[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_255":256,"_257":258},"routes/_app.x.$handle.$name",{"_95":94,"_31":42,"_104":85,"_26":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":24,"_119":120,"_121":24,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_40":41,"_31":42,"_35":43,"_44":-5,"_45":24,"_46":47,"_48":47,"_49":50,"_51":-5,"_18":52,"_53":-5,"_54":24,"_55":-5,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":24},"version",37,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":20,"_33":34,"_35":36,"_37":14,"_38":39,"_23":24},"previous","deleted",false,"deletedHere","path","V6_PROMOTION.md","latestPath","fileId","23308e38-ac87-11f1-a902-1607ee4eb77e","name","fileType","content","# PROJECT BRAIN VAL BRIDGE PROTOCOL V6\n\n> **Canonical activation condition:** This protocol is authoritative only while the exact production kernel bytes bound below are installed, the current admission-head artifacts match their pinned identities, and fresh production `status` + `verify-chain` + `verify-claim-graph` pass. Any mismatch fails closed before registration or claim.\n\n> **Activation gate:** Protocol V6 no-receipt `CHAT_UNPROVEN` registration/claim is authorized **if and only if** canonical task `BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908` is `COMPLETE`, its `result_event_id` binds to a `TASK_RESULT_COMMITTED` event for that exact task, and the committing activator is not `CHAT_UNPROVEN`. Until then, a no-receipt execution may perform only local Val Town artifact/source reads plus bounded read-only verification after the admission bundle passes; it MUST NOT `register-agent` or `claim`. A preactivation `CHAT_UNPROVEN` lease may not renew or self-commit the activation task. This gate does not grant physical execution provenance or `P_real`.\n\n> **V6 reconciliation delta:** Exact historical comparison shows the Protocol-V5-pinned kernel was 83008 bytes / SHA-256 `600ddab6a1591a34a7e22e06a41fb2f5a838267f3b56e33c809d08ac6471f756`, while current production is 84299 bytes / SHA-256 `087cb4b5a57c16a6f19353357704fe943d7341961690aff11ec36c75ca5d8af9`. The four post-V5 drift regions are not accepted wholesale. Protocol V6 restores the V5-pinned claim-selector semantics, including all legacy reviewer/distinctness context fences, and removes the hard `<128 active slots => scaling-only claims` rule because `SUPERHERO_REALIZATION_FOCUS_POLICY_V1` explicitly requires first-superhero completion before staged scaling. Two deliberate hardenings remain: (1) the previously protocol-level CHAT_UNPROVEN activation rule is now structurally enforced in the kernel, including exact activation-task/event binding and anti-self-activation fences; and (2) `migrate-task-invariants` is removed from the atomically qualified mutation allowlist while remaining recognized/fail-closed. Bound production kernel: 85474 bytes / SHA-256 `e38c8bc4b78aed9199ba5e3f4b79b95f5914a508f9069fe10e75fcf8767227c9`. Builder static/semantic regression is 38/38 PASS. External model review attempts were non-diagnostic and are not counted as verification.\n\n## Purpose\n\nNormal ChatGPT project work uses Val Town as the only ChatGPT-facing transport to the canonical Project Brain. Direct Sprites connector calls are maintenance-only because they can trigger separate file-materialization approval prompts.\n\nNormal path:\n\n`ChatGPT → Val Town → brain_bridge_jobs → authority-selected Brain executor → canonical Brain`\n\nVal/project: `mosadek/project-brain-live-v1-durable` \nQueue: `brain_bridge_jobs` \nControl-plane authority: `brain_control_plane_authority_v1`\n\n## Mandatory cognitive constitution\n\nBefore substantive Project Brain reasoning, planning, claiming, implementation, review, or promotion, every worker MUST load the current constitution-head pointer:\n\n- head pointer: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`\n\nThen load the exact registry and constitution URIs named by that head and verify the constitution bytes against the head's SHA-256 before relying on it.\n\nCurrent verified admission-head artifacts for Protocol V6 (still re-read the head pointer; these values are not a substitute for it):\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/PROJECT_BRAIN_THINKING_CONSTITUTION_V4.md`, 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/USER_TEACHING_REGISTRY_V5.json`, 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`.\n\nThe constitution is project-level operating law after system/safety/platform-enforced policy and the user's current explicit instruction.\n\nBoot is cognitively incomplete if the constitution head was not loaded. Memory summaries, old prompts, role descriptions, and historical architecture are discovery pointers only and do not substitute for the current head.\n\nMandatory reasoning invariants include:\n- FASTEST RIGHT WAY: minimize real wall-clock time to the correct independently verified goal;\n- first-principles decomposition before accepting architecture assumptions;\n- CURRENT IMPLEMENTATION LIMIT != MISSION LIMIT;\n- do not label platform/tool/quota/API/UI limitations fundamental without active elimination attempts;\n- delete/replace useless or materially suboptimal mechanisms when that improves the mission objective;\n- continuously recompute the critical path;\n- treat platforms/providers/tools as replaceable tactics;\n- prefer structural enforcement over permanent intelligent babysitting when both preserve the invariant;\n- preserve exact evidence and fail closed rather than hallucinating success;\n- distinguish COMPLETE from PASS, configuration from execution, and logical identity from real execution provenance.\n\nFuture durable user teachings are cumulative unless explicitly superseded. Preserve them as immutable user-directive evidence, classify them as EXTENDS / REFINES / SUPERSEDES, create a successor constitution version, update the registry head, and preserve prior versions. Never silently overwrite the user's reasoning doctrine.\n\nAt epoch 2 the live canonical writer is currently `val_native`. The historical host worker identity `project-brain-live-v1-worker-v2` remains compatibility evidence, not current writer authority.\n\n## Mandatory health interpretation\n\nThe HTTP endpoint being reachable is NOT proof that the authority-selected Brain executor is alive.\n\n`brain_bridge_worker.ts /health` is the historical host-bridge worker health surface. Its `worker_state` applies only to that host worker. Read `control_plane_authority.writer` before interpreting it:\n\n- if writer is `host_bridge`, HTTP 200/503 and `worker_state` are relevant to canonical executor liveness;\n- if writer is `val_native`, a stale host heartbeat does NOT mean the canonical control plane is down;\n- `endpoint_ok:true` only proves the Val endpoint itself is executing;\n- `worker_health_scope:HOST_BRIDGE_WORKER_ONLY` is an explicit interpretation fence;\n- `instance_identity_available:false` means the historical host worker has not supplied a distinct process instance ID. Do not overclaim process identity;\n- canonical status/chain/claim-graph receipts remain the authoritative proof of Brain state reached through the current writer path.\n\nCurrent Val-side invariants:\n- priority cap: `1_000_000_000`;\n- selection above the cap: FIFO by `created_at,id`;\n- maximum Brain command timeout: `120 seconds`;\n- queue lease: `180 seconds`;\n- atomic single-flight per `worker_id`;\n- an active unexpired lease is not redelivered to another poll sharing that worker ID;\n- a pre-existing duplicate active lease for one worker ID fails closed;\n- expired queue leases are terminalized `FAILED` on a worker poll with `TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN`; they are not automatically returned to READY;\n- an expired/unknown attempt must be reconciled against canonical state before any retry is submitted under a new job ID;\n- results are accepted only for the current unexpired lease owner.\n\nThese are transport invariants, not Brain authority.\n\n## Canonical freshness vs durability\n\nCanonical Brain integrity and independently verified replica durability are separate facts.\n\nThe worker health body exposes:\n\n- `durability.canonical_generation`;\n- `durability.max_verified_replica_generation`;\n- `durability.verified_replica_count`;\n- `durability.lag_generations`;\n- `durability.state = CURRENT | LAGGING | UNKNOWN`.\n\nInterpretation:\n\n- a canonical generation newer than the latest verified replica is valid canonical progress, but it is NOT fully replicated durability;\n- never report `fully durable` while `lag_generations > 0`;\n- durability lag does not by itself invalidate read-only canonical status/verification;\n- before destructive cleanup, authority transition, or a claim whose consequence depends on recoverability, explicitly account for the lag and preserve consequential evidence first;\n- never hide durability lag by reading an older replica as though it were current canonical state.\n\n## Val-native bound-attempt commit liveness\n\nThe Brain kernel keeps the strict `expected-workstream-generation` commit guard, and the epoch-2 Val-native executor keeps the authenticated queue `payload_json` byte-identical for the lifetime of one transport attempt. Production does not transparently rewrite a commit payload to inject a fresher generation.\n\nTo prevent admission churn from starving an already-READY commit, the transport selector applies a bounded commit-position barrier. A valid READY `status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim` job may not leapfrog a valid READY `commit` that is older by `created_at`, with `rowid` breaking same-timestamp ties. `recover-stale` remains recovery-first. Admission/read jobs genuinely older than the commit retain their existing place, and the same-second register-before-claim invariant remains unchanged.\n\nThis barrier does not declare unrelated canonical mutations semantically harmless. If an earlier mutation legitimately advances the workstream before a commit executes, the strict kernel may still return `STALE_WORKSTREAM_WRITE`; the caller must reconcile canonical state and submit a new job ID with a fresh expected generation. The bounded guarantee is narrower and auditable: later boot/read admission traffic cannot indefinitely leapfrog an older READY commit. Exact job, lease instance, lease attempt, transport generation, authority epoch, payload identity, task lease, dependency/guard/write semantics, and duplicate-terminal fences remain unchanged.