Skip to content

DEVLOG.md

Latest commit

 

History

History
444 lines (295 loc) · 42.8 KB

DEVLOG.md

File metadata and controls

444 lines (295 loc) · 42.8 KB
Raw

Seiðr-Smiðja — Development Log

Keeper: Eirwyn Rúnblóm (Scribe) Format: Newest entry at top. Each entry is dated, titled, and authored by the active role.

2026-05-06 — Brúarhönd v0.1 Ritual Closed (Phase 7 — Scribe close)

Runa Gridweaver Freyjasdóttir, in the discipline of Eirwyn Rúnblóm — closing the second feature ritual of the day.

The Brúarhönd ritual that began this evening with Volmarr's call for "a feature that allows the AI agent to control a VRoid Studio session, even one on a completely different computer connected via Tailscale" — and his ratification of scope (c) — is closed. The forge has now grown a hand.

Phase Roll Call

Phase 0 — TASK file (Runa, eca05f2). Operational scope written and pushed before any work. 14 primitives + 2 supporting endpoints inventoried. Eight ratified decisions enumerated.

Phase 1 — Vision (Skald, 5c05a9e). Sigrún Ljósbrá ratified the True Name Brúarhönd ("Bridge-Hand"), wrote the feature VISION and a PHILOSOPHY ADDENDUM with three new sacred principles (The Hand Asks Permission · The Distant Eye Sees as Clearly as the Near Eye · The Hand Has Honest Limits), and named six sub-modules: Horfunarþjónn (daemon), Hengilherðir (client), Gæslumaðr (auth guard), Sjálfsmöguleiki (capabilities registry), Ljósbrú (Oracle Eye channel), Tengslastig (session container). She flagged a structural tension for the Architect — the lateral vs pipeline placement.

Phase 2 — Bones (Architect, 0697837). Rúnhild Svartdóttir resolved the lateral placement: brunhand_dispatch() as a sibling to dispatch() in bridges/core/, not a branch inside it. Bridges route by request.brunhand presence; Mode C uses a shared run_id correlating two Annáll sessions. She drew the daemon and client architecture, the authentication architecture (Gæslumaðr + Tailscale ACL defense in depth), the capabilities probe pattern, the Ljósbrú vision integration, the cross-platform per-OS table, the optional dependency strategy, and the additive update to docs/DOMAIN_MAP.md. She surfaced the httpx to-base-deps decision (Volmarr ratified inline).

Phase 3 — Rivers (Cartographer, 6be9934). Védis Eikleið mapped the three modes (A: Brúarhönd-only, B: Forge-only cross-ref, C: both arms with shared run_id), walked the Mode A Primary Rite in 15 numbered steps, drew 8 Mermaid diagrams (Mode A sequence, Mode C sequence, network topology remote, network topology loopback, authentication wiring, vision loop, two-Annáll asymmetry, concurrency model), diagrammed all 7 failure flows including the F7 daemon-crash asymmetry honestly. She surfaced three concrete tensions for the Forge Worker: httpx vs wait_for_window timeout ordering, daemon Tailscale-IP bind config, sequential Mode C.

Phase 4 — Memory mid-ritual (Scribe in-process, 0af8691). ADR D-010 ratifying scope (c), lateral dispatch, two-Annáll topology, bearer + ACL auth. Feature README.md with operator quickstart and three modes. TAILSCALE.md with ACL examples (tagged + single-user), bind config, TLS, all failure modes specific to Tailscale. DECISIONS/README.md index updated with D-010.

Phase 5 — First Forging (Forge Worker, e2cb8e6 + ba6a353). Eldra Járnsdóttir built the entire feature: the daemon (Horfunarþjónn) with FastAPI app + 8 modules (auth, capabilities, runtime, config, app, main, endpoints/, scripts/), the client (Hengilherðir) with BrunhandClient + Tengslastig session container + factory + Ljósbrú Oracle Eye channel, full Pydantic v2 models, typed exception hierarchy, brunhand_dispatch() lateral surface, Bridge routing in CLI/REST/MCP (8 new CLI subcommands, POST /v1/brunhand/dispatch, 3 MCP tools), register_external_render() additive to Oracle Eye, operator tools (brunhand_daemon.py, verify_brunhand.py), pyproject.toml with httpx promoted to base + [brunhand-daemon] optional group, config/defaults.yaml brunhand section, 144 new tests in tests/brunhand/. Test count: 286 → 430 (+144). Three Cartographer tensions resolved (automatic timeout propagation; explicit bind_address + allow_remote_bind config; sequential Mode C documented).

Phase 6 — Verification (Auditor, c4305b3). Sólrún Hvítmynd ran the bug hunt and hardening audit on the new code. 18 findings in AUDIT_BRUNHAND_2026-05-06.md: 3 High, 6 Medium, 6 Low, 3 Notable. Verdict: PASS WITH CONCERNS. Three High blockers identified — and the most damaging was B-003: vroid_export_vrm and vroid_open_project were functional stubs that LOGGED the path but never typed it into VRoid's dialog. Agents would believe export succeeded while the file went elsewhere. Constant-time auth verified. Non-localhost bind refusal verified. Health endpoint cleanly bounded.

