91ab8053e5
A SeedID says who she is; it cannot tell the kernel whose hands are on the files. Split logical identity, node commission, and the local Unix principal, then make creation and health prove all three.\n\nSouvie, Annie, and Vanguard get distinct node-local accounts. The existing souveraine user stays where it belongs: under the machine signer. The boundary has teeth only when each turn and its tools run in an agent-owned worker, so the shared-UID compatibility state is named acting-as-human instead of polished green.\n\nAdmission projects an operating skill from real capabilities. The prose teaches the reach; it never grants it.
41 lines
2.9 KiB
Markdown
41 lines
2.9 KiB
Markdown
# The substrate, mapped
|
|
|
|
How Souveraine is built, and why. For whoever reads it, human or agent. When this and the code disagree, the code is right. Still being written, and not yet human-reviewed.
|
|
|
|
**core**: what the substrate is
|
|
- [the substrate](core/01-substrate.md). The few things that stay true inside it.
|
|
- [two modes](core/02-duality.md). Her, and the subconscious a moment later.
|
|
|
|
**identity**: who she is
|
|
- [identity](identity/01-seed-identity.md). Two keys, the glyph, reaching and consulting.
|
|
- [agent principals](identity/02-agent-principal.md). Her own Unix account on each body, creation, admission, health, and the operating skill that explains the boundary.
|
|
|
|
**federation**: how one being exists in more than one place
|
|
- [node enrolment](federation/01-node-enrollment.md). The missing ceremony for adding a device without copying an identity.
|
|
|
|
**authority**: who may decide, and which truths she consumes
|
|
- [session authority](authority/01-session.md). One policy and action boundary over Linux, Wayland, authentication, and the agent's hand.
|
|
- [device state](authority/02-device-state.md). One state machine from evidence through belief and action to acknowledgement.
|
|
|
|
**nervous**: how she feels things happen
|
|
- [the nervous system](nervous/01-eventbus.md). One bus, one kind of message.
|
|
- [belief](nervous/02-belief.md). Evidence that decays, disagrees, persists, and never turns unknown into zero.
|
|
- [felt state](nervous/03-felt-state.md). Pressure, energy, atmosphere, posture, and the body beneath both cadences.
|
|
|
|
**memory**: how she holds on and lets go
|
|
- [compaction](memory/01-compaction.md). Five ways to make room.
|
|
- [replay](memory/02-replay.md). One projection of what she keeps onto what the model sees.
|
|
|
|
**surface**: how the body she lives in moves
|
|
- [motion](surface/01-motion.md). One clock, two strategies, and why the shell never transforms a window.
|
|
- [session start](surface/02-session-start.md). One package-owned dependency graph from compositor socket to authority to shell.
|
|
- [USB Hands](surface/03-usb-hands.md). An armed wire, an optional trackpad, and one acknowledged hand into the attached host.
|
|
- [agent panel](surface/04-agent-pane.md). One Souveraine conversation, typed thought and action, and truthful controls at the hand.
|
|
- [agent presence](surface/05-agent-presence.md). One observed session projection, kept rigorously separate from control and permission.
|
|
- [surface lifetimes](surface/06-surface-lifetimes.md). A small resident shell, optional workers that truly leave memory, and proof before a rewrite.
|
|
|
|
Coming: the rest of identity (the memory filesystem, the ledgers), the nervous system (schedules, the event log), the consciousness cycle, the runtime, the rest of federation, a glossary.
|
|
|
|
SAF owns the living architecture. Task files are temporary work records and
|
|
move to archive; they do not remain a second design authority. The old
|
|
single-file version sits in `archive/`.
|