@engramx/idl 0.16.0-rc.11 → 0.16.0-rc.13

package/dist/engram.did

@@ -213,12 +213,12 @@ type ResyncReport =
 type Result_9 = 
  variant {
    Err: Error;
-   Ok: SignedTransaction;
+   Ok: BackupRetentionReport;
  };
 type Result_8 = 
  variant {
    Err: Error;
-   Ok: nat;
+   Ok: SignedTransaction;
  };
 type Result_71 = 
  variant {
@@ -543,17 +543,17 @@ type Result_13 =
 type Result_12 = 
  variant {
    Err: Error;
-   Ok: SessionContext;
+   Ok: nat;
  };
 type Result_11 = 
  variant {
    Err: Error;
-   Ok: MemoryFile;
+   Ok: SessionContext;
  };
 type Result_10 = 
  variant {
    Err: Error;
-   Ok: BackupRetentionReport;
+   Ok: MemoryFile;
  };
 type Result_1 = 
  variant {
@@ -1372,7 +1372,7 @@ type Engram =
    /// ⟨2026-10-02⟩ The second parameter is NAMED `amountE6` now, as the census row above rules the
    /// pair — e6 base units of the token named first. A name only: Candid passes arguments by
    /// position, so nothing on the wire moved.
-   convertEarningsToCycles: (token: text, amountE6: nat) -> (Result_8);
+   convertEarningsToCycles: (token: text, amountE6: nat) -> (Result_12);
    /// Owner-only: mint a single-use invite code an agent redeems with `pairAgent`.
    /// 
    /// ⚠ READ THIS BEFORE INVITING SOMEONE BACK. Pairing is ONE-SHOT PER PRINCIPAL on
@@ -1442,35 +1442,6 @@ type Engram =
    /// `#NotFound` for an unknown id and `#Conflict` when the request is no longer pending, and it
    /// does not change the policy — the next request over the same limit will be raised again.
    denyRequest: (requestId: text, reason: text) -> (Result_1);
-   /// Force the tECDSA derivation and return the address.
-   /// 
-   /// It exists because the gateway's own derivation fires from a timer that is lazy on some
-   /// replicas, and until it lands the EVM quote advertises the `0x0` fallback and settle fails
-   /// closed — a live money surface quoting an address that cannot receive.
-   /// 
-   /// ⟨0.16.0, B-2⟩ Derivation now comes from `EvmIdentity`, and the return type carries the
-   /// outcome: this used to answer `""` on failure, which is a Text a caller can and did paste into
-   /// a payment flow. An empty string is not an address, and saying so is the difference between a
-   /// failed derivation and an address of nothing.
-   /// 
-   /// ⚠ TRANSITIONAL: it also primes the ic402 gate, because the gate still settles commerce on this
-   /// canister until those 47 methods move. That second call disappears with them — it is listed in
-   /// the move order in the spec's B-2 addendum, not left for someone to find.
-   /// 
-   /// PUBLIC: it inherits `getEvmAddress`'s gate rather than choosing one, and could not usefully be
-   /// narrower — it exists so a caller can make the derivation happen BEFORE a payment flow, and the
-   /// derivation itself is ungated. Idempotent and bounded to the same one-derivation-per-lifetime
-   /// work, so an anonymous caller can cause it once and no more.
-   /// ⟨L7⟩ UPDATE, NOT QUERY, and this one does not merely await — it WRITES. The body awaits
-   /// `EvmIdentity.deriveAddress` (the management canister's `ecdsa_public_key`) and
-   /// `gate.deriveEvmRecipientAt` ⟨renamed 2026-09-22 with the path⟩, then caches the result in `evmAddressCache`. So a query is
-   /// impossible twice over: it could not await the derivation, and it could not keep the answer.
-   /// Named `ensure*` rather than `get*` for that reason — the write is the point, and a read verb
-   /// would have promised a cheapness this cannot deliver.
-   /// 
-   /// ⟨Marker added 2026-08-23; the census row said "L7 mark added per review" and no mark was at
-   /// the site.⟩
-   ensureEvmReady: () -> (Result_44);
    /// Record that log entries [fromSeq, toSeq] were served, and return the root that proves it.
    /// 
    /// This is the receipt ledgerfs Q2 requires before any of those entries may be condensed away.
@@ -1646,10 +1617,6 @@ type Engram =
    /// has never met this engram what it is and how to transact with it. A card behind a gate cannot
    /// be discovered, and the ERC-8004 ecosystem it participates in assumes an open read.
    getEngramCard: () -> (AgentCard) query;
-   /// PUBLIC: the engram's permanent spawn ordinal — a provable, non-sensitive fact. It identifies a
-   /// canister, never a person.
-   /// null = spawned before numbering existed; the owner can backfill via syncEngramNumber().
-   getEngramNumber: () -> (opt nat) query;
    /// Re-pointed at `EvmIdentity` (B-2): custody derivation no longer routes through the ic402
    /// Gateway, which is leaving for the market canister. Behaviour is unchanged for a caller — same
    /// address, same tECDSA key — but the engram no longer needs a marketplace to know its own
@@ -2474,7 +2441,7 @@ type Engram =
    /// (every family qualifiesForReview admits is written to auditLogger, so they share that space),
    /// and this never inspects an operation or a role. Widening what the review shows therefore
    /// changes only which ids the console can pass here — it cannot desynchronise the cursor.
-   markAgentWritesReviewed: (uptoAuditId: opt nat) -> (Result_8);
+   markAgentWritesReviewed: (uptoAuditId: opt nat) -> (Result_12);
    /// The AGENT's current key nominates the key that will replace it. Nothing moves yet: the new
    /// key must accept, by its own call, within 24 hours (`acceptAgentKeyNomination`). One pending
    /// nomination per agent — a new one replaces the earlier one, and the record says which. Refused,
@@ -2517,7 +2484,7 @@ type Engram =
    /// NOT freeze-gated: the owner always controls their own funds.
