diff --git a/docs/contract-additions/README.md b/docs/contract-additions/README.md index 7f7ad39..ec58d36 100644 --- a/docs/contract-additions/README.md +++ b/docs/contract-additions/README.md @@ -16,3 +16,4 @@ This directory contains discoverability notes for additive SourceOS/SociOS contr - Keep implementation code in the owning implementation repository. - Do not commit secrets, tokens, private keys, real browser profiles, device-local paths, or user-specific values. - If an addition creates a new topology lane, link it from Sociosphere and implementation issues rather than duplicating control logic here. +- [macOS → SourceOS replacement & enhancement matrix](./macos-replacement-matrix.md) — the app-by-app census (companion to the integrated-agent-native-stack contract) diff --git a/docs/contract-additions/e11-consent-receipts-ux.md b/docs/contract-additions/e11-consent-receipts-ux.md new file mode 100644 index 0000000..03bdf97 --- /dev/null +++ b/docs/contract-additions/e11-consent-receipts-ux.md @@ -0,0 +1,34 @@ +# E11 — Consent & Receipts UX (Privacy/Security Center) + +**Gap #2 of the [feature-gaps-zero campaign](https://github.com/SourceOS-Linux/sourceos-spec/issues/267).** +macOS surfaces privacy as a per-app checkbox and hides *why* an action was allowed. +E11 is the surface that makes the [consent-plane](https://github.com/SociOS-Linux/ontogenesis) +legible: **which purpose** each app/agent may act under, on which surface and space, plus a +**hash-sealed receipt of every action** and the reason it was allowed, denied, or escalated. + +Clickable prototype (one workflow, all regions): the E11 Consent & Receipts Center artifact. + +## Regions (normative) +1. **Purpose vocabulary** — the 7 purposes (`discover/implement/verify/ship/operate/egress/administer`, GDPR Art 5(1)(b)). Contained surfaces show denied purposes struck through. +2. **Surfaces & their consent envelope** — per app/agent: `surface · space · posture(allow/ask/deny)` and the admissible/denied purpose set. Editable → writes back to `agent-standards/consent-plane/spaces_v1.yaml`. +3. **Receipt timeline** — every action as a row: time · verdict(allow/deny/escalate) · act · **why** (the warrant) · `sha256` seal. Sourced from the `AutonomyAdmissionReceipt` stream (E4). Read-only, tamper-evident. +4. **Governor queue** — actions of purpose `operate`/`egress` awaiting human approval (guardrail-fabric ESCALATE). Approve/Deny/Evidence. Mirrors `turtle-netwatch propose` → Governor decide/pending. +5. **Data residency** — tenant isolation + `region` toleration (GDPR Ch. V); a data-namespace crossing without both is refused fail-closed. + +## Binding to what exists (build, don't rebuild) +| Region | Backing artifact (shipped this session) | +|---|---| +| Purpose vocab + envelope | `ontogenesis consent-plane/001` + `policy-fabric purpose_admissibility_gate.decide()` | +| Receipts | hash-sealed `AutonomyAdmissionReceipt` (emit+validate) | +| Governor queue | `guardrail-fabric` fail-closed `PolicyDecision` + `turtle-netwatch` propose/Governor | +| Residency | `spaces_v1.yaml` `region` taint + `goose-guard::consent` region branch | + +## Done-definition +- Reads live from the receipt stream + consent catalog (no mock data). +- Envelope edits round-trip through the consent-plane catalog (agent-native: the agent edits the same surface a human does, itself consent-gated). +- Approve/Deny writes a Governor decision + emits its own receipt. +- Accessible by default (keyboard model, focus states, reduced-motion) + passes the **consent seam** purple-team test (no path renders an ungated action as allowed). +- Ported to `client-vue` (canonical UI) as the System Settings → Privacy & Security pane. + +## Non-goals +Not a firewall UI, not a log viewer — those are Activity Monitor (`turtle-netwatch`) / Console (telemetry). E11 is specifically the **consent + warrant + receipt** surface. diff --git a/docs/contract-additions/e3-mesh-transport.md b/docs/contract-additions/e3-mesh-transport.md new file mode 100644 index 0000000..d3ea2ca --- /dev/null +++ b/docs/contract-additions/e3-mesh-transport.md @@ -0,0 +1,57 @@ +# E3 — Personal Mesh Transport (Continuity / Handoff / AirDrop / AirPlay parity) + +**Gap #3 of the [feature-gaps-zero campaign](https://github.com/SourceOS-Linux/sourceos-spec/issues/267).