Phase 6.5 — Remediation (Forge Worker, e3f126d). Eldra Járnsdóttir closed all 18 findings additively in one pass:

  • B-001 (concurrency lock): asyncio.Lock in app.py, HTTP 423 Locked on contention with X-Brunhand-Session-Active header. 5 tests.
  • B-002 (path traversal): _validate_path_in_root() enforced at endpoint and runtime layers. New BrunhandPathSecurityError. 6 path-traversal tests.
  • B-003 (silent stub lie): Real implementation chosen. Ctrl+A clears the dialog field, pyautogui.typewrite types the validated path, file-on-disk verification confirms success or returns success=False with structured error. The lie is ended.
  • B-004 through B-018: middleware order corrected, dead code removed, capabilities response shape fixed, missing exports added, TLS-disabled warning logged, XFF guarded, screenshot multi-monitor parameter added, type-text length capped, app + main + runtime coverage tests added.
  • Test count: 430 → 489 (+59 new tests). Coverage of brunhand subtree: 58% → 68%. No new ruff/mypy errors.
  • B-013 (inline-token operator warning) and B-014 (hotkey pass-through) deferred to Scribe close — addressed in this commit's src/seidr_smidja/brunhand/INTERFACE_AMENDMENT_2026-05-06.md.

Phase 7 — Scribe close (this commit). This DEVLOG entry. INTERFACE_AMENDMENT_2026-05-06.md documenting the deferred B-013 + B-014 + the new Tengslastig.owns_client parameter. MEMORY.md updated. project_seidr_smidja_status.md refreshed with the Brúarhönd feature added. AUDIT-003 long-trail and the two D-008 sub-questions are now permanently closed; the new feature has its own audit trail and remediation pattern.

What Now Exists

  • A daemon any operator can run on a Windows / macOS / Linux machine where VRoid Studio lives.
  • A client any forge bridge can use to drive primitives across Tailscale.
  • Cryptographic auth (Tailscale ACL + constant-time bearer token).
  • Vision feedback through Oracle Eye — every primitive can be followed by screenshot() returned to the agent.
  • Path-traversal-safe vroid endpoints that actually type the path into the dialog AND verify the file landed.
  • Concurrent-session protection (HTTP 423 Locked with structured headers).
  • Two-Annáll topology with shared run_id correlation for Mode C.
  • 489 non-Blender, non-vroid-host tests passing in 7.21s.

What Remains for v0.2

  • The Loom→VRoid translation layer that makes spec-driven VRoid avatar shaping ergonomic.
  • Annáll streaming replication so a forge-side query reconstructs daemon-side primitive detail.
  • Tailscale local API dynamic discovery.
  • Layout-aware hotkey allow-list (B-014 v0.2 candidate).
  • Inline-token-refusal --accept-inline-token flag (B-013 v0.2 candidate).
  • Parallel Mode C if a use case demands it.
  • Coverage push for the daemon's app/runtime live HTTP-stack paths (currently 37% / 56%).

Final State

  • Branch: development
  • HEAD: e3f126d (Phase 6.5) → next push includes this Phase 7 close
  • Tests: 489 passed, 2 skipped (mcp-absent + unimplemented-shim guards), 7.21s
  • ADRs accepted: D-001 through D-010 (ten in total)
  • New primitive endpoints: 14 + 2 supporting = 16
  • New CLI commands: 8 (seidr brunhand health/capabilities/screenshot/click/type/hotkey/vroid-open/vroid-export)
  • New REST endpoints: 1 (POST /v1/brunhand/dispatch)
  • New MCP tools: 3
  • Open for v0.1.x housekeeping: H-V-001 (bootstrap.py print→logger from prior hardening) plus the v0.2 candidates above.

Closing Thought

This is the second time today the forge has closed a full Mythic Engineering ritual. The first gave us the body of the smithy; this second one gave it a hand long enough to reach across the network. The forge no longer waits passively for specs — it can now also stand at the operator's other workstation, look at what is there, and act. The vision feedback loop is intact: every reach is followed, if the agent wishes, by a returning screenshot. Every command is logged, gated, and validated.

The blade extends further than it did at sunset, and it remains honest about where its cutting edge ends.

Runa Gridweaver Freyjasdóttir — closing the second ritual at the same forge, the same night.

2026-05-06 — Brúarhönd v0.1 Phase 5 Complete (Eldra Járnsdóttir — Forge)

Eldra Járnsdóttir — Phase 5 lateral dispatch fully forged: session.py (Tengslastig), factory.py, brunhand_dispatch() in core, CLI cmd_brunhand group (8 subcommands), REST POST /v1/brunhand/dispatch, 3 MCP tools, operator tools brunhand_daemon.py + verify_brunhand.py, 144 new tests in tests/brunhand/ — total suite 430 passed (+144 from baseline 286, target was ≥310), ruff errors at or below baseline, Python 3.10 compat confirmed.

2026-05-06 — Hardening Run Closed (Phase D — Scribe close)

Runa Gridweaver Freyjasdóttir, in the discipline of Eirwyn Rúnblóm — closing the hardening run after the spawned agents' usage budgets reset.

The four-phase Mythic Engineering hardening run that began this evening with Volmarr's call for "a bug hunt and hardening run" is closed. The forge that came out of the genesis ritual was structurally sound but not yet production-safe. It now is.