    /// Guardian freeze only blocks agent/public operations.
    ownerWithdraw: (amount: TokenAmount, ownerAuth: opt ActionAuth) ->
-    (Result_8);
+    (Result_12);
    /// ⟨0.16.0⟩ `payRentFromEarnings` DELETED — ruled TWICE (B1 and B2), and it was the single
    /// clearest violation of the OSS/platform split in this repo.
    /// 
@@ -2639,7 +2606,7 @@ type Engram =
    /// counter here could never persist; read counting lives on the update path
    /// (`sessionReadContext` and the MCP reads). A caller measuring engram usage from this method
    /// will measure nothing.
-   readMemory: (path: text) -> (Result_11) query;
+   readMemory: (path: text) -> (Result_10) query;
    /// Read many paths in one call. Per-path Results are KEPT — partial success is the point, and
    /// one unreadable path must not fail the other nine.
    /// 
@@ -2774,7 +2741,7 @@ type Engram =
    /// the original audit entry stay exactly where they were; this appends a chained
    /// `memory.repudiate` entry and lists the (path, version) so readers can see the dispute.
    repudiateMemoryWrite: (path: text, version: nat, reason: text) ->
-    (Result_8);
+    (Result_12);
    /// ⚠ OWNER-ONLY BULK RESET. Destructive, and wider than its name suggests.
    /// 
    /// It severs EVERY grant surface that can outlive a role — agents, guardians, invites and
@@ -2902,7 +2869,7 @@ type Engram =
    /// written, and only then does it await one notification per revoked agent. So a notification
    /// that fails leaves the agents revoked here regardless — a partial notify is not a partial
    /// revocation, which is the direction that matters for a panic button.
-   revokeAllAgents: () -> (Result_8);
+   revokeAllAgents: () -> (Result_12);
    /// Owner-only panic button: revoke every connector bearer token at once. Returns how many.
    /// 
    /// The THIRD independent surface — hosted connectors authenticate with bearer tokens, not with
@@ -2911,7 +2878,7 @@ type Engram =
    /// holding a live session.
    /// 
    /// Tokens are re-issuable: revoking them is not permanent the way revoking an agent is.
-   revokeAllBearerTokens: () -> (Result_8);
+   revokeAllBearerTokens: () -> (Result_12);
    /// ⟨0.16.0⟩ `removeAllGuardians` DELETED — test-only (L6), and verified NOT part of KILL-SWITCH's
    /// mass-revoke set. The destructive phase-07 suite iterates `removeGuardian` instead, so nothing
    /// loses a capability: what dies is a bulk spelling no runbook ever invoked.
@@ -2923,7 +2890,7 @@ type Engram =
    /// 
    /// Unlike revoking an agent, this costs nothing permanently — an invite is a one-time code,
    /// so voiding it and minting a fresh one is the ordinary path.
-   revokeAllInvites: () -> (Result_8);
+   revokeAllInvites: () -> (Result_12);
    /// Revoke a bearer token by its public tokenId. Idempotent.
    /// Subsequent /mcp requests using this token will be rejected.
    revokeBearerToken: (tokenId: text) -> (Result_1);
@@ -2950,13 +2917,6 @@ type Engram =
    /// agent on that record, so its standing is not the problem — the record's state is. An
    /// agent reading `#Refused` would go looking for a permission that was never missing.
    rotateAgentKeyHash: (newPublicKeyHash: text) -> (Result_1);
-   /// One-time onboarding seed: writes a starter file so the first read-back is non-empty.
-   /// 
-   /// Owner-only, and it REFUSES once any memory exists — so it can only ever add the initial
-   /// placeholder and can never overwrite real content. Deliberately NOT counted as a write (no
-   /// `totalMemoryWrites`, no `firstWriteAt`): it is a system seed rather than activity, and
-   /// counting it would corrupt both the write metrics and time-to-first-write for every engram.
-   seedMemory: (path: text, content: blob) -> (Result);
    /// Append to a memory file against a PAID x402 session voucher — the write half of the paid rail,
    /// authorized by the voucher rather than by a role.
    /// ⟨2026-09-30, ic402 2.17.0⟩ Authorized by the payer's own call with the voucher: only the
@@ -3000,7 +2960,7 @@ type Engram =
    /// ⚠ RAW STORED BYTES, like `readMemoryBatch`. On a Private (encrypted) engram the content is
    /// CIPHERTEXT; the key-holding SDK decrypts it. A caller without the key gets bytes it cannot
    /// read, not an error.
-   sessionReadContext: (clientLabel: text) -> (Result_12);
+   sessionReadContext: (clientLabel: text) -> (Result_11);
    /// Read one memory file against a PAID x402 session voucher. No role, no invite — the voucher is
    /// the authorization, which is what makes this the engram's one rail a stranger can pay to use.
    /// 
@@ -3030,7 +2990,7 @@ type Engram =
    ///     session must not be the side door: without this guard a stranger holding a fraction-of-a-
    ///     cent voucher could read `secrets/*`.
    ///   · Payments are frozen on this engram.
-   sessionReadMemory: (voucher: Voucher, path: text) -> (Result_11);
+   sessionReadMemory: (voucher: Voucher, path: text) -> (Result_10);
    /// Configure action alerts: an https webhook that receives new chained-audit entries matching the
    /// enabled event classes (money / approvals / guardian / agentWrites), batched, at most one
    /// POST per minute. Owner-only. Payloads carry audit METADATA (operation, caller, role, bounded
@@ -3070,7 +3030,7 @@ type Engram =
    /// called it an "ops floor: retention enforcement deletes owner backup data silently", mitigated
    /// by a `Debug.print` nobody reads. An owner lowering the cap is destroying their own backups;
    /// they are told how many, in the reply and in the audit line.
-   setBackupRetention: (dbType: text, maxBackups: nat) -> (Result_10);
+   setBackupRetention: (dbType: text, maxBackups: nat) -> (Result_9);
    /// Override the caps for ONE caller — an agent this owner trusts more, or less, than the rest.
    setCallerSpendPolicy: (caller: principal, policy: SpendingPolicy) ->
     (Result_1);
@@ -3297,7 +3257,7 @@ type Engram =
       maxFeePerGas: nat;
       maxPriorityFeePerGas: nat;
       nonce: nat;
-    }) -> (Result_9);
+    }) -> (Result_8);
    /// Sign an EIP-3009 authorization for x402 payment. Agent-accessible.