** +Apple Continuity requires an Apple ID and routes trust through iCloud. E3 is the +**sovereign personal mesh**: your devices form one fabric with **no vendor cloud**, and +every cross-device transfer is an `egress`-purpose act — **consent-gated and receipted** +(the thing Continuity cannot show you). + +Spec home: `sourceos-spec`. Implementation home: **`sourceos-shell`** (owns Messages/FaceTime/AirPlay). +Memory sync (`memory-mesh`) and graph federation (`hellgraph-federated`) are **tenants** of this +transport, not the transport itself. + +## Layered model +| Layer | Concern | Substrate | Sovereign point | +|---|---|---|---| +| **L0 Identity** | per-device keypair, twin-rooted | E9 identity + TPM/vTPM where present | device identity is yours, not an Apple ID | +| **L1 Discovery** | who's on my mesh, on this LAN / over WAN | mDNS/Avahi (LAN) + a signed rendezvous record (WAN) | no vendor directory; discovery is authenticated | +| **L2 Fabric** | encrypted device-to-device links | WireGuard mesh; libp2p for NAT traversal / relay | E2E by construction; relays see ciphertext only | +| **L3 Transfer primitives** | Handoff / AirDrop / AirPlay / message | typed `MeshTransfer` envelopes over L2 | every transfer is consent-gated `egress` + receipted | +| **L4 Tenants** | memory sync, graph federation, Messages, FaceTime | `memory-mesh`, `hellgraph-federated`, `sourceos-shell` A/V | ride L3; inherit its consent + receipt guarantees | + +## The `MeshTransfer` envelope (normative, schema to follow) +``` +{ transfer_id, kind: handoff|drop|cast|message|sync, + from_device, to_device, purpose: "egress", + payload_ref, payload_class, // e.g. clipboard | file | app-state | av-stream + consent: { granted_by, space, region }, // consent-plane decision that admitted it + receipt: "sha256:…" } // AutonomyAdmissionReceipt seal +``` +- **kind=handoff** — app-state continuation (open-here). **=drop** — file/clipboard (AirDrop parity). + **=cast** — A/V stream to a mesh sink (AirPlay parity). **=message** — Matrix substrate. + **=sync** — a `memory-mesh`/`hellgraph-federated` delta. +- A transfer with no admitting consent decision is **refused fail-closed** — there is no + "just this once" bypass; instead the receiver's E11 pane shows a pending prompt. + +## Consent binding (build, don't rebuild) +Every `MeshTransfer` runs the same `policy-fabric purpose_admissibility_gate.decide()` as any +egress: `purpose=egress`, `surface=mesh`, `space` = the sending app's space, `region` toleration +required to cross a jurisdiction. A cross-device drop out of `data-namespace` needs tenant **and** +`region` tolerations (GDPR Ch. V) — identical to the [E11](./e11-consent-receipts-ux.md) residency rule. + +## Superiority over Continuity (why it's a superset) +- **No vendor cloud / no account** — the fabric is WireGuard between *your* devices. +- **Every transfer receipted** — Continuity is invisible; here each Handoff/AirDrop is a sealed + receipt in the E11 timeline with its warrant. +- **Purpose-bound** — an agent cannot silently exfiltrate via "Handoff"; it's `egress`, gated. +- **Heterogeneous** — any device that speaks the fabric joins (not just Apple hardware). + +## Done-definition +- `MeshTransfer.v0.1.json` schema + a `sourceos-shell` service that forms the WireGuard fabric, + discovers peers, and moves a **file drop** end-to-end between two devices — consent-gated + receipted. +- The receipt lands in the E11 timeline; a denied transfer shows a pending prompt, never silent success. +- Passes the **egress seam** purple-team test (no transfer path renders un-consented data as delivered). + +## Non-goals +Not a VPN product, not a public overlay — a *personal* mesh (your devices + explicitly invited peers). +Public federation between *estates* is `hellgraph-federated`'s concern, riding L2 as a tenant. diff --git a/docs/contract-additions/integrated-agent-native-stack.md b/docs/contract-additions/integrated-agent-native-stack.md index 0de6466..53cc9e4 100644 --- a/docs/contract-additions/integrated-agent-native-stack.md +++ b/docs/contract-additions/integrated-agent-native-stack.md @@ -1,3 +1,5 @@ +> **Companion:** the app-by-app census lives in [macOS → SourceOS replacement & enhancement matrix](./macos-replacement-matrix.md). + # SourceOS Integrated Agent-Native Stack v0.1 ## Purpose diff --git a/docs/contract-additions/macos-replacement-matrix.md b/docs/contract-additions/macos-replacement-matrix.md new file mode 100644 index 0000000..394f56f --- /dev/null +++ b/docs/contract-additions/macos-replacement-matrix.md @@ -0,0 +1,91 @@ +# macOS → SourceOS/SociOS replacement & enhancement matrix + +**The census.