KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws by gHashTag · Pull Request #12774 · Trinity-S-AI-DNA/t27

gHashTag · 2026-10-27T04:57:41Z

What lands (one commit over master, everything on .t27)

keys.t27 (114/114): the nvidia provider row (10 providers), the sub-row law (open a row, one sub-row per key: serving dot, masked text, per-key status + its own age, replace / delete-two-clicks / check), the add row, the rotation line ("next [SEED-0] Ring-0: Frozen stage-0 + first green parse (Ghuloum step 1) #2/5", "0/5 withheld"), the self-check (one provider per minute), the fleet line, the details line (keychain + env), the age law.
glass_window.t27 (92/92): draws all of it; per-key ages packed four-to-a-word in tgv[TPG_KEYAGE2]; the foot shows "KEYS 6/11"; the four KEYS scalars ride one packed word (draw is full at 64 parameters); the foot test pins the ten-provider truth.
The stage-2 router laws: router.t27 8/8 (walk, answer actions, max_tokens floor), router_sock.t27 3/3 (AF_INET bind bytes), router_serve.t27 5/5 (POST /v1/messages only, 404 otherwise, 502 exhausted, serve_answer), router_actor.t27 4/4 (the accept loop as an actor: bounded mailbox, pure step, faults close without killing, backoff).
provider/transform.t27 12/12 + 11 invariants: compiles again, carries the floor in its options.
keys_fleet.t27 5/5: one row state from the route matrix AND the key vault (keys_state + row_state).

Verification

Every number above is a t27c test-report or a t27b test run from this exact tree. ok_head's byte length was measured by a sweep (74), not hand-counted.

github-actions · 2026-10-27T04:57:59Z

PR Dashboard

Generated at: 2026-10-27 04:57:57 UTC

KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws #12774 KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws | Created: 2026-10-27 | Updated: 2026-10-27 | 35 failing / 38 total
spec(crons): RULE 3 — the red watch also asks whether the site is fresh #12772 spec(crons): RULE 3 — the red watch also asks whether the site is fresh | Created: 2026-10-27 | Updated: 2026-10-27 | 8 failing / 38 total
ci: class D and E of the red-x sweep -- the unparseable queue yml, the branch-filter ceiling, the stale canary (Refs #12708) #12717 ci: class D and E of the red-x sweep -- the unparseable queue yml, the branch-filter ceiling, the stale canary (Refs #12708) | Created: 2026-10-26 | Updated: 2026-10-26 | 8 failing / 34 total
crons: the PR rebase bot -- mechanical DIRTY fixer (Closes #12620) #12696 crons: the PR rebase bot -- mechanical DIRTY fixer (Closes #12620) | Created: 2026-10-26 | Updated: 2026-10-26 | 12 failing / 36 total
parser: a bracketed single element with a declared [1]T annotation is a list, not a dimension (Refs #5980) #12695 parser: a bracketed single element with a declared [1]T annotation is a list, not a dimension (Refs #5980) | Created: 2026-10-26 | Updated: 2026-10-26 | 10 failing / 48 total
spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) #12167 spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) | Created: 2026-10-25 | Updated: 2026-10-26 | 4 failing / 48 total
T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) #12035 T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) | Created: 2026-10-24 | Updated: 2026-10-24 | 7 failing / 37 total
test(t27f): frame_render clears the raster before it blends (Refs #3) #11922 test(t27f): frame_render clears the raster before it blends (Refs #3) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 38 total
t27c test: execute assertions via zig test (Closes #11805) #11806 t27c test: execute assertions via zig test (Closes #11805) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 46 total
dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) #11426 dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) | Created: 2026-10-20 | Updated: 2026-10-26 | 2 failing / 30 total
spec(port): share tree helpers across eight gen_w ports (Closes #9633) #9636 spec(port): share tree helpers across eight gen_w ports (Closes #9633) | Created: 2026-10-15 | Updated: 2026-10-23 | 6 failing / 23 total

Summary

Status	Count
Total Open PRs	11
PRs with Failing Checks	10
PRs with All Checks Green	1
READY	0
FAILING	10
PENDING	0
NO CHECKS YET	0

These columns do not partition: 0 + 10 + 0 + 0 = 10, and there are 11 open PRs. A PR is being counted twice or not at all.

