, attributed migration to member:mira-venn, moved her between depth-two population lineages, produced nine sustained material consequences including seven typed outcomes across six other background subjects, preserved her delta and the player, and automatically promoted the same Mira on return with zero rejected pulses. Witness: F:\\GameCult\\GhostlightDungeon\\acceptance\\gestalt-dynamics-7916ab0-strict\\result.json."}

state/map.yaml

@@ -270,6 +270,6 @@ data_flow:
   - If state grows faster than understanding, cut it back.
 
 current_status:
-  summary: Starfire serves immutable release 5e198dfa872a710d31e581dcf2cd0851bef01966 with matching typed health, manifest, executable hash d511629d9a05ef5210edc7dedf38bd842b4dc15cb3e8b43467a6ac54d2d26646, DeepSeek readiness, four persisted campaigns, full public approval previews, canonical destination origin binding, and rollback f9b0ffb. The accepted runtime lineage passes generated opening/role/approval compilation, canonical nonliteral player identity, private assessment, confirmed d20, wait, restart continuity, fork, export, re-selection, and reset. The 24-subject cover passes budgets 1/4/8/32, including a corrected budget-8/provider-8 wave in 18.35 seconds. The strict budget-one rival-arena refugee golden migrates Mira across nested populations, preserves her exact delta and the player through sustained material background activity, and promotes the same person on return.
+  summary: Starfire serves immutable release c4a3d6f38bc6f95a94404a52cbb3401f24a89aab with matching typed health, manifest, executable hash 7a6fe39503cf62b9e6a496cda4e92f1d552f6c7f79a91e2b69e41c9d729ada61, DeepSeek readiness, four persisted campaigns, spoiler-safe player pressure projection, full public approval previews, canonical destination origin binding, and rollback 5e198df. The accepted runtime lineage passes generated opening/role/approval compilation, canonical nonliteral player identity, private assessment, confirmed d20, wait, restart continuity, fork, export, re-selection, and reset. The 24-subject cover passes budgets 1/4/8/32, including a corrected budget-8/provider-8 wave in 18.35 seconds. The strict budget-one rival-arena refugee golden migrates Mira across nested populations, preserves her exact delta and the player through sustained material background activity, and promotes the same person on return.
   next_action: With explicit approval to transmit one temporary invite credential to the local in-app browser, complete the visual authenticated journey and inspect the compiler, assessment, roll, wait, campaign lifecycle, and resolution controls; rotate two fresh invitations afterward. Then begin supervised human playtesting and treat confusion, composite consequences, latency, or low dramatic yield as evidence without weakening state admission.
   gestalt_population: Gestalt Personas own shared population baselines; persistent member deltas own named individuality; WorldKernel materialization and approval-gated fission preserve lineage and identity. Selected actionable member exceptions are mandatory Projector perspective owners, so aggregation cannot silently erase their decision. Presence projection is limited to nearby active leaves and exact-location dormant members, includes reciprocal player relationship evidence, and may propose an earned cast without committing it. Simulation cells are derived covers only.