PerishFire/santi

Fork 0

core: memory-pressure ROI, word-debt constitution, core-zero gate #5

Merged

PerishFire merged 51 commits from core/memory-pressure-roi into main

2026-07-14 11:06:20 +00:00

PerishFire commented

2026-07-14 11:02:29 +00:00

Owner

Soul-memory pressure workstream + Liberte four-track word policy + core-zero campaign (strand ss_0d11cd5a): core word debt 300 -> 0, structure fully zero, contract-evidence wire classification, hard core-zero gate with regression tests. All batches Liberte-approved with occurrence-level accounting; wire spellings byte-identical; OpenAPI/CLI digests unchanged.

PerishFire added 51 commits

2026-07-14 11:02:29 +00:00

core: bound soul memory pressure 14e0b74281

guard: stage negentropy constitution 155d1b21e9

cli: make help explicit 61a15842b5

api: own model descriptions explicitly dae6f786ee

api: centralize remaining model descriptions f2e6e882ad

api: make ingress metadata explicit 576a8005a3

api: retire settled upgrade commentary 1e2c03ffe8

provider: rely on typed replay contracts 47ffd781c1

cli: let transport behavior speak in code bad6886d2b

core: keep prompt behavior in executable form 3cfc679651

core: retire store commentary after migration proofs 3f9895a7aa

core: complete comment fault burn 21eb73962b

api: flatten broadcast streams 690e3eb694

cli: flatten stream and reply handling 09fe02505e

api: isolate upgrade readiness probe cb3b31f8b3

core: flatten drain and failure persistence a20d31bf40

provider: flatten item and stream adapters 014c722563

core: flatten store projection and migrations 3c5ecd7d90

core: isolate provider round state ba78426919

guard: promote negentropy to constitution 5d64d8af86

core: name ingest and drive inputs 057b26fdff

core: let records own sql decoding b9de25f372

core: make database access an object 15ed2c183f

cli: name transport inputs 7bef934cbb

api: let runtime paths own offline operations 4edd7243da

core: let database own timeline projections 98c217f751

core: let database own receipt transitions 37be99cbb6

core: let database own effect transitions 52162a75fa

core: let database own error incidents aa6cb471aa

core: name schema migration objects ba7f18f7a4

core: name turn completion input 2f3bdeb51f

core: name message drafts ad414a8ff0

core: preserve webhook requests at the store boundary 7689bbda28

core: name tool invocations 85ccb7fb40

core: name thinking progress 5a24e26a1d

core: name budget admission flows 688807dc8f

core: preserve provider failure metadata 636b2f4091

core: clear remaining param and receiver debt 042bddf46b

Bundle wide operation inputs into single-word values (Reply, Collapse,
Breach, Signal, Drain, Line, Walk) and seat repeated free-function
receivers on owning objects (Database, ArtifactStore, Probe, Http).
Feishu normalize folds onto the adaptor; upgrade finalize drops a
redundant scope pass-through. Behavior and wire contracts are unchanged.

Negentropy structural debt is now param=0 receiver=0 with only word debt
remaining.

guard: ratchet word debt by Liberte tracks f8558a3b95

Classify Negentropy word findings into wire/test/core/internal tracks,
pin a baseline, and fail guard when total or core debt grows. Wire and
test stay observable only. Adds `runseal :word-debt` for report, hapax
samples, and baseline refresh. No bulk renames or vocabulary registration.

guard: hard-fail core word debt only f2df83eab5

Liberte follow-up: a total hard gate re-blocks wire/test/internal growth.
Keep total movement observed; only core occurrences fail the ratchet.

guard: expand wire track to full compatibility boundary 121f725c0f

Operator ruling: wire includes HTTP/serde, provider, CLI/env, and durable
SQLite schema seats. Refresh the word-debt baseline after reclassification.
Core hard-gate unchanged.

core: seat provider and budget family names 7c1b6f6a1a

Liberte-approved Pareto slice 1:
- ContextAdmission → Admission
- ContextIncidentInput → Pressure
- StrandExecutionBudget → Execution
- StrandExecutionUsage → Usage
- RawProviderProfile → Profile

Classifier: PascalCase types on compatibility-boundary paths seat as
wire (public ToSchema / HTTP / durable seats). OpenAPI/CLI digests
unchanged. Refresh word-debt baseline (core 300 → 122).

core: seat failure-path internal names 73299f108a

Liberte-approved Pareto slice 2 (strand ss_b1842565…):
- failure: Stage, Metadata, Cause, Operation, Failure
- drive::Input (no flat store::Input re-export)
- memory_pressure::Gate, driver::{Output,Driver}
- StreamErrorSink → ErrorSink
- ProviderFault / RuntimeFault (amended; keep provider/runtime distinction)

OpenAPI unchanged. Refresh word-debt baseline.

api: seat upgrade artifact types; wire upgrade path d528b294ca

Liberte-approved Pareto slice 3 (strand ss_cc059eb7…):
- Classify upgrade.rs and upgrade/** as wire (finalize protocol).
- Internal renames: Artifact, Identity, Manifest, Probe, Dpkg, Store,
  Host, Launch (UpgradeLaunchRequest).

Protocol enum/type names and serde wire spellings unchanged.
Refresh word-debt baseline.

core: seat notice and assembly names; expand wire seats f3efd7b4f1

Liberte-approved Pareto slice 4 (strand ss_241589d1…):
- Wire classifier: object_store, santi-error, server/error, webhook.rs+/**
- Notice bus: Observation, Observed, Event, Bus, State (module seats kept)
- Assembly/compact: Overlay, Plan, Range, Capsule, Material
- Object store public renames rejected (need object_store:: seat + semver)

Refresh word-debt baseline (core 86 → 43).

core: restore owner directories for path stems efa8b041c0

Liberte-approved C1 batch (strand ss_0d11cd5a…), pathword precedent:
- store/db/migration/{effect,im,receipt}; service/{bucket,notice}
- service/flow/memory; service/text/delta; assembly/prompt
- context/budget; object/store; workspace; chat/completions (provider)
- text/source (santi); service_prompt folded into service/tools
- tracks.ts: two mechanical WIRE_PATH glob syncs for the approved
  relocations (chat/completions.rs, object/store.rs); same families,
  same classification; not a W1/W3 reclassification.
- santi::text_source module path (unsupported) removed; supported items
  now crate-root exports read_im_reply_text / read_inbox_seed_text.

Zero identifier renames; wire literals byte-identical; contract tests
green. core 43 → 29; internal 859 (14 compound mod decls burned);
wire 712 / test 487 unchanged (occurrence-level verified). Baseline
untouched per ruling; ratchet green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

core: nest turn operation families 8dbac75ed2

Liberte-approved C2 batch (strand ss_0d11cd5a…):
- failure::Operation → Assembly, Prompt, Admission(Context|Execution),
  Persistence(Thinking|Text|Assistant|Completion), Tool
- flow::budget::ToolBatchAdmission → budget::Verdict
- text::delta::TextDeltaUpdate → delta::Update

turn.* literals byte-identical (hand-written name() match unchanged).
core 29 → 19; occurrence-diff: exactly the 10 rows burned, zero new,
zero cross-track. Baseline untouched; ratchet green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

core: seat shell, drive, error, and workspace families bf37e1ba17

Liberte-approved C3a batch (strand ss_0d11cd5a…):
- tools/shell.rs: Args, Prepared, Outcome (NotDispatched → Failed), Pipe
- flow/memory: Policy, Snapshot; store/assembly: Preview
- service/drive.rs: drive::Outcome; service/error.rs: error::Sink
- materials::Key (cache alias); timing::Turn (qualified refs)
- failure: Cause::Budget(Admission, Box<SantiError>) reusing C2 family
- pub mod workspace: Root, Uri; root re-exports of the pair removed
  (reviewed public source-API change); constants/helpers keep root seats

Wire literals and serde field names untouched (shell Args keys command/
cwd unchanged). core 19 → 3; occurrence-diff: exactly the 16 rows
burned, zero new, zero cross-track. Baseline untouched; ratchet green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

core: publish service module; burn brand prefix 7c8d5afc25

Liberte-approved C3b batch (strand ss_0d11cd5a…):
- SantiService → service::Service; SantiServiceConfig → service::Config
- pub mod service; old crate-root exports removed, no aliases
  (reviewed public source-API change; workspace-internal consumers
  in santi-api, santi, and tests migrated to the qualified seat)

No wire representation involved. core 3 → 1; occurrence-diff: exactly
the two rows burned. Remaining core row is StrandMaterial (F-i: held
for the W3 model-family slice). Baseline untouched; ratchet green;
35/35 suites; contract digests unchanged.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

guard: classify wire types by contract evidence 22f83e8896

Liberte-approved W3 slice 1 (strand ss_0d11cd5a…):
- .runseal/wire-schema.json: sorted OpenAPI components.schemas list +
  SHA-256 of the canonical exported document (matches the contract
  test pin byte-for-byte)
- word-debt/guard verify the evidence against a fresh export every
  run; stale or missing evidence fails closed with a regenerate
  instruction (runseal :word-debt --sync-wire-schema, explicit+atomic)
- exact case-sensitive PascalCase match may lift core -> wire only
  when the workspace declaration is unique; ambiguity declines loudly

No Rust code, wire spellings, WIRE_PATH, or baseline touched.
core 1 -> 0; wire 712 -> 713; occurrence-diff: exactly the
StrandMaterial reference row. Ratchet green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

guard: enforce the core-zero gate

guard / guard (pull_request) Successful in 3m41s

Details

e5523db217

Liberte-approved C4 + I1 (strand ss_0d11cd5a…):
- core hard-fails on any occurrence, independent of baseline;
  diagnostics name token+location, bounded list + total + follow-up
  command; wrapper exit code IS the gate verdict
- baseline: core entry removed; retained tracks refreshed to the
  measured post-W3 state (wire 713 / test 487 / internal 859,
  total 2059) per consent
- I1: internal rise above baseline warns loudly (file, counts, +delta)
  and stays non-blocking; falls prompt a same-batch baseline lowering
- gate regression tests on the production parse/evidence/ratchet path:
  synthetic core failure, green path, internal-rise warning,
  stale-evidence fail-closed, ambiguity declines override, unique
  binding lifts; guard gains a deno test step

No classification changes in this commit (occurrence sets identical).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

PerishFire merged commit 0fcf28625d into main

2026-07-14 11:06:20 +00:00

PerishFire deleted branch core/memory-pressure-roi

2026-07-14 11:06:20 +00:00

PerishFire referenced this pull request from a commit

2026-07-14 11:06:21 +00:00

core: memory-pressure ROI, word-debt constitution, core-zero gate (#5)