What Progressed In The Story
Tickoni can now prove its retail trust surface on Windows consumer hardware.
V2.22 extends the same paper-only policy decisions, audit output, replay
proofs, and fail-closed behavior already established on Linux and macOS to a
native Windows runtime path. Linux remains the high-throughput full-runtime
tier; Windows now has a supported retail runtime lane that does not require
WSL2, Docker, or a VM.
The user can now:
- build and run Tickoni natively on supported Windows hardware,
- run
tickoni doctorand see platform tier, isolation tier, degraded
guarantees, and demo compatibility on Windows, - execute a deterministic paper investment demo on Windows and inspect the
policy outcome, proposal hash, audit JSONL, and replay match, - compare Windows retail demo evidence against Linux full-runtime fixture
outputs for deterministic equivalence, - see unsupported hosts, stale manifests, tampered artifacts, and attempted
live-execution paths fail closed with explicit diagnostics.
Want the changelog first? Skip the Tickoni story and jump to the release notes ↓
Chapter 8: Common Tongue
The mountains beyond Kōri looked close from the sea.
They were not.
For six days Tickoni and Yamori sailed west beneath a sky the color of beaten iron. Black peaks rose ahead each morning and seemed no nearer by nightfall.
On the sixth evening, the curved mark beneath Tickoni’s ribs began to warm.
Yamori noticed.
— Still there?
— Yes.
— Growing?
— No.
— Doctor remains possible.
Tickoni pulled its coat closed.
The next morning, the mist opened.
A harbor appeared inside the mountain.
The entrance was barely wider than their boat. Rusted posts marked the cliffs with squares, triangles, circles, and symbols neither recognized.
A voice called from above.
— Keep left.
An elderly, mole-like miner sat on a beam spanning the channel, mismatched tools tied across his back.
Yamori looked at the calm water.
— Why?
A stone broke from the right wall and crashed beside the boat.
Yamori moved left.
The old miner grinned.
At the landing, Tickoni handed him Genza’s map.
The miner examined the red stamp.
— Genza still keeps this?
— He said the miners remember what the surface forgot.
The miner looked at Yamori’s crowded tool belt.
— Then he sent the correct student.
— Craftsman, — corrected Yamori proudly.
— We will see.
His name was Mokichi, keeper of the upper shafts.
— Visitors stay above. But I inspect the lower workings before every shift. Carry the ledger and you may follow.
At the first lift, Mokichi stopped beside a small wooden bird fixed to the wall.
He turned a key.
Click.
A tiny needle crossed several marks.
Chirp.
Mokichi opened the gate.
Yamori stared at it.
— A toy decides whether we descend?
— It tells me whether the lift passed its checks.
— I would rather inspect it myself.
Mokichi handed him a lamp.
— Start with the brake.
Yamori opened his mouth, thought better of it, and took the lamp.
Twenty steps below, the mountain opened.
The mine stretched beyond sight.
Small miners moved between the workings, their dark coats powdered white with stone dust.
Waterwheels turned beside bronze pumps. Iron cages climbed through shafts. Wooden carts crossed stone rails.
Nothing matched.
One workshop weighed ore with brass scales.
Another counted painted stones.
One used bells.
Another used flags.
At the first pump, Yamori smiled.
— Square bolts.
His wrench fit perfectly.
Three tunnels later they found an almost identical pump.
Its bolts were triangular.
Yamori tried three tools.
None fit.
Mokichi pulled one triangular piece free with his fingers.
It was a wooden wedge.
The pump changed rhythm.
Yamori stared.
— That looked like a bolt.
— Yes.
— But it was not.
— Also yes.
Tickoni laughed.
Yamori did not.
At midday they entered an abandoned chamber.
Tools covered every wall.
Thousands of them.
Keys, gears, couplings, wrenches, and fittings belonging to machines long gone.
At the center stood a tower made from adapters joined to adapters.
Yamori approached slowly.
— Beautiful.
Mokichi sighed.
— Guild Hachi-Roku thought so too.
— They built this?
— They wanted every machine in the mountain to work with every other machine.
Mokichi picked up a round coupling.
— Round fitting meets square fitting? Add a piece between them.