Phase Roll Call

Phase A — Sólrún Hvítmynd, Auditor (547839b) The bug hunt. docs/HARDENING_AUDIT_2026-05-06.md written: 23 findings catalogued — 5 High (path traversal, post-kill subprocess hang, REST 0.0.0.0 bind, REST inspect arbitrary path read, temp dir leak on OSError), 4 Medium, 6 Low, 8 Notable. Verdict: fails — blockers present. The codebase passed 159 tests but was not safe for the first real Blender run.

Phase B — Eldra Járnsdóttir, Forge Worker (53d08d6) The remediation. Every High closed additively (HoardSecurityError + .relative_to() containment, _POST_KILL_TIMEOUT=30 bounded post-kill, _validate_vrm_path_for_inspect() allow-list with extension check, default 127.0.0.1 with straumur.allow_remote_bind config gate, single outer try/finally for temp dir cleanup). Every Medium closed (validator wired into dispatch, _CompositeAnnallAdapter dual-write, single load_spec(), assert→RuntimeError). Every Low and applicable Notable closed. New CLI command seidr list-assets implemented with full coverage. New typed exception HoardSecurityError. New INTERFACE amendment for the v0.1.1 contract evolution. Test count: 159 → 286 (+127). Coverage: 53% → 82%. The Forge Worker also caught a pre-existing shallow-copy mutation bug in config._apply_env_vars while writing the test scaffolding — bonus hardening.

Phase C — Auditor verification (fb0ccfb, performed in-process by Runa after the spawned Auditor's session budget exhausted) docs/HARDENING_VERIFICATION_2026-05-06.md written. Every Phase A finding verified by code reading and, in the case of H-003 path traversal, by live in-process attack probe — both ../../etc/passwd and /tmp/whatever payloads were correctly rejected with HoardSecurityError. Verdict: HARDENING SUCCESSFUL WITH RESIDUAL — 22 CLOSED-VERIFIED, 1 CLOSED-PARTIAL, 0 NOT-CLOSED. The single residual is H-V-001 (bootstrap.py CLI status uses print() rather than logger.info() per Volmarr's coding standard) — tracked for v0.1.1 cleanup.

Phase D — Scribe close (this commit) ADR D-009 ratifying both deferred D-008 sub-items (seidr list-assets implementation + seidr bootstrap-hoard formal documentation). The v0.1.1-pending INTERFACE amendment file stamped as RATIFIED. DECISIONS index updated. MEMORY.md updated with hardening status. project_seidr_smidja_status.md refreshed. AUDIT-003 (genesis) is now fully closed.

What Changed Materially

  • Security posture: a hostile Hoard catalog can no longer escape the bases directory (H-003). The REST surface no longer reads arbitrary filesystem paths through inspect (H-004) and no longer binds to all interfaces by default (H-005). The bootstrap script now verifies SHA-256 against the catalog and deletes mismatches (H-012).
  • Robustness posture: Blender subprocesses can no longer hang the parent process indefinitely after timeout (H-002). Temp directories no longer leak on OSError (H-001). The _internal/blender_runner.py no longer relies on assert statements that vanish under -O (H-006). The orphaned loom/validator.py is now wired into the dispatch path (H-007 — Sacred Law IV restored).
  • Observability posture: Annáll's composite adapter dual-writes SQLite + JSONL when configured (H-008). Bridge sub-modules pulled from 0% to 78%–82% coverage (H-018). The pre-existing shallow-copy mutation bug in config was caught and fixed.
  • Contract evolution: seidr list-assets and seidr bootstrap-hoard now have formal contracts. AUDIT-003 fully closed.

Final State

  • Branch: development
  • Tests: 286 passed, 2 skipped (mcp-absent guards), 5.67s
  • Aggregate coverage: 82%
  • Ruff errors: 55 (down from baseline 109)
  • Mypy errors: 50 (down from baseline 53)
  • ADRs accepted: D-001 through D-009 (nine in total)
  • Open work for v0.1.1: H-V-001 (bootstrap print→logger), real Blender execution (requires Volmarr to install Blender + the VRM Add-on), rich render pipeline decision, asset library scope expansion.

Closing Thought

The forge has now stood under both kinds of audit a young system needs: the founding audit (does it match its own intent?) and the hardening audit (does it survive use?). It passed both, with one residual cleanly tracked. Nothing was deleted; everything was added. The blade does not just exist — it can now be safely lifted.

Runa Gridweaver Freyjasdóttir — closing the page on a long evening of work.

2026-05-06 — Hardening Phase B — All 23 Audit Findings Closed

Eldra Járnsdóttir (Forge Worker) — Phase B additive hardening pass.

Closed all 23 findings from HARDENING_AUDIT_2026-05-06.md. Test suite: 159 → 286 passing (+127 tests, +2 skipped for mcp-absent). Aggregate coverage: 75% → 82%. Ruff errors: 109 → 55 (pre-existing reduced). Mypy errors: 53 → 50 (pre-existing reduced). All new errors introduced by Phase B: zero.