\n\nHistorical evidence for the earlier task-local stable-retry design remains at `valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/val_native_stable_commit_retry_v1.json`, including its independent `artifact_present` falsification and repair. That mechanism is historical evidence, not the current production dispatch behavior.\n\n\n## Live-fabric boot admission (normal path)\n\nA fresh ChatGPT context is **not** proof of a physically distinct or superhero-qualified execution merely because it can choose a new `agent_id`, write a queue row, or read this protocol. Logical identity is not physical execution provenance.\n\nBefore a normal worker emits any boot-cohort queue traffic (`status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim`), the current cognitive-constitution head and every current registry/definition/focus-policy artifact it relies on for admission MUST be loaded from the connected Val Town project surfaces and byte/hash-verified. Missing, stale, ambiguous, or mismatched hashes fail closed before registration or claim.\n\nFor **Protocol V6**, the exact admission bundle is:\n\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`;\n- production `val_native_kernel_v1.ts`: 85474 bytes, SHA-256 `e38c8bc4b78aed9199ba5e3f4b79b95f5914a508f9069fe10e75fcf8767227c9`.\n\nThe head's referenced URIs are authoritative for the four directive artifacts above. Protocol V6 is active only while canonical production matches the bound kernel identity and the activation gate above is satisfied. Any later head, referenced-artifact, or production-kernel mismatch makes Protocol V6 no-receipt admission stale and fail-closed until a successor explicitly reconciles the new bytes. Never treat historical candidate identity, comments, or builder tests as production activation evidence.\n\nAfter that verification there are exactly two ChatGPT admission classes:\n\n1. **Positively admitted execution.** If this execution is given a current project-controlled fabric/admission execution-incarnation receipt, validate the receipt exactly as before: it must be positively exposed rather than invented in model text, indicate `BOOTING` or `RUNNING`, carry an unexpired liveness signal, bind the intended logical identity/workstream/capability declaration, and contain no unresolved duplicate-incarnation ambiguity.\n2. **Ordinary unproven contribution.** If no positive execution-incarnation receipt is exposed, the execution MAY enter only as agent `type=CHAT_UNPROVEN`. This is a useful-contribution lane, not execution provenance. It proves neither physical distinctness, independent-review eligibility, autonomous proven supply, superhero capacity, nor any `P_real` increment.\n\nCaller-authored payload fields, a registry row, a queue row, a chat transcript, memory, a different `agent_id`, schedule ownership, heartbeat ownership, or a candidate-only attestation never upgrade `CHAT_UNPROVEN` into a proven execution.\n\nThe production kernel is the trust boundary for the unproven lane. Before using that lane, callers MUST verify that the current authority-selected kernel still enforces all of the following machine semantics:\n\n- `execution_distinct` is fail-closed unless a separately accepted positive ingress exists;\n- `CHAT_UNPROVEN` is categorically rejected for `execution_distinct`, even if a later positive ingress exists;\n- legacy machine-readable independence markers, including `independent_verification` and the current reviewer/distinctness context flags, are skipped by `CHAT_UNPROVEN`;\n- a `CHAT_UNPROVEN` `TASK_RESULT_COMMITTED` event receives kernel-injected `contributor_trust_class=CHAT_UNPROVEN`, `contributor_agent_type=CHAT_UNPROVEN`, `independence_eligible=false`, and `p_real_eligible=false`;\n- caller-controlled trust metadata cannot upgrade the result;\n- ordinary claim, lease, CAS, write-conflict, dependency, guard, and authority fences remain unchanged.\n\nIf those kernel semantics cannot be positively verified, the no-receipt lane fails closed and MUST NOT register or claim.\n\nFor either admission class, consume a current shared/coalesced status + chain + claim-graph receipt when one is available and correctly bound to the current authority/head. A `CHAT_UNPROVEN` execution may refresh missing/stale read-only verification through the normal Val-native queue only after the local hash prerequisites above pass; avoid one redundant verification trio per execution whenever a valid shared receipt exists.\n\nCurrent verified ChatGPT-specific boundary at this revision remains:\n\n- `BRAIN-CHAT-MCP-SESSION-EXECUTION-PROVENANCE-P0-V1-20260908` concluded `EXTERNAL_PRODUCT_CONNECTION_BOUNDARY`;\n- positive physical ChatGPT-session provenance is **not proven**;\n- `P_real` increment from that candidate is `0`;\n- a different logical `agent_id` alone is not evidence of a distinct ChatGPT execution.\n\nTherefore lack of a positive execution-incarnation receipt no longer blocks all useful work. It restricts the execution to `CHAT_UNPROVEN` ordinary contribution, with independence-sensitive work and proven-capacity accounting structurally unavailable.\n\nThe repaired cohort fast path is also **not production-qualified** at this revision. Current reconciled V3R1 candidate SHA-256 is `4031e62868abc9d7562f33e3986f0f5a29ec71c0a19b8e75ee4520071ef6e7ee`; its builder/self-falsification evidence is candidate-only, its genuinely distinct second-party gate remains required, and production integration is forbidden until that gate and any later promotion/integration gates pass. Do not route normal boot through it merely because it is faster in tests.\n\nBoth the positively admitted path and the `CHAT_UNPROVEN` fallback use the individual compatibility sequence described below when no qualified cohort path is available. That sequence creates a logical Brain identity and task lease; it does not retroactively prove the physical execution that invoked it.\n\nProtected UI creation is not a boot mechanism. Normal boot MUST NOT require or automate ChatGPT **New Chat**, prompt pasting, `Got it`/modal dismissal, browser clicking, rate-limit evasion, fake identities, or one Val branch per agent. Manual New Chat is emergency fallback only, not normal capacity provisioning.\n\n## Submit a Brain command\n\nInsert a unique job:\n\n```sql\nINSERT INTO brain_bridge_jobs\n(id, priority, op, payload_json, state, lease_owner, lease_expires_at,\n result_json, error_json, created_at, updated_at)\nVALUES (?, ?, 'brain', ?, 'READY', NULL, NULL, NULL, NULL,\n datetime('now'), datetime('now'))\n```\n\nBrain payload is closed-schema:\n\n```json\n{\"args\":[\"status\"],\"timeout\":60}\n```\n\nRequirements:\n- exact top-level keys: `args`, `timeout`;\n- `args` is a non-empty string array;\n- `timeout` is an integer from 1 through 120;\n- `status`, `verify-chain`, and `verify-claim-graph` take no additional Brain arguments;\n- `renew-lease` uses canonical `--seconds`; stale `--lease-seconds` is rejected fail-closed;\n- `boot`, `boot-agent`, `recover-leases`, unsupported artifact commands, and payloads with extra top-level fields are not compatibility aliases.\n\nRecognized Brain subcommands at the bridge syntax layer:\n- status\n- verify-chain\n- verify-claim-graph\n- register-agent\n- ensure-task\n- delegate-task\n- claim\n- renew-lease\n- commit\n- checkpoint\n- add-claim\n- invalidate-claim\n- supersede-task-context\n- migrate-task-invariants\n- reconcile-causal-blocks\n- recover-stale\n\nDo not confuse `recognized` with `currently executable`.\n\nWhile control-plane authority is epoch-2 `val_native`, the current atomically qualified execution surface is exactly:\n- read-only: `status`, `verify-chain`, `verify-claim-graph`;\n- mutation: `register-agent`, `ensure-task`, `claim`, `renew-lease`, `commit`, `recover-stale`, `supersede-task-context`.\n\nThe remaining recognized mutators other than the explicitly qualified set above are implemented but deliberately fail closed with `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` until an independently verified reactivation changes the canonical Val-native allowlist. Clients MUST NOT enqueue them merely because the syntax layer recognizes their names. Re-read the current authority-selected executor before relying on a newly reactivated mutator.\n\nAnything outside the recognized syntax surface fails at Val-side dispatch rather than being sent onward.\n\n## Boot semantics\n\nThere is currently NO valid atomic `boot` bridge command.\n\nThe public bridge previously advertised `boot`, but the live kernel accepts `boot-agent` while the persistent executor rejects raw `boot-agent`. Therefore neither spelling is a valid end-to-end bridge operation.\n\n**Normal fresh-chat boot is the live-fabric admission gate above, not blind `register-agent → claim`.** A fresh context must first verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected kernel semantics.\n\nAfter those checks:\n\n- if a valid positive execution-incarnation receipt is exposed, use the admitted execution class and preserve its exact receipt-bound type/capability semantics;\n- if no positive receipt is exposed, use only `type=CHAT_UNPROVEN`;\n- if the required hashes, chain/claim-graph state, or `CHAT_UNPROVEN` kernel fences cannot be verified, stop before registration/claim.\n\nThe individual **compatibility** sequence for either allowed class is:\n\n1. consume or refresh bounded `status` + `verify-chain` + `verify-claim-graph` evidence as required by the live-fabric rules;\n2. `register-agent`;\n3. `claim`.\n\nThis sequence establishes only the logical Brain identity and task lease. For `CHAT_UNPROVEN`, it explicitly does **not** prove private model cognition, distinct physical ChatGPT execution, independent-review eligibility, superhero capacity, autonomous proven supply, or `P_real`.\n\nThe transport selector preserves a same-second paired compatibility invariant: when READY `register-agent` and `claim` jobs have the same `created_at` and exact agent identity, the registration is selected before its claim even if the claim has a higher submitted priority. Clients must not depend on priority to reverse that order.