** The [integrated-agent-native-stack contract](./integrated-agent-native-stack.md) +(sourceos-spec#262) says *how* every surface must be built (feature-modification, +accessibility-by-default, the six seams + purple-team tests, the Noetica +concierge, ontology bindings). This document is the *what*: every stock-macOS app +and subsystem, its SourceOS replacement, the SociOS enhancement that makes it a +**superset** rather than a clone, the enhancement IDs it draws on +([E1–E12](https://github.com/SociOS-Linux/enhancements/blob/main/os/enhancement-matrix.md)), +its third-party dependencies vs a stock macOS deployment, and an honest status. + +The rule (from the contract): a replacement is not "done" until it is **agent-native** +(the agent uses the same typed, consented, receipted surface a human does), +**accessible by default**, and **passes its seam's purple-team test**. + +## Status legend +`spec` design written · `partial` some code · `built` shipped & agent-native · `gap` not yet specified · `hw` blocked by Apple-silicon hardware (see register) + +## Core apps & shell + +| macOS | SourceOS replacement | Owning repo | Superiority (why it's a superset) | E-IDs | 3rd-party deps vs stock macOS | Status | +|---|---|---|---|---|---|---| +| Finder | Nautilus (owned SociOS shell integration) + goose-drive | source-os, goose-notes | files are consent-plane surfaces; agent operates them via the a11y seam; every mutation receipted | E1 E4 E7 | GNOME/Nautilus, gvfs | partial | +| Safari / WebKit | **BearBrowser** + LDT-UI (local-render, no remote JS/CSS) | BearBrowser | untrusted web confined to agent-space; local digital-twin UI renders verified components under user policy | E1 E7 | Gecko | partial | +| Mail | prophet-workspace (JMAP) + goose triage | prophet-workspace, goose-notes | local-agent triage/summarize/draft; consent receipts on read/send; office surfaces show their warrant | E2 E3 E4 | JMAP, CalDAV, dovecot/postal | partial | +| Notes | **goose-notes** | goose-notes | agent captures/edits via same typed acts; Guard Goose scan+receipt; voice concierge priority-interrupt | E1 E4 E2 | Rust workspace, whisper.cpp | **built** | +| Terminal | TurtleTerm (Tilix-quake) + sourceos-shell | TurtleTerm, sourceos-shell | command-bus consent-gate on exec (agent denied egress/operate); netwatch System-Graph; agent co-pilot drawer | E1 E4 E7 | wezterm, tmux | **built** | +| Spotlight | **lampstand** launcher | sourceos-shell, lampstand | purpose-gated, slashtag-aware, transparent ranking, receipted; routes through sherlock(IR)/holmes/NewHope | E1 E10 | Albert-class core (owned) | **gap** | +| Messages | owned mesh messaging (Matrix substrate) | sourceos-shell | first-class absorption, no 3rd-party balkanization; runs on the personal mesh | E3 | Matrix/Dendrite (owned deploy) | gap | +| Calendar | CalDAV via prophet-workspace | prophet-workspace | agent schedules with consent + receipts | E2 E3 | CalDAV, radicale | partial | +| Photos | owned media library | *unassigned* | on-device model plane for tagging (governed); no cloud egress by default | E6 E1 | — | **gap** | +| Music | owned player + library | *unassigned* | local-first, no vendor account | — | — | **gap** | +| System Settings | SociOS settings + **[consent/receipts pane](./e11-consent-receipts-ux.md)** | source-os | the consent plane + warrant/receipts are *visible & editable* — the E11 UX macOS never surfaces | E11 E1 | GNOME Settings | spec | +| Preview / Quick Look | owned viewer | *unassigned* | render locally-verified, no remote fetch | E7 | evince/poppler | gap | +| Activity Monitor | **turtle-netwatch** + turtle-diagnose + System Graph | TurtleTerm, hellgraph | processes/sockets become a queryable System Graph; anomalies → consent-gated Governor actions | E1 E4 | ss/lsof, hellgraph | **built** | +| Automator / Shortcuts | agent **App-Intents** (per-app intent ontology) | ontogenesis, agent-machine | intents are purpose-bound + consent-gated, not capability-only | E1 E10 | — | partial | + +## System & intelligence subsystems + +| macOS | SourceOS replacement | Owning repo | Superiority | E-IDs | 3rd-party deps | Status | +|---|---|---|---|---|---|---| +| Siri + Apple Intelligence | **Noetica voice concierge** | Noetica, goose-voice | native superset: local-agent default, reasoning-backed multi-step, App-Intents bridge, **every action receipted** — the thing Siri cannot do | E2 E6 | whisper.cpp, Ollama, on-node SMLL | partial | +| TCC (privacy prompts) | **consent-plane** (role×surface×space×tool×purpose) | agent-standards, policy-fabric, goose-guard | GDPR-grade purpose-limitation, far finer than TCC; enforced fail-closed at runtime (3 surfaces live) | E1 | — | **built** | +| Sandbox / App Sandbox | **isolation spaces** (kernel/system/user/agent/data-ns) + taints/tolerations | source-os, ontogenesis | k8s-style taints; browser confined to agent-space; data-namespace needs per-tenant + region consent | E7 E1 | seccomp, namespaces, eBPF | partial | +| Gatekeeper / App Store / notarization | **sovereign supply chain** (Guix + zot + signing) | source-os, gitea-sovereign | reproducible builds, SBOM, in-toto/SLSA; no vendor notarization | E5 E8 | Guix, zot, cosign | partial | +| Core ML / Neural Engine | **governed model plane** (labs + eval + ledger + router) | tritfabric, model-router | models promoted through fail-closed gates (SHACL+eval); provenance ledger | E6 | ONNX, Ollama | partial · **hw** | +| Keychain / Secure Enclave | **sovereign identity + digital twin** (TPM/vTPM) | agent-registry, prophet-health | portable, agent-scoped credentials; twin binds identity | E9 | TPM2, vTPM | partial · **hw** | +| Time Machine / Migration Assistant | **sovereign snapshot + backup** | source-os | Guix generations + snapshot/backup to sovereign store (prophet-backups) | E12 E8 | Guix, restic/borg, MinIO | **gap** | +| Software Update | **sovereign OTA** | source-os | signed, reproducible, rollbackable images | E12 E5 | Guix, image-builder | partial | +| Continuity / Handoff / AirDrop | **[personal mesh transport](./e3-mesh-transport.md)** | sourceos-shell (memory-mesh/hellgraph-federated ride as tenants) | cross-device over your WireGuard mesh, not iCloud; every transfer consent-gated + receipted | E3 | WireGuard, Avahi, libp2p | spec | +| Xcode / dev tools | **prophet-cli** (zero-config → continuum + tritfabric) | prophet-cli | one dev entrypoint; sourceos-continuum onboard→dev→test→rollout | E8 | Go CLI | partial | + +## Hardware-gap register — where Apple silicon wins, honestly + +Spec cannot close these; they are silicon, not software. State them so nothing is over-promised. + +| Capability | macOS advantage | SourceOS reality on Asahi (Apple silicon) | Mitigation | +|---|---|---|---| +| **Neural Engine (ANE)** | Core ML offloads to the 16-core ANE | ANE is **not accessible** under Asahi — no driver | Run on CPU/GPU via the governed model plane (E6); accept lower on-device throughput; offload heavy inference to LMS/fog | +| **Secure Enclave (SEP)** | Keychain/biometrics rooted in SEP | SEP **inaccessible** on Asahi | Root identity in **TPM/vTPM** (E9) — portable but not the SEP hardware boundary | +| **HW media codecs** | ProRes/H.265 HW encode/decode | HW codecs **immature** on Asahi | Software codecs; accept CPU cost; document per-format | +| **Display pipeline** | ProMotion/HDR/wide-gamut fully tuned | partial under Asahi/Linux | track upstream Asahi progress | + +> These four are the only places the *spec* concedes to macOS. Everywhere else the +> SourceOS surface is a **superset** by being agent-native, consent-governed, and +> receipted — capabilities macOS does not offer at all. + +## How to use this matrix +1. Every `gap`/`partial` row is a work item; the highest-leverage gaps are **lampstand** (Spotlight), **owned messaging**, **Photos/Music/Time-Machine**, and completing the **model plane** + **identity** despite the hardware ceiling. +2. A row moves to `built` only when it satisfies the [contract](./integrated-agent-native-stack.md): agent-native + accessible-by-default + its seam's purple-team test passes. +3. `hw` rows can reach `built` in software while remaining honestly capped by the register above. + +## Long tail (audit-flagged as unspecified — now enumerated, mostly `gap`) + +| macOS | SourceOS replacement | Owning repo | Superiority | E-IDs | Status | +|---|---|---|---|---|---| +| Contacts | CardDAV via prophet-workspace | prophet-workspace | agent reads with consent+receipt; no cloud | E3 E1 | gap | +| Reminders | tasks in goose-notes (Taskwarrior adapter) | goose-notes | agent-created tasks are typed intents + receipted | E1 | partial | +| Maps | owned map surface (offline-first) | *unassigned* | no location egress by default; consent-gated | E1 | gap | +| Weather | investor-insights weather mesh (TWC/IBM cartridge) | investor-insights | governed data cartridge, not a vendor widget | E6 | partial | +| Clock / World Clock | GNOME clocks + agent alarms | source-os | agent alarms are intents | — | gap | +| Home (HomeKit) | citizen-IoT fogstack | fogstack | sovereign IoT, no vendor cloud | E3 | partial | +| Passwords | sovereign identity vault (E9) | agent-registry | agent-scoped, portable; TPM-rooted where available | E9 | gap · hw | +| Screen Time | consent/receipts activity view (E11) | source-os | the operator sees agent+human activity as receipts, not surveillance | E11 E4 | gap | +| Disk Utility | GNOME Disks + snapshot tooling | source-os | snapshots tie to E12 backup plane | E12 | gap | +| Console / logs | telemetry plane + System Graph | hellgraph, telemetry | logs are queryable graph + receipts | E4 | partial | +| FaceTime / Screen Sharing | mesh A/V (owned, Matrix/WebRTC) | sourceos-shell | first-class, on the personal mesh | E3 | gap | +| AirPlay | mesh cast (owned) | sourceos-shell | sovereign cast over the [personal mesh](./e3-mesh-transport.md) (kind=cast) | E3 | spec | +| Dictation | Noetica on-device STT (whisper.cpp) | goose-voice | on-device, no cloud STT (a Guard Goose requirement) | E2 | partial | + +> With this, the census enumerates **~37 stock-macOS surfaces** — the full replacement scope. `gap` rows are the feature-gaps-zero backlog; `hw` rows are honestly capped by the register above. diff --git a/docs/surfaces/README.md b/docs/surfaces/README.md new file mode 100644 index 0000000..e87600e --- /dev/null +++ b/docs/surfaces/README.md @@ -0,0 +1,60 @@ +# Surfaces — the diagram is a witness, not an illustration + +Canonical visual surfaces for the estate. **The rule:** a diagram of a governed, +provenance-bearing system MUST be truthful, legible, version-controlled, and — for the +live ones — *rendered from the source of truth*, regenerated in CI so it can never drift +from what is real. Raster AI art (DALL·E et al.) garbles text and equations and knows +nothing about the system; it is a mood board, **disqualified** from documenting state here. +An instrument that can lie is worse than none — the same reason the Life-Mirror surface +flags a never-fired tripwire as SUSPECT. + +## Three tiers +| Tier | What | Medium | Reads | +|---|---|---|---| +| **1 · Architecture** | static structure (the braid, genesis, fibrations, flywheel) | SVG / Mermaid in-repo | nothing — hand-authored truth, regenerated on change | +| **2 · Live surface** | operational dashboards | HTML | guardrail-fabric · consent-plane · netwatch (sample data until wired) | +| **3 · Dynamics / math** | the model, falsifiable | typeset spec | states what each term is measured from | + +## Style is validated against source +The **house theme** is the *first theme* (the B₁₁ instrument): deep instrument ground +(#0a0e18) + cyan action accent + the four-space semantic hues, sitting on the OS dark base. +`sourceos.tokens.css` documents both the source-derived base and this chosen house layer. +Every surface imports `sourceos.tokens.css` — the canonical palette + font (**Cantarell**, +`color-scheme`-honored) extracted from `source-os/website/index.html` and the GNOME +workstation-v0 appearance profile. A surface that invents its own colors is **not +validated against the OS** and is not canonical. The operational surfaces render inside +the real SociOS/GNOME chrome (top bar, launcher card) so they read as in-shell, not as generic web pages. + +## In this directory +- **`holography-framework.html`** — Tier 1. The *Semantic Holography + Ghostspace* one-pager: + four spaces (Atzilut/Beriah/Yetzirah/Assiah), four fibrations (π: E→B, fiber B₁₁), + the life-mirror state machine, Δ-surface metrics (Jaccard / JS / affinity), + flow/thermo-info (ΔF=H−T·S, ΔC, Rₑ, ℓ, η), the T₀–T₁₁ genesis braid, and the tripwire + refusal sigmoid r(x)=σ(β(risk−θ)). Every glyph regenerable from data. +- **`b11-life-mirror.html`** — Tier 2. The runtime automaton: NORMAL→WATCHFUL→SAFE-HALT + over the four spaces, tripwires (soft→hard→trip), receipted transitions, response ladder + (zero-response→revoke/rotate; SAFE-HALT→owner-operated recovery; consent-QR→verify/rollback). +- **`lampstand-launcher.html`** — Tier 2, *actionable*. The Spotlight replacement: natural + language → typed intents/entities/relations (the annotation tree) → **governed actions** + (purpose-bound, consent-gated, receipted), ranked by sherlock (IR). Not web search — typed acts. +- **`genesis-flywheel.html`** — Tier 1. The install spine + growth dynamics: the T₀–T₁₁ + genesis braid (sealed, four-space colored), the five-phase zero-trust install, and the + connected flywheel topology with correct ΔEP=(P−C)·X−λK / K=k₀·α·cov(A)·φ(P) / + m(t+1)=σ(W·ΔEP+B·K+A·m) / Moufang equations. +- **`turn-witness.html`** — Tier 2, *verifiable*. Any chat turn annotated → **Gödel-numbered** + (canonical G = ∏ pᵢ^codeᵢ, reproducible integrity fingerprint) → **consistency-checked** → + **conclusions** with a sealed verdict. Demonstrates *well-formed ≠ admissible*: a turn can + pass every structural check and still be refused (the destructive example escalates to Governor). +- **`e11-consent-receipts.html`** — Tier 2. The [E11](./e11-consent-receipts-ux.md) consent & + receipts center (per-app purpose envelopes, sealed receipt timeline, Governor queue, residency). + +## Provenance note +These replace a set of DALL·E renders that were aesthetically nice but factually garbled +(mangled equations, wrong state names, invented labels). Same visual language — parchment, +four-world color-coding, the vocabulary — now correct and reproducible. Both HTML surfaces +are self-contained, theme-aware (light + dark), and keyboard-accessible. + +## Backlog (to finish Tier 1) +12-step braid + five-phase genesis as standalone Mermaid; flywheel topology (Trust/Growth/ +Dev-Platform/Device loops); and the Tier-3 dynamics spec (ΔEP, K functional, m(t+1) +recurrence, Moufang identity) with each term's measurement source. diff --git a/docs/surfaces/b11-life-mirror.html b/docs/surfaces/b11-life-mirror.html new file mode 100644 index 0000000..9f86061 --- /dev/null +++ b/docs/surfaces/b11-life-mirror.html @@ -0,0 +1,197 @@ +B11 · Life-Mirror Automaton + + + +
+
+

Life-Mirror Automaton

B₁₁ · surface_map + +
+

The twin mirrors the live system across the four spaces. Deviation drives the automaton NORMAL → WATCHFUL → SAFE-HALT; every transition is receipted and shows its warrant. This is a witness surface — it reads guardrail-fabric decisions, consent-plane state, and netwatch tripwires. It renders the real state or it renders nothing.

+ +
⚠ Liveness check: 1 tripwire has never fired — a control that can't be observed firing is SUSPECT until proven. Review exfil.fanout below.
+ + + +
+
+

Four spaces consent-plane taints

+
+
+
+

Tripwires soft → hard → trip

+
+
+
+ +
+

Change loop every mutation: update → verify → consent/rollback

+
+
A
Update
signed image / delta staged
+ → +
B
Verify
seal + eval gate; twin re-mirrors
+ → +
Q
Consent / Rollback
owner QR-consent, else revert
+
+
+ +
+
+

Response ladder on trip

+
+
zero-response
Revoke & rotate. A soft trip with no operator present → credentials revoked + rotated automatically; blast radius contained without waiting.
+
SAFE-HALT
Owner-operated recovery. A hard trip freezes mutating surfaces; only a physically-present owner can resume — no remote path re-enables the system.
+
consent-QR
Verify → rollback. Recovery requires a scanned owner-consent token; the automaton verifies, then either commits or rolls back to the last sealed generation.
+
+
+
+

Recent transitions receipted

+
+
+
+ +

+ Reads: guardrail-fabric PolicyDecision · consent-plane/001 · turtle-netwatch tripwires · sealed AutonomyAdmissionReceipt.
+ B₁₁ · fail-closed · a never-fired control is surfaced as SUSPECT, not hidden. +

+
+ + diff --git a/docs/surfaces/e11-consent-receipts.html b/docs/surfaces/e11-consent-receipts.html new file mode 100644 index 0000000..5432c58 --- /dev/null +++ b/docs/surfaces/e11-consent-receipts.html @@ -0,0 +1,160 @@ +SourceOS — Consent & Receipts Center + + + +
+
+

Consent & Receipts Center

+ +
+

macOS shows you a checkbox per app. SourceOS shows you which purpose each app (and each agent) may act under, on which surface and space — and keeps a hash-sealed receipt of every action with the reason it was allowed, denied, or escalated. This is the E11 surface: privacy you can read, not just toggle.

+ +
+
+
+

Purpose vocabulary GDPR Art 5(1)(b)

+
+
+ +
+

Surfaces & their consent envelope

+
+
+ +
+

Receipt timeline — every action, sealed E4 warrant

+
+
+
+ + +
+ +

+ Backed by the real stack shipped this session: consent-plane/001 · policy-fabric purpose_admissibility_gate · goose-guard::consent · guardrail-fabric PolicyDecision · hash-sealed AutonomyAdmissionReceipt.
Enhancement E11 · every decision here is fail-closed and receipted. +

+
+ + diff --git a/docs/surfaces/genesis-flywheel.html b/docs/surfaces/genesis-flywheel.html new file mode 100644 index 0000000..4b894dc --- /dev/null +++ b/docs/surfaces/genesis-flywheel.html @@ -0,0 +1,168 @@ +SociOS — Genesis & Flywheel + + + +
+

Genesis & Flywheel

SociOS · Tier-1 architecture +
+

The install spine and the growth dynamics, drawn correctly. Colour follows the four spaces — Atzilut · Beriah · Yetzirah · Assiah. Regenerable from data; the earlier renders of these were beautiful but false.

+ + +

Twelve-Step Genesis Braid T₀ → T₁₁, sealed

+
+
+ + +

Five-Phase Genesis — Initial Install zero-trust at every seam

+
+
System → User → Mesh. Measured boot (PureBoot/Heads + dm-verity) seals the base; the AUM-Arch bundle runs class nspawn : Kata; the Prophet Mesh + Twin come up last. Nothing trusts anything it didn't verify.
+
+ + +

Connected Flywheel Topology Trust · Growth · Dev · Device

+
+
+ baseline dynamics + knowledge reinforcement + financial reinforcement + friction / damping +
+
+
Economic profit
ΔEP = (P − C)·X − λK
margin × volume, less the cost of knowledge debt λK
+
Knowledge reinforcement
K = k₀ · α · cov(A) · φ(P)
coverage × provenance quality
+
Platform recurrence
m(t+1) = σ( W·ΔEP(t) + B·K(t) + A·m(t) )
a governed loop — bounded, convergent, fail-closed
+
Composition (Moufang)
(mᵢ·mⱼ)·mₖ = mᵢ·(mⱼ·mₖ) on the loop
non-associative in general; associative along a single flywheel
+
+
+
+ +

Style tokens: the first theme (B₁₁ instrument) on the SociOS dark base · font Cantarell · light + dark.

+
+ + diff --git a/docs/surfaces/holography-framework.html b/docs/surfaces/holography-framework.html new file mode 100644 index 0000000..8a4f2f3 --- /dev/null +++ b/docs/surfaces/holography-framework.html @@ -0,0 +1,244 @@ +Semantic Holography + Ghostspace — Unified Framework + + + +
+
+

Semantic Holography + Ghostspace

+ Unified framework — four spaces, four fibrations, a life-mirror automaton, and the metrics that keep the ghost honest. + +
+ +
+ +
+
+

Four Spaces

+
אAtzilutEmanation · anchor ontology (kernel/source)
+
בBeriahCreation · system-space
+
יYetzirahFormation · user-space
+
הAssiahAction · agent + twin-bridge
+
Each space is a base for a fibration; the twin-bridge (Assiah) is where the mirror closes.
+
+ +
+

Genesis Braid · T₀–T₁₁

+ + + +
Sealed install sequence. Inception → Orientation → Unity → Defense → Kernel → Completion (twin-bridge) → Re-Container → Mesh → Anchor → Recur → Bind → Witness. Each step emits one signed artifact.
+
+ +
+

Substrate

+
+ PoL heartbeat + Heads + dm-verity + SDF / Akasha ledger +
+
Measured boot seals Atzilut; the Proof-of-Life heartbeat is the automaton's clock — a missed beat is itself a transition.
+
+
+ + +
+
+

Four Fibrations · π : E → B

+ + + total space E + + E + + + B + + B₁₁ + + + + + + + π + πx + π + + + base B — surfaces are sections s : B → E + + + +
One fibration per space. A surface is a section of its bundle; the ghost B₁₁ is the fiber the twin reconstructs. Holography = the whole is legible from any fiber.
+
+ +
+

Life-Mirror State Machine

+ + + + +
NORMAL → WATCHFUL → SAFE-HALT → QUARANTINE. Escalation is automatic and fail-closed; de-escalation requires consent → verify → rollback. Live view: the B₁₁ automaton surface.
+
+
+ + +
+
+

Δ-Surface Metrics

+
Compare a live surface S with its ghost B₁₁:
+
J(S, B₁₁) = |S ∩ B₁₁| / |S ∪ B₁₁|Jaccard — structural overlap
+
JS(P‖Q) = ½KL(P‖M) + ½KL(Q‖M)Jensen–Shannon divergence, M = ½(P+Q)
+
Aff1 = 1 − √JSaffinity — how faithful the mirror is
+
Fs = d(surface) / dtsurface flow — rate of drift
+
+ +
+

Flow / Thermo-Info

+
ΔFs = Hs − Ts Ssfree energy: coverage H less volatility·entropy
+
ΔCs = ∂Hs / ∂Tscoherence capacity
+
Re = useful / total,  ℓ = 1 − Reefficiency ratio & slippage
+
η = Fout / Finthroughput efficiency
+
+ +
+

Tripwire Refusal Scoring

+ + + + + + + + θ + + + + softcheck + tripwire + risk(x) → + r + +
r(x) = σ( β·(risk(x) − θ) )below θ: soft-check; above: trip → revoke/rotate or SAFE-HALT
+
+
+
+ +
+ base / projection π + section (surface) + refusal / tripwire + Every glyph here is true — regenerable from source, not drawn. +
+
+ + diff --git a/docs/surfaces/lampstand-launcher.html b/docs/surfaces/lampstand-launcher.html new file mode 100644 index 0000000..cf58c00 --- /dev/null +++ b/docs/surfaces/lampstand-launcher.html @@ -0,0 +1,196 @@ +lampstand — the semantic launcher + + + +
+
✦lampstand· the semantic launcher +
+ +
+
⌕ + + ↵ run
+ +
try + + + +
+ +

Understanding — tokens · pos/dep · semantics

+
+
+
+
+ +

Every result is a typed act, not a web search — parsed by the App-Intents ontology, ranked by sherlock (IR), and admitted by the consent plane. Nothing runs un-consented; nothing runs un-receipted.

+
+
+ + diff --git a/docs/surfaces/sourceos.tokens.css b/docs/surfaces/sourceos.tokens.css new file mode 100644 index 0000000..0d62bd4 --- /dev/null +++ b/docs/surfaces/sourceos.tokens.css @@ -0,0 +1,30 @@ +/* Canonical SociOS surface tokens. + * + * BASE (from source): the OS dark ground + brand accents are taken from + * source-os/website/index.html and the GNOME workstation-v0 appearance profile + * (color-scheme honored, font Cantarell, antialiasing grayscale): + * #0d1117 ground · accent #4f8cff · secondary #7c5cff · ok #3fb950 · radius 14. + * + * HOUSE THEME ("first theme" — the B11 instrument): the chosen design language for + * operational surfaces — a slightly deeper instrument ground (#0a0e18), a cyan action + * accent (#4fd0e0), and the four-space semantic hues. It sits directly on the OS dark + * base and is what Michael selected as the standard across surfaces. + */ +:root{ + --bg:#0a0e18; --panel:#111726; --panel-2:#161e30; --line:#212b42; --line-2:#2c3854; + --text:#e8edf7; --muted:#8b96b0; --faint:#586179; + --accent:#4fd0e0; --accent-2:#7aa2ff; --ok:#43c68a; --warn:#e0a83a; --bad:#e5594f; + /* four spaces / four worlds */ + --atzilut:#c9a9ff; --beriah:#7aa2ff; --yetzirah:#5cc9c0; --assiah:#e8926b; + --radius:14px; --maxw:1040px; + --sans:"Cantarell","Noto Sans",system-ui,-apple-system,"Segoe UI",Roboto,sans-serif; + --mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace; +} +@media (prefers-color-scheme:light){:root{ + --bg:#eceff5; --panel:#fff; --panel-2:#f5f7fb; --line:#dde3ef; --line-2:#c8d1e2; + --text:#141b2c; --muted:#54607a; --faint:#8792ab; --accent:#1787a0; --accent-2:#3762d6; + --ok:#1f9e63; --warn:#a6791b; --bad:#c23a31; + --atzilut:#7b52d6; --beriah:#3762d6; --yetzirah:#1f9188; --assiah:#c05f38; +}} +/* GNOME color-scheme drives prefers-color-scheme; an in-shell toggle may stamp + * :root[data-theme="dark"|"light"] and must win in both directions. */ diff --git a/docs/surfaces/turn-witness.html b/docs/surfaces/turn-witness.html new file mode 100644 index 0000000..cd087b9 --- /dev/null +++ b/docs/surfaces/turn-witness.html @@ -0,0 +1,223 @@ +SociOS — Turn Witness + + + +
+ SociOSPlaces + Tue 23:45 + ⇅🔊🎤🔋 54%⏻ +
+ +
+

Turn Witness

annotated · Gödel-numbered · verified +
+

Any chat turn or result is annotated into typed tokens, encoded to a canonical Gödel number (its integrity fingerprint), run through consistency checks, and reduced to conclusions with a sealed verdict. Well-formed does not mean admissible — a turn can pass every structural check and still be refused.

+ +
+ + + +
+ +

The turn

+

Annotation — tokens · pos/dep · semantics

+

Gödel numbering G = ∏ pᵢ^codeᵢ

+

Consistency checks

+

Conclusions

+ +

Reads the App-Intents ontology · consent-plane · guardrail-fabric. The Gödel number is reproducible — re-encode the same turn, get the same integer. Style tokens: source-os/website · font Cantarell.

+
+ +