Seal Status

⚠️ STALE -- sha256(compiler.rs)=67adcf31aff7 != manifest seal=87e5cbd3ad94.
The committed NMSE numbers were certified against an older compiler.rs.
Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).

tri-claw · 2026-10-27T05:00:08Z

Summary by t27-bees

Checked by the t27 compiler

_{t27c parse, parse-complete and typecheck on each changed .t27 file at 3d8a8e2. Nothing was generated, built or run. A pass means the file is well formed, not that it is right.}

specs/crons/mac-node-market-tick.t27: parses and typechecks.
specs/network/identity.t27: parses and typechecks.
specs/provider/transform.t27: parses and typechecks.
specs/t27os/keys.t27: parses and typechecks.
specs/t27os/node_runner_tick_argv.t27: parses and typechecks.
specs/t27os/router.t27: parses and typechecks.
specs/t27os/router_serve.t27: parses and typechecks.
specs/t27os/router_sock.t27: parses and typechecks.
specs/tri/t27b/wasm.t27: parses and typechecks.

Read by the model

This PR overhauls the KEYS tab UI with per-key editing, self-checking, and rotation tracking, and lands the stage-2 router laws (router, socket, serve, actor) plus a max_tokens floor that propagates through provider/transform.t27. It also removes the seal-resync cron and recorded_log spec, and narrows the wasm32 emitter to only lower + - * / and comparisons (dropping bitwise and shift ops).

Worth a look

specs/t27os/router_serve.t27 (new): Only handles POST /v1/messages; returns 404 for everything else and 502 when exhausted. If any client or test hits a different path (e.g., /v1/models, health checks), it will get 404 — confirm nothing else expects to route through this server.
specs/t27os/router_actor.t27 (new): Actor accept loop with bounded mailbox; faults close the connection without killing the actor. If the mailbox fills under load, new connections will be dropped/backed off silently — verify the backoff and capacity are sized for expected burst traffic.
specs/provider/transform.t27:121 (added max_tokens = MIN_FORWARD_TOKENS default): The floor is now 64 (per test). Any caller that relied on the old default (implicitly 0 or unset) will now send at least 64 max_tokens to downstream providers — could change behavior for non-thinking models that worked with lower limits.
gen/rust/tri/t27b/wasm.rs: Removed lowering for & | ^ << >> and wrapping arithmetic (*_W ops). Any Zig/Verilog tests that exercised those ops on the wasm32 backend will now hit the refusal path (return 0 / fall through) — the compiler still typechecks, but the generated wasm will not execute those operations.
specs/network/identity.t27:255-278: Removed the mac-t27os part (index 10) and its binding (PR feat(t27os): node market live on mac-t27os -- tick glue, ENABLED card, the job receipt law #12747, key 2fed7065eb4439e4). If any runtime code indexes identity_table() expecting that part at a fixed position (e.g., for node-market receipts), the table is now shorter (10 parts, 12 bindings) and the indices shift.
specs/crons/mac-node-market-tick.t27:32: ENABLED flipped to false with note that glue (launchd plist + node_runner.t27 binary) hasn't landed. The cron spec exists but won't run — ensure the follow-up PR that lands the glue also flips this back, otherwise the market tick stays disabled silently.
.github/workflows/seal-coverage.yml: Removed the resync dispatch job entirely. Stale seals will no longer be auto-resealed via CI; they must be fixed manually or a new automation added. The gate now also runs a negative control (self-check) — if that self-check ever breaks, the gate will fail noisily.

_{Read: 29 files, +1328 -842, the whole diff up to 60000 characters (the rest was not read). Head 3d8a8e2. Model: openai-compatible/nvidia/nemotron-3-ultra-550b-a55b. Commands: @t27-bees review | summary | help | pause | resume. Free for every repository.}