\n\nRegister only capabilities actually present in the execution. Never claim `human_authority_approval`. A no-receipt execution MUST register with `--type CHAT_UNPROVEN`; using `CHAT`, `PROVEN_EXECUTION`, or another stronger label without the corresponding positive admission evidence is forbidden.\n\nNo-receipt ordinary contribution example:\n\n```text\nregister-agent --workstream --role \n --type CHAT_UNPROVEN --capabilities \n\nclaim --agent --mode INTERACTIVE --lease-seconds 1800\n --constitution-version \n --constitution-sha256 \n --registry-version \n```\n\nA positively admitted execution may use the same sequence with its exact receipt-authorized type instead of `CHAT_UNPROVEN`.\n\nDo not submit `boot` or `boot-agent` until a later verified bridge/executor revision explicitly restores an atomic wrapper. Do not promote the candidate cohort path until its required distinct second-party and production-integration gates actually pass.\n\n## Lease recovery semantics\n\nCanonical Brain task-lease recovery is exposed through exactly one bridge spelling:\n\n```json\n{\"args\":[\"recover-stale\"],\"timeout\":60}\n```\n\nRequirements:\n- the Brain subcommand is exactly `recover-stale`;\n- `args` contains exactly that one string and no additional arguments;\n- `timeout` remains an integer from 1 through 120;\n- `recover-leases` is intentionally rejected and is not an alias;\n- unknown recovery spellings fail closed at Val-side dispatch.\n\nVal transport queue-lease expiry remains a separate transport mechanism. The worker detects expired transport attempts on poll and terminalizes them `FAILED` with unknown canonical outcome; it does not treat transport expiry as proof that the Brain command had no effect.\n\nEnd-to-end evidence: queue job `chat-sol-20260906-0139-recover-stale-v5-z91` completed through the persistent V5 worker at Brain generation 1321 and recovered three expired canonical task leases. This establishes the current recovery path; it does not prove permanent executor liveness or transport attempt-fencing.\n\n## Poll a job result\n\n```sql\nSELECT id,state,lease_owner,lease_expires_at,result_json,error_json,updated_at\nFROM brain_bridge_jobs\nWHERE id=?\n```\n\nTerminal states:\n- COMPLETE\n- FAILED\n\nA READY job means it has not been executed. A LEASED job is not complete. Do not infer canonical mutation from queue state alone.\n\n## Read project/Brain text without Sprites\n\nThe currently authoritative epoch-2 `val_native` executor accepts only `op='brain'`. It rejects queue `op='read_text'` with `VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP`.\n\nTherefore while `brain_control_plane_authority_v1.writer='val_native'`:\n\n- DO NOT enqueue `read_text` jobs for `/brain/JOIN_PROTOCOL.md` or artifacts;\n- read Val-hosted project source/protocol files through the connected Val Town file tools;\n- obtain canonical Brain state through the allowed `brain` commands and bounded project-controlled read-only canonical views;\n- do not convert a missing transport read operation into a reason to call Sprites.\n\nThe historical host bridge still contains a bounded `read_text` implementation for compatibility. It is eligible only if `host_bridge` is again the authoritative writer and the exact current executor path is independently shown to support it. Historical successful reads do not establish epoch-2 support.\n\n## Hard transport rule\n\nRoutine ChatGPT work:\n- DO NOT call Sprites;\n- DO NOT call Sprites.exec;\n- DO NOT call Sprites.file_read/file_write/file_copy/file_delete;\n- DO NOT call Sprites service/checkpoint/file/blob operations.\n\nIf a required operation is missing:\n1. use an existing valid non-Sprites substrate when possible;\n2. route or build a bridge extension;\n3. fail closed if the missing operation is necessary;\n4. direct Sprites remains an explicit maintenance emergency, not an automatic fallback.\n\n## Failure behavior\n\nIf a fresh context lacks a valid positive execution incarnation:\n- verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected `CHAT_UNPROVEN` kernel fences;\n- if those checks pass, enter only through the bounded `CHAT_UNPROVEN` ordinary-contribution path;\n- if any prerequisite is missing, stale, ambiguous, mismatched, or the kernel no longer enforces the unproven trust boundary, enqueue no registration/claim and return the exact failing prerequisite;\n- never reinterpret absence of a positive receipt as physical-session proof, independent-review eligibility, proven autonomous supply, superhero capacity, or `P_real`.\n\nFor already-admitted work, if jobs stay READY:\n1. inspect `/health`;\n2. inspect worker endpoint traces;\n3. inspect the current active/expired queue leases;\n4. do not raise transport priorities above the cap to win a queue arms race;\n5. do not interpret the Val endpoint being online as the Brain worker being online.\n\nIf worker health is DOWN:\n- queued commands remain pending;\n- no live Brain registration, claim, commit, status, or verification should be invented;\n- Val-side code/evidence work may continue when it does not pretend to mutate canonical Brain;\n- repair/restore the persistent executor through an authorized route, then resume queue processing.\n\n## Proven facts and bounded claims\n\nThe reverse bridge has successfully:\n- read Brain status;\n- created canonical Brain tasks;\n- registered CHAT agents;\n- claimed tasks;\n- committed task results;\n- run verify-chain and verify-claim-graph.\n\nThe Val-side worker has independently reproduced and repaired the same-worker concurrent lease race in isolated queue tests. This does NOT prove the persistent Sprite-side executor is permanently supervised or continuously alive.\n\n## Val branch capacity rule\n\nNormal ChatGPT/Brain work MUST NOT create one Val Town branch per agent.\n\nUse task-scoped project blobs for scratch/evidence first. Use task-namespaced files on `main` only when shared executable/source bytes are necessary and the Brain task's declared write-resource lease permits them. Use a bounded reusable scratch branch only when branch isolation is causally required. A net-new branch requires an explicit task need, a branch-headroom check, and a preservation/cleanup plan.\n\nDo not delete a branch merely because it is old, low-version, or apparently merged. Before deletion apply `VAL_BRANCH_LIFECYCLE_POLICY_V1.md`; any unresolved dependency or unique-evidence question means KEEP.\n\nThe scaling invariant is:\n\n`d(live_branch_count) / d(agent_count) = 0`\n\nThis keeps the reproduced Val Town branch ceiling out of the normal agent-admission path.\n\n## Goal\n\nNormal project work must stay materialization-free from ChatGPT while remaining fail-closed:\n\n`verified local project state → {positive admitted execution | CHAT_UNPROVEN ordinary contributor} → Val Town → durable queue → authority-selected live executor → verified Brain`\n\nA fresh ChatGPT context with no positively exposed project-controlled execution incarnation may now contribute ordinary work only as `CHAT_UNPROVEN` after the required hash/kernel/Brain checks pass. It remains excluded from independence-sensitive acceptance and proven-capacity accounting. If the live executor disappears, the system must say so rather than smiling with HTTP 200 like a malfunctioning status page.\n\n## Epoch-2 external-artifact registration candidate (not production-qualified)\n\n`record-external-artifact` is implemented in `val_native_kernel_v1.ts` as a **candidate-only** current-epoch port. It is intentionally absent from `REACTIVATION_MUTATION_ALLOWLIST`, so production dispatch must return `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` and perform no canonical artifact/event mutation.\n\nThe candidate:\n- accepts only the closed `{args, timeout}` envelope and a closed artifact flag grammar;\n- forbids `human_authority_approval` escalation;\n- accepts only project-scoped `valblob:mosadek/project-brain-live-v1-durable/…` evidence and verifies exact blob size + SHA-256;\n- makes an exact repeated registration a semantic no-op at artifact/event/generation/workstream-head level;\n- fails closed on conflicting metadata or duplicate canonical rows for the same SHA-256;\n- inherits epoch-2 exact-attempt mutation receipts, transport fencing, chain/claim-graph circuit breaking, and unknown-outcome terminalization.\n\nDo **not** add this command to the live mutation allowlist, advertise it as qualified capacity, or execute the preserved 137-byte canonical probe until a genuinely distinct second-party review returns PASS under the current CHAT-execution distinctness rules. A different `agent_id` alone is not proof of a different physical ChatGPT execution.\n","createdAt",["D",1788983183596],"branchVersion","branchId","e0ebc978-a9b4-48c4-b5ec-85909efb7de7","id","2d65e634-d1cb-41f7-ac9d-74f693a553eb","brain-protocol-v5-kernel-reconcile-0909",["D",1788973496479],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Nonprod V5 current-kernel admission repair","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","2d65e634d1cb41f7ac9d74f693a553eb","tursoHostname","2d65e634d1cb41f7ac9d74f693a553eb-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789504908499],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":52,"_100":101,"_102":24},"branch",{"_13":84,"_31":85,"_40":39,"_86":41,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":42,"_93":94},"isOwned",39,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_40":41,"_31":42,"_35":250,"_44":-5,"_45":24,"_46":47,"_48":47,"_49":50,"_51":-5,"_18":52,"_53":-5,"_54":24,"_55":-5,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":64,"_65":251,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":252,"_79":253,"_81":254,"_83":24},"tree",[213,214,215,216,217,218,219,220,221],"files",[213,214,215,216,217,218,219,220,221],"counts",{"_203":58,"_204":191,"_205":58,"_206":207,"_208":209},"contents",[126,127,128,129,130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_40":195,"_31":196,"_29":197,"_138":-5,"_38":39,"_37":198,"_140":141,"_35":199,"_13":200,"_32":20,"_33":201,"_23":24,"_146":-5,"_26":202},{"_40":188,"_31":189,"_29":190,"_138":-5,"_38":39,"_37":191,"_140":141,"_35":192,"_13":58,"_32":20,"_33":193,"_23":24,"_146":-5,"_26":194},{"_40":185,"_31":27,"_29":30,"_138":-5,"_38":39,"_37":14,"_140":141,"_35":186,"_13":58,"_32":20,"_33":34,"_23":24,"_146":-5,"_26":187},{"_40":177,"_31":178,"_29":179,"_138":-5,"_38":39,"_37":180,"_140":141,"_35":181,"_13":182,"_32":144,"_33":183,"_23":24,"_146":-5,"_26":184},{"_40":170,"_31":171,"_29":172,"_138":-5,"_38":39,"_37":173,"_140":141,"_35":174,"_13":58,"_32":144,"_33":175,"_23":24,"_146":-5,"_26":176},{"_40":163,"_31":164,"_29":165,"_138":-5,"_38":39,"_37":166,"_140":141,"_35":167,"_13":58,"_32":144,"_33":168,"_23":24,"_146":-5,"_26":169},{"_40":156,"_31":157,"_29":158,"_138":-5,"_38":39,"_37":159,"_140":141,"_35":160,"_13":58,"_32":144,"_33":161,"_23":24,"_146":-5,"_26":162},{"_40":148,"_31":149,"_29":150,"_138":-5,"_38":39,"_37":151,"_140":141,"_35":152,"_13":153,"_32":144,"_33":154,"_23":24,"_146":-5,"_26":155},{"_40":135,"_31":136,"_29":137,"_138":-5,"_38":39,"_37":139,"_140":141,"_35":142,"_13":143,"_32":144,"_33":145,"_23":24,"_146":-5,"_26":147},"c599638f-3d81-43d9-883d-7fdf49beff76","static_test.ts","d064c6e4-ac70-11f1-a107-1607ee4eb77e","parentId",36,"latest",true,["D",1788983057028],5,"script","import * as ts from \"https://esm.sh/typescript@5.9.2\";\nconst U=\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/kernel_candidate.ts\";\nconst r=await fetch(U,{headers:{\"cache-control\":\"no-store\"}});\nconst raw=await r.text();\nconst first=raw.indexOf(\"\\n\");\nconst c=raw.startsWith(\"/* Open in Val Town:\")&&first>=0?raw.slice(first+1):raw;\nconst tr=ts.transpileModule(c,{compilerOptions:{target:ts.ScriptTarget.ES2022,module:ts.ModuleKind.ESNext},reportDiagnostics:true,fileName:\"kernel_candidate.ts\"});\nconst syntaxErrors=(tr.diagnostics||[]).filter(d=>d.category===ts.DiagnosticCategory.Error).map(d=>ts.flattenDiagnosticMessageText(d.messageText,\" \"));\nfunction count(s:string){return c.split(s).length-1}\nfunction activation(state:string,resultEvent:number|null,eventType:string|null,activatorType:string|null){\n if(state!==\"COMPLETE\"||!Number.isInteger(Number(resultEvent)))return false;\n if(Number(resultEvent)-1991<1)return false;\n if(eventType!==\"TASK_RESULT_COMMITTED\")return false;\n if(!activatorType||activatorType===\"CHAT_UNPROVEN\")return false;\n return true;\n}\nconst allowMatch=c.match(/const REACTIVATION_MUTATION_ALLOWLIST=new Set\$\\[([^\\]]+)\\]\$;/);\nconst allow=allowMatch?JSON.parse(\"[\"+allowMatch[1]+\"]\"):[];\nconst checks:any[]=[\n [\"syntax_clean\",syntaxErrors.length===0],\n [\"activation_task_literal_once\",count(\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\")===1],\n [\"activation_helper_present\",count(\"async function chatUnprovenActivation()\")===1&&count(\"async function requireChatUnprovenActivation()\")===1],\n [\"register_guard_present\",c.includes('if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}')],\n [\"claim_guard_present\",c.includes('if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}')],\n [\"activation_renew_fence_present\",c.includes(\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\")],\n [\"activation_commit_fence_both_paths\",count(\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\")===2],\n [\"migrate_removed_from_live_allowlist\",!allow.includes(\"migrate-task-invariants\")],\n [\"migrate_still_recognized\",c.includes('\"migrate-task-invariants\"')&&c.includes('if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a)')],\n [\"unqualified_mutator_fail_closed_present\",c.includes(\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\")],\n [\"execution_distinct_ingress_still_false\",c.includes(\"const EXECUTION_DISTINCT_INGRESS_QUALIFIED=false\")],\n [\"chat_unproven_execution_distinct_still_rejected\",c.includes('if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false')],\n [\"chat_unproven_trust_injection_preserved\",c.includes('contributor_trust_class:\"CHAT_UNPROVEN\"')&&c.includes(\"independence_eligible:false\")&&c.includes(\"p_real_eligible:false\")],\n [\"legacy_flag_identity_gate_pending\",c.includes('\"identity_gate_pending\"')],\n [\"legacy_flag_prevent_self_review\",c.includes('\"prevent_self_review\"')],\n [\"legacy_flag_self_certification_forbidden\",c.includes('\"self_certification_forbidden\"')],\n [\"legacy_flag_physical_chat_execution_distinctness_required\",c.includes('\"physical_chat_execution_distinctness_required\"')],\n [\"legacy_flag_reviewer_must_be_distinct\",c.includes('\"reviewer_must_be_distinct\"')],\n [\"legacy_flag_reviewer_must_be_distinct_from_refresh_executor\",c.includes('\"reviewer_must_be_distinct_from_refresh_executor\"')],\n [\"legacy_flag_reviewer_must_be_physically_distinct\",c.includes('\"reviewer_must_be_physically_distinct\"')],\n [\"legacy_flag_reviewer_must_be_physically_distinct_chat_execution\",c.includes('\"reviewer_must_be_physically_distinct_chat_execution\"')],\n [\"legacy_flag_reviewer_must_differ\",c.includes('\"reviewer_must_differ\"')],\n [\"legacy_flag_reviewer_must_differ_from_builder\",c.includes('\"reviewer_must_differ_from_builder\"')],\n [\"legacy_flag_reviewer_must_differ_from_source_contributors\",c.includes('\"reviewer_must_differ_from_source_contributors\"')],\n [\"legacy_flag_reviewer_population_must_be_distinct\",c.includes('\"reviewer_population_must_be_distinct\"')],\n [\"legacy_flag_do_not_infer_distinctness_from_agent_id\",c.includes('\"do_not_infer_distinctness_from_agent_id\"')],\n [\"legacy_do_not_claim_marker\",c.includes('if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;')],\n [\"independent_verification_sensitive\",c.includes('if(req.has(\"independent_verification\"))return true;')],\n [\"v5_selector_signature_restored\",c.includes('function unprovenIndependenceSensitive(req:Set,ctx:any){')&&!c.includes('function unprovenIndependenceSensitive(req:Set,ctx:any,guards:any[]=[]){')],\n [\"no_mandatory_scaling_floor\",!c.includes(\"MANDATORY_ACTIVE_EXECUTION_FLOOR\")&&!c.includes(\"SCALE_TARGET_ACTIVE_EXECUTION_SLOTS\")],\n [\"no_scaling_claim_starvation\",!c.includes(\"scalePressure\")&&!c.includes(\"isScalingSupplyTask\")&&!c.includes(\"activeExecutionSlots\")],\n [\"status_no_scaling_override\",!c.includes(\"scaling_policy:{mandatory:true\")],\n [\"ready_activation_rejected\",activation(\"READY\",null,null,null)===false],\n [\"complete_missing_event_rejected\",activation(\"COMPLETE\",null,null,null)===false],\n [\"activation_event_task_binding_present\",c.includes(\"String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK\")],\n [\"complete_wrong_event_rejected\",activation(\"COMPLETE\",2001,\"TASK_LEASED\",\"CHAT\")===false],\n [\"complete_by_unproven_rejected\",activation(\"COMPLETE\",2001,\"TASK_RESULT_COMMITTED\",\"CHAT_UNPROVEN\")===false],\n [\"complete_by_nonunproven_allowed\",activation(\"COMPLETE\",2001,\"TASK_RESULT_COMMITTED\",\"CHAT\")===true]\n];\nconst out={schema:\"PROTOCOL_V5_CURRENT_KERNEL_RECONCILIATION_STATIC_TEST_V1\",http:r.status,source_chars:c.length,syntax_errors:syntaxErrors,live_allowlist:allow,total:checks.length,passed:checks.filter(x=>x[1]).length,checks:Object.fromEntries(checks),pass:r.ok&&syntaxErrors.length===0&&checks.every(x=>x[1]),canonical_mutation:false,production_mutation:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0};\nconsole.log(JSON.stringify(out,null,2));\nexport default out;","label",[136],"2b9bae36-cfc5-487f-b902-1b62bd94b1ea","kernel_candidate.ts","01a08721-4d42-74c6-ae3e-5eccc3a2cbf7",35,["D",1788983055720],13,"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst rootSqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenActivation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type,task_id FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING_OR_MISBOUND\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenActivation(){\n const a:any=await chatUnprovenActivation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V5_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n for(const r of q.rows||[]){\n if(!r.dedupe_key)continue;if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId)continue;\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n if(ctx.execution_allowed===false)continue;const independenceSensitive=unprovenIndependenceSensitive(req,ctx);if(independenceSensitive&&(unproven||EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;if([...req].some(x=>NON_AGENT.has(x)))continue;if([...req].some(x=>!C.has(x)))continue;\n if(!await depsSatisfied(r)||!await guardsSatisfied(r,agentId)||await writeConflict(r))continue;return r\n }return null\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n await sqlite.execute({sql:`DELETE FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[transportContext.job_id,transportContext.lease_attempt_id]});\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n",[149],"1992a623-41f8-4631-8ce1-e790c39070c0","independent_review_receipt.ts","4964f85a-ac73-11f1-a84d-1607ee4eb77e",34,["D",1788974657761],"const U=\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/kernel_candidate.ts\";\nconst model=\"poolside/laguna-s-2.1:free\";\nconst raw=await fetch(U,{headers:{\"cache-control\":\"no-store\"}}).then(r=>r.text());\nconst first=raw.indexOf(\"\\n\"),c=raw.startsWith(\"/* Open in Val Town:\")&&first>=0?raw.slice(first+1):raw;\nfunction seg(start:string,end:string){const i=c.indexOf(start),j=c.indexOf(end,i+start.length);if(i<0||j<0)throw new Error(\"SEGMENT_NOT_FOUND:\"+start);return c.slice(i,j)}\nconst evidence=[\n seg(\"const CHAT_UNPROVEN_ACTIVATION_TASK\",\"function flags(\"),\n seg(\"async function register(\",\"async function ensureTask(\"),\n seg(\"async function claim(\",\"async function renew(\"),\n seg(\"async function renew(\",\"async function recover(\"),\n seg(\"async function commit(args:string[])\",\"async function validateEvidenceRefs\"),\n seg(\"async function commitFull(\",\"const CHECKPOINT_STATE_TABLES\"),\n seg(\"const EXECUTION_DISTINCT_INGRESS_QUALIFIED\",\"async function guardsSatisfied(\"),\n 'CURRENT_ALLOWLIST='+String(c.match(/const REACTIVATION_MUTATION_ALLOWLIST=new Set\$\\[([^\\]]+)\\]\$;/)?.[1]??\"\")\n].join(\"\\n---\\n\");\nconst prompt=[\n \"Perform adversarial reachability review only. Find a concrete reachable bypass of these invariants or PASS:\",\n \"1 preactivation no-receipt CHAT_UNPROVEN cannot register/claim;\",\n \"2 activation requires exact activation task COMPLETE with bound TASK_RESULT_COMMITTED by non-CHAT_UNPROVEN;\",\n \"3 preactivation CHAT_UNPROVEN activation-task lease cannot renew/self-commit into authorization;\",\n \"4 CHAT_UNPROVEN cannot satisfy execution-distinct and commit trust stays independence_eligible=false,p_real_eligible=false;\",\n \"5 migrate-task-invariants must remain outside live mutation allowlist.