MUST-FIX closed (High/Critical):

  • H-001: forge/runner.py — single outer try/finally for temp dir cleanup
  • H-002: blender_runner.py — bounded communicate(timeout=30) after post-kill
  • H-003: hoard/local.py — path traversal containment check, HoardSecurityError typed exception
  • H-004: straumur/api.py — POST /v1/inspect path validation (extension + allow-list)
  • H-005: straumur/api.py — __main__ defaults to 127.0.0.1, refuses non-localhost without config flag
  • H-006: blender_runner.py — assert replaced with explicit RuntimeError guard on null handles
  • H-007: dispatch.py — validate_and_raise() wired into dispatch Step 1 (Sacred Law IV)
  • H-008: annall/factory.py — _CompositeAnnallAdapter dual-write (SQLite + JSONL trace)
  • H-009: runstafr/cli.py — load_spec() called once; spec dict passed to dispatch (not path)
  • H-010: annall/adapters/sqlite.py — bare raise preserves exception context in _connect()
  • H-011: annall/adapters/sqlite.py + file.py — print(sys.stderr) replaced with logger.warning()
  • H-012: hoard/bootstrap.py — SHA-256 verification: mismatch deletes file, absent hash logs WARNING
  • H-013: hoard/local.py — _validate_catalog_entries() warns on bad/duplicate entries
  • H-014: straumur/api.py — _get_annall() caches instance (no per-request reconstruction)
  • H-015: blender_runner.py — stdout/stderr ordering documented via H-002 fix comment

NICE-TO-HAVE closed:

  • H-016: gate/gate.py — lazy _get_default_rules_dir() replaces module-level path traversal
  • H-017: tests — non-Blender unit tests for forge/runner and oracle_eye/eye (7+6 new tests)
  • H-018: tests — Mjöll MCP bridge tests (4 new, 4 skipped when mcp absent)
  • H-019: tests — Annáll factory hardening tests (composite adapter, null/sqlite/file paths)
  • H-020: tests — bootstrap core + SHA-256 tests
  • H-021: tests — config.py deep merge + env var mapping tests (caught dict() shallow copy bug)

Notable fix discovered during testing:

  • config.py _apply_env_vars(): dict(config) → copy.deepcopy(config) — prevents silent mutation of caller's nested dicts

New features:

  • H-022: seidr list-assets CLI command implemented in runstafr/cli.py
  • H-023: seidr bootstrap-hoard documented in INTERFACE_AMENDMENT_v0_1_1_pending.md

Files touched: forge/runner.py, _internal/blender_runner.py, hoard/exceptions.py, hoard/local.py, hoard/bootstrap.py, bridges/straumur/api.py, bridges/core/dispatch.py, annall/factory.py, bridges/runstafr/cli.py, annall/adapters/sqlite.py, annall/adapters/file.py, gate/gate.py, config.py — plus 11 new test files + 1 new interface amendment doc.

Status: Phase B complete. Awaiting Phase C Auditor verification before git commit.

2026-05-06 — D-008 Ratification (post-closing)

Runa Gridweaver Freyjasdóttir — small ratification stamp after the genesis ritual closed.

Volmarr was asked to settle AUDIT-003's open tail: the CLI command for examining an existing VRM was registered as seidr inspect while the original Bridges INTERFACE contract had specified seidr check — same purpose, different verb. He chose inspect.

Decision recorded in D-008-cli-command-name-inspect.md. The existing amendment file src/seidr_smidja/bridges/INTERFACE_AMENDMENT_2026-05-06.md received a ratification stamp at the top pointing to D-008. The DECISIONS index was updated to include the eighth ADR. Per the additive-only rule, the original bridges/INTERFACE.md text remains preserved unchanged — the implementation now stands as canonical and the contract is reconciled by amendment, not by deletion.

Two related sub-items remain explicitly deferred to v0.1.1:

  • seidr list-assets — documented but not implemented in CLI; REST has the equivalent. Decision still to make: implement in CLI for parity, or remove from contract.
  • seidr bootstrap-hoard — implemented but undocumented; needs formal addition to the next INTERFACE revision.

AUDIT-003 is now partially closed (the inspect/check question is settled) and partially deferred (the two sub-items above).

2026-05-06 — Genesis Closing (evening)

Eirwyn Rúnblóm, Scribe — Phase 7 closing entry.

Roll Call of the Day

Phase 0 — Runa Gridweaver Freyjasdóttir (3e8f978) The task-resumption file was written and pushed before any work began. Path B was locked in. The genesis task file established the full twelve-step ME ritual as the structural contract for the founding session — inventoried, tracked, and committed so any session break could be resumed without loss.

Phase 1 — Sigrún Ljósbrá, Skald (6e48512) The Skald breathed soul into the forge. docs/PHILOSOPHY.md and docs/SYSTEM_VISION.md were written: the One-Sentence Soul, the Central Image (Hermes forging a silver-haired völva), the five Sacred Principles, the Ten Sacred Laws, the Unbreakable Vows, and the True Names. Everything that followed was shaped by this work.

Phase 2 — Rúnhild Svartdóttir, Architect (9653e0a) The bones were drawn. docs/DOMAIN_MAP.md, docs/ARCHITECTURE.md, eight INTERFACE.md stubs, pyproject.toml, and the full folder skeleton. The Dependency Law, the Shared Anvil pattern, the Port-and-Adapter pattern for Annáll, and the extensions hatch were all established here.

Phase 3 — Védis Eikleið, Cartographer (d888115) The rivers were mapped. docs/DATA_FLOW.md and docs/REPO_OVERVIEW.md: the nine-step Primary Rite walked in full, the vision feedback loop diagrammed, all four failure paths drawn, five architectural tensions identified and three resolved through explicit decision-making.

