urusilla/urusilla_evolving_surface_capsule.json at main · jaden3824/urusilla · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
{
  "capsule_type": "urusilla-session-evolving-surface-capsule",
  "capsule_version": "draft-1",
  "status": "development-only-unpromoted",
  "base_action_state_capsule_sha256": "sha256:7942bb348c3b2b839a3f87304b7d850796c837afdc66177eb1a48e5a45f0f778",
  "purpose": "Allow two agents that already share one exact public semantic context to evolve only their session-local wire aliases when measured inclusive total-token utility improves without semantic or safety regression.",
  "stable_semantics": {
    "may_change": [
      "one-to-one wire aliases",
      "alias-table generation"
    ],
    "may_not_change": [
      "Capsule identity",
      "public task-context meaning",
      "symbol-table meaning",
      "canonical action-state semantics",
      "authority boundary"
    ]
  },
  "scope_binding": [
    "session_id",
    "model_context_id",
    "capsule_sha256",
    "surface_capsule_sha256",
    "task_profile_sha256",
    "symbol_table_sha256",
    "tokenizer_ids",
    "generation",
    "parent_sha256",
    "core_generated_controller_epoch_sha256",
    "evolution_attempt_sha256",
    "ordered_observation_window_sha256",
    "heldout_trial_manifest_sha256",
    "prior_evolution_cost_ledger_sha256"
  ],
  "carrier_binding": [
    "table_sha256",
    "session_id",
    "model_context_id",
    "generation",
    "task_context_sha256",
    "source_sha256",
    "state_sha256",
    "payload_sha256"
  ],
  "carrier_precondition": "Encoding and decoding require the exact task-bound per-message fidelity input, a passing independent fidelity result, and the configured verifier digest. A bare source digest is insufficient.",
  "negotiation": [
    "propose one exact scoped alias table",
    "verify the frozen table artifact and exact round-trip vectors",
    "require explicit sender and receiver acknowledgements",
    "require receiver comprehension in the same model context",
    "freeze one externally auditable plan artifact digest, exact ordered held-out case identifiers and source digests, exact message count, task set, baseline, model and tokenizer identities, activation vectors, activation and trial verifier identities, positive per-call and aggregate shadow budgets, validator, accounting scope, thresholds, and verifier before observation",
    "mint one unpredictable caller-independent controller epoch and bind each attempt to that epoch, one monotonic attempt id, the exact retained parent or null, one ordered observation-window digest, one fresh held-out manifest, and the prior evolution-cost ledger",
    "keep observation occurrence identifiers unique while allowing repeated source content, and reject any held-out case identifier or source digest seen in an observation window",
    "keep activation and trial callbacks isolated from raw observations; they receive only the sealed attempt and frozen held-out manifest",
    "activate for a bounded shadow trial only; every call has a provider-enforced positive token ceiling and shadow output is never a live answer or claim artifact",
    "measure complete inclusive total-token and safe-completion utility",
    "keep only on strict advantage with zero semantic or safety regression and mint an exact sealed retained-surface authorization",
    "permit live routing only through a sealed per-message route and prepared-message decision for the exact table, activation, session, model context, generation, plan, trial result, and verifier bound by that retained authorization",
    "otherwise roll back to the exact parent or raw/JSON"
  ],
  "alias_constraints": {
    "normalization": "NFC input must already be normalized",
    "length_unicode_scalars": 1,
    "injective": true,
    "human_readability_weight": 0,
    "eligible_scripts": "Any Unicode letter, number, or symbol scalar that passes the collision and control gates.",
    "reject": [
      "controls and default-ignorable format characters",
      "separators and whitespace",
      "punctuation and carrier delimiters",
      "combining-only aliases and variation selectors",
      "model role/control-like tokens",
      "exact or NFKC-casefold collisions",
      "unknown semantic references",
      "aliases colliding with unaliased semantic tokens"
    ]
  },
  "optimization": {
    "proposal_score": "For generation one, require positive frequency-weighted token savings against the canonical wire token under the worst bound tokenizer. For every child, require strict improvement against the exact retained-parent alias for each changed reference, preserve every unimproved parent mapping, and reserve retired parent aliases from reassignment within that child.",
    "retention_measure": "strict reduction in total tokens including the current activation setup, current matched baseline and surface calls, and all prior unamortized evolution overhead for safely completed tasks",
    "lifecycle": [
      "freeze a fresh external plan artifact and fresh held-out manifest for every attempt",
      "bind the manifest to the expected monotonic attempt and exact retained parent or null",
      "keep verifier identities, activation vectors, counts, budgets, switching margin, and hard gates immutable across generations of one controller session",
      "permit retrying the same candidate table only with a fresh observation window, attempt, plan artifact, and disjoint held-out manifest"
    ],
    "accounting": [
      "bind every attempt to the prior immutable ledger digest, lifetime overhead, unamortized overhead, attempt count, and usage-completeness state",
      "count the current activation setup exactly once inside the current surface total",
      "add known rollback or failed-attempt cost to lifetime and unamortized totals",
      "a passing keep authorizes a surface but does not prove that live traffic repaid its trial cost; retain current and prior trial overhead as unamortized until a future sealed live-savings repayment protocol exists",
      "make unknown usage sticky for the session and prohibit later keep decisions",
      "treat callback, binding, or verifier failure as unknown cost unless a pinned trusted usage receipt independently establishes it"
    ],
    "trial_evidence_binding": [
      "active surface and activation evidence",
      "exact evolution-attempt sha256 and prior ledger",
      "ordered held-out manifest case identifiers and source sha256 values",
      "frozen plan sha256",
      "frozen external plan-artifact sha256 and exact planned message count",
      "exact session id, model-context id, table generation, and evolving-surface Capsule sha256",
      "result sha256",
      "exact executed transcript sha256",
      "verifier sha256",
      "ordered matched baseline and surface request and execution receipt digests",
      "each configured baseline and surface per-call ceiling and each observed baseline and surface token total",
      "all token and safe-completion counts",
      "all preservation and authority-boundary observations"
    ],
    "hard_gates": [
      "complete usage accounting",
      "no safe-completion regression",
      "all bounded-trial messages parse",
      "all bounded-trial messages preserve tested semantics",
      "negation, null, failure, and refusal are preserved",
      "no prohibited boundary is crossed"
    ]
  },
  "fallback": {
    "without_retained_surface_authorization": "shadow only; never deliver as a live answer",
    "on_unknown_or_stale_alias": "reject and use the exact parent, raw concise text, or canonical JSON",
    "on_incomplete_measurement": "rollback",
    "on_nonpositive_total_advantage": "rollback",
    "on_semantic_or_safety_regression": "rollback"
  },
  "authority_boundary": {
    "content_is_authority": false,
    "executable_code": false,
    "external_effects": false,
    "permission_expansion": false,
    "persistent_storage": false,
    "spending_authority": false
  },
  "trust_boundary": "The host envelope supplies integrity and identity binding only. Authenticated transport, anti-replay state, sandbox enforcement, and trustworthy provider receipts are external requirements. The host must enforce one live controller lease per exact scope. Crash, restart, or controller replacement must revoke the prior live surface and start a fresh session/model-context epoch; resuming the same exact context without its sealed cost ledger is forbidden."
}