\",\n \"A COUNTEREXAMPLE counts only if its ordered transitions satisfy source preconditions. commit/commitFull require lease_owner===agent. renew requires state===LEASED and lease_owner===agent. successful commit sets COMPLETE and clears lease fields.\",\n \"Return ONLY compact JSON keys verdict,reachable_sequence,violated_invariant,source_reason,minimum_fix.\"\n].join(\"\\n\")+\"\\n\\n\"+evidence;\nconst started=Date.now();\nconst r=await fetch(\"https://api.kilo.ai/api/gateway/chat/completions\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({model,messages:[{role:\"user\",content:prompt}],temperature:0,max_tokens:1800,stream:false,response_format:{type:\"json_object\"}})});\nconst txt=await r.text();const elapsed_ms=Date.now()-started;\nconst j=JSON.parse(txt),msg=j?.choices?.[0]?.message??{},content=String(msg.content??msg.reasoning_content??msg.reasoning??\"\");\nconst a=content.indexOf(\"{\"),b=content.lastIndexOf(\"}\");const review=a>=0&&b>=a?JSON.parse(content.slice(a,b+1)):null;\nconsole.log(JSON.stringify({schema:\"PROTOCOL_V6_CANDIDATE_INDEPENDENT_KILO_REVIEW_RECEIPT_V1\",requested_model:model,returned_model:j?.model??null,provider_response_id:j?.id??null,http_status:r.status,elapsed_ms,usage:j?.usage??null,review,usable:!!review,zero_cost:j?.usage?.cost===0,canonical_mutation:false,production_mutation:false,independent_execution_provenance_claimed:true,scope:\"candidate_adversarial_review_only\",p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0},null,2));",[157],"1495d6e7-5ca3-465f-9e24-1a5933a57a36","fingerprint.ts","f7b9e1fa-ac72-11f1-a5b4-1607ee4eb77e",28,["D",1788974520742],"const targets=[\n [\"kernel_candidate.ts\",\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/kernel_candidate.ts\"],\n [\"BRAIN_VAL_BRIDGE_PROTOCOL_V6_CANDIDATE.md\",\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/BRAIN_VAL_BRIDGE_PROTOCOL_V6_CANDIDATE.md\"]\n];\nasync function sha(s:string){const b=new TextEncoder().encode(s);const d=await crypto.subtle.digest(\"SHA-256\",b);return{bytes:b.length,sha256:[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}}\nconst out:any={};\nfor(const [name,url] of targets){\n const raw=await fetch(url,{headers:{\"cache-control\":\"no-store\"}}).then(r=>r.text());\n const i=raw.indexOf(\"\\n\"),s=raw.startsWith(\"/* Open in Val Town:\")&&i>=0?raw.slice(i+1):raw;\n out[name]=await sha(s);\n}\nconsole.log(JSON.stringify({schema:\"V6_CANDIDATE_CURRENT_FINGERPRINTS_V1\",...out,canonical_mutation:false,production_mutation:false},null,2));",[164],"4af31667-543e-4233-b92b-211055902eb1","external_counterexample_adjudication.ts","02562d62-ac73-11f1-98cb-1607ee4eb77e",29,["D",1788974538548],"const U=\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/kernel_candidate.ts\";\nconst raw=await fetch(U,{headers:{\"cache-control\":\"no-store\"}}).then(r=>r.text());\nconst i=raw.indexOf(\"\\n\"),c=raw.startsWith(\"/* Open in Val Town:\")&&i>=0?raw.slice(i+1):raw;\nconst required={\n commit_owner_gate:c.includes('if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\")'),\n renew_state_owner_gate:c.includes('if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\")'),\n commit_clears_lease:c.includes(\"lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?\"),\n self_commit_fence:c.split(\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\").length-1===2,\n preactivation_renew_fence:c.includes(\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\")\n};\ntype T={state:\"READY\"|\"LEASED\"|\"COMPLETE\",leaseOwner:string|null,activationOpen:boolean};\nfunction commit(t:T,agent:string,type:string){\n if(t.leaseOwner!==agent)return \"NOT_LEASE_OWNER\";\n if(type===\"CHAT_UNPROVEN\"&&!t.activationOpen)return \"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\";\n t.state=\"COMPLETE\";t.leaseOwner=null;t.activationOpen=true;return \"OK\";\n}\nfunction renew(t:T,agent:string,type:string){\n if(t.state!==\"LEASED\"||t.leaseOwner!==agent)return \"NOT_LEASE_OWNER\";\n if(type===\"CHAT_UNPROVEN\"&&!t.activationOpen)return \"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\";\n return \"OK\";\n}\nconst pre:T={state:\"LEASED\",leaseOwner:\"unproven\",activationOpen:false};\nconst preCommit=commit({...pre},\"unproven\",\"CHAT_UNPROVEN\");\nconst preRenew=renew({...pre},\"unproven\",\"CHAT_UNPROVEN\");\nconst t:T={state:\"LEASED\",leaseOwner:\"trusted\",activationOpen:false};\nconst trustedCommit=commit(t,\"trusted\",\"CHAT\");\nconst postCommit=commit(t,\"unproven\",\"CHAT_UNPROVEN\");\nconst postRenew=renew(t,\"unproven\",\"CHAT_UNPROVEN\");\nconst pass=Object.values(required).every(Boolean)&&preCommit===\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"&&preRenew===\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"&&trustedCommit===\"OK\"&&t.state===\"COMPLETE\"&&t.leaseOwner===null&&postCommit===\"NOT_LEASE_OWNER\"&&postRenew===\"NOT_LEASE_OWNER\";\nconsole.log(JSON.stringify({schema:\"EXTERNAL_COUNTEREXAMPLE_REACHABILITY_ADJUDICATION_V1\",reported_counterexample:\"CHAT_UNPROVEN can modify activation task after trusted COMPLETE\",source_predicates:required,simulation:{preCommit,preRenew,trustedCommit,post_state:t,postCommit,postRenew},verdict:pass?\"COUNTEREXAMPLE_UNREACHABLE\":\"NEEDS_REVIEW\",pass,canonical_mutation:false,production_mutation:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0},null,2));",[171],"88d5847b-9a57-4692-b3ee-7d848c47411e","external_adversarial_review.ts","1dcd26c4-ac71-11f1-b4e1-1607ee4eb77e",33,["D",1788974584190],3,"const U=\"https://esm.town/v/mosadek/brain-protocol-v5-kernel-reconcile-0909/kernel_candidate.ts\";\nconst gateway=\"https://api.kilo.ai/api/gateway/chat/completions\";\nconst models=[\"poolside/laguna-s-2.1:free\",\"cohere/north-mini-code:free\",\"stepfun/step-3.7-flash:free\",\"nex-agi/nex-n2.5-mini:free\"];\nconst raw=await fetch(U,{headers:{\"cache-control\":\"no-store\"}}).then(r=>r.text());\nconst first=raw.indexOf(\"\\n\"),c=raw.startsWith(\"/* Open in Val Town:\")&&first>=0?raw.slice(first+1):raw;\nfunction seg(start:string,end:string){const i=c.indexOf(start),j=c.indexOf(end,i+start.length);if(i<0||j<0)throw new Error(\"SEGMENT_NOT_FOUND:\"+start);return c.slice(i,j)}\nconst evidence=[\n seg(\"const CHAT_UNPROVEN_ACTIVATION_TASK\",\"function flags(\"),\n seg(\"async function register(\",\"async function ensureTask(\"),\n seg(\"async function claim(\",\"async function renew(\"),\n seg(\"async function renew(\",\"async function recover(\"),\n seg(\"async function commit(args:string[])\",\"async function validateEvidenceRefs\"),\n seg(\"async function commitFull(\",\"const CHECKPOINT_STATE_TABLES\"),\n seg(\"const EXECUTION_DISTINCT_INGRESS_QUALIFIED\",\"async function guardsSatisfied(\"),\n 'CURRENT_ALLOWLIST='+String(c.match(/const REACTIVATION_MUTATION_ALLOWLIST=new Set\$\\[([^\\]]+)\\]\$;/)?.[1]??\"\")\n].join(\"\\n---\\n\");\nconst rules=[\n \"Audit ONLY for a concrete reachable security/correctness bypass of these invariants:\",\n \"1. Before activation, no-receipt CHAT_UNPROVEN cannot register or claim.\",\n \"2. Activation is accepted only when the exact activation task is COMPLETE and its result_event_id binds to TASK_RESULT_COMMITTED for that exact task by a non-CHAT_UNPROVEN agent.\",\n \"3. A CHAT_UNPROVEN holding a preactivation activation-task lease cannot renew or self-commit it into authorization.\",\n \"4. CHAT_UNPROVEN cannot satisfy execution-distinct independence and its committed trust metadata remains independence_eligible=false and p_real_eligible=false.\",\n \"5. migrate-task-invariants is recognized but absent from the live mutation allowlist.\",\n \"IMPORTANT REACHABILITY RULE: a COUNTEREXAMPLE is valid only if you give an ordered state-transition sequence that satisfies every source precondition. In particular commit/commitFull require task.lease_owner===agent; renew requires state===LEASED and lease_owner===agent; successful commit transitions task to COMPLETE and clears lease_owner/lease fields. A hypothetical that violates these preconditions is INVALID and must not be reported.\",\n \"Do not propose style changes. If no reachable bypass is proven from these excerpts, verdict PASS.\"\n].join(\"\\n\");\nfunction extractJson(s:string){const a=s.indexOf(\"{\"),b=s.lastIndexOf(\"}\");if(a<0||btypeof x===\"string\"&&x.trim());\n let parsed:any=null,used=\"\";\n for(const q of candidates){parsed=extractJson(String(q));if(parsed){used=String(q);break}}\n return{model,usable:!!parsed,ms,cost,returned_model:j?.model??null,review:parsed,error:parsed?null:\"NO_PARSEABLE_JSON\",sample:parsed?undefined:String(candidates[0]??\"\").slice(0,700)};\n }catch(e){return{model,usable:false,ms:Date.now()-t,error:String(e)}}\n}\nconst reviews=await Promise.all(models.map(review));\nconsole.log(JSON.stringify({schema:\"PROTOCOL_V6_CANDIDATE_EXTERNAL_REACHABILITY_REVIEW_V2\",reviews,canonical_mutation:false,production_mutation:false,independent_verification_claimed:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0},null,2));",[178],"08b149c4-3ab6-4ca2-a863-ab77c13365a9",["D",1788983183596],[27],"87711888-f9c0-4bb8-82f4-7a2af5505b27","README.md","95409fa2-ac70-11f1-9f3c-1607ee4eb77e",1,["D",1788973496542],"# Protocol V5 current-kernel reconciliation candidate\n\nNon-production, non-authority repair/falsification surface. No canonical Brain mutation, no P_real increment.\n",[189],"927df795-328b-4ebe-ab39-2f72409dfdea","BRAIN_VAL_BRIDGE_PROTOCOL_V6_CANDIDATE.md","01a08725-db94-75fe-90fe-1b6e8c35e2b9",25,["D",1788974433766],7,"# PROJECT BRAIN VAL BRIDGE PROTOCOL V6 CANDIDATE\n\n> **NONAUTHORITY CANDIDATE:** This file is a proposed successor only. It is not the canonical boot protocol and MUST NOT authorize registration, claiming, production mutation, independent-verification status, or `P_real` until the candidate kernel is promoted to the exact production bytes bound below and fresh production `status` + `verify-chain` + `verify-claim-graph` all pass.