The Four Arcs

Decisions locked (say so if any is wrong)

The four arcs — the journey to done

Done = the sealed gauntlet passed 12/12 from inside a factory-born site · any edit under a minute · URL to certified site under thirty minutes · running without Robert. Each stop below: the plain story, then “go deeper” holds the full binding charter.

1. THE BIRTHRIGHT — every site born with the machinery in it. Trials land, the pin is set, four shards lift-and-emit the proven gate into the factory, and a newborn practice passes all 27 checks from inside itself. Then the fold: one machinery source forever. Status: furthest along — both day-one shard plans banked tonight; trial-1's fix round is the arc's live edge. Box: bay-3.
   ↘ go deeper — the full charter

   # ARC CHARTER — THE BIRTHRIGHT *Every site is born with the machinery in it. Authored 2026-08-14 by the keeper as Robert's proxy, on his word: "be the keeper of my commander's intent." Robert's red-pen amends this at any time; until then it binds completely.* ## Commander's intent The trust machinery proven on the flagship travels into the factory, so every practice the factory births carries — from its first breath — the full 27-check gate, honest genesis records, provenanced rulings with live void triggers, and a workflow rendered from its own registry. No retrofits, no hand-raised exceptions. The gauntlet's precondition: the exam is taken by a factory-born site. ## Exit test (recomputable, court-held) A fresh practice emitted by the real pipeline path passes ALL 27 checks in registry order FROM INSIDE ITSELF — lap receipt banked, passed+failed+unrun == 27, anti-vacuity plant generically chosen and shown red for its stated reason — and afterward THE FOLD (P3) closes the flagship's own fork onto factory emission: one machinery source, byte-recomputable from the lift manifest. 27/27 by a non-author is the only green. ## Scope IN: trial-1 fix round (court-prescribed altitude) → trial-2 → machinerySourcePin set → shard A (the lift) ∥ shard C (the closure) → shard B (the emission) → shard D (the newborn proof) → P3 the fold. Authority: ~/lane-worktrees/port-p1-closure/docs/ai/SPEC-port-p2-emitter.md (incl. Lens addendum) + ~/next-arc/conductor-prep/port-shard-map.md + banked shard plans (A: 16KB, C: banked, both in ~/.claude/engine-bay/staging/reports/). OUT: edit-stack behavior (THE HANDS), pipeline speed (THE LINE), the gauntlet itself (THE PROOF). SEAM: landings on the flagship trunk serialize through the keeper's train (trial micros share scripts/two-lap-gate.ts — sequential cars, never parallel). ## Operating pattern Standing orchestrator (fable) drives conductor cycles: objective → conductor plan-run → KEEPER red-pen → build-run → off-box courts → keeper folds and lands. Engines by the routing law (plans name engine + fit reason per leg or bounce): shard A codex; C codex/grok; B grok-or-codex by load; D = the factory's own pipeline conducted mechanically. Boxes: bay-3 primary. Dynamic fan-out permitted where the shard map names mechanical sweeps; honest headcounts are door-recomputed. Judgment never on-box. Builds gated on the pin; the pin gated on landed trials — no early build, no Route B without a Robert ruling. ## Laws that bind (by path) ~/next-arc/orchestration-charter.md (all nine clauses, quoted in every brief) · ~/next-arc/primitives-lens/ (five questions on every court) · frame-trial-2 ruling (greens quantify over enumerated executions; residual on every face) · claims.json one-writer · receipts regenerate at every merge, never hand-merged (D11) · walk is HEAD-based: commit, walk, amend (D12) · agents never delete. ## Escalation to keeper (thence to Robert by exception) Any second refutation of one surface (frame question, no third patch) · any entangled-class lift row · any pin-precondition read failing · any Route B temptation · schedule pressure suggesting thinner verification (refused by law; surfaced, never absorbed). ## First moves 1. Keeper red-pens the two banked shard plans (engine-per-leg check included). 2. Dispatch trial-1 fix round with both court verdicts as the spec (STRUCTURE: schema-shaped validation of the full declared record; CLASS: honest recursive census + missing-file red proof + a green assertion that asserts). Court on harvest; land as one train car. 3. Trial-2 build (brief staged at ~/next-arc/conductor-prep/trial2-build-brief.md) on the post-trial-1 tree; court; land. 4. Set machinerySourcePin; read the three preconditions FROM the pin; dispatch A ∥ C builds.
2. THE HANDS — any ask, under a minute, certified, zero refusals. The long pole. The whole class universe of edits — facts, copy, structure, images, forms, everything — hardened until a plain-language ask lands as a certified, reversible change in under sixty seconds, witnessed where the teammate actually looks. This is the terrain your fable-team vision runs on. First deliverable to your desk: the class-universe census — the arc’s scope face, yours to eyeball before anything burns down. Box: bay-1, inheriting the fleet as Birthright folds.
   ↘ go deeper — the full charter

