{
  "_source": "00_FOUNDER_DECISIONS_AND_LAUNCH_SEQUENCE.md §1.2, 01_CODEX_ENGINEERING_GATE_E2.md, ARCHITECTURE.md, reports/gate-1-genesis.md.",
  "_decision": "decisions/002-gate-namespaces.md — pending. The namespaces below are adopted on the founder's recorded decision of 2026-08-10 and this page will cite the ADR once it is committed.",
  "status_date": "2026-08-10",

  "namespace_note": "Engineering gates and public milestones are separate sequences, because they were previously one and collided. An engineering gate is admitted on executed evidence. A public milestone is admitted on an independent audit of a public surface. Neither blocks the other from being described honestly.",

  "renumbering": [
    { "former": "Gate 1", "now": "E1", "name": "Source-Statement Evidence Spine" },
    { "former": "Gate 2", "now": "P1", "name": "Public Foundation" },
    { "former": "Gate 3 (architecture baseline 0.2: Gate 2)", "now": "E3", "name": "Multi-origin deterministic compiler" }
  ],

  "engineering": [
    {
      "id": "E0",
      "name": "Founding architecture",
      "state": "complete",
      "objective": "Fix the invariants, trust boundaries, wire schemas, and governance law before writing the implementation they constrain.",
      "evidence": "ARCHITECTURE.md, CHARTER.md, constitution/, schemas/cddl, THREAT_MODEL.md",
      "risks": "A written invariant is not an enforced one. E0 is only credible because E1 tested it.",
      "admission": "Superseded by E1."
    },
    {
      "id": "E1",
      "name": "Source-Statement Evidence Spine",
      "state": "complete",
      "objective": "Prove the smallest complete path from an origin's bytes to a typed, provenance-bearing value, with an independent second implementation checking the canonical artefact.",
      "evidence": "reports/gate-1-genesis.md — 94 named Go test events, 16 shared Go/C observation vectors, 11 extraction vectors, 4 Go fuzz targets, 5,000 sanitizer-instrumented C libFuzzer executions, offline replay.",
      "evidence_path": "reports/gate-1-genesis.md",
      "risks": "Seven unresolved risks, published in full. Hosted CI has never executed, so local acceptance is the only executed validation evidence.",
      "admission": "Independent review and CI reproduction of the E1 report. Public deployment is explicitly not the next gate."
    },
    {
      "id": "E2",
      "name": "Agent-Facing Typed Interface Demonstrator",
      "state": "next",
      "objective": "Prove that one canonical operation definition can expose a real read-only resource to an agent through CLI, JSON Schema, OpenAPI, and MCP at once — preserving native meaning, immutable evidence, exact semantic closure, and field-level provenance.",
      "evidence": "None yet. Authorised as an engineering proposal; not started.",
      "scope": [
        "Minimal TWIR Core 0.1 — only the primitives the demonstration needs",
        "A canonical typed result envelope that fails closed without required provenance",
        "Manifest-last evidence bundles: logical transactionality without claiming a filesystem transaction",
        "Observation v2 recording the redirect chain and an allowlist of representation-relevant headers",
        "Independent C verification extended from the observation to the result envelope and bundle manifest",
        "TWIRX as its own first typed origin: project.getStatus, project.getEngineeringGateReport, project.listUnresolvedRisks",
        "A deterministic agent transcript: make demo-e2"
      ],
      "risks": "Bindings are where a protocol quietly acquires a runtime dependency. MCP tooling must stay pinned and isolated under bindings/, never in the core.",
      "admission": "One operation definition, four generated bindings, verified in Go and C, with a reproducible transcript and a controlled — not universal — performance comparison."
    },
    {
      "id": "E3",
      "name": "Multi-origin deterministic compiler",
      "state": "planned",
      "objective": "Compile three distinct representation classes — JSON API, JSON-LD or structured HTML, and RSS or Atom — into adapters deterministically, and answer one common semantic query across all of them.",
      "evidence": "None. No implementation exists.",
      "risks": "Automatic compilation is where silent misinterpretation becomes cheap. The conformance corpus has to grow first.",
      "admission": "Deterministic output across two implementations for a published corpus, using controlled fixtures and recorded public snapshots."
    },
    {
      "id": "E4",
      "name": "Isolated browser discovery",
      "state": "planned",
      "objective": "Use a browser for discovery only, inside process or microVM isolation, with no access to canonical state, credentials, or the control network.",
      "evidence": "None. Genesis is browser-free by design.",
      "risks": "A browser is the largest attack surface this project will ever adopt. It must never enter the execution path.",
      "admission": "Demonstrated isolation and egress control, and the proven inability of a discovery worker to write canonical state. Only after result envelopes, bundle admission, independent verification, and agent bindings are stable."
    },
    {
      "id": "E5",
      "name": "Schema induction and learning ledger",
      "state": "research",
      "objective": "Deterministic schema candidates first, then a neutral record of proposals, acceptances, rejections, drift, and repair that later research could learn from.",
      "evidence": "None. No model exists anywhere in the canonical path.",
      "risks": "Prompt injection from observed content is assumed, not hypothetical. A model output is untrusted data.",
      "admission": "A proposal can never promote itself. Every accepted proposal keeps the adjudication record that accepted it."
    }
  ],

  "public": [
    {
      "id": "P0",
      "name": "Private foundation",
      "state": "complete",
      "objective": "A private repository with a charter, licence, security policy, threat model, access policy, funding covenant, and a public-readiness audit before anything is exposed.",
      "evidence": "CHARTER.md, LICENSE, SECURITY.md, THREAT_MODEL.md, ACCESS_POLICY.md, FUNDING.md, reports/public-readiness.md",
      "risks": "None outstanding.",
      "admission": "Superseded by P1."
    },
    {
      "id": "P1",
      "name": "Public foundation",
      "state": "in-progress",
      "objective": "Make the proof legible: this website with a working provenance explorer, authoritative documentation at docs.twirx.org, a transparent treasury, and an independent factual audit of both public surfaces before the repository visibility changes.",
      "evidence": "This site and reports/public-foundation-website.md. Documentation release pending. Commit-metadata privacy remediation pending.",
      "evidence_path": "reports/public-foundation-website.md",
      "risks": "A public surface can overstate an implementation faster than code can. Every technical claim here carries an implementation-status label, and the build fails if a recorded risk is left off the page.",
      "admission": "An independent audit of every factual claim, dependency, link, funding total, and status label must return PASS or PASS WITH CONDITIONS before the repository becomes public."
    },
    {
      "id": "P2",
      "name": "Public launch and funding campaign",
      "state": "planned",
      "objective": "Public repository, live site and documentation, a verified treasury address, and an open Genesis funding campaign backed by E1 evidence with E2 in active development.",
      "evidence": "None yet.",
      "risks": "Launching before the treasury address is independently verified would put contributors at risk. No address is published until it is in funding/wallets.json on the default branch.",
      "admission": "History scan passes, twirx.org and docs.twirx.org are live, the ledger is verified, and every claim is either tied to evidence or explicitly marked as vision."
    }
  ]
}