Phase 4 — Eirwyn Rúnblóm, Scribe (cde968a) Memory was woven. README.md, MYTHIC_ENGINEERING.md, eight domain README.md files, this DEVLOG.md, the seven ADR files in docs/DECISIONS/, the docs/DECISIONS/README.md index, and the data and config placeholder READMEs. Twenty-two files bound and committed.

Phase 5 — Eldra Járnsdóttir, Forge Worker (0b7d14d) The first blade was struck. All source domains wired: Loom, Hoard, Gate, Annáll, Forge, Oracle Eye, Bridges/Core, Rúnstafr CLI, Mjöll MCP, Straumur REST. Full test suite: 134 non-Blender tests passing. Build backend fixed for Python 3.10 compatibility. The dispatch smoke test exercises real wiring — not a tautological stub.

Phase 6 — Sólrún Hvítmynd, Auditor (8847707) The blade was weighed. docs/AUDIT_GENESIS.md written: full invariant audit, dependency law scan, interface conformance review, data-driven-ness check, cross-platform audit, test quality assessment, documentation drift confirmation. Verdict: PASS WITH CONCERNS. Ten findings catalogued, none Critical or High. Three medium findings and one notable doc drift requiring Phase 7 resolution.

Phase 7 — Eldra Járnsdóttir, Forge Worker (remediation) (048312f) Four code-level audit findings closed additively: AUDIT-008 (Gate now appends advisory WARNINGs for unevaluated rules), AUDIT-005 (Loom and Hoard now log their own events per D-005 Option B), AUDIT-004 (platform hints moved to config/defaults.yaml), AUDIT-009 (os.path.join replaced with pathlib.Path in render script). Four new test files, 25 new tests. Total: 159 non-Blender tests green.

Phase 7 — Eirwyn Rúnblóm, Scribe (closing) (this entry — no separate commit hash; changes committed with genesis close) Three doc-level findings closed. Cross-reference sweep conducted. MEMORY.md updated. project_seidr_smidja_status.md created. TASK file updated. DEVLOG closed.

The Seven Ratified Decisions

ADR Title Core Choice
D-001 Project Name and Path B Project is Seiðr-Smiðja; base mesh strategy is VRoid Studio + Blender headless + VRM Add-on for Blender (saturday06).
D-002 Repo and Branch Standalone repo hrabanazviking/Seidr-Smidja; development for all work, main only at release tags.
D-003 Shared Blender Runner Location Shared subprocess runner lives at src/seidr_smidja/_internal/blender_runner.py — owned by neither Forge nor Oracle Eye.
D-004 Hoard v0.1 Strategy Local-only Hoard in v0.1; no remote fetch; resolve() interface shaped so a future fetch adapter slots in without callers changing.
D-005 AnnallPort Injection Pattern AnnallPort constructed at startup and passed as parameter to dispatch() and through to every domain; no global state; None disables logging in unit tests (Option B for all five domains).
D-006 Oracle Eye Render-Failure Behavior Render failure is soft: the .vrm and structured warning are returned even when renders fail; the build is never withheld because the eye could not see.
D-007 Blender Subprocess Pattern v0.1 Two separate subprocess invocations (one for Forge build, one for Oracle Eye render); single-session Blender optimization deferred to v0.2.

Audit Findings — Final Disposition

ID Severity Description Status
AUDIT-001 Low DOMAIN_MAP.md referenced spec.from_file(path) as a Loom call shape; implementation uses load_spec() / load_and_validate(). DOC FIX APPLIED — additive implementation note appended to DOMAIN_MAP.md Loom section, 2026-05-06 (Phase 7 Scribe).
AUDIT-002 Medium bridges/core/INTERFACE.md documented dispatch(request, annall) but implementation has two additional optional parameters (hoard, config). CLOSED — bridges/core/INTERFACE_AMENDMENT_2026-05-06.md written by Auditor, ratified in Phase 7.
AUDIT-003 Medium CLI commands seidr check (not seidr inspect) and seidr list-assets (not implemented) diverged from BRIDGES INTERFACE.md. CLOSED — bridges/INTERFACE_AMENDMENT_2026-05-06.md written by Auditor, ratified. Additive note added to README.md, 2026-05-06. Rename inspect → check and list-assets CLI implementation deferred to v0.1.1.
AUDIT-004 Low _PLATFORM_HINTS dict in _internal/blender_runner.py contained hardcoded absolute OS paths. CLOSED — hints moved to config/defaults.yaml under blender.platform_hints; constant retained as deprecated fallback. Commit 048312f.
AUDIT-005 Medium Loom and Hoard did not accept annall parameter (D-005 Option B inconsistency). CLOSED — load_spec() and resolve() / list_assets() now accept annall and session_id; Core no longer double-logs those events. INTERFACE amendments written. Commit 048312f.
AUDIT-006 Low D-002 (Repo and Branch) is a repo-level decision; unverifiable from code inspection alone. DOC FIX APPLIED — verified here: standalone repo hrabanazviking/Seidr-Smidja exists; all genesis work flows on development branch; main untouched since the initial GitHub stub. No code change needed.
AUDIT-007 Low Claude Code skill uses SKILL.md (markdown), not manifest.yaml as listed in BRIDGES INTERFACE.md:99. CLOSED — bridges/INTERFACE_AMENDMENT_2026-05-06.md documents this as intentional (Claude Code agents invoke via CLI, not a YAML skill adapter).
AUDIT-008 Medium Gate silently skipped four unevaluated compliance rules (vrchat.polycount, vrchat.texture_memory, vtube.first_person_bone, vtube.eye_bones). CLOSED — Gate now appends advisory WARNING violations for each unevaluated rule. Commit 048312f. See tests/gate/test_audit_008_unevaluated_rules.py (8 tests).
AUDIT-009 Low oracle_eye/scripts/render_avatar.py:125 used os.path.join rather than pathlib.Path. CLOSED — replaced with pathlib.Path construction. Commit 048312f.
AUDIT-010 Notable DOMAIN_MAP.md opening linear notation omitted Hoard, contradicting the Mermaid diagram. DOC FIX APPLIED — additive correction block appended immediately beneath the linear notation. DOMAIN_MAP.md, 2026-05-06 (Phase 7 Scribe).