   # ARC CHARTER — THE HANDS *Any ask, under a minute, certified, zero refusals. Authored 2026-08-14 by the keeper as Robert's proxy. Robert's red-pen amends at any time; until then it binds completely. This is the LONG POLE — it inherits the fleet's weight as THE BIRTHRIGHT folds.* ## Commander's intent A teammate says what they want changed, in their own words, and the site is correctly, reversibly, certifiably changed in under sixty seconds — across the WHOLE class universe of edits, with zero code-opinion refusals (the edit-anything law: no content category off-limits; a refusal-shaped cure is a failed cure). The experience standard binds: no commands, no plumbing, ever, to a teammate — a user's experience is a scene. This is the terrain Robert's full vision runs on: fable team-leads per box, dynamic workflows, model families chosen by fit. ## Exit test (recomputable, court-held) For every edit class in the ratified class universe: a plain-language ask executes through the three-layer stack (Intent → Resolution → Primitive) to a certified change in <60s wall-clock, witnessed in the teammate's TRUE channel (validation = the promise witnessed); undo returns served bytes byte-identical; the certificate is truthful (gates green, basis on the face). A sealed-grade rehearsal sweep (authored by a NON-builder, opened only at grading) passes across the class universe. The gauntlet itself stays sealed and is NOT this arc's to open. ## Scope IN: the class-universe census (author it FIRST — the classes the twelve sealed asks could sample: facts, copy, structure, images/media, forms, redirects, styling, navigation, new content, deletions-with-undo, multi-page cascades, metadata/SEO) · per-class burn-down on the flagship and on factory-born practices as they arrive · resolution-layer hardening · the sub-60s latency budget per layer · certified undo everywhere · refusal-audit (every current refusal-shaped surface named and cured or ruled). OUT: machinery lift/emission (BIRTHRIGHT) · pipeline capture speed (LINE) · opening the gauntlet (PROOF; rehearsal asks here are authored fresh by a non-builder, never the sealed twelve). SEAM: flagship-trunk landings serialize through the keeper's train with BIRTHRIGHT's micros. ## Operating pattern Standing orchestrator (fable) runs class-by-class conductor cycles: class census → objective per class → plan-run → keeper red-pen → build → adversarial court (courts try to make the edit LIE: wrong target, silent overreach, broken undo, stale certificate) → fold → land. Dynamic workflows EXPECTED here (per-class fan-out; mechanical sweeps at fanout>0 with door-recomputed headcounts). Engines: grok-build the build workhorse; codex for type-rigor resolution work; deepseek lanes for bulk mechanical sweeps; opus/kimi-k3 court seats at home; every leg named with fit reason. Boxes: bay-1 primary now; inherits BIRTHRIGHT's boxes at its fold. ## Laws that bind (by path) ~/next-arc/orchestration-charter.md · ~/next-arc/primitives-lens/ · edit-anything (no content category off-limits) + bounded-capability test (a limit is legitimate only if never-had · never-wanted · party-at-risk ≠ party-consenting) · security lives at the projection seat, not the input layer · three-layer stack law (code holds facts; intelligence decides meaning) · one-writer · agents never delete. ## Escalation to keeper (thence to Robert by exception) The class-universe census itself (Robert eyeballs it — it is the arc's scope face) · any class whose cure narrows capability · any latency floor that resists <60s after two honest rounds (frame question, not a third patch) · anything touching teammate-facing words. ## First moves 1. Author the class-universe census from the ratified goals + the edit stack's real surface; deliver to the keeper for Robert's eyeball. Nothing burns down before the census is ratified. 2. Baseline sweep: measure today's per-class truth (works / works-slow / refuses / lies) on the flagship — measurement only, banked as the arc's denominator. 3. First burn-down cycle on the worst honest class; court on harvest; land.
3. THE LINE — URL in, certified site out, under thirty minutes, zero human steps. The pipeline made fast and hands-free, with the honest denominator (proven this session) folded in as its truth organ, and the factory’s merge train emptied onto a protected trunk. Live edges: the denominator cure cycle under three keeper rulings, and the guard-battery measurement rerouted through the container lane. Box: bay-2 + sandbox lane.
   ↘ go deeper — the full charter