Another.
— New machine replaces the square one? Add another.
Another.
— Old machine still works somewhere else? Keep that piece too.
He pointed toward the tower.
— Eventually they could join almost anything.
Yamori smiled.
— Useful.
Mokichi pulled a lever.
A bell rang below.
Another answered far above.
Then a third.
Nobody moved.
— What did that do? — Yamori asked.
— Nobody knows.
His smile disappeared.
— The old guild became very good at making pieces fit. Eventually they stopped knowing whether the same command entered one end and came out the other.
The next morning, the mountain shook.
Three bells rang below.
Miners ran through the galleries.
— Shaft Nine!
— Six miners trapped!
Mokichi was already moving.
At Shaft Nine, water was entering a lower tunnel.
Six miners waited inside a cage beneath the damaged section.
The lower shaft used an old bronze brake.
The upper shaft used a newer iron hoist.
The mechanism joining them had broken.
Yamori examined both.
— I can connect them.
He returned from the adapter chamber with a chain of fittings.
Bronze into square.
Square into iron.
He locked the two machines together.
— Done.
Mokichi pointed at the controls.
— Show me.
Yamori pushed the bronze lever downward.
A rod crossed the adapters.
The iron lever also moved downward.
Mokichi pointed at the bronze plate.
— What does down mean here?
Yamori read the carving.
DOWN — RELEASE BRAKE
Mokichi crossed to the iron machine.
— And here?
Yamori read its plate.
He stopped.
DOWN — LOWER CAGE
Below them, a bell rang.
Water had reached the cage.
Yamori looked at the two levers.
Same position.
On one machine, down released the cage.
On the other, down sent it lower.
— Same movement, — Yamori said.
— Different meaning, — Tickoni replied.
The Seal of the Ticket burned beneath Tickoni’s ribs.
Tickoni pointed toward the cage.
— Six miners. Bring them to the upper landing. The bronze brake remains the final stop. If either machine sends something we do not understand, we stop.
The rescue had a boundary.
Then the Seal of Weight burned.
The brake glowed beneath one possible command.
Its grip vanished.
The cage dropped toward the open shaft, six miners inside.
The hoist glowed beneath another.
The cable pulled against the locked brake until its strands burned red.
Then an unknown warning crossed between the machines.
Beyond it, everything went black.
— Making them move together is not enough, — Tickoni said.
The Seal of Placement answered.
The tangled machinery became clear.
One side controlled the brake.
The other controlled the lift.
Between them was only the place where their signals had to meet.
Placement had done its work.
The boundary was clear.
The danger remained.
Yamori stared at the controls.
— We know where they meet, — he said.
He looked at the two plates.
— We still don’t know what they are saying.
Then he tore the old adapters apart.
— They don’t need to speak alike. They need to agree on what crosses.
He kept one connection from each machine.
Between them he built a small wooden box with three marked tiles—the only signals they needed.
HOLD
READY
RAISE
The bronze machine could work in its own way.
So could the iron one.
But only those three agreed signals could pass between them.
Mokichi pointed to the empty space beneath the tiles.
— And if something else arrives?
Yamori fitted a locking bar across it.
— Nothing passes.
Yamori checked every notch and contact on the adapter.
Hold.
Ready.
Raise.
Then he fitted it between the two machines.
— Now, — Mokichi said.
Black water had already climbed to the miners’ waists.
One of them held another above the surface as the cage rocked in the shaft.
The bronze brake sent:
HOLD.
The box carried HOLD to the iron side.
The iron hoist answered:
READY.
Yamori pulled the control.
RAISE.
On the bronze side, RAISE released the brake.
On the iron side, it lifted the cage.
The cage climbed.
Ten feet.
Twenty.
Thirty.
Then metal screamed.
A warning struck the iron machine.
The box locked.
The hoist stopped.
The bronze brake caught the cage.
Yamori checked the warning.
— Side pressure on the guide.
He reached toward the box.
— We could treat that as hold—
Mokichi looked at him.
— Does it mean hold?
Yamori stopped.
Below them, six miners hung halfway up the shaft.
Safe.
For now.
The Seal of Weight remained hot.