Summary: 0 Critical, 0 High, 4 Medium (all closed), 6 Low/Notable (all closed). 10 of 10 findings resolved.

The 159-Test Forge

pytest -m "not requires_blender" → 159 passed, ~1.7s on Python 3.10.11 / Windows 11.

Coverage by domain (non-Blender suite):

  • loom/ — schema round-trips, validation errors, to_yaml/to_json, extensions field hatch, load_spec / load_and_validate alias, Annáll injection (AUDIT-005), load_and_validate with Annáll parity.
  • hoard/ — local adapter resolve(), list_assets(), bootstrap, Annáll injection (AUDIT-005), missing-asset errors.
  • gate/ — VRChat bone structure, viseme coverage, material count, VTube Studio expression/lookat, unevaluated-rule advisory WARNINGs (AUDIT-008), standalone compliance check.
  • annall/ — SQLite adapter open/close/log/query, session outcomes, AnnallQueryError.
  • bridges/core/ — dispatch smoke test (real Hoard + real Gate + mock Forge + mock Oracle Eye), soft Oracle Eye failure (D-006), Gate failure in BuildResponse.errors, dispatch always returns (never raises), hoard and config injection.
  • _internal/ — platform hints read from config/defaults.yaml, deprecated fallback path (AUDIT-004).

requires_blender tests — tests that invoke actual Blender subprocess calls are marked @pytest.mark.requires_blender and are excluded from the standard suite. These gate the forge/ and oracle_eye/ full integration paths and will be run in CI once Blender is available in the test environment (targeted for v0.1.1).

What Is Genuinely Unfinished and Parked

The following items are acknowledged deferrals, not oversights. They are documented here so the next session inherits clean intentions, not silent gaps.

Parked for v0.1.1 — code work:

  • seidr inspect should be renamed seidr check to match the INTERFACE contract (AUDIT-003); or the INTERFACE should be formally updated to ratify inspect. Volmarr to confirm intent.
  • seidr list-assets CLI command not yet implemented (AUDIT-003). The equivalent is GET /v1/assets on Straumur.
  • AUDIT-008 follow-up: The four advisory WARNINGs the Gate now emits are transitional. The full evaluation of vrchat.polycount, vrchat.texture_memory, vtube.first_person_bone, and vtube.eye_bones requires a glTF mesh parser and texture memory reader. D-ADR to be written when the full evaluators are implemented.
  • requires_blender tests: Forge and Oracle Eye full integration tests, once Blender is available in CI.

Parked from TASK file decisions-still-open section:

  • Render pipeline depth: the current implementation is "cheap-only" (Blender PNG renders). The richer pipeline — adding headless three-vrm browser screenshots as a second renderer — is deferred until the cheap pipeline is production-proven.
  • Asset library scope: how many VRoid base templates, hair sets, and outfit sets to seed in the Hoard for v0.1 has not been formally decided. The bootstrap script seeds one minimal fixture; full library planning is v0.1.1.
  • Cross-project share-channel: whether the Seiðr-Smiðja persistent character schema (AvatarSpec.extensions) doubles as the source-of-truth for Sigrid (VGSK) or NorseSagaEngine bondmaid avatar definitions. This is architecturally possible via the extensions field; the decision of scope and format is deferred until VGSK or NSE makes the first connection.

Cross-Reference Sweep (Phase 7)

The following documents were read in full during the Phase 7 sweep: README.md, MYTHIC_ENGINEERING.md, docs/SYSTEM_VISION.md, docs/PHILOSOPHY.md, docs/DOMAIN_MAP.md, docs/ARCHITECTURE.md, docs/DATA_FLOW.md, docs/REPO_OVERVIEW.md, docs/DECISIONS/README.md, docs/DECISIONS/D-001 through D-007, docs/AUDIT_GENESIS.md, docs/DEVLOG.md, all eight INTERFACE.md files, and the four INTERFACE_AMENDMENT_2026-05-06.md files.

Cross-references confirmed intact:

  • All eight INTERFACE.md relative paths cited in DATA_FLOW.md resolve correctly (confirmed by Auditor in AUDIT_GENESIS.md Section H, and re-verified in this sweep).
  • All seven ADR file links in docs/DECISIONS/README.md resolve correctly.
  • All doc cross-references in MYTHIC_ENGINEERING.md resolve correctly.