…ion, self-checking; the stage-2 router laws Closes #12753. The KEYS tab: ten providers (nvidia included), one row opens and lists one sub-row per stored key -- dot of the serving key, masked text, per-key status and its own age, replace / delete-two-clicks / check, the add row. The rotation on the closed row, the fleet on the footer (KEYS 6/11), the self-check (one provider a minute), the details line (keychain + env + checked Xm ago), the age law. The stage-2 router laws: router.t27 (the walk, answer actions, the max_tokens floor), router_sock.t27 (the AF_INET bind bytes), router_serve.t27 (POST /v1/messages only, 404 otherwise, 502 exhausted, serve_answer), router_actor.t27 (the accept loop as an actor: bounded mailbox, pure step, faults close without killing, backoff). provider/transform.t27 compiles again and carries the floor in its options; keys_fleet.t27 speaks one row state from the route matrix and the key vault. keys.t27 114/114, router 8/8, sock 3/3, serve 5/5, actor 4/4, fleet 5/5, transform 12/12, glass_window 92/92. phi^2 + 1/phi^2 = 3 | TRINITY

… deletion was an index artifact of a parallel lane)

github-actions · 2026-10-27T05:16:17Z

PR Dashboard

Generated at: 2026-10-27 05:16:14 UTC

KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws #12774 KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws | Created: 2026-10-27 | Updated: 2026-10-27 | 32 failing / 37 total
ci: class D and E of the red-x sweep -- the unparseable queue yml, the branch-filter ceiling, the stale canary (Refs #12708) #12717 ci: class D and E of the red-x sweep -- the unparseable queue yml, the branch-filter ceiling, the stale canary (Refs #12708) | Created: 2026-10-26 | Updated: 2026-10-26 | 8 failing / 34 total
crons: the PR rebase bot -- mechanical DIRTY fixer (Closes #12620) #12696 crons: the PR rebase bot -- mechanical DIRTY fixer (Closes #12620) | Created: 2026-10-26 | Updated: 2026-10-26 | 12 failing / 36 total
parser: a bracketed single element with a declared [1]T annotation is a list, not a dimension (Refs #5980) #12695 parser: a bracketed single element with a declared [1]T annotation is a list, not a dimension (Refs #5980) | Created: 2026-10-26 | Updated: 2026-10-26 | 10 failing / 48 total
spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) #12167 spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) | Created: 2026-10-25 | Updated: 2026-10-26 | 4 failing / 48 total
T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) #12035 T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) | Created: 2026-10-24 | Updated: 2026-10-24 | 7 failing / 37 total
test(t27f): frame_render clears the raster before it blends (Refs #3) #11922 test(t27f): frame_render clears the raster before it blends (Refs #3) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 38 total
t27c test: execute assertions via zig test (Closes #11805) #11806 t27c test: execute assertions via zig test (Closes #11805) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 46 total
dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) #11426 dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) | Created: 2026-10-20 | Updated: 2026-10-26 | 2 failing / 30 total
spec(port): share tree helpers across eight gen_w ports (Closes #9633) #9636 spec(port): share tree helpers across eight gen_w ports (Closes #9633) | Created: 2026-10-15 | Updated: 2026-10-23 | 6 failing / 23 total

Summary

Status	Count
Total Open PRs	10
PRs with Failing Checks	9
PRs with All Checks Green	1
READY	0
FAILING	9
PENDING	0
NO CHECKS YET	0

These columns do not partition: 0 + 9 + 0 + 0 = 9, and there are 10 open PRs. A PR is being counted twice or not at all.

Seal Status

⚠️ STALE -- sha256(compiler.rs)=67adcf31aff7 != manifest seal=87e5cbd3ad94.
The committed NMSE numbers were certified against an older compiler.rs.
Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).

…ge, and pin it to the canonical receipt key (Closes #12754, follows #12756) (#12790) #12774's KEYS-tab work landed on a master without the mac-t27os row (#12756) and silently dropped it: bindings fell back to 12, with zeros at index 12. This re-lands the row on the current table AND upgrades it: the receipt key is now dc1bf22de103cca3 -- created by `t27c receipt-key init`, the canonical derivation -- replacing the hand-derived id from the first landing. b_commit[12] is pinned to #12756's merge commit (1a170f4...), the row-carrier per git blame. The tripwire drove the fix: it refused the table until b_commit[12] was 40-hex. t27c test-report: 6 passes, 0 FAIL, 0 vacuous.