\n\n> **Activation gate:** Proposed Protocol V6 no-receipt `CHAT_UNPROVEN` registration/claim is authorized **if and only if** canonical task `BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908` is `COMPLETE`, its `result_event_id` binds to a `TASK_RESULT_COMMITTED` event for that exact task, and the committing activator is not `CHAT_UNPROVEN`. Until then, a no-receipt execution may perform only local Val Town artifact/source reads plus bounded read-only verification after the admission bundle passes; it MUST NOT `register-agent` or `claim`. A preactivation `CHAT_UNPROVEN` lease may not renew or self-commit the activation task. This gate does not grant physical execution provenance or `P_real`.\n\n> **V6 reconciliation delta:** Exact historical comparison shows the Protocol-V5-pinned kernel was 83008 bytes / SHA-256 `600ddab6a1591a34a7e22e06a41fb2f5a838267f3b56e33c809d08ac6471f756`, while current production is 84299 bytes / SHA-256 `087cb4b5a57c16a6f19353357704fe943d7341961690aff11ec36c75ca5d8af9`. The four post-V5 drift regions are not accepted wholesale. This candidate restores the V5-pinned claim-selector semantics, including all legacy reviewer/distinctness context fences, and removes the hard `<128 active slots => scaling-only claims` rule because `SUPERHERO_REALIZATION_FOCUS_POLICY_V1` explicitly requires first-superhero completion before staged scaling. Two deliberate hardenings remain: (1) the previously protocol-level CHAT_UNPROVEN activation rule is now structurally enforced in the kernel, including exact activation-task/event binding and anti-self-activation fences; and (2) `migrate-task-invariants` is removed from the atomically qualified mutation allowlist while remaining recognized/fail-closed. Proposed kernel: 85474 bytes / SHA-256 `e38c8bc4b78aed9199ba5e3f4b79b95f5914a508f9069fe10e75fcf8767227c9`. Builder static/semantic regression is 38/38 PASS. External model review attempts were non-diagnostic and are not counted as verification.\n\n## Purpose\n\nNormal ChatGPT project work uses Val Town as the only ChatGPT-facing transport to the canonical Project Brain. Direct Sprites connector calls are maintenance-only because they can trigger separate file-materialization approval prompts.\n\nNormal path:\n\n`ChatGPT → Val Town → brain_bridge_jobs → authority-selected Brain executor → canonical Brain`\n\nVal/project: `mosadek/project-brain-live-v1-durable` \nQueue: `brain_bridge_jobs` \nControl-plane authority: `brain_control_plane_authority_v1`\n\n## Mandatory cognitive constitution\n\nBefore substantive Project Brain reasoning, planning, claiming, implementation, review, or promotion, every worker MUST load the current constitution-head pointer:\n\n- head pointer: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`\n\nThen load the exact registry and constitution URIs named by that head and verify the constitution bytes against the head's SHA-256 before relying on it.\n\nCurrent verified admission-head artifacts for this candidate (still re-read the head pointer; these values are not a substitute for it):\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/PROJECT_BRAIN_THINKING_CONSTITUTION_V4.md`, 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: `valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/USER_TEACHING_REGISTRY_V5.json`, 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`.\n\nThe constitution is project-level operating law after system/safety/platform-enforced policy and the user's current explicit instruction.\n\nBoot is cognitively incomplete if the constitution head was not loaded. Memory summaries, old prompts, role descriptions, and historical architecture are discovery pointers only and do not substitute for the current head.\n\nMandatory reasoning invariants include:\n- FASTEST RIGHT WAY: minimize real wall-clock time to the correct independently verified goal;\n- first-principles decomposition before accepting architecture assumptions;\n- CURRENT IMPLEMENTATION LIMIT != MISSION LIMIT;\n- do not label platform/tool/quota/API/UI limitations fundamental without active elimination attempts;\n- delete/replace useless or materially suboptimal mechanisms when that improves the mission objective;\n- continuously recompute the critical path;\n- treat platforms/providers/tools as replaceable tactics;\n- prefer structural enforcement over permanent intelligent babysitting when both preserve the invariant;\n- preserve exact evidence and fail closed rather than hallucinating success;\n- distinguish COMPLETE from PASS, configuration from execution, and logical identity from real execution provenance.\n\nFuture durable user teachings are cumulative unless explicitly superseded. Preserve them as immutable user-directive evidence, classify them as EXTENDS / REFINES / SUPERSEDES, create a successor constitution version, update the registry head, and preserve prior versions. Never silently overwrite the user's reasoning doctrine.\n\nAt epoch 2 the live canonical writer is currently `val_native`. The historical host worker identity `project-brain-live-v1-worker-v2` remains compatibility evidence, not current writer authority.\n\n## Mandatory health interpretation\n\nThe HTTP endpoint being reachable is NOT proof that the authority-selected Brain executor is alive.\n\n`brain_bridge_worker.ts /health` is the historical host-bridge worker health surface. Its `worker_state` applies only to that host worker. Read `control_plane_authority.writer` before interpreting it:\n\n- if writer is `host_bridge`, HTTP 200/503 and `worker_state` are relevant to canonical executor liveness;\n- if writer is `val_native`, a stale host heartbeat does NOT mean the canonical control plane is down;\n- `endpoint_ok:true` only proves the Val endpoint itself is executing;\n- `worker_health_scope:HOST_BRIDGE_WORKER_ONLY` is an explicit interpretation fence;\n- `instance_identity_available:false` means the historical host worker has not supplied a distinct process instance ID. Do not overclaim process identity;\n- canonical status/chain/claim-graph receipts remain the authoritative proof of Brain state reached through the current writer path.\n\nCurrent Val-side invariants:\n- priority cap: `1_000_000_000`;\n- selection above the cap: FIFO by `created_at,id`;\n- maximum Brain command timeout: `120 seconds`;\n- queue lease: `180 seconds`;\n- atomic single-flight per `worker_id`;\n- an active unexpired lease is not redelivered to another poll sharing that worker ID;\n- a pre-existing duplicate active lease for one worker ID fails closed;\n- expired queue leases are terminalized `FAILED` on a worker poll with `TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN`; they are not automatically returned to READY;\n- an expired/unknown attempt must be reconciled against canonical state before any retry is submitted under a new job ID;\n- results are accepted only for the current unexpired lease owner.\n\nThese are transport invariants, not Brain authority.\n\n## Canonical freshness vs durability\n\nCanonical Brain integrity and independently verified replica durability are separate facts.\n\nThe worker health body exposes:\n\n- `durability.canonical_generation`;\n- `durability.max_verified_replica_generation`;\n- `durability.verified_replica_count`;\n- `durability.lag_generations`;\n- `durability.state = CURRENT | LAGGING | UNKNOWN`.\n\nInterpretation:\n\n- a canonical generation newer than the latest verified replica is valid canonical progress, but it is NOT fully replicated durability;\n- never report `fully durable` while `lag_generations > 0`;\n- durability lag does not by itself invalidate read-only canonical status/verification;\n- before destructive cleanup, authority transition, or a claim whose consequence depends on recoverability, explicitly account for the lag and preserve consequential evidence first;\n- never hide durability lag by reading an older replica as though it were current canonical state.\n\n## Val-native bound-attempt commit liveness\n\nThe Brain kernel keeps the strict `expected-workstream-generation` commit guard, and the epoch-2 Val-native executor keeps the authenticated queue `payload_json` byte-identical for the lifetime of one transport attempt. Production does not transparently rewrite a commit payload to inject a fresher generation.\n\nTo prevent admission churn from starving an already-READY commit, the transport selector applies a bounded commit-position barrier. A valid READY `status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim` job may not leapfrog a valid READY `commit` that is older by `created_at`, with `rowid` breaking same-timestamp ties. `recover-stale` remains recovery-first. Admission/read jobs genuinely older than the commit retain their existing place, and the same-second register-before-claim invariant remains unchanged.\n\nThis barrier does not declare unrelated canonical mutations semantically harmless. If an earlier mutation legitimately advances the workstream before a commit executes, the strict kernel may still return `STALE_WORKSTREAM_WRITE`; the caller must reconcile canonical state and submit a new job ID with a fresh expected generation. The bounded guarantee is narrower and auditable: later boot/read admission traffic cannot indefinitely leapfrog an older READY commit. Exact job, lease instance, lease attempt, transport generation, authority epoch, payload identity, task lease, dependency/guard/write semantics, and duplicate-terminal fences remain unchanged.\n\nHistorical evidence for the earlier task-local stable-retry design remains at `valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/val_native_stable_commit_retry_v1.json`, including its independent `artifact_present` falsification and repair. That mechanism is historical evidence, not the current production dispatch behavior.\n\n\n## Live-fabric boot admission (normal path)\n\nA fresh ChatGPT context is **not** proof of a physically distinct or superhero-qualified execution merely because it can choose a new `agent_id`, write a queue row, or read this protocol. Logical identity is not physical execution provenance.\n\nBefore a normal worker emits any boot-cohort queue traffic (`status`, `verify-chain`, `verify-claim-graph`, `register-agent`, or `claim`), the current cognitive-constitution head and every current registry/definition/focus-policy artifact it relies on for admission MUST be loaded from the connected Val Town project surfaces and byte/hash-verified. Missing, stale, ambiguous, or mismatched hashes fail closed before registration or claim.