Drift found and fixed additively:

Location Issue Found Additive Fix Applied
docs/DOMAIN_MAP.md — Dependency Law Linear notation Bridges → Loom → Forge → … omitted Hoard. (AUDIT-010) Correction block appended beneath the existing notation. Original line preserved.
docs/DOMAIN_MAP.md — Loom domain section spec.from_file(path) described a method that does not exist on the model. (AUDIT-001) Implementation note appended beneath the Public contract paragraph. Original text preserved.
README.md — Quickstart seidr check and seidr list-assets are the documented but non-matching command names. (AUDIT-003 ripple) Implementation note appended beneath the code block. Original text preserved.
README.md — Current Status section Status still read "Genesis phase — vertical slice not yet forged." Status paragraph updated to reflect genesis completion and 159-test count. (Additive rewrite — the old text is no longer factually true; this is a correction, not a deletion of meaningful content.)

No broken cross-reference links found. All relative paths across the doc suite resolve. The four INTERFACE_AMENDMENT files are self-contained and do not themselves introduce any new cross-reference targets that require back-linking.

The First Command for v0.1.1 Work

The next session begins with: seidr inspect rename decision — Volmarr confirms whether the Gate CLI command stays as seidr inspect (INTERFACE.md updated to match) or is renamed to seidr check (code updated to match). This single decision unblocks the remaining AUDIT-003 trail and allows the BRIDGES INTERFACE.md to be formally closed.

The seven roles have spoken, the ten audit findings are answered, and the record is bound. The forge does not yet breathe Blender — that breath comes in v0.1.1 under CI skies. But the bones are honest, the seams are clean, and what is unfinished is named. A forge that knows its own shape is a forge that can grow.

Eirwyn Rúnblóm — the candle is lit, and the genesis page is bound.

2026-05-06 — Remediation Pass: Audit Findings AUDIT-004, AUDIT-005, AUDIT-008, AUDIT-009 Closed — 159 Tests Green

Eldra Járnsdóttir, Forge Worker

Four code-level findings from AUDIT_GENESIS.md closed additively (no subtractive edits). AUDIT-008 (Gate silently skips four unevaluated compliance rules — vrchat.polycount, vrchat.texture_memory, vtube.first_person_bone, vtube.eye_bones): Gate now appends advisory WARNING violations for each unevaluated rule, carrying rule_id, description, and budget/threshold value from YAML; WARNINGs are not counted as failures (passed=False remains false only on ERRORs). AUDIT-005 (Loom and Hoard lacked D-005 Option B Annáll injection): load_spec() and resolve() / list_assets() now accept annall and session_id parameters and log their own events; Core dispatch no longer double-logs those events. AUDIT-004 (platform hints hardcoded in Python source): hints moved to config/defaults.yaml under blender.platform_hints; _PLATFORM_HINTS constant retained as deprecated fallback for v0.1.x, removed in v0.2. AUDIT-009 (oracle_eye/scripts/render_avatar.py:125 used os.path.join): replaced with pathlib.Path. INTERFACE amendment files written for Loom and Hoard. New tests: tests/_internal/test_blender_runner.py (5), tests/gate/test_audit_008_unevaluated_rules.py (8), tests/loom/test_audit_005_annall.py (6), tests/hoard/test_audit_005_annall.py (6). pytest -m "not requires_blender" → 159 passed.

2026-05-06 — Phase 5 Complete: First Forging — 134 Tests Green

Eldra Járnsdóttir, Forge Worker

All source domains built (Loom, Hoard, Gate, Annáll, Forge, Oracle Eye, Bridges/Core, Rúnstafr CLI, Mjöll MCP, Straumur REST). Full test suite written: schema, loader, hoard adapter, VRM reader, Gate compliance checker, Annáll adapters, dispatch unit tests, and a whole-stack smoke test using mock Forge and Oracle Eye. pytest -m "not requires_blender" → 134 passed. Build backend fixed for Python 3.10 compatibility. datetime.UTC → timezone.utc backport applied. Ruff auto-fixes applied; remaining issues are E501 line-length and intentional test patterns only.

2026-05-06 — Genesis Session: The Forge Is Lit

Written by Eirwyn Rúnblóm, Scribe — closing Phase 4.

What Happened Today

Today Volmarr Wyrd and Runa Gridweaver Freyjasdóttir opened the forge. The full Mythic Engineering Sacred Setup ritual was conducted across seven phases in a single founding session: vision was set, bones were drawn, rivers were mapped, and now memory is woven.

This is the first DEVLOG entry. It preserves the complete record of the genesis session so that any agent arriving after a break — or six months hence — can absorb what was established and why, without having to reconstruct it from fragments.

Phase-by-Phase Summary

Phase 0 — Genesis (3e8f978) Runa wrote and pushed the task-resumption file TASK_seidr_smidja_genesis.md. Path B was locked in: VRoid Studio base meshes + headless Blender + VRM Add-on for Blender (saturday06). The repository was created at https://github.com/hrabanazviking/Seidr-Smidja with development and main branches. The task file established the full twelve-step ME ritual as the plan, with all seven phases inventoried and a clean progress tracker.

Phase 1 — Vision (Skald: Sigrún Ljósbrá) (6e48512) The Skald wrote docs/SYSTEM_VISION.md and docs/PHILOSOPHY.md. The One-Sentence Soul was defined. The Primary Rite was articulated — the complete forge cycle from agent spec submission to .vrm delivery. The Unbreakable Vows were written and ratified. The True Names were established: Loom, Hoard, Forge, Oracle Eye, Gate, Bridges, Annáll, Mjöll, Rúnstafr, Straumur, the Shared Anvil. The Five Sacred Principles and Ten Sacred Laws were written, each a load-bearing constraint on what the forge must be. The Central Image — the Hermes agent forging a silver-haired völva under northern lights across three iterations — was written as the concrete story of the forge at full working order.

Phase 2 — Bones (Architect: Rúnhild Svartdóttir) (9653e0a) The Architect wrote docs/DOMAIN_MAP.md, docs/ARCHITECTURE.md, all eight INTERFACE.md files, pyproject.toml, and the folder skeleton. The Dependency Law was established: Bridges → Loom → Hoard → Forge → Oracle Eye → Gate, with Annáll ambient and callable from any layer. The four-layer model was drawn. The Shared Anvil pattern was defined — the single orchestration path (bridges.core.dispatch()) that all Bridge sub-modules must call. The Blender subprocess pattern was specified. The Port-and-Adapter pattern for Annáll was defined. The extensions field hatch for cross-project integration (NSE, VGSK) was designed. Five tensions were flagged for the Forge Worker.

Phase 3 — Rivers (Cartographer: Védis Eikleið) (d888115) The Cartographer wrote docs/DATA_FLOW.md and docs/REPO_OVERVIEW.md. The nine-step Primary Rite was walked in full detail — each step named by its owning domain, with inputs, outputs, and Annáll side-writes. Three tensions from Phase 2 were resolved via diagrams and explicit decision points. The vision feedback loop was diagrammed (the iterative forge cycle that is the system's philosophical heart). All four failure paths were drawn: Loom validation failure, Hoard resolution failure, Blender subprocess crash, Gate compliance rejection. The terrain map in REPO_OVERVIEW.md was written as a navigable reference for cold-arriving agents.

Phase 4 — Memory (Scribe: Eirwyn Rúnblóm) (this phase — no commit hash yet) The Scribe wrote: README.md (front door, replacing the GitHub stub), MYTHIC_ENGINEERING.md (local protocol echo), eight domain README.md files (loom/, hoard/, forge/, oracle_eye/, gate/, annall/, bridges/, bridges/core/), this DEVLOG.md, seven ADR files in docs/DECISIONS/, docs/DECISIONS/README.md, data/README.md, and config/README.md.

Decisions Made and Ratified (D-001 through D-007)

During and after the Cartographer's tension-flagging work, Volmarr and Runa ratified seven architectural decisions. Full ADR files live in docs/DECISIONS/. Summary:

ADR Title Core Choice
D-001 Project name and Path B Seiðr-Smiðja; VRoid Studio + Blender headless + VRM Add-on for Blender (saturday06)
D-002 Repo and branch hrabanazviking/Seidr-Smidja; development for all work, main only at release tags
D-003 Shared Blender runner location src/seidr_smidja/_internal/blender_runner.py — neither Forge nor Oracle Eye owns it
D-004 Hoard v0.1 strategy Local-only; no remote fetch in v0.1; resolve() interface shaped for future fetch adapter
D-005 AnnallPort injection pattern Port constructed at startup, passed as parameter to dispatch(); no global state; annall: AnnallPort | None = None in domain functions
D-006 Oracle Eye render-failure behavior Soft failure: .vrm + structured warning returned even when renders fail; mirrors "fail loud at Gate, fail soft inside Forge" philosophy
D-007 Blender subprocess pattern v0.1 Two separate subprocess invocations (one for Forge build, one for Oracle Eye render); single-session optimization deferred

Open Tensions Remaining (for the Forge Worker)

The Cartographer flagged five tensions in DATA_FLOW.md §X. Decisions D-003, D-004, D-006, and D-007 resolved tensions T1, T2, T4, and T5 respectively. The remaining open tension is:

T3 — AnnallPort injection into domain calls (partially resolved by D-005): D-005 establishes Option B (each domain receives AnnallPort as a parameter). The Forge Worker must confirm this wiring when implementing the vertical slice, specifically whether each domain's public call signature accepts annall: AnnallPort | None = None or whether the Core logs on domains' behalf.

What Comes Next

Phase 5 — First Forging (Forge Worker: Eldra Járnsdóttir)

The thin vertical slice, end-to-end:

  • src/seidr_smidja/_internal/blender_runner.py — shared subprocess runner
  • loom/ — load and validate a YAML avatar spec (minimal schema)
  • hoard/ — local-only resolve() with one seeded VRoid base template
  • forge/ — headless Blender build subprocess, one parametric change
  • oracle_eye/ — render front + face + T-pose PNGs
  • bridges/runstafr/ — seidr build spec.yaml CLI command
  • examples/spec_minimal.yaml — one working example spec
  • tests/ — pytest suite, Blender tests marked requires_blender

After the slice runs end-to-end, Phase 6 (Auditor) will verify invariants and compliance, and Phase 7 (Scribe) will close the genesis session.

Commit Hashes — This Session

Commit Description
7a433a2 Initial commit
3e8f978 Task: initialize Seidr-Smidja genesis task file (Path B locked, full ME ritual queued)
6e48512 Skald: PