havona 0.1.0__tar.gz

havona-0.1.0/HOUSE-LICENSE.txt

@@ -0,0 +1,6 @@
+Proprietary — E5 Enclave Inc. (house license)
+
+All rights reserved. This package and the members it carries are the
+property of E5 Enclave Inc. and are distributed under the house license
+as printed in each member's own metadata. No license is granted beyond
+what a member's own record states.

havona-0.1.0/MANIFEST.in

@@ -0,0 +1,12 @@
+# MANIFEST.in — the shipped distribution carries everything its shipped
+# check suite needs to run FROM THE BUILT DISTRIBUTION (the Sarah law,
+# packet Amendment §C2; the Chancellor G-4 lesson: an sdist that lacks
+# what its suite exercises is non-functional as installed). The payload
+# files are the package's data — the manifest, the Horizon wheel, the
+# forge bundle — and ride in BOTH artifacts via package-data + this graft.
+include README.md
+include pyproject.toml
+include HOUSE-LICENSE.txt
+recursive-include src/havona *.py *.json *.md *.whl *.tar.gz
+recursive-include programme-src *.py *.md *.json
+recursive-include tests *.py *.md

havona-0.1.0/PKG-INFO

@@ -0,0 +1,102 @@
+Metadata-Version: 2.1
+Name: havona
+Version: 0.1.0
+Summary: Havona — the E5 Trinity set as one package: Chancellor 1.2.3 and Chamberlain 0.1.0 as exact-pin dependencies, Horizon 0.1.0 and the Prometheus forge bundle (baseline fd7633d0) as payloads, seated by one handshake under Trinity Set 2.0.0. Havona is the set's distribution vehicle, not a fifth member.
+Author: Israel Lee Armstead
+License: Proprietary — E5 Enclave Inc. (house license)
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+
+# Havona — the E5 Trinity set as one package
+
+**Havona is the whole ordered system, carried in one pip-installable
+package.** It is the set's distribution vehicle, not a fifth member:
+the Trinity Set stays four members (Chancellor, Horizon, Prometheus,
+Chamberlain) under Trinity Set 2.0.0; this package is how the set
+travels to a surface.
+
+## Install
+
+```
+pip install havona
+havona install --home <install-home> --brain <provider>
+```
+
+`pip install havona` brings:
+
+- **Chancellor 1.2.3** and **Chamberlain 0.1.0** as exact-pin
+  dependencies from PyPI — the set doctrine's pinning, satisfied by
+  exact pins;
+- **Horizon 0.1.0** (`e5-horizon`, not published) as a payload wheel
+  inside this package;
+- **Prometheus** (baseline `fd7633d0`) as the forge bundle payload —
+  the set's Prometheus payload of record (T3: bundle, not compile —
+  the compiled forge silently drops one of its fourteen acts);
+- the **Trinity Set 2.0.0 manifest** as the seating charter,
+  hash-verified before anything seats;
+- the **programme payload 0.2.1** — the Havona room's always-on
+  upgrades (Reaction Ledger, Event-Anchored Wakes, Jev Triage Front
+  Door) rebuilt from the cured v2 designs: the design texts, schemas,
+  protocols, verified Increment 1 code with its fixture suites, and
+  the Increment 0 probe record, riding as their own separable,
+  hash-pinned payload. **PASS WITH FINDINGS on independent
+  re-review** (all three designs cured and re-reviewed; per-piece
+  gate states: Design A core and distillation lane through their
+  gates, Design B Increment 1 through its gate, Design C design-only
+  with probes measured; Wabi verdicts outstanding — does not block).
+  It carries no lived state: a fresh install starts with an empty
+  ledger, zero wakes, triage off, and zero authority. The Commission
+  B (Graph Engineering) payload slot stays reserved and empty — the
+  G-builds are not built.
+
+## The seating handshake
+
+`havona install` runs the handshake in order and prints honest status
+at each step:
+
+0. the set charter verifies — manifest bytes, recomputed set hash
+   `95136deeef6eb7818fdf962d70993499b147059c508393b8e44f9ea70ffa94fd`,
+   every payload hash against its pin;
+1. **Chancellor** seats — the installed governor answers its version
+   and a governed demo completes with its receipt chain verified cold;
+2. **Prometheus** genesis is staged from the bundle — under the
+   **brain rule** (packet SPEC §5.3, non-negotiable): full seating
+   requires an operator-supplied brain (`--brain <provider>`; a local
+   endpoint for `ollama`/`lmstudio`, the surface's own custody for
+   hosted providers — credential values are never read by this
+   package). With no brain, seating **aborts honest before Prometheus
+   is seated**: nothing is staged, nothing is seated around an empty
+   center, and the failure is printed plainly. `--skip-brain-abort`
+   exists for test harnesses only: it converts the abort into a
+   labeled **fixture** staging — a fixture is never a member;
+3. **Chamberlain** seats — the office is genesis'd into the install
+   home from its own genesis templates (shapes, not state), and the
+   Door is exercised through the office's own pinned decision-record
+   instrument: a complete record is admitted, an incomplete one is
+   refused;
+4. **Horizon** seats — the payload wheel is installed into the target
+   environment and the bridge floor is exercised: two named test
+   agents, a declared policy, an addressed ask round-trip on the
+   local spool (accepted is never reported as delivered);
+5. the **programme payload** seats — unpacked under the install home,
+   its internal manifest verified file by file, each part's
+   known-answer fixtures run against the seated copy, and the
+   fresh-install posture asserted: empty ledger, zero wakes, triage
+   off (effective cap zero — the installer names lanes and sets a cap
+   by an explicit local act, with their own TypeSafe credential),
+   zero authority.
+
+The instance is born **UNPAIRED** and unjoined (packet SPEC §5.6–5.7):
+the operator's hand enrols by a separate ceremony; state migration
+from any living instance is a separate Chancellor-gated act, never
+part of an install (SPEC §1).
+
+## Standing, printed plainly
+
+- The set stands **UNSIGNED** — no lawful signer exists until the
+  pq-register amendment (packet open item O-1). An honest absence.
+- Version 0.1.0 by the house print law: built and proven from the
+  built artifacts in its build lane; the cold, non-builder
+  verification bar (packet SPEC §6 / Amendment §C) and the outside-
+  agent rehearsal remain later acts and are not claimed here.
+- License: Proprietary — E5 Enclave Inc. (house license).

