Authority and state

Canonical owners

• WorldKernel owns campaign revision and atomic world mutation.
• Actor state owns an individual’s location, conditions, knowledge, goals, possessions, commitments, and relationships.
• Institution state owns institutional posture, resources, goals, location, information channels, and agency profile.
• A Gestalt owns a population’s shared baseline. Durable member deltas own each named person’s departures from that baseline.
• World facts own their statement, scope, evidence ancestry, and discovery locations.
• Clocks own progress, threshold, consequence declaration, and observable scope.
• Civic manifests own public authority, selection or succession, resources, redress, resident populations, governing institutions, and political edges for one jurisdiction.
• The event ledger owns committed history. Newspaper copy is a projection of that history, never a replacement for it.

Derived state

The following values are disposable and reconstructable:

• resolution cells and arenas;
• merge loss and demand weights;
• Nemesis attention assignments;
• Projector lived streams;
• browser and Eve surfaces;
• newspaper source queries and layouts;
• aggregate compatibility rows;
• build, run, and resume checkpoints.

Derived state may carry exact bindings and still remain non-authoritative. A receipt proves which proposal was considered against which snapshot; it does not grant the proposer ownership of the result.

Proposal-only model boundary

Every model stage is proposal-only. A stage may select, classify, appraise, draft, translate, reconcile, or verify within its supplied schema. It cannot:

• advance world revision;
• mutate another subject’s private state;
• invent a source receipt;
• rebase stale work;
• widen its authority because an output field exists;
• commit only the valid half of an invalid batch.

Semantic repair is bounded to the same frozen snapshot. Reconciliation workers operate a private workbench and submit a corrected proposal through the same validator; they do not patch canonical state.

Atomic persistence

Accepted mutations, authority envelopes, model receipts, causal receipts, events, and compatibility projections are persisted together through CultCache. A later publication or interface refresh cannot roll back a commit. Failure before commit changes nothing; failure after commit is recovered by reading canonical state and rebuilding the missing projection or checkpoint.

Knowledge and perception

Canonical truth and subject-local knowledge are separate components. A model sees only the projection permitted for its exact perspective. Communication adds existing facts to exact recipients; observation may admit a bounded local finding when the attempted means can actually establish it. Public channels are concrete information routes, not magic global knowledge.

External sovereignty

A consumer may own a boundary subject completely. Ghostlight can observe its published effects, depend on it, bargain with it, and propose consequences to it, but cannot give it an autonomous turn or fabricate its internal choices. The Greathold in Delvehold is the first intended example.