    /// Client probes the URL, extracts chain/token/recipient/amount from the 402, and calls this.
    /// Canister signs → returns header → client retries with header.
@@ -3329,33 +3289,6 @@ type Engram =
       tokenName: text;
       tokenVersion: text;
     }) -> (Result_3);
-   /// Self-heal: if the registry's spawn-time push was missed, the owner pulls the number from
-   /// the spawning registry. Idempotent; fails closed if the registry has no record.
-   syncEngramNumber: () -> (Result_8);
-   /// Genesis seed — the atomic "spawn only when there's real content" primitive. The spawning
-   /// REGISTRY pushes the owner's first real memory immediately after install, so a canister is
-   /// never spawned holding nothing (see the registry's `provisionEngram` optional genesis).
-   /// 
-   /// Gated `spawnedBy`-only and ONE-SHOT: it refuses once any file exists, so it can seed and never
-   /// overwrite. Unlike the owner-only `seedMemory` placeholder this is REAL owner content, so it
-   /// IS counted as an owner write (`firstWriteAt`, `totalMemoryWrites`) and is authored by the
-   /// OWNER rather than by the registry principal that called it. It never touches the
-   /// agent metrics.
-   /// 
-   /// ⚠ THE PAYLOAD IS `Nat` AND MUST STAY `Nat`, which is a constraint on any client of this
-   /// method rather than an internal detail. Its only caller is the registry, over an
-   /// inter-canister boundary, through a hand-declared actor type — and the registry is ROUTINELY a
-   /// different version from the engram template it is seeding: it upgrades before the fleet does,
-   /// and during a transition it can serve a template older than itself. A return-type change here
-   /// breaks genesis provisioning across that skew. That is measured, not predicted: the registry
-   /// trapped with "IDL error: unexpected IDL type when parsing Nat" while seeding an engram built
-   /// at the staging tag. A receipt would buy nothing anyway — the caller does `ignore await`.
-   /// 
-   /// ⚠ ORDERING: upload the engram TEMPLATE first, then upgrade the registry. The reverse leaves a
-   /// window where a spawn seeds an old-shape engram with a new-shape expectation; the reply fails
-   /// to decode and `provisionEngram` dies on a trap its own `try/catch` cannot reach (ADR-0001),
-   /// failing the WHOLE SPAWN rather than just the seed.
-   sysApplyGenesisSeed: (path: text, content: blob) -> (Result_8);
    /// OWNER force-close, for a session the payer abandoned.
    /// 
    /// ⟨R1b, ruled 2026-08-26: owner-gated, NO guardian.⟩ It moves someone else's money, and only ever
@@ -3532,9 +3465,6 @@ type Engram =
    /// nobody but the spawning registry can fix it. That refusal therefore names the real remedy
    /// rather than telling an owner to run a call they can no longer make.
    sysSetBillerId: (id: principal) -> (Result_1);
-   /// One-shot assignment of the spawn ordinal — callable ONLY by the spawning registry, ONLY
-   /// while unset. Neither the owner nor any later registry can change an assigned number.
-   sysSetEngramNumber: (n: nat) -> (Result_1);
    /// Point this engram at the commerce satellite allowed to ask it for signatures. ⟨0.16.0, B1⟩
    /// 
    /// SAME AUTHORITY AS `sysSetBillerId`, and for a stronger reason. That one routes money; this one
@@ -4050,8 +3980,6 @@ type About =
    agentMemoryWrites: nat;
    auditLogSize: nat;
    backupCount: nat;
-   distinctReaderClients: nat;
-   distinctReaderPrincipals: nat;
    encryptionEnabled: bool;
    firstAgentWriteAtNs: opt int;
    firstWriteAtNs: opt int;

package/dist/engram.idl.d.ts

@@ -7,7 +7,6 @@ export interface About {
   guardianCount: bigint;
   totalMemoryWrites: bigint;
   lastAgentWriteAtNs: [] | [bigint];
-  distinctReaderPrincipals: bigint;
   lastWriteAtNs: [] | [bigint];
   totalBackupSize: bigint;
   backupCount: bigint;
@@ -24,7 +23,6 @@ export interface About {
   firstAgentWriteAtNs: [] | [bigint];
   lastReadAtNs: [] | [bigint];
   writesPaused: boolean;
-  distinctReaderClients: bigint;
   totalMemoryReads: bigint;
   walletActivatedAtNs: [] | [bigint];
   encryptionEnabled: boolean;
@@ -548,7 +546,7 @@ export interface Engram {
    * / pair — e6 base units of the token named first. A name only: Candid passes arguments by
    * / position, so nothing on the wire moved.
    */
-  convertEarningsToCycles: ActorMethod<[string, bigint], Result_8>;
+  convertEarningsToCycles: ActorMethod<[string, bigint], Result_12>;
   /**
    * / Owner-only: mint a single-use invite code an agent redeems with `pairAgent`.
    * /
@@ -626,37 +624,6 @@ export interface Engram {
    * / does not change the policy — the next request over the same limit will be raised again.
    */
   denyRequest: ActorMethod<[string, string], Result_1>;
-  /**
-   * / Force the tECDSA derivation and return the address.
-   * /
-   * / It exists because the gateway's own derivation fires from a timer that is lazy on some
-   * / replicas, and until it lands the EVM quote advertises the `0x0` fallback and settle fails
-   * / closed — a live money surface quoting an address that cannot receive.
-   * /
-   * / ⟨0.16.0, B-2⟩ Derivation now comes from `EvmIdentity`, and the return type carries the
-   * / outcome: this used to answer `""` on failure, which is a Text a caller can and did paste into
-   * / a payment flow. An empty string is not an address, and saying so is the difference between a
-   * / failed derivation and an address of nothing.
-   * /
-   * / ⚠ TRANSITIONAL: it also primes the ic402 gate, because the gate still settles commerce on this
-   * / canister until those 47 methods move. That second call disappears with them — it is listed in
-   * / the move order in the spec's B-2 addendum, not left for someone to find.
-   * /
-   * / PUBLIC: it inherits `getEvmAddress`'s gate rather than choosing one, and could not usefully be
-   * / narrower — it exists so a caller can make the derivation happen BEFORE a payment flow, and the
-   * / derivation itself is ungated. Idempotent and bounded to the same one-derivation-per-lifetime
-   * / work, so an anonymous caller can cause it once and no more.
-   * / ⟨L7⟩ UPDATE, NOT QUERY, and this one does not merely await — it WRITES. The body awaits
-   * / `EvmIdentity.deriveAddress` (the management canister's `ecdsa_public_key`) and
-   * / `gate.deriveEvmRecipientAt` ⟨renamed 2026-09-22 with the path⟩, then caches the result in `evmAddressCache`. So a query is
-   * / impossible twice over: it could not await the derivation, and it could not keep the answer.
-   * / Named `ensure*` rather than `get*` for that reason — the write is the point, and a read verb
-   * / would have promised a cheapness this cannot deliver.
-   * /
-   * / ⟨Marker added 2026-08-23; the census row said "L7 mark added per review" and no mark was at
-   * / the site.⟩
-   */
-  ensureEvmReady: ActorMethod<[], Result_44>;
   /**
    * / Record that log entries [fromSeq, toSeq] were served, and return the root that proves it.
    * /
@@ -858,12 +825,6 @@ export interface Engram {
    * / be discovered, and the ERC-8004 ecosystem it participates in assumes an open read.
    */
   getEngramCard: ActorMethod<[], AgentCard>;
-  /**
-   * / PUBLIC: the engram's permanent spawn ordinal — a provable, non-sensitive fact. It identifies a
-   * / canister, never a person.
-   * / null = spawned before numbering existed; the owner can backfill via syncEngramNumber().
-   */
-  getEngramNumber: ActorMethod<[], [] | [bigint]>;
   /**
    * / Re-pointed at `EvmIdentity` (B-2): custody derivation no longer routes through the ic402
    * / Gateway, which is leaving for the market canister. Behaviour is unchanged for a caller — same
@@ -1792,7 +1753,7 @@ export interface Engram {
    * / and this never inspects an operation or a role. Widening what the review shows therefore
    * / changes only which ids the console can pass here — it cannot desynchronise the cursor.
    */
-  markAgentWritesReviewed: ActorMethod<[[] | [bigint]], Result_8>;
+  markAgentWritesReviewed: ActorMethod<[[] | [bigint]], Result_12>;
   /**
    * / The AGENT's current key nominates the key that will replace it. Nothing moves yet: the new
    * / key must accept, by its own call, within 24 hours (`acceptAgentKeyNomination`). One pending
@@ -1840,7 +1801,7 @@ export interface Engram {
    * / NOT freeze-gated: the owner always controls their own funds.
    * / Guardian freeze only blocks agent/public operations.
    */
-  ownerWithdraw: ActorMethod<[TokenAmount, [] | [ActionAuth]], Result_8>;
+  ownerWithdraw: ActorMethod<[TokenAmount, [] | [ActionAuth]], Result_12>;
   /**
    * / ⟨0.16.0⟩ `payRentFromEarnings` DELETED — ruled TWICE (B1 and B2), and it was the single
    * / clearest violation of the OSS/platform split in this repo.
@@ -1969,7 +1930,7 @@ export interface Engram {
    * / (`sessionReadContext` and the MCP reads). A caller measuring engram usage from this method
    * / will measure nothing.
    */
-  readMemory: ActorMethod<[string], Result_11>;
+  readMemory: ActorMethod<[string], Result_10>;
   /**
    * / Read many paths in one call. Per-path Results are KEPT — partial success is the point, and
    * / one unreadable path must not fail the other nine.
@@ -2118,7 +2079,7 @@ export interface Engram {
    * / the original audit entry stay exactly where they were; this appends a chained
    * / `memory.repudiate` entry and lists the (path, version) so readers can see the dispute.
    */
-  repudiateMemoryWrite: ActorMethod<[string, bigint, string], Result_8>;
+  repudiateMemoryWrite: ActorMethod<[string, bigint, string], Result_12>;
   /**
    * / ⚠ OWNER-ONLY BULK RESET. Destructive, and wider than its name suggests.
    * /
@@ -2262,7 +2223,7 @@ export interface Engram {
    * / that fails leaves the agents revoked here regardless — a partial notify is not a partial
    * / revocation, which is the direction that matters for a panic button.
    */
-  revokeAllAgents: ActorMethod<[], Result_8>;
+  revokeAllAgents: ActorMethod<[], Result_12>;
   /**
    * / Owner-only panic button: revoke every connector bearer token at once. Returns how many.
    * /
@@ -2273,7 +2234,7 @@ export interface Engram {
    * /
    * / Tokens are re-issuable: revoking them is not permanent the way revoking an agent is.
    */
-  revokeAllBearerTokens: ActorMethod<[], Result_8>;
+  revokeAllBearerTokens: ActorMethod<[], Result_12>;
   /**
    * / ⟨0.16.0⟩ `removeAllGuardians` DELETED — test-only (L6), and verified NOT part of KILL-SWITCH's
    * / mass-revoke set. The destructive phase-07 suite iterates `removeGuardian` instead, so nothing
@@ -2287,7 +2248,7 @@ export interface Engram {
    * / Unlike revoking an agent, this costs nothing permanently — an invite is a one-time code,
    * / so voiding it and minting a fresh one is the ordinary path.
    */
-  revokeAllInvites: ActorMethod<[], Result_8>;
+  revokeAllInvites: ActorMethod<[], Result_12>;
   /**
    * / Revoke a bearer token by its public tokenId. Idempotent.
    * / Subsequent /mcp requests using this token will be rejected.
@@ -2320,15 +2281,6 @@ export interface Engram {
    * / agent reading `#Refused` would go looking for a permission that was never missing.
    */
   rotateAgentKeyHash: ActorMethod<[string], Result_1>;
-  /**
-   * / One-time onboarding seed: writes a starter file so the first read-back is non-empty.
-   * /
-   * / Owner-only, and it REFUSES once any memory exists — so it can only ever add the initial
-   * / placeholder and can never overwrite real content. Deliberately NOT counted as a write (no
-   * / `totalMemoryWrites`, no `firstWriteAt`): it is a system seed rather than activity, and
-   * / counting it would corrupt both the write metrics and time-to-first-write for every engram.
-   */
-  seedMemory: ActorMethod<[string, Uint8Array | number[]], Result>;
   /**
    * / Append to a memory file against a PAID x402 session voucher — the write half of the paid rail,
    * / authorized by the voucher rather than by a role.
@@ -2375,7 +2327,7 @@ export interface Engram {
    * / CIPHERTEXT; the key-holding SDK decrypts it. A caller without the key gets bytes it cannot
    * / read, not an error.
    */
-  sessionReadContext: ActorMethod<[string], Result_12>;
+  sessionReadContext: ActorMethod<[string], Result_11>;
   /**
    * / Read one memory file against a PAID x402 session voucher. No role, no invite — the voucher is
    * / the authorization, which is what makes this the engram's one rail a stranger can pay to use.
@@ -2407,7 +2359,7 @@ export interface Engram {
    * /     cent voucher could read `secrets/*`.
    * /   · Payments are frozen on this engram.
    */
-  sessionReadMemory: ActorMethod<[Voucher, string], Result_11>;
+  sessionReadMemory: ActorMethod<[Voucher, string], Result_10>;
   /**
    * / Configure action alerts: an https webhook that receives new chained-audit entries matching the
    * / enabled event classes (money / approvals / guardian / agentWrites), batched, at most one
@@ -2454,7 +2406,7 @@ export interface Engram {
    * / by a `Debug.print` nobody reads. An owner lowering the cap is destroying their own backups;
    * / they are told how many, in the reply and in the audit line.
    */
-  setBackupRetention: ActorMethod<[string, bigint], Result_10>;
+  setBackupRetention: ActorMethod<[string, bigint], Result_9>;
   /**
    * / Override the caps for ONE caller — an agent this owner trusts more, or less, than the rest.
    */
@@ -2706,7 +2658,7 @@ export interface Engram {
         maxPriorityFeePerGas: bigint;
       },
     ],
-    Result_9
+    Result_8
   >;
   /**
    * / Sign an EIP-3009 authorization for x402 payment. Agent-accessible.
@@ -2745,37 +2697,6 @@ export interface Engram {
     ],
     Result_3
   >;
-  /**
-   * / Self-heal: if the registry's spawn-time push was missed, the owner pulls the number from
-   * / the spawning registry. Idempotent; fails closed if the registry has no record.
-   */
-  syncEngramNumber: ActorMethod<[], Result_8>;
-  /**
-   * / Genesis seed — the atomic "spawn only when there's real content" primitive. The spawning
-   * / REGISTRY pushes the owner's first real memory immediately after install, so a canister is
-   * / never spawned holding nothing (see the registry's `provisionEngram` optional genesis).
-   * /
-   * / Gated `spawnedBy`-only and ONE-SHOT: it refuses once any file exists, so it can seed and never
-   * / overwrite. Unlike the owner-only `seedMemory` placeholder this is REAL owner content, so it
-   * / IS counted as an owner write (`firstWriteAt`, `totalMemoryWrites`) and is authored by the
-   * / OWNER rather than by the registry principal that called it. It never touches the
-   * / agent metrics.
-   * /
-   * / ⚠ THE PAYLOAD IS `Nat` AND MUST STAY `Nat`, which is a constraint on any client of this
-   * / method rather than an internal detail. Its only caller is the registry, over an
-   * / inter-canister boundary, through a hand-declared actor type — and the registry is ROUTINELY a
-   * / different version from the engram template it is seeding: it upgrades before the fleet does,
-   * / and during a transition it can serve a template older than itself. A return-type change here
-   * / breaks genesis provisioning across that skew. That is measured, not predicted: the registry
-   * / trapped with "IDL error: unexpected IDL type when parsing Nat" while seeding an engram built
-   * / at the staging tag. A receipt would buy nothing anyway — the caller does `ignore await`.
-   * /
-   * / ⚠ ORDERING: upload the engram TEMPLATE first, then upgrade the registry. The reverse leaves a
-   * / window where a spawn seeds an old-shape engram with a new-shape expectation; the reply fails
-   * / to decode and `provisionEngram` dies on a trap its own `try/catch` cannot reach (ADR-0001),
-   * / failing the WHOLE SPAWN rather than just the seed.
-   */
-  sysApplyGenesisSeed: ActorMethod<[string, Uint8Array | number[]], Result_8>;
   /**
    * / OWNER force-close, for a session the payer abandoned.
    * /
@@ -2972,11 +2893,6 @@ export interface Engram {
    * / rather than telling an owner to run a call they can no longer make.
    */
   sysSetBillerId: ActorMethod<[Principal], Result_1>;
-  /**
-   * / One-shot assignment of the spawn ordinal — callable ONLY by the spawning registry, ONLY
-   * / while unset. Neither the owner nor any later registry can change an assigned number.