…colours (#12808) * spec(crons): the cards say what the workflows now do (#12776) Closes #12775. Landed with trinity#1787 in the same hour. Admin per repo precedent. * feat(t27os): the dsh head election law, its cron card, and the pilot node's public key (Closes #12782) (#12783) - dsh_head_election: the hysteresis law -- the default head flips only after FLIP_STREAK (3) consecutive turn-sized challenger wins over a dead incumbent; probes are 100 tokens / 60 s (1-token probes gave false positives, measured 2026-10-26/27). - mac-dsh-head-election cron card: ENABLED=false on purpose (card-first; the election glue lowers from the election spec and lands with it). - .trinity/keys/2fed7065eb4439e4.pub: the mac-t27os pilot node's PUBLIC Ed25519 half (identity.t27 #12756 row) so its signed job receipts verify; the private key never enters the repository. t27c test-report on this tree: 6+1 passes, 0 FAIL, 0 vacuous. * feat(t27os): the LADDER -- the rung law for every LLM client on a node (Closes #12786) (#12787) Named this night: a client points at the local ladder endpoint; the ladder walks rungs in order (zai pool, own ollama, deepseek, openrouter) and serves the first rung that answers a TURN-SIZED request with 200. Fail closed at 503 naming the last refusal. Loopback only. Measured background: zai free pool flaps under load (2/5 and 1/5 turn-sized alive); the own ollama node went 7/7; openrouter's key limit is not a balance (402); deepseek unfunded pays 402 per call -- the rung order encodes all of it. Live on mac-t27os: launchd ai.t27.ladder, keys=5, a turn through the ladder served 200 in 3.2 s. t27c test-report on this tree: 3 passes, 0 FAIL, 0 vacuous. * t27b: the interpreter counts folded checks as ct_verified -- the CT-VERIFIED/VACUOUS split reaches the reference path (Refs #12751, #5980) (#12784) * blog: the epic card reads its arrays directly -- the #5980 accessor workaround retires under the CT-VERIFIED law (Refs #12777) (#12785) * t27b: pass_ct -- the verdict layer carries the CT-VERIFIED count (stacked on #12784) (#12788) * t27b: the interpreter counts folded checks as ct_verified -- the CT-VERIFIED/VACUOUS split reaches the reference path (Refs #12751, #5980) * t27b: the verdict layer carries ct -- pass_ct labels the folded-only pass, the corpus report counts it apart (Refs #12751, #5980) * fix(network): restore the mac-t27os row clobbered by the KEYS-tab merge, and pin it to the canonical receipt key (Closes #12754, follows #12756) (#12790) #12774's KEYS-tab work landed on a master without the mac-t27os row (#12756) and silently dropped it: bindings fell back to 12, with zeros at index 12. This re-lands the row on the current table AND upgrades it: the receipt key is now dc1bf22de103cca3 -- created by `t27c receipt-key init`, the canonical derivation -- replacing the hand-derived id from the first landing. b_commit[12] is pinned to #12756's merge commit (1a170f4...), the row-carrier per git blame. The tripwire drove the fix: it refused the table until b_commit[12] was 40-hex. t27c test-report: 6 passes, 0 FAIL, 0 vacuous. * lab: the pass_ct reader -- the corpus aggregates count the compile-time-verified pass apart (Refs #12751, #5980) (#12789) * feat(t27os): the next mark and own age on every key sub-row; the router actor laws; reuse challenge_ok (Closes #12753) (#12781) keys.t27: next_mark_text, the sub-row grows to 32 for its second line. glass_window: the serving key wears 'next', then its own last-check age follows on the same line; the next-mark import. keys_fleet: keys_state + row_state -- one row state from the route matrix and the key vault. router_serve: serve_answer -- the wire composition of the walk. router_actor: the accept loop as an actor -- bounded mailbox (8), one pure step, faults close without killing the loop, backoff 30 after 16. node_runner_tick_argv: digit/hexlower/hex32 were a copy of dispatch.t27's challenge_ok -- reuse the law (the dupe ratchet is green again). Seals: T27osKeys, T27osGlassWindow resealed against this tree. keys 115, router 8, sock 3, serve 5, actor 4, fleet 5, transform 12, node_runner_tick_argv 2, glass_window 92/92. phi^2 + 1/phi^2 = 3 | TRINITY * feat(t27os): the live mycelium rollout card for 27 petals and the live tap of lanes transitions and the recorded log into the work graph (Closes #12795, Closes #12796) * feat(t27os): the plan card names the next unwired petal -- lowest wave first, ties by index (epic #12779) * feat(t27os): the graph plane -- the tap ring folded into per-kind rows and shared-palette colours (Closes #12806)

