Soul s1 scratch-symlink-deputy-write: she could plant a link at the
instructions file in the unit's RUNTIME_DIRECTORY and the organ's next write
followed it onto any path the unit's user can write, the hidden trace included.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
stop_all becomes SystemdLauncher::stop(StopScope): a Mind's two exact units,
or the swarm's mind-self@*.service and mind-persona@*.service globs. Both
holds write first, then stop whatever the write's outcome, with the same four
outcomes. Soul s1 swarm-hold-leaves-live-turn-running: a held swarm brake left
a live Persona turn running with its shell until the turn ended.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A 1 ms clock never reaches the session's idle timers (the loop guard fired); the other two new tests passed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Written from mut3's survivors (process-boundary brake read, poll seq bound, flush_text); not yet run when committed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Written from the first mutation run's survivors (unix_ms, the process-boundary brake read, record_refusal, the batch-id arm).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The base is LF; the wip commits rewrote whole files as CRLF, hiding the real diff. Content unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
open_and_launch decides what an open question holds, once, after the breaker reads and just before the admission: LaunchRequest.held and Held's Default are gone, so no caller can launch a held item and a caller's earlier read (claimable) is advisory only. launch::retire_answered and its heartbeat call are deleted: whoever answers retire resolves the claims, and the hold persists until they do. The retire option text is restored to the r4 wording.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Heartbeat poll and Persona turn durations measured on Yggdrasil, the busy
report, the dt cap, what the vote release does and does not promise, the
rerun table (27th by rank), and the crossing bound stated by the rows it
admits.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Conditional integration takes the caller's single saturation report (the
last beat was the floor, or launched nothing because every eligible Mind
was busy) instead of estimating the high limit from its own output; the
slow limit is judged on the integral's own answer, so the vote carry no
longer masks it. A call after a long silence integrates MAX_STEP_MS, not
the outage. The sim gains the swarm's throughput ceiling: per-Mind busy
time from the measured turn duration, a beat that finds every Mind busy
launches nothing, and the controller is told; scenarios cheap-then-x3 and
one-slow-mind exercise it; the band-crossing bound is per scenario.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
s5 findings of cut-self-session-live:
- blocked-recipe-misses-run-held-spec: eureka_state::hold is the one decider
(a question holds the item it is raised in, or every claim of the run it is
raised in; an answer of retire keeps holding the claims still in force).
queue::on_hold and `huginn blocked` both read it.
- hold-read-not-one-snapshot: on_hold returns a Held snapshot that the request
carries; claimable, queue and the gate read it, none reads it again.
- dead-self-holder-stalls-successor: launch::slot is the one reader of whether
a holder lives; claimable asks it, a dead holder is closed by the launch and
the beat's trace says so.
- retire-answer-reopens: launch::retire_answered resolves the claims of an
answered-retire question Withdrawn; the beat runs it before reading briefs.
- held-note-threshold-unpinned: a test pins the note for exactly one held brief.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Replaces the integrate-only-on-advance step: it changed the sampling the gains were tuned against for no gain over an age horizon, and left a replayed reading steering for as long as its age stayed inside it.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
The integral no longer back-calculates to the voted rate (unbounded, it parked
the controller near the vote's burn after release): nothing integrates while
voted, and the gap between the voted rate (inside the beat bounds) and the
controller's own answer is a carry that fades over a poll period after
release. A reading whose observed_at has not advanced is not evidence: the
integral steps only on an advanced reading, at most one longest beat. Two
resets_at within a minute are one window.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Replaces the Mind-wide fresh-brief-waits test with the scenarios of the
run-scoped hold; fail_bundle and beats stay.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Cut claimable's Mind-wide stop on any follow-up question and queue's inline
blocked loop. queue::on_hold is the one reader of what an in-force question
holds (a question raised in a run holds that run's claims, anything else holds
itself); queue, inbox::derive and the open_and_launch gate read it.
Breaker::Trip names the newest ended counted run; the breaker question is
raised in that run; the boundary is the newest of a question raised in the item
and a run claiming it that a question is raised in, so an answer or withdrawal
gives every claim of the run a fresh count. The trip and the held-brief wait
are written to the heartbeat trace.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