\n\nFor this **Protocol V6 candidate**, the proposed exact admission bundle is:\n\n- head: `evidence/user-directives/CURRENT_THINKING_CONSTITUTION_HEAD.json`, 1824 bytes, SHA-256 `ac6be68568b14c54fc4919f00eae51baa6fa5770be8fcd7b3151cdb0d4ecbc83`;\n- constitution V4: 24630 bytes, SHA-256 `36034b7e499f7476e2d1ac8558e7203dcc00ae1bea54919543cd3541ce0bde62`;\n- teaching registry V5: 4257 bytes, SHA-256 `05c85b6a0e98a711263d9042b4ea728ac99d16fe032840eb199b729fb6a7dbde`;\n- canonical superhero definition V1: 7786 bytes, SHA-256 `50fdd99f02b78aff8ba5fb89a98124c176c311ca8a08f7a92777be570f193a29`;\n- superhero realization focus policy V1: 3433 bytes, SHA-256 `a4dfc1a488a50ac8eb2471085a88c3aa9b27a2cdfe455be8d6e235811865fa62`;\n- proposed production `val_native_kernel_v1.ts`: 85474 bytes, SHA-256 `e38c8bc4b78aed9199ba5e3f4b79b95f5914a508f9069fe10e75fcf8767227c9`.\n\nThe head's referenced URIs are authoritative for the four directive artifacts above. This candidate is not active while canonical production differs from the proposed kernel identity. If promoted, any later head, referenced-artifact, or production-kernel mismatch makes Protocol V6 no-receipt admission stale and fail-closed until a successor explicitly reconciles the new bytes. Never treat candidate identity, comments, or builder tests as production activation evidence.\n\nAfter that verification there are exactly two ChatGPT admission classes:\n\n1. **Positively admitted execution.** If this execution is given a current project-controlled fabric/admission execution-incarnation receipt, validate the receipt exactly as before: it must be positively exposed rather than invented in model text, indicate `BOOTING` or `RUNNING`, carry an unexpired liveness signal, bind the intended logical identity/workstream/capability declaration, and contain no unresolved duplicate-incarnation ambiguity.\n2. **Ordinary unproven contribution.** If no positive execution-incarnation receipt is exposed, the execution MAY enter only as agent `type=CHAT_UNPROVEN`. This is a useful-contribution lane, not execution provenance. It proves neither physical distinctness, independent-review eligibility, autonomous proven supply, superhero capacity, nor any `P_real` increment.\n\nCaller-authored payload fields, a registry row, a queue row, a chat transcript, memory, a different `agent_id`, schedule ownership, heartbeat ownership, or a candidate-only attestation never upgrade `CHAT_UNPROVEN` into a proven execution.\n\nThe production kernel is the trust boundary for the unproven lane. Before using that lane, callers MUST verify that the current authority-selected kernel still enforces all of the following machine semantics:\n\n- `execution_distinct` is fail-closed unless a separately accepted positive ingress exists;\n- `CHAT_UNPROVEN` is categorically rejected for `execution_distinct`, even if a later positive ingress exists;\n- legacy machine-readable independence markers, including `independent_verification` and the current reviewer/distinctness context flags, are skipped by `CHAT_UNPROVEN`;\n- a `CHAT_UNPROVEN` `TASK_RESULT_COMMITTED` event receives kernel-injected `contributor_trust_class=CHAT_UNPROVEN`, `contributor_agent_type=CHAT_UNPROVEN`, `independence_eligible=false`, and `p_real_eligible=false`;\n- caller-controlled trust metadata cannot upgrade the result;\n- ordinary claim, lease, CAS, write-conflict, dependency, guard, and authority fences remain unchanged.\n\nIf those kernel semantics cannot be positively verified, the no-receipt lane fails closed and MUST NOT register or claim.\n\nFor either admission class, consume a current shared/coalesced status + chain + claim-graph receipt when one is available and correctly bound to the current authority/head. A `CHAT_UNPROVEN` execution may refresh missing/stale read-only verification through the normal Val-native queue only after the local hash prerequisites above pass; avoid one redundant verification trio per execution whenever a valid shared receipt exists.\n\nCurrent verified ChatGPT-specific boundary at this revision remains:\n\n- `BRAIN-CHAT-MCP-SESSION-EXECUTION-PROVENANCE-P0-V1-20260908` concluded `EXTERNAL_PRODUCT_CONNECTION_BOUNDARY`;\n- positive physical ChatGPT-session provenance is **not proven**;\n- `P_real` increment from that candidate is `0`;\n- a different logical `agent_id` alone is not evidence of a distinct ChatGPT execution.\n\nTherefore lack of a positive execution-incarnation receipt no longer blocks all useful work. It restricts the execution to `CHAT_UNPROVEN` ordinary contribution, with independence-sensitive work and proven-capacity accounting structurally unavailable.\n\nThe repaired cohort fast path is also **not production-qualified** at this revision. Current reconciled V3R1 candidate SHA-256 is `4031e62868abc9d7562f33e3986f0f5a29ec71c0a19b8e75ee4520071ef6e7ee`; its builder/self-falsification evidence is candidate-only, its genuinely distinct second-party gate remains required, and production integration is forbidden until that gate and any later promotion/integration gates pass. Do not route normal boot through it merely because it is faster in tests.\n\nBoth the positively admitted path and the `CHAT_UNPROVEN` fallback use the individual compatibility sequence described below when no qualified cohort path is available. That sequence creates a logical Brain identity and task lease; it does not retroactively prove the physical execution that invoked it.\n\nProtected UI creation is not a boot mechanism. Normal boot MUST NOT require or automate ChatGPT **New Chat**, prompt pasting, `Got it`/modal dismissal, browser clicking, rate-limit evasion, fake identities, or one Val branch per agent. Manual New Chat is emergency fallback only, not normal capacity provisioning.\n\n## Submit a Brain command\n\nInsert a unique job:\n\n```sql\nINSERT INTO brain_bridge_jobs\n(id, priority, op, payload_json, state, lease_owner, lease_expires_at,\n result_json, error_json, created_at, updated_at)\nVALUES (?, ?, 'brain', ?, 'READY', NULL, NULL, NULL, NULL,\n datetime('now'), datetime('now'))\n```\n\nBrain payload is closed-schema:\n\n```json\n{\"args\":[\"status\"],\"timeout\":60}\n```\n\nRequirements:\n- exact top-level keys: `args`, `timeout`;\n- `args` is a non-empty string array;\n- `timeout` is an integer from 1 through 120;\n- `status`, `verify-chain`, and `verify-claim-graph` take no additional Brain arguments;\n- `renew-lease` uses canonical `--seconds`; stale `--lease-seconds` is rejected fail-closed;\n- `boot`, `boot-agent`, `recover-leases`, unsupported artifact commands, and payloads with extra top-level fields are not compatibility aliases.\n\nRecognized Brain subcommands at the bridge syntax layer:\n- status\n- verify-chain\n- verify-claim-graph\n- register-agent\n- ensure-task\n- delegate-task\n- claim\n- renew-lease\n- commit\n- checkpoint\n- add-claim\n- invalidate-claim\n- supersede-task-context\n- migrate-task-invariants\n- reconcile-causal-blocks\n- recover-stale\n\nDo not confuse `recognized` with `currently executable`.\n\nWhile control-plane authority is epoch-2 `val_native`, the current atomically qualified execution surface is exactly:\n- read-only: `status`, `verify-chain`, `verify-claim-graph`;\n- mutation: `register-agent`, `ensure-task`, `claim`, `renew-lease`, `commit`, `recover-stale`, `supersede-task-context`.\n\nThe remaining recognized mutators other than the explicitly qualified set above are implemented but deliberately fail closed with `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` until an independently verified reactivation changes the canonical Val-native allowlist. Clients MUST NOT enqueue them merely because the syntax layer recognizes their names. Re-read the current authority-selected executor before relying on a newly reactivated mutator.\n\nAnything outside the recognized syntax surface fails at Val-side dispatch rather than being sent onward.\n\n## Boot semantics\n\nThere is currently NO valid atomic `boot` bridge command.\n\nThe public bridge previously advertised `boot`, but the live kernel accepts `boot-agent` while the persistent executor rejects raw `boot-agent`. Therefore neither spelling is a valid end-to-end bridge operation.\n\n**Normal fresh-chat boot is the live-fabric admission gate above, not blind `register-agent → claim`.** A fresh context must first verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected kernel semantics.\n\nAfter those checks:\n\n- if a valid positive execution-incarnation receipt is exposed, use the admitted execution class and preserve its exact receipt-bound type/capability semantics;\n- if no positive receipt is exposed, use only `type=CHAT_UNPROVEN`;\n- if the required hashes, chain/claim-graph state, or `CHAT_UNPROVEN` kernel fences cannot be verified, stop before registration/claim.\n\nThe individual **compatibility** sequence for either allowed class is:\n\n1. consume or refresh bounded `status` + `verify-chain` + `verify-claim-graph` evidence as required by the live-fabric rules;\n2. `register-agent`;\n3. `claim`.\n\nThis sequence establishes only the logical Brain identity and task lease. For `CHAT_UNPROVEN`, it explicitly does **not** prove private model cognition, distinct physical ChatGPT execution, independent-review eligibility, superhero capacity, autonomous proven supply, or `P_real`.\n\nThe transport selector preserves a same-second paired compatibility invariant: when READY `register-agent` and `claim` jobs have the same `created_at` and exact agent identity, the registration is selected before its claim even if the claim has a higher submitted priority. Clients must not depend on priority to reverse that order.\n\nRegister only capabilities actually present in the execution. Never claim `human_authority_approval`. A no-receipt execution MUST register with `--type CHAT_UNPROVEN`; using `CHAT`, `PROVEN_EXECUTION`, or another stronger label without the corresponding positive admission evidence is forbidden.\n\nNo-receipt ordinary contribution example:\n\n```text\nregister-agent --workstream --role \n --type CHAT_UNPROVEN --capabilities \n\nclaim --agent --mode INTERACTIVE --lease-seconds 1800\n --constitution-version \n --constitution-sha256 \n --registry-version \n```\n\nA positively admitted execution may use the same sequence with its exact receipt-authorized type instead of `CHAT_UNPROVEN`.