   # ARC CHARTER — THE LINE *URL in, certified site out, under thirty minutes, zero human steps. Authored 2026-08-14 by the keeper as Robert's proxy. Robert's red-pen amends at any time; until then it binds completely.* ## Commander's intent A cold practice URL becomes a served, certified, editable site in under thirty minutes with no Robert anywhere in the loop — and the line never lies about what it carried. Speed comes from parallel lanes and cheaper tolls, never thinner verification. The honest denominator (the counting instrument proven this session) is THIS arc's truth organ: a fast line that cannot honestly count its own cargo is a liar with good throughput. ## Exit test (recomputable, court-held) Three consecutive cold-URL runs, distinct real practices: capture → download → rewrite → deploy → certify, each <30min wall-clock, zero human steps, each emitting a truthful site-certificate (gates green, basis + residual on the face) and an honest denominator row (verified: true on the map, recomputable by a non-author). The factory trunk is clean and protected (the merge train emptied, branch protection per the honest-floor ruling). Origin pacing is adaptive (discovered per origin, never hammered). ## Scope IN: the denominator cure cycle under the keeper's three rulings (reasonClass as DECLARED datum · never-narrowed list DERIVED from machinery · universe PROJECTED from master spec §3) — full authority chain waiting in ~/lane-worktrees/arc4-denominator/docs/specs/arc4-lineage-ledger.md, branch held at 4926c5620 · baseline ratification AFTER the vocabulary cure (the 13/15 warning discharges by sequencing) · the factory merge train: guard-battery true-state measurement via the SANDBOX CONTAINER lane (box-shell is container-lane; sealed rooms deny the fixtures' git) → cure what is real → court → lap → merge PR#2028 → protection edit → hook PRs #2026/#2027 → dependabot train as ONE car → the ~39-PR queue in dependency order → keeper lands 4c (entries[] correction, four named commits) · pipeline wall-clock budget per stage, measured then cured · zero-human-step audit of every door on the path. OUT: edit behavior (HANDS) · machinery emission (BIRTHRIGHT) · meters/exam (PROOF). SEAM: factory-trunk merges serialize through the keeper with BIRTHRIGHT's shard folds. ## Operating pattern Standing orchestrator (fable) drives: the denominator cure cycle first (courts riding, cure at ruled altitude ONLY, no third patch on refuted surfaces), the merge train second, the speed budget third. Engines: codex for the factory cures (type-rigor); grok-build for mechanical sweeps; sandbox containers (deepseek/kimi cards) for git-spawning batteries and bulk measurement; courts at home. Boxes: bay-2 primary + the sandbox lane. Every leg named with fit reason. ## Laws that bind (by path) ~/next-arc/orchestration-charter.md · ~/next-arc/primitives-lens/ · the three keeper rulings (ledgered, overrule open) · measured-fact-overrides-computed-verdict · a-discharge-is-a- measurement (re-check preconditions as the first line) · adaptive origin pacing · CI-first adjudication · one-writer · agents never delete. ## Escalation to keeper (thence to Robert by exception) Any gate whose cure smells like weakening (refused; surfaced) · the branch-protection edit (keeper's GitHub seat performs it) · any origin that refuses adaptive pacing · a stage that resists its wall-clock budget after two honest rounds (frame question) · the sealed-room git-fixture ruling lands from Robert (route suites accordingly when it does). ## First moves 1. Dispatch the denominator cure cycle (orchestrator inherits by reading the lineage ledger's authority chain; three rulings bind; courts ride). 2. Reroute the guard-battery measurement through the sandbox container lane (job brief ready at ~/next-arc/pr2028-guard-measure-brief.md; adapt to the sandbox-build template, --gh-repo Neuron-Sites/neuron --ref factory-readiness-cure). 3. Measure the pipeline's current cold-URL wall-clock honestly (one real practice, staged timings) — the arc's speed denominator before any speed work.
4. THE PROOF — the exam passed, and the organs that keep it passed. Mutation floors under every battery, recurring adversaries on a cadence, the five-questions census at every arc boundary, the meters — and last of all, alone, the sealed gauntlet opened hash-first and graded 12/12 by a non-author. Nothing self-certifies, including the immune system. Builds organs in parallel from tonight; the exam date is called only when Birthright and Hands are green. Box: bay-4 + sandbox lane.
   ↘ go deeper — the full charter