havona-0.1.0/README.md

@@ -0,0 +1,93 @@
+# Havona — the E5 Trinity set as one package
+
+**Havona is the whole ordered system, carried in one pip-installable
+package.** It is the set's distribution vehicle, not a fifth member:
+the Trinity Set stays four members (Chancellor, Horizon, Prometheus,
+Chamberlain) under Trinity Set 2.0.0; this package is how the set
+travels to a surface.
+
+## Install
+
+```
+pip install havona
+havona install --home <install-home> --brain <provider>
+```
+
+`pip install havona` brings:
+
+- **Chancellor 1.2.3** and **Chamberlain 0.1.0** as exact-pin
+  dependencies from PyPI — the set doctrine's pinning, satisfied by
+  exact pins;
+- **Horizon 0.1.0** (`e5-horizon`, not published) as a payload wheel
+  inside this package;
+- **Prometheus** (baseline `fd7633d0`) as the forge bundle payload —
+  the set's Prometheus payload of record (T3: bundle, not compile —
+  the compiled forge silently drops one of its fourteen acts);
+- the **Trinity Set 2.0.0 manifest** as the seating charter,
+  hash-verified before anything seats;
+- the **programme payload 0.2.1** — the Havona room's always-on
+  upgrades (Reaction Ledger, Event-Anchored Wakes, Jev Triage Front
+  Door) rebuilt from the cured v2 designs: the design texts, schemas,
+  protocols, verified Increment 1 code with its fixture suites, and
+  the Increment 0 probe record, riding as their own separable,
+  hash-pinned payload. **PASS WITH FINDINGS on independent
+  re-review** (all three designs cured and re-reviewed; per-piece
+  gate states: Design A core and distillation lane through their
+  gates, Design B Increment 1 through its gate, Design C design-only
+  with probes measured; Wabi verdicts outstanding — does not block).
+  It carries no lived state: a fresh install starts with an empty
+  ledger, zero wakes, triage off, and zero authority. The Commission
+  B (Graph Engineering) payload slot stays reserved and empty — the
+  G-builds are not built.
+
+## The seating handshake
+
+`havona install` runs the handshake in order and prints honest status
+at each step:
+
+0. the set charter verifies — manifest bytes, recomputed set hash
+   `95136deeef6eb7818fdf962d70993499b147059c508393b8e44f9ea70ffa94fd`,
+   every payload hash against its pin;
+1. **Chancellor** seats — the installed governor answers its version
+   and a governed demo completes with its receipt chain verified cold;
+2. **Prometheus** genesis is staged from the bundle — under the
+   **brain rule** (packet SPEC §5.3, non-negotiable): full seating
+   requires an operator-supplied brain (`--brain <provider>`; a local
+   endpoint for `ollama`/`lmstudio`, the surface's own custody for
+   hosted providers — credential values are never read by this
+   package). With no brain, seating **aborts honest before Prometheus
+   is seated**: nothing is staged, nothing is seated around an empty
+   center, and the failure is printed plainly. `--skip-brain-abort`
+   exists for test harnesses only: it converts the abort into a
+   labeled **fixture** staging — a fixture is never a member;
+3. **Chamberlain** seats — the office is genesis'd into the install
+   home from its own genesis templates (shapes, not state), and the
+   Door is exercised through the office's own pinned decision-record
+   instrument: a complete record is admitted, an incomplete one is
+   refused;
+4. **Horizon** seats — the payload wheel is installed into the target
+   environment and the bridge floor is exercised: two named test
+   agents, a declared policy, an addressed ask round-trip on the
+   local spool (accepted is never reported as delivered);
+5. the **programme payload** seats — unpacked under the install home,
+   its internal manifest verified file by file, each part's
+   known-answer fixtures run against the seated copy, and the
+   fresh-install posture asserted: empty ledger, zero wakes, triage
+   off (effective cap zero — the installer names lanes and sets a cap
+   by an explicit local act, with their own TypeSafe credential),
+   zero authority.
+
+The instance is born **UNPAIRED** and unjoined (packet SPEC §5.6–5.7):
+the operator's hand enrols by a separate ceremony; state migration
+from any living instance is a separate Chancellor-gated act, never
+part of an install (SPEC §1).
+
+## Standing, printed plainly
+
+- The set stands **UNSIGNED** — no lawful signer exists until the
+  pq-register amendment (packet open item O-1). An honest absence.
+- Version 0.1.0 by the house print law: built and proven from the
+  built artifacts in its build lane; the cold, non-builder
+  verification bar (packet SPEC §6 / Amendment §C) and the outside-
+  agent rehearsal remain later acts and are not claimed here.
+- License: Proprietary — E5 Enclave Inc. (house license).

havona-0.1.0/programme-src/README.md

@@ -0,0 +1,74 @@
+# The Havona programme payload 0.2.1 — the always-on upgrades, rebuilt from the cured designs
+
+**Review state: PASS WITH FINDINGS on independent re-review.** The
+three designs were re-reviewed after cure (`REVIEW2-MODEL-DESIGN-A.md`,
+`-B.md`, `-C.md` in the Havona room's review record): all three
+**PASS WITH FINDINGS**, the findings carried as binding build
+requirements. Per-piece gate states, printed exactly:
+
+- **Design A (Reaction Ledger):** Increment 1 core — **through the
+  gate** (`build/design-a/BUILD-REVIEW-2.md`: PASS, no defect packets;
+  suite 63/63). Distillation + shadow lane — **through the gate**
+  (`BUILD-REVIEW-4.md`: PASS, clean, no defect packets; Cure 2
+  verified firsthand; suite 93/93). Standing conditions ride as later
+  gated steps: no real-source wiring, no activated vocabulary (the
+  initial registry ships as a *proposal*), no live enforcement.
+- **Design B (Event-Anchored Wakes):** Increment 1 — **through the
+  gate** (`build/design-b/BUILD-REVIEW-2.md`: PASS, no defect packets;
+  Cure 1 verified firsthand, suite 51/51; two non-blocking cosmetic
+  observations on record).
+- **Design C (Jev Triage Front Door):** design-only — no code of its
+  own. The payload carries the v2 design text (`designs/`) and the
+  Increment 0 probe report (`jev_triage/INCREMENT-0-PROBES.md`); the
+  protocol library shipped here implements the v2 protocol (see the
+  triage row below).
+- **Wabi verdicts on the v1 and v2 designs: outstanding** (tasks open
+  in Wabi's queue). This does not block; any Wabi FAIL rides a patch.
+
+The payload rides as its own clearly-delimited member payload inside
+the `havona` package — separable, hash-pinned like the other
+payloads — so a later cure or patch replaces exactly this payload and
+nothing else. The full design texts ride verbatim in `designs/` so
+every protocol in this payload is auditable against its design.
+
+The programme ships; the resident's lived state does not. This payload
+carries designs, schemas, protocols, verified code, fixtures, and
+probe records — **no history**:
+
+| Part | Ships | Gate record |
+|---|---|---|
+| `designs/` | the three v2 design texts, verbatim | re-review PASS WITH FINDINGS ×3 |
+| `reaction_ledger/` | the ledger schema + formats (v2), the verified Increment 1 package (schema, hash-chained store, checker, distillation lane, shadow harness) with its full fixture corpus (§8.2 + R1/R3/R4 + distill + shadow) and its 93-test suite, the known-answer runner, and the full gate-record set (BUILD-REVIEW, BUILD-CURE-1, BUILD-REVIEW-2, BUILD-CURE-2, BUILD-REVIEW-4) | BUILD-REVIEW-2 PASS · BUILD-REVIEW-4 PASS |
+| `wakes/` | the wake protocol (v2), Loop Contract Amendment A1 (v2 text), the policy defaults, the verified Increment 1 dry-run core (registry, ledger, pre-fire, staging, synthetic source; 51 tests incl. the 12-step known-answer suite), the in-memory reference lifecycle runner, and the gate records (BUILD-REVIEW, BUILD-CURE-1, BUILD-REVIEW-2) | BUILD-REVIEW-2 PASS (Cure 1 verified) |
+| `jev_triage/` | the triage protocol (v2), the Increment 0 probe report, the client interface, cap machinery, receipt schema, rollup generator, shadow harness | design-only; probes measured |
+| `commission-b/` | **slot reserved, empty** — the Graph Engineering payload (G-1/G-2/G-3) is adopted as doctrine and commissioned as builds, NOT BUILT; it enters a later re-pack under its own pin when built and review-passed | — |
+
+**Resident-only, never in this payload** (verified by absence at
+build): the operator's harvested reaction history and correction
+records; the vocabulary registry's contents — his activation
+decisions (the registry *format* and
+  the distiller's *proposal*
+ship; no kind is activated); his tracked events and calendar; the
+estate's wired triage credential, its surrogate arrangement, and its
+hook fleet (the probe report describes the *mechanism* in general
+terms — no identifier and no credential value — and the estate's hook
+infrastructure shape, as design evidence; no lived state, no log
+contents, no tuned values ride with it); accumulated triage logs, bulk
+piles, and tuned values; the estate's accumulated lessons-file
+contents, sprint graphs, and run-return history (Commission B: the
+formats are reserved, the lived contents are resident); Prometheus's
+lived state; all Chamberlain custody material; Horizon session and
+address state.
+
+**Fresh-install posture** (asserted at seating and in the smoke): an
+empty ledger, zero wakes, triage off with an effective cap of zero,
+and zero authority — working, verified programme code and no history.
+Triage turns on only when the installer names lanes and sets a cap by
+an explicit local act, and the triage client is supplied by the
+installer with **their own** TypeSafe credential — never the estate's.
+
+`PROGRAMME-MANIFEST.json` inside this payload lists every file with
+its SHA-256; the seating handshake verifies the payload's pin, unpacks
+it, verifies the manifest file by file, and runs each part's
+known-answer fixtures against the seated copy before printing the
+posture.

havona-0.1.0/programme-src/commission-b/SLOT-RESERVED.md

@@ -0,0 +1,20 @@
+# Commission B — the fifth payload slot, reserved and empty
+
+Alongside the programme payload, this slot is reserved for the Graph
+Engineering programme-side material (the Chairman's Adoption by
+Ascension, 2026-11-07; declared in the packet's
+`COMMISSION-B-DELTA.md`).
+
+**State: RESERVED, EMPTY.** G-1 (named-edge enforcement), G-2
+(splitter lessons ratchet), and G-3 (touch-rate reporting, schema
+only) are adopted as doctrine and commissioned as builds — **NOT BUILT**. Nothing of them ships in this re-pack. When the G-builds are
+built and pass the same independent-review gate, they enter a later
+re-pack as their own separable, hash-pinned payload under this slot,
+and Gate B re-verifies both pins from inside the rebuilt artifacts.
+G-4 (the cure-packet format) is convention only and carries no slot.
+
+Resident-only when the slot fills (verify-by-absence, same discipline
+as the programme payload): the fleet's live sprint graphs and run
+history; the estate's accumulated lessons-file contents and
+run-return history (the formats ship; the lived contents do not); all
+touch-rate measurements from estate runs.