-   */
-  sysSetEngramNumber: ActorMethod<[bigint], Result_1>;
   /**
    * / Point this engram at the commerce satellite allowed to ask it for signatures. ⟨0.16.0, B1⟩
    * /
@@ -3623,9 +3539,9 @@ export interface ResetReport {
 }
 export type Result = { Ok: WriteReceipt } | { Err: Error };
 export type Result_1 = { Ok: null } | { Err: Error };
-export type Result_10 = { Ok: BackupRetentionReport } | { Err: Error };
-export type Result_11 = { Ok: MemoryFile } | { Err: Error };
-export type Result_12 = { Ok: SessionContext } | { Err: Error };
+export type Result_10 = { Ok: MemoryFile } | { Err: Error };
+export type Result_11 = { Ok: SessionContext } | { Err: Error };
+export type Result_12 = { Ok: bigint } | { Err: Error };
 export type Result_13 = { Ok: ResyncReport } | { Err: Error };
 export type Result_14 = { Ok: ResetReport } | { Err: Error };
 export type Result_15 = { Ok: GuardianRecord } | { Err: Error };
@@ -3690,8 +3606,8 @@ export type Result_69 = { Ok: { activatesAtNs: bigint } } | { Err: Error };
 export type Result_7 = { Ok: Array<Seat> } | { Err: Error };
 export type Result_70 = { Ok: Eip712Registration } | { Err: Error };
 export type Result_71 = { Ok: AgentRecord } | { Err: Error };
-export type Result_8 = { Ok: bigint } | { Err: Error };
-export type Result_9 = { Ok: SignedTransaction } | { Err: Error };
+export type Result_8 = { Ok: SignedTransaction } | { Err: Error };
+export type Result_9 = { Ok: BackupRetentionReport } | { Err: Error };
 export interface ResyncReport {
   startsAcknowledged: bigint;
   cannotBeRecorded: Array<UnrecordableEngagement>;

package/dist/engram.idl.js

@@ -4,7 +4,6 @@ export const idlFactory = ({ IDL }) => {
     guardianCount: IDL.Nat,
     totalMemoryWrites: IDL.Nat,
     lastAgentWriteAtNs: IDL.Opt(IDL.Int),
-    distinctReaderPrincipals: IDL.Nat,
     lastWriteAtNs: IDL.Opt(IDL.Int),
     totalBackupSize: IDL.Nat,
     backupCount: IDL.Nat,
@@ -21,7 +20,6 @@ export const idlFactory = ({ IDL }) => {
     firstAgentWriteAtNs: IDL.Opt(IDL.Int),
     lastReadAtNs: IDL.Opt(IDL.Int),
     writesPaused: IDL.Bool,
-    distinctReaderClients: IDL.Nat,
     totalMemoryReads: IDL.Nat,
     walletActivatedAtNs: IDL.Opt(IDL.Int),
     encryptionEnabled: IDL.Bool,
@@ -145,7 +143,7 @@ export const idlFactory = ({ IDL }) => {
   });
   const Result_44 = IDL.Variant({ Ok: IDL.Text, Err: Error });
   const Result_60 = IDL.Variant({ Ok: IDL.Vec(IDL.Nat8), Err: Error });
-  const Result_8 = IDL.Variant({ Ok: IDL.Nat, Err: Error });
+  const Result_12 = IDL.Variant({ Ok: IDL.Nat, Err: Error });
   const MemoryRangeExport = IDL.Record({
     seq: IDL.Nat,
     toSeq: IDL.Nat,
@@ -938,7 +936,7 @@ export const idlFactory = ({ IDL }) => {
     lastModifiedBy: IDL.Principal,
     lastModifiedAtNs: IDL.Int,
   });
-  const Result_11 = IDL.Variant({ Ok: MemoryFile, Err: Error });
+  const Result_10 = IDL.Variant({ Ok: MemoryFile, Err: Error });
   const BatchReadItem = IDL.Record({
     result: IDL.Variant({ Ok: MemoryFile, Err: Error }),
     path: IDL.Text,
@@ -998,16 +996,13 @@ export const idlFactory = ({ IDL }) => {
     includedFiles: IDL.Nat,
     totalBytes: IDL.Nat,
   });
-  const Result_12 = IDL.Variant({ Ok: SessionContext, Err: Error });
+  const Result_11 = IDL.Variant({ Ok: SessionContext, Err: Error });
   const BackupRetentionReport = IDL.Record({
     maxBackups: IDL.Nat,
     dbType: IDL.Text,
     prunedBackups: IDL.Nat,
   });
-  const Result_10 = IDL.Variant({
-    Ok: BackupRetentionReport,
-    Err: Error,
-  });
+  const Result_9 = IDL.Variant({ Ok: BackupRetentionReport, Err: Error });
   const Eip712Value = IDL.Variant({
     string: IDL.Text,
     bool: IDL.Bool,
@@ -1028,7 +1023,7 @@ export const idlFactory = ({ IDL }) => {
     txHash: IDL.Text,
     rawTx: IDL.Text,
   });
-  const Result_9 = IDL.Variant({ Ok: SignedTransaction, Err: Error });
+  const Result_8 = IDL.Variant({ Ok: SignedTransaction, Err: Error });
   const SignedAuthorization = IDL.Record({
     paidAmount: IDL.Nat,
     authorization: IDL.Record({
@@ -1140,13 +1135,12 @@ export const idlFactory = ({ IDL }) => {
     backupPushChunk: IDL.Func([IDL.Text, IDL.Nat, IDL.Vec(IDL.Nat8)], [Result_1], []),
     cancelAgentKeyNomination: IDL.Func([IDL.Principal], [Result_1], []),
     closeSession: IDL.Func([IDL.Text], [Result_1], []),
-    convertEarningsToCycles: IDL.Func([IDL.Text, IDL.Nat], [Result_8], []),
+    convertEarningsToCycles: IDL.Func([IDL.Text, IDL.Nat], [Result_12], []),
     createAgentInvite: IDL.Func([IDL.Text, AgentPermissions], [Result_44], []),
     createGuardianInvite: IDL.Func([IDL.Text, GuardianPermissions], [Result_44], []),
     deleteBackup: IDL.Func([IDL.Text], [Result_1], []),
     deleteMemoryFile: IDL.Func([IDL.Text], [Result], []),
     denyRequest: IDL.Func([IDL.Text, IDL.Text], [Result_1], []),
-    ensureEvmReady: IDL.Func([], [Result_44], []),
     exportMemoryRange: IDL.Func([IDL.Nat, IDL.Nat, IDL.Opt(IDL.Principal)], [Result_67], []),
     freezePayments: IDL.Func([], [Result_1], []),
     getActionAlertStatus: IDL.Func([], [Result_58], ['query']),
@@ -1162,7 +1156,6 @@ export const idlFactory = ({ IDL }) => {
     getChildOpening: IDL.Func([], [Result_61], ['query']),
     getEncryptedMemoryKey: IDL.Func([IDL.Opt(IDL.Nat), IDL.Vec(IDL.Nat8)], [Result_60], []),
     getEngramCard: IDL.Func([], [AgentCard], ['query']),
-    getEngramNumber: IDL.Func([], [IDL.Opt(IDL.Nat)], ['query']),
     getEvmAddress: IDL.Func([], [Result_59], []),
     getEvmOwnerAddress: IDL.Func([], [IDL.Opt(IDL.Text)], ['query']),
     getEvmSignerAddress: IDL.Func([], [Result_44], []),
@@ -1258,16 +1251,16 @@ export const idlFactory = ({ IDL }) => {
     listPurgedAgents: IDL.Func([IDL.Nat, IDL.Nat], [Result_25], ['query']),
     listReadLog: IDL.Func([IDL.Opt(IDL.Bool), IDL.Nat, IDL.Nat], [Result_24], ['query']),
     listRepudiations: IDL.Func([IDL.Nat, IDL.Nat], [Result_23], ['query']),
-    markAgentWritesReviewed: IDL.Func([IDL.Opt(IDL.Nat)], [Result_8], []),
+    markAgentWritesReviewed: IDL.Func([IDL.Opt(IDL.Nat)], [Result_12], []),
     nominateAgentKey: IDL.Func([IDL.Principal], [Result_1], []),
     openChildEngram: IDL.Func([], [Result_22], []),
     openSession: IDL.Func([SessionConfig, PaymentSignature], [Result_21], []),
-    ownerWithdraw: IDL.Func([TokenAmount, IDL.Opt(ActionAuth)], [Result_8], []),
+    ownerWithdraw: IDL.Func([TokenAmount, IDL.Opt(ActionAuth)], [Result_12], []),
     pairAgent: IDL.Func([IDL.Record({ enrolment: Enrolment, code: IDL.Text })], [Result_20], []),
     pauseWrites: IDL.Func([], [Result_1], []),
     previewCondense: IDL.Func([IDL.Nat], [Result_19], ['query']),
     previewOpenSession: IDL.Func([], [SessionIntent], ['query']),
-    readMemory: IDL.Func([IDL.Text], [Result_11], ['query']),
+    readMemory: IDL.Func([IDL.Text], [Result_10], ['query']),
     readMemoryBatch: IDL.Func([IDL.Vec(IDL.Text)], [Result_18], ['query']),
     readMemoryBytes: IDL.Func(
       [IDL.Text, IDL.Nat, IDL.Nat, IDL.Opt(IDL.Nat)],
@@ -1280,7 +1273,7 @@ export const idlFactory = ({ IDL }) => {
     removeEip712Type: IDL.Func([IDL.Vec(IDL.Nat8)], [Result_1], []),
     removeEvmWithdrawDestination: IDL.Func([IDL.Text], [Result_1], []),
     removeGuardian: IDL.Func([IDL.Principal], [Result_1], []),
-    repudiateMemoryWrite: IDL.Func([IDL.Text, IDL.Nat, IDL.Text], [Result_8], []),
+    repudiateMemoryWrite: IDL.Func([IDL.Text, IDL.Nat, IDL.Text], [Result_12], []),
     resetEngram: IDL.Func([], [Result_14], []),
     resignAgent: IDL.Func([], [Result_1], []),
     resumeWrites: IDL.Func([], [Result_1], []),
@@ -1288,20 +1281,19 @@ export const idlFactory = ({ IDL }) => {
     returnToManaged: IDL.Func([], [Result_1], []),
     reviseMemory: IDL.Func([IDL.Text, IDL.Vec(IDL.Nat8)], [Result], []),
     revokeAgent: IDL.Func([IDL.Principal], [Result_1], []),
-    revokeAllAgents: IDL.Func([], [Result_8], []),
-    revokeAllBearerTokens: IDL.Func([], [Result_8], []),
-    revokeAllInvites: IDL.Func([], [Result_8], []),
+    revokeAllAgents: IDL.Func([], [Result_12], []),
+    revokeAllBearerTokens: IDL.Func([], [Result_12], []),
+    revokeAllInvites: IDL.Func([], [Result_12], []),
     revokeBearerToken: IDL.Func([IDL.Text], [Result_1], []),
     rollbackMemory: IDL.Func([IDL.Text, IDL.Nat], [Result], []),
     rotateAgentKeyHash: IDL.Func([IDL.Text], [Result_1], []),
-    seedMemory: IDL.Func([IDL.Text, IDL.Vec(IDL.Nat8)], [Result], []),
     sessionAppendMemory: IDL.Func([Voucher, IDL.Text, IDL.Vec(IDL.Nat8)], [Result], []),
-    sessionReadContext: IDL.Func([IDL.Text], [Result_12], []),
-    sessionReadMemory: IDL.Func([Voucher, IDL.Text], [Result_11], []),
+    sessionReadContext: IDL.Func([IDL.Text], [Result_11], []),
+    sessionReadMemory: IDL.Func([Voucher, IDL.Text], [Result_10], []),
     setActionAlertConfig: IDL.Func([AlertConfig], [Result_1], []),
     setAgentPermissions: IDL.Func([IDL.Principal, AgentPermissions], [Result_1], []),
     setAgentRevisablePaths: IDL.Func([IDL.Vec(IDL.Text)], [Result_1], []),
-    setBackupRetention: IDL.Func([IDL.Text, IDL.Nat], [Result_10], []),
+    setBackupRetention: IDL.Func([IDL.Text, IDL.Nat], [Result_9], []),
     setCallerSpendPolicy: IDL.Func([IDL.Principal, SpendingPolicy], [Result_1], []),
     setChildAllowance: IDL.Func([IDL.Principal, IDL.Nat], [Result_1], []),
     setEncryptionEnabled: IDL.Func([IDL.Bool], [Result_1], []),
@@ -1338,7 +1330,7 @@ export const idlFactory = ({ IDL }) => {
           maxPriorityFeePerGas: IDL.Nat,
         }),
       ],
-      [Result_9],
+      [Result_8],
       [],
     ),
     signX402Payment: IDL.Func(
@@ -1357,8 +1349,6 @@ export const idlFactory = ({ IDL }) => {
       [Result_3],
       [],
     ),
-    syncEngramNumber: IDL.Func([], [Result_8], []),
-    sysApplyGenesisSeed: IDL.Func([IDL.Text, IDL.Vec(IDL.Nat8)], [Result_8], []),
     sysForceCloseSession: IDL.Func([IDL.Text], [Result_1], []),
     sysGetAgentSeatWeeks: IDL.Func([], [Result_7], []),
     sysGetRailHealth: IDL.Func([], [Result_6], ['query']),
@@ -1377,7 +1367,6 @@ export const idlFactory = ({ IDL }) => {
       [],
     ),
     sysSetBillerId: IDL.Func([IDL.Principal], [Result_1], []),
-    sysSetEngramNumber: IDL.Func([IDL.Nat], [Result_1], []),
     sysSetMarketId: IDL.Func([IDL.Principal], [Result_1], []),
     sysSetMetricsReaderId: IDL.Func([IDL.Principal], [Result_1], []),
     sysSignEip712: IDL.Func(

package/dist/registry.did

@@ -806,6 +806,9 @@ service : {
   /// on two canisters is what a hand-written client cannot tell apart (a structural actor type
   /// matches either target), so it gets the rule `getMarketCanister` already follows: distinct
   /// names on distinct canisters. `…Of` says what the argument is for.
+  /// 
+  /// ⟨2026-10-13⟩ The engram no longer serves `getEngramNumber` at all: its copy of the number went
+  /// with the genesis seed, so this is the one read of an engram's number.
   getEngramNumberOf: (canisterId: principal) -> (opt nat) query;
   /// ⟨2026-10-01, the owner's ruling of that day (2 A)⟩ What a lasting key opened through a parent:
   /// the engram, the engram it was opened from, and the cut-off's time if there is one. GATED:
@@ -1315,16 +1318,16 @@ service : {
   /// `#Ok : { canisterId : Principal }` was a record with nothing to disambiguate: the success of a
   /// spawn IS the canister it produced. The wrapper cost every caller a field access to reach the
   /// only thing the call returns, and invited a second field later that would belong somewhere else.
+  /// 
+  /// ⟨2026-10-13, the owner's 6A⟩ `opts.genesis` (an optional first file, written as the canister
+  /// spawned) is retired: the console creates an engram with no content (decision 2 B(b),
+  /// 2026-09-30), the owner kit never calls this, and only test harnesses passed one. A caller still
+  /// sending the field is unaffected — Candid ignores a record field the receiver does not declare.
   provisionEngram: (opts:
-   opt
-    record {
-      genesis: opt record {
-                     content: blob;
-                     path: text;
-                   };
-      invite: opt text;
-      walletProof: opt blob;
-    }) -> (Result_1);
+   opt record {
+         invite: opt text;
+         walletProof: opt blob;
+       }) -> (Result_1);
   removeAuditViewer: (viewer: principal) -> (Result);
   /// ⟨0.16.0⟩ `Ok` IS THE ANSWER — the `{ reserved : Bool }` wrapper is gone.
   /// 

package/dist/registry.idl.d.ts

@@ -683,6 +683,9 @@ export interface _SERVICE {
    * / on two canisters is what a hand-written client cannot tell apart (a structural actor type
    * / matches either target), so it gets the rule `getMarketCanister` already follows: distinct
    * / names on distinct canisters. `…Of` says what the argument is for.
+   * /
+   * / ⟨2026-10-13⟩ The engram no longer serves `getEngramNumber` at all: its copy of the number went
+   * / with the genesis seed, so this is the one read of an engram's number.
    */
   getEngramNumberOf: ActorMethod<[Principal], [] | [bigint]>;
   /**
@@ -1277,6 +1280,11 @@ export interface _SERVICE {
    * / `#Ok : { canisterId : Principal }` was a record with nothing to disambiguate: the success of a
    * / spawn IS the canister it produced. The wrapper cost every caller a field access to reach the
    * / only thing the call returns, and invited a second field later that would belong somewhere else.
+   * /
+   * / ⟨2026-10-13, the owner's 6A⟩ `opts.genesis` (an optional first file, written as the canister
+   * / spawned) is retired: the console creates an engram with no content (decision 2 B(b),
+   * / 2026-09-30), the owner kit never calls this, and only test harnesses passed one. A caller still
+   * / sending the field is unaffected — Candid ignores a record field the receiver does not declare.
    */
   provisionEngram: ActorMethod<
     [
@@ -1285,7 +1293,6 @@ export interface _SERVICE {
           {
             walletProof: [] | [Uint8Array | number[]];
             invite: [] | [string];
-            genesis: [] | [{ content: Uint8Array | number[]; path: string }];
           },
         ],
     ],

package/dist/registry.idl.js

@@ -464,7 +464,6 @@ export const idlFactory = ({ IDL }) => {
           IDL.Record({
             walletProof: IDL.Opt(IDL.Vec(IDL.Nat8)),
             invite: IDL.Opt(IDL.Text),
-            genesis: IDL.Opt(IDL.Record({ content: IDL.Vec(IDL.Nat8), path: IDL.Text })),
           }),
         ),
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@engramx/idl",
-  "version": "0.16.0-rc.11",
+  "version": "0.16.0-rc.13",
   "description": "The Candid interfaces of the EngramX canisters (engram, registry, market) — the .did files and the JS/TS IDL factories generated from them, published with every release so code that calls them pins the interface by version.",
   "license": "Apache-2.0",
   "author": "EngramX <developer@engramx.ai>",