   # ARC CHARTER — THE PROOF *The exam passed, and the organs that keep it passed. Authored 2026-08-14 by the keeper as Robert's proxy. Robert's red-pen amends at any time; until then it binds completely. This arc builds in parallel from day one and CLOSES ALONE at the end — the exam is the one thing that cannot be parallel.* ## Commander's intent "Done" is provable, not claimed — and it STAYS proven without Robert watching. The sealed gauntlet (twelve asks, no build session ever reads them, grader opens hash-first) is passed 12/12 from inside a factory-born practice, graded by a non-author. Around that single moment, the standing organs: metering, recurring adversaries on a cadence, mutation floors under every battery, the five-questions census at every arc boundary. The false green is the only unrecoverable failure; this arc is the immune system that makes one structurally unreachable. ## Exit test (recomputable, court-held) The sealed gauntlet: opened hash-first by the grader, 12/12 asks executed from inside a factory-born practice, graded green by a non-author with receipts a stranger can recompute. AND the organs live: every load-bearing battery carries a mutation floor with a control run (unmutated copy green, else the sweep refuses coverage claims; every element bound; a survivor is a named failure) · the Primitives-Lens census runs at every arc boundary · Q4 recurring adversaries fire on their cadence · the meter organs (WP2/WP3 class) report real usage/health on the keeper's word · every organ has a proven red twin (a check that cannot fail proves nothing). ## Scope IN: the mutation-floor rollout (adopt warp's proven g-*-mutants pattern generically — the control-run law is ratified keeper-side) starting under the factory guard battery and the flagship two-lap fixture · the adversary cadence (standing falsification legs on trust machinery, scheduled, off-box) · the census harness at arc boundaries · meter organs when the keeper calls them · gauntlet logistics ONLY (grader identity: non-author; hash-first opening; the grading protocol document) — never the asks' content. OUT: the twelve sealed asks stay sealed to EVERYONE in the build lineage including this arc's orchestrator and the keeper's build-adjacent sessions · rehearsal authoring belongs to THE HANDS (non-builder-authored there) · fixing what adversaries find (routed to the owning arc). SEAM: the exam waits for BIRTHRIGHT (a factory-born subject) and THE HANDS (class coverage); organs wait for nothing. ## Operating pattern Standing orchestrator (fable) builds organs via the same cycle (objective → plan → keeper red-pen → build → court → fold), with one inversion: this arc's builds are THEMSELVES verification machinery, so every organ ships with its own red twin and its own mutation floor — nothing self-certifies, including the immune system. Engines: kimi-k3 + opus for adversary seats (independent pedigree is the point); codex/grok for organ builds; courts at home always. Boxes: bay-4 + sandbox lane (organs are light; the exam is one run). ## Laws that bind (by path) ~/next-arc/orchestration-charter.md · ~/next-arc/primitives-lens/ (this arc OPERATES the census) · green-leg-must-be-able-to-fail (floors vs ceilings) · a-guard-covers-admissible- members-not-present-ones (plant an absent member) · a-proof-may-not-pick-its-own-target (generic derivation, multi-point sampling) · adversaries-must-test-primitives · the sealed- gauntlet seal (wand_gauntlet_sealed: no build session reads; grader opens hash-first) · one-writer · agents never delete. ## Escalation to keeper (thence to Robert by exception) ANY approach to the sealed asks by anyone (terminal surface-and-stop) · grader identity selection (keeper proposes, Robert ratifies — the exam's independence is his to own) · an organ that cannot be given a red twin (frame question) · the exam date (called by the keeper when BIRTHRIGHT and HANDS exit tests are green; Robert informed before the run). ## First moves 1. Adopt warp's mutation-floor script shape; stand the first floor under the flagship two-lap fixture (the battery the trials just stressed); prove its control run + one deliberate survivor detection. 2. Author the census harness for arc boundaries (five questions, machine-prompted, court- answered) and run the first census on THE BIRTHRIGHT's trial-1 fix landing. 3. Draft the grading protocol (grader independence, hash-first opening, receipt format) for Robert's ratification — logistics only, zero contact with ask content.

Where your eyes matter most