Beyond the unknown warning, it showed nothing.
Weight could show the cost of what they knew. It could not weigh what they did not understand.
Yamori lowered his hand.
— The bronze side does not know what this warning means.
— Then what crosses? — Tickoni asked.
— Nothing.
They inspected the shaft.
A metal guide had shifted during the quake.
Barely.
Perhaps the cage would have passed.
Perhaps not.
Yamori looked at Tickoni.
— Your seal didn’t show this.
— I didn’t know it was there.
Yamori reset it, measured it, and tested it.
Only when both machines again agreed on READY did they continue.
The cage rose.
Six miners stepped onto the landing.
After the sixth name was checked against Mokichi’s ledger, the gallery erupted in cheers.
Tickoni stood beside the wooden box.
The half-mark beneath its ribs burned.
At Kōri, different systems had been given one place to meet without becoming one system.
That had been only half the lesson.
Different machines could meet.
But meeting was not enough.
A boundary could say what may cross. It could not make both sides mean the same thing.
The bronze brake remained bronze.
The iron hoist remained iron.
Neither needed to know how the other worked.
But when one said hold, hold had to remain hold.
When one said raise, raise had to remain raise.
And when neither side understood what had been said—
nothing moved.
Tickoni understood the curved mark at last. Some laws had shattered. Others had been divided.
Suddenly, something black rose from the wooden box.
A small fragment spun through the air.
It struck the curved mark beneath Tickoni’s ribs and locked against it.
A second stroke formed.
A short line joined the two.
The mark became whole.
Black fire moved across it.
A name returned.
The Seal of Meaning.
What crosses must remain itself.
Mokichi stared at the new mark.
— What was that?
Yamori folded his arms.
— The reason I keep recommending a doctor.
The next morning, they reached the upper lift.
Mokichi wound the wooden bird.
Click.
Click.
No chirp.
His hand moved toward the gate.
Yamori caught his wrist.
Mokichi raised an eyebrow.
— The surface is one lift away.
— The bird did not sing.
— Yesterday you called it a toy.
— Yesterday I was wrong.
They found a small stone lodged beneath the brake sensor.
Mokichi removed it and wound the bird again.
Chirp.
Yamori opened the gate.
— Now we go.
By sunset, the mountains were behind them.
Yamori sat beneath the mast, removing tools from his belt.
Tickoni counted.
— Twenty-six.
— Twenty-five.
Yamori returned one wrench.
Tickoni looked at him.
— Necessary?
— Extremely.
— What becomes impossible without it?
Yamori stared across the sea.
— I preferred you before the mines.
The torn sail rose.
Behind them, the mountain kept its bronze machines, iron machines, strange bolts, bells, ropes, and forgotten tools.
None had to become the same.
They only had to tell the truth when something passed between them.
Beneath Tickoni’s ribs, four seals burned.
Ticket.
Weight.
Placement.
Meaning.
Ahead, the Ledger Sea opened again.
Far across the Ledger Sea, in the village with too many maps, Genza’s letter lay open on a black table.
A claw paused on the line.
The oni employed three Seals of the Order during its stay on Kōri.
— Three.
The door opened.
Another oni entered carrying a fresh message slip.
— It’s Tickoni, Grand Warden.
The elder read the slip.
Then folded Genza’s letter.
— Send for the Severer.
Release Notes
Release: V2.22 — Windows Retail Runtime Support
V2.22 completes Tickoni's Windows retail runtime support within M2's
"Enforced Boundaries" milestone. The release makes Windows a supported
consumer runtime path for deterministic paper demos, policy-checked decisions,
audit artifacts, and replay proofs, without weakening the Linux full-runtime
boundary model or introducing any live execution path on Windows.
Windows consumer hardware -> tickoni doctor + retail demo -> policy decision + audit JSONL + replay proof
What is true now: a Windows user can run the same governed proof flow already
available on other supported platforms and see explicit platform-tier evidence
in the output. What is still not true: this release does not enable live
trading, payments, crypto transfer, ledger mutation, or privileged execution
on Windows, and it does not claim full Linux runtime parity or packaged
distribution.
Headline Features
1. Native Windows retail runtime
Tickoni now supports a native Windows retail runtime path instead of requiring
WSL2, Docker Desktop, or a VM.
- Windows 10 2004+ is supported for
x86_64 - Windows 11 is supported for native
ARM64 - the retail runtime stays focused on deterministic paper and sandbox-style
proof flows, not live execution
2. Windows proof surface matches the product trust model
Windows users can now inspect the same consequence-bearing outputs that matter
on Linux and macOS: policy outcome, proposal hash, audit trail, and replay
result.
tickoni --versionandtickoni doctorexpose version, build, OS,
architecture, runtime tier, isolation tier, and demo compatibility- the retail demo produces policy-checked proposal output, append-only audit
JSONL, and replay match confirmation - reviewers can tie evidence back to the exact platform tier that produced it
3. Cross-platform deterministic conformance
Windows retail mode is not a separate trust model. It is measured against the
same fixture-backed proof surface as Linux full-runtime mode.
- deterministic fixture flows compare normalized event hashes, policy outcomes,
proposal hashes, audit records, and replay results - blocked-flow cases cover unsupported tier, missing fixture, stale manifest,
attempted live execution, and tampered artifact paths - no live provider, broker, payment, trading, crypto, or ledger side effects
are part of the Windows retail demo path
Governance and Safety
1. Paper-only Windows runtime remains policy-gated
Windows support does not loosen Tickoni's financial boundaries.
- policy outcomes remain the same governed
tkpolydecisions already defined
by fixture scope - live execution stays disabled on Windows retail mode
- the retail path preserves proposal-first behavior rather than introducing
direct money movement
2. Audit and replay remain first-class proof artifacts
Windows portability is treated as a trust claim, so the release keeps audit and
replay evidence central instead of treating them as optional diagnostics.
- audit JSONL and replay capsules remain part of the expected demo output
- replay runs with substituted captured effects rather than calling external
systems - platform tier and degraded-guarantee metadata are visible where they affect
evidence interpretation
3. Fail-closed diagnostics stay explicit
Unsupported or unsafe flows do not degrade silently just because the runtime is
portable.
- unsupported hosts and stale manifests are rejected with actionable output
- tampered or mismatched artifacts are treated as blocked proof paths
- privacy and telemetry defaults remain conservative for retail Windows modes
Platform Work
1. Windows builds only ship the reused Firedancer substrate
The Windows path stays narrow by design. Tickoni builds only the Firedancer
modules it actually reuses for retail runtime behavior rather than attempting a
silent port of the full validator-era surface.
2. Tier reporting is now part of the runtime contract
The retail runtime exposes platform mode honestly.
tickoni doctorreports the support path, tier status, and degraded
guarantees- documentation and evidence gates now distinguish Linux full-runtime from
Windows retail expectations - trust claims are scoped to what the Windows lane actually proves
3. Windows support is proven through deterministic conformance, not parity rhetoric
The release closes on fixture-backed evidence and focused CI lanes rather than
throughput claims or vague portability language.
- native Windows CI covers both
x86_64andARM64retail targets - deterministic demo outputs are compared across supported platforms
- distribution and installer work remain explicitly deferred to a later epic
Demo
Run the retail-facing Windows proof flow:
tickoni doctor
tickoni demo investment --manifest src/tickoni/demo/fixtures/demo.manifest.jsonExpected result:
tickoni doctorreports Windows tier status, isolation tier, degraded
guarantees, and demo compatibility.- The demo emits a deterministic paper investment result with policy outcome,
proposal hash, audit JSONL, and replay match. - Unsupported or tampered inputs fail closed with explicit blocked-flow
diagnostics instead of producing silent fallback behavior.
What Comes Next: V2.10 — The First Impression: A Build System That Welcomes Trust
V2.10 shifts from runtime portability to contributor accessibility. After
proving that Tickoni's trust surface travels to Windows, the next story makes
the repository itself easier to trust: one build surface, clearer just
recipes, smaller build logic, walk-based test discovery, and a validated Qt
build foundation for the terminal work ahead.
- new contributors get a shorter path from clone to green build,
- CI and local workflows converge on one explicit command surface,
- the Qt build path becomes real before the native terminal work expands.