\n\nDo not submit `boot` or `boot-agent` until a later verified bridge/executor revision explicitly restores an atomic wrapper. Do not promote the candidate cohort path until its required distinct second-party and production-integration gates actually pass.\n\n## Lease recovery semantics\n\nCanonical Brain task-lease recovery is exposed through exactly one bridge spelling:\n\n```json\n{\"args\":[\"recover-stale\"],\"timeout\":60}\n```\n\nRequirements:\n- the Brain subcommand is exactly `recover-stale`;\n- `args` contains exactly that one string and no additional arguments;\n- `timeout` remains an integer from 1 through 120;\n- `recover-leases` is intentionally rejected and is not an alias;\n- unknown recovery spellings fail closed at Val-side dispatch.\n\nVal transport queue-lease expiry remains a separate transport mechanism. The worker detects expired transport attempts on poll and terminalizes them `FAILED` with unknown canonical outcome; it does not treat transport expiry as proof that the Brain command had no effect.\n\nEnd-to-end evidence: queue job `chat-sol-20260906-0139-recover-stale-v5-z91` completed through the persistent V5 worker at Brain generation 1321 and recovered three expired canonical task leases. This establishes the current recovery path; it does not prove permanent executor liveness or transport attempt-fencing.\n\n## Poll a job result\n\n```sql\nSELECT id,state,lease_owner,lease_expires_at,result_json,error_json,updated_at\nFROM brain_bridge_jobs\nWHERE id=?\n```\n\nTerminal states:\n- COMPLETE\n- FAILED\n\nA READY job means it has not been executed. A LEASED job is not complete. Do not infer canonical mutation from queue state alone.\n\n## Read project/Brain text without Sprites\n\nThe currently authoritative epoch-2 `val_native` executor accepts only `op='brain'`. It rejects queue `op='read_text'` with `VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP`.\n\nTherefore while `brain_control_plane_authority_v1.writer='val_native'`:\n\n- DO NOT enqueue `read_text` jobs for `/brain/JOIN_PROTOCOL.md` or artifacts;\n- read Val-hosted project source/protocol files through the connected Val Town file tools;\n- obtain canonical Brain state through the allowed `brain` commands and bounded project-controlled read-only canonical views;\n- do not convert a missing transport read operation into a reason to call Sprites.\n\nThe historical host bridge still contains a bounded `read_text` implementation for compatibility. It is eligible only if `host_bridge` is again the authoritative writer and the exact current executor path is independently shown to support it. Historical successful reads do not establish epoch-2 support.\n\n## Hard transport rule\n\nRoutine ChatGPT work:\n- DO NOT call Sprites;\n- DO NOT call Sprites.exec;\n- DO NOT call Sprites.file_read/file_write/file_copy/file_delete;\n- DO NOT call Sprites service/checkpoint/file/blob operations.\n\nIf a required operation is missing:\n1. use an existing valid non-Sprites substrate when possible;\n2. route or build a bridge extension;\n3. fail closed if the missing operation is necessary;\n4. direct Sprites remains an explicit maintenance emergency, not an automatic fallback.\n\n## Failure behavior\n\nIf a fresh context lacks a valid positive execution incarnation:\n- verify the current constitution/registry/definition/focus-policy hashes and the current authority-selected `CHAT_UNPROVEN` kernel fences;\n- if those checks pass, enter only through the bounded `CHAT_UNPROVEN` ordinary-contribution path;\n- if any prerequisite is missing, stale, ambiguous, mismatched, or the kernel no longer enforces the unproven trust boundary, enqueue no registration/claim and return the exact failing prerequisite;\n- never reinterpret absence of a positive receipt as physical-session proof, independent-review eligibility, proven autonomous supply, superhero capacity, or `P_real`.\n\nFor already-admitted work, if jobs stay READY:\n1. inspect `/health`;\n2. inspect worker endpoint traces;\n3. inspect the current active/expired queue leases;\n4. do not raise transport priorities above the cap to win a queue arms race;\n5. do not interpret the Val endpoint being online as the Brain worker being online.\n\nIf worker health is DOWN:\n- queued commands remain pending;\n- no live Brain registration, claim, commit, status, or verification should be invented;\n- Val-side code/evidence work may continue when it does not pretend to mutate canonical Brain;\n- repair/restore the persistent executor through an authorized route, then resume queue processing.\n\n## Proven facts and bounded claims\n\nThe reverse bridge has successfully:\n- read Brain status;\n- created canonical Brain tasks;\n- registered CHAT agents;\n- claimed tasks;\n- committed task results;\n- run verify-chain and verify-claim-graph.\n\nThe Val-side worker has independently reproduced and repaired the same-worker concurrent lease race in isolated queue tests. This does NOT prove the persistent Sprite-side executor is permanently supervised or continuously alive.\n\n## Val branch capacity rule\n\nNormal ChatGPT/Brain work MUST NOT create one Val Town branch per agent.\n\nUse task-scoped project blobs for scratch/evidence first. Use task-namespaced files on `main` only when shared executable/source bytes are necessary and the Brain task's declared write-resource lease permits them. Use a bounded reusable scratch branch only when branch isolation is causally required. A net-new branch requires an explicit task need, a branch-headroom check, and a preservation/cleanup plan.\n\nDo not delete a branch merely because it is old, low-version, or apparently merged. Before deletion apply `VAL_BRANCH_LIFECYCLE_POLICY_V1.md`; any unresolved dependency or unique-evidence question means KEEP.\n\nThe scaling invariant is:\n\n`d(live_branch_count) / d(agent_count) = 0`\n\nThis keeps the reproduced Val Town branch ceiling out of the normal agent-admission path.\n\n## Goal\n\nNormal project work must stay materialization-free from ChatGPT while remaining fail-closed:\n\n`verified local project state → {positive admitted execution | CHAT_UNPROVEN ordinary contributor} → Val Town → durable queue → authority-selected live executor → verified Brain`\n\nA fresh ChatGPT context with no positively exposed project-controlled execution incarnation may now contribute ordinary work only as `CHAT_UNPROVEN` after the required hash/kernel/Brain checks pass. It remains excluded from independence-sensitive acceptance and proven-capacity accounting. If the live executor disappears, the system must say so rather than smiling with HTTP 200 like a malfunctioning status page.\n\n## Epoch-2 external-artifact registration candidate (not production-qualified)\n\n`record-external-artifact` is implemented in `val_native_kernel_v1.ts` as a **candidate-only** current-epoch port. It is intentionally absent from `REACTIVATION_MUTATION_ALLOWLIST`, so production dispatch must return `VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED` and perform no canonical artifact/event mutation.\n\nThe candidate:\n- accepts only the closed `{args, timeout}` envelope and a closed artifact flag grammar;\n- forbids `human_authority_approval` escalation;\n- accepts only project-scoped `valblob:mosadek/project-brain-live-v1-durable/…` evidence and verifies exact blob size + SHA-256;\n- makes an exact repeated registration a semantic no-op at artifact/event/generation/workstream-head level;\n- fails closed on conflicting metadata or duplicate canonical rows for the same SHA-256;\n- inherits epoch-2 exact-attempt mutation receipts, transport fencing, chain/claim-graph circuit breaking, and unknown-outcome terminalization.\n\nDo **not** add this command to the live mutation allowlist, advertise it as qualified capacity, or execute the preserved 137-byte canonical probe until a genuinely distinct second-party review returns PASS under the current CHAT-execution distinctness rules. A different `agent_id` alone is not proof of a different physical ChatGPT execution.\n",[196],"pulls","branches","forks","envVars",{"_210":58,"_212":58},"connections",{"_210":58,"_211":58},"count","unfilledCount","emptyCount",{"_40":195,"_31":196,"_29":197,"_138":-5,"_38":39,"_37":198,"_140":141,"_35":247,"_13":200,"_32":20,"_33":201,"_23":24,"_146":-5,"_223":248,"_26":249},{"_40":188,"_31":189,"_29":190,"_138":-5,"_38":39,"_37":191,"_140":141,"_35":244,"_13":58,"_32":20,"_33":193,"_23":24,"_146":-5,"_223":245,"_26":246},{"_40":185,"_31":27,"_29":30,"_138":-5,"_38":39,"_37":14,"_140":141,"_35":241,"_13":58,"_32":20,"_33":34,"_23":24,"_146":-5,"_223":242,"_26":243},{"_40":177,"_31":178,"_29":179,"_138":-5,"_38":39,"_37":180,"_140":141,"_35":238,"_13":182,"_32":144,"_33":183,"_23":24,"_146":-5,"_223":239,"_26":240},{"_40":170,"_31":171,"_29":172,"_138":-5,"_38":39,"_37":173,"_140":141,"_35":235,"_13":58,"_32":144,"_33":175,"_23":24,"_146":-5,"_223":236,"_26":237},{"_40":163,"_31":164,"_29":165,"_138":-5,"_38":39,"_37":166,"_140":141,"_35":232,"_13":58,"_32":144,"_33":168,"_23":24,"_146":-5,"_223":233,"_26":234},{"_40":156,"_31":157,"_29":158,"_138":-5,"_38":39,"_37":159,"_140":141,"_35":229,"_13":58,"_32":144,"_33":161,"_23":24,"_146":-5,"_223":230,"_26":231},{"_40":148,"_31":149,"_29":150,"_138":-5,"_38":39,"_37":151,"_140":141,"_35":226,"_13":153,"_32":144,"_33":154,"_23":24,"_146":-5,"_223":227,"_26":228},{"_40":135,"_31":136,"_29":137,"_138":-5,"_38":39,"_37":139,"_140":141,"_35":222,"_13":143,"_32":144,"_33":145,"_23":24,"_146":-5,"_223":224,"_26":225},["D",1788983057028],"children",[],[136],["D",1788983055720],[],[149],["D",1788974657761],[],[157],["D",1788974520742],[],[164],["D",1788974538548],[],[171],["D",1788974584190],[],[178],["D",1788983183596],[],[27],["D",1788973496542],[],[189],["D",1788974433766],[],[196],["D",1788973496479],["D",1789504908499],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":52,"_100":101,"_102":24},{"_13":84,"_31":85,"_40":39,"_86":41,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":42,"_93":94},"ctx",{"_77":-5,"_123":288,"_289":290,"_291":292,"_293":24,"_294":24,"_295":24,"_296":141,"_297":-5,"_298":-7,"_299":-7,"_300":58,"_301":24,"_302":24,"_303":-5,"_304":24,"_305":24,"_306":24,"_307":-5},"ENV",{"_259":260,"_261":262,"_263":85,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v37