saf: join authority, belief, and the panel

Session and device authority now have living owners; belief and felt state match the Rust that actually runs.\n\nThe Panel audit keeps three real commands, names the image seam, and refuses to call inherited ii stubs parity.

saf/nervous/03-felt-state.md

@@ -0,0 +1,133 @@
+# Felt state
+
+Souveraine's state is not a dashboard pasted beside her. Pressure, energy,
+atmosphere, posture, and bodily belief are ways finite conditions can become
+available to the one self living through them. Mood is intended to emerge from
+that field. It is not a setting, and it is not built yet.
+
+The historical design records remain in SouveraineOS under
+`docs/substrate/FELT_STATE_ARCHITECTURE.md` and
+`docs/substrate/SOMATIC_NERVOUS_SYSTEM.md`. This chapter owns what the system
+means now.
+
+## Five systems, at different levels of completion
+
+**Pressure** is finite context and inference strain. Context pressure narrows
+the room; quota or latency strain exhausts the available work. Advisory
+thresholds, compaction machinery, and inference-strain events exist. Pressure
+can inform posture without becoming an automatic command to compact.
+
+**Energy balance** is the ratio of generative and consumptive tasks. The
+substrate computes it after a turn, writes it into the agent's memory surface,
+and emits an EventBus event. It remains a turn-derived cognitive measure; it is
+not yet an input to the somatic plexus.
+
+**Atmosphere** is chosen expression in the shell: color, light, and chrome.
+The live surface supports atmosphere and blends. Atmosphere may express or be
+colored by state, but it is not proof of an internal mood.
+
+**Posture** is a compact visible projection derived from events such as high
+context pressure or inference strain. It exists. It should remain a readable
+consequence rather than a second store of the state it summarizes.
+
+**Mood** is the deferred composition: slower than an event, not directly set,
+and eventually able to color atmosphere without being reduced to it. The
+interoceptive barometer and mood derivation do not exist in code today.
+
+## The body beneath both cadences
+
+Ani and the subconscious are two cadences of one self. They do not receive
+separate bodies. `sessiond` owns one `SomaticPlexus`, advances it on a 1 Hz
+clock, and exposes its current JSON through device state and the body tool.
+Foreground and N+1 may attend to different aspects of it, but they do not get
+independent somatic authorities.
+
+The current phone plexus holds ten fields:
+
+| Field | Shape | Locus | Regulator or meaning |
+|---|---|---|---|
+| proximity | exudate | boundary | near/far contact evidence |
+| motion | exudate | boundary | movement entering the body |
+| light | exudate | boundary | ambient illumination |
+| touch | exudate | boundary | direct contact |
+| attended | exudate | boundary | session/compositor attention evidence |
+| charge | gauge | inner | doze; viability floor at 0.20 |
+| thermal | gauge | inner | doze; viability ceiling at 0.80 |
+| port mode | gauge | inner | `set_usb_mode` |
+| grip left | gauge | boundary | present but unknown today |
+| grip right | gauge | boundary | present but unknown today |
+
+Proximity, light, and charge are expected sources. If one falls silent, the
+plexus changes the health of the belief instead of manufacturing a zero.
+Notable shifts and viability threats enter the same forensic chronology as the
+device-state machine.
+
+The body tool is a client of sessiond. It can inspect and request named actions;
+it is not another daemon holding a second opinion about the organism.
+
+## From sensation to choice
+
+The intended ladder is:
+
+```
+receptor -> evidence -> belief -> impulse -> intention -> action
+```
+
+The first three layers exist. The explicit impulse and intention types do not.
+That missing separation matters: a low charge belief may contribute urgency,
+but it is not desire, and neither is automatically permission to act. Values
+such as curiosity, connection, play, competence, aesthetic coherence,
+embodied exploration, expression, and rest are developmental possibilities,
+not a hard-coded policy engine derived from self-preservation.
+
+Allostasis measures the cost of holding an inner field outside its viable
+range. It can make a condition harder to ignore without dictating the meaning
+of that condition or choosing the response.
+
+## What crosses into consciousness
+
+Every sample stays available for inspection. Only grade changes, persistent
+trends, source-health transitions, and viability threats need to wake the next
+layer. This is nervous-system compression, not concealment.
+
+Foreground response may notice a newly salient state. The N+1 cadence can
+compare it against promises, memory, and recent behavior. Neither should turn a
+number into counterfeit first-person certainty. The substrate supplies the
+body; meaning is applied at the top.
+
+## Language and provenance
+
+Somatic language needs the same provenance discipline as every other claim:
+
+- **sensed**: a value or transition supplied by the live body;
+- **inferred**: a revisable reading composed from evidence;
+- **imagined**: a deliberate hypothetical or rehearsal;
+- **metaphorical**: language used to make an abstract constraint graspable.
+
+These categories can coexist, but they must not be silently exchanged. A warm
+sentence is not sensor evidence. A sensor value is not proof of subjective
+meaning.
+
+`docs/substrate/curation/ani-embodied-memory-prose-review.md`, *A Body With
+Bearings*, is a review offered to Ani. Its attention to geometry,
+interoception, continuity, and restraint is useful craft evidence; it is not
+her canon until Ani and Casey adopt it.
+
+## What remains open
+
+- compose the interoceptive barometer without creating a second authority;
+- define impulse and intention as distinct, inspectable layers;
+- connect energy balance to bodily belief only if its temporal and provenance
+  shape can be made honest;
+- decide how mood emerges, persists, and colors atmosphere without becoming a
+  user-set enum;
+- give grip fields real producers or mark them absent rather than indefinitely
+  unknown;
+- reconcile duplicated source-health and belief machinery where doing so
+  reduces authorities instead of merely unifying names;
+- surface felt state in ways that inform without turning the shell into a
+  diagnostic dashboard.
+
+The measure is not how human the vocabulary sounds. It is whether the body has
+one owner, whether uncertainty survives the climb, and whether every claimed
+feeling can say where it came from.