Back on real commands only: t27c frontier --list (verified locally, exit 0) prints what the frontier would rebuild and re-seal into the step summary. Report-only by law: an unattended runner cannot land re-sealed files, the coverage job stays the gate, and the || true is scoped to this job so a perpetual red reading does not stop being read. Re-landing refreshed seals is a lane's work: t27c seal <spec> --save, then the batched push. Header compressed same-file to land net-negative under the foreign budget (foreign-budget-discipline).

…-only seal resync (#12824) * fix(#11182): gen-rust lowers a slice-field capture to a copy A []T field filled from borrowed storage - S{.f = p} with p a []T parameter, or s.f = p / s.f = &x - moved the caller's storage, so compile_rust refused the whole file. The capture now lowers as a COPY (x.to_vec() covers a []T parameter, a fixed array local and a &x borrow alike): the caller keeps its storage and no lifetime is needed. - the refusal guard and its call are gone (net-zero diff: +16/-16) - RustCodegen.slice_fields: field names whose type is []T; the assign path knows only the name - fixtures refuse_* renamed copy_*; the fixture test now pins that every fixture generates (backend_behaviour.rs +4/-4) - specs/compiler/codegen_conformance.t27: the eval case pins the round trip (6 runtime asserts, 0 vacuous, negative control proven) UNVERIFIED BY BUILD: target/release/t27c is from 02:15 and cargo build panics in build.rs on 1120+ non-ASCII untracked files another session is writing under specs/ (acceleration/godmode family). The rustc roundtrip and seal refresh run as soon as the tree builds again. Closes #11182 * seal: refresh CodegenConformance after the #11182 copy lowering (Refs #11182) * ci: report-only seal resync on master (Refs #12774) Back on real commands only: t27c frontier --list (verified locally, exit 0) prints what the frontier would rebuild and re-seal into the step summary. Report-only by law: an unattended runner cannot land re-sealed files, the coverage job stays the gate, and the || true is scoped to this job so a perpetual red reading does not stop being read. Re-landing refreshed seals is a lane's work: t27c seal <spec> --save, then the batched push. Header compressed same-file to land net-negative under the foreign budget (foreign-budget-discipline).

gHashTag force-pushed the feat/keys-12753-x7 branch from ab5e69b to 2c4064d Compare October 27, 2026 05:07

merge origin/master: the crons watch spec takes master's version (the…

3d8a8e2

… deletion was an index artifact of a parallel lane)

gHashTag merged commit c30bf3d into master Oct 27, 2026
27 of 39 checks passed

gHashTag mentioned this pull request Oct 27, 2026

fix(network): re-land the mac-t27os row (clobbered by #12774), canonical receipt key dc1bf22de103cca3 #12790

Merged

gHashTag mentioned this pull request Oct 27, 2026

The stage-2 router listens in the PTY server; the arena holds ten providers #12814

Merged

gHashTag mentioned this pull request Oct 27, 2026

fix(#11182): gen-rust lowers a slice-field capture to a copy + report-only seal resync #12824

Merged

Navigation Menu

Repository navigation

KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws - #12774

KEYS tab: every key visible and editable; self-checking keys; the stage-2 router laws#12774
gHashTag merged 2 commits into
masterfrom
feat/keys-12753-x7

gHashTag commented Oct 27, 2026

Uh oh!

github-actions Bot commented Oct 27, 2026

Uh oh!

tri-claw Bot commented Oct 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

gHashTag commented Oct 27, 2026

What lands (one commit over master, everything on .t27)

Verification

Uh oh!

github-actions Bot commented Oct 27, 2026

PR Dashboard

Summary

Seal Status

Uh oh!

tri-claw Bot commented Oct 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by t27-bees

Checked by the t27 compiler

Read by the model

Worth a look

Uh oh!

github-actions Bot commented Oct 27, 2026

PR Dashboard

Summary

Seal Status

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

tri-claw Bot commented Oct 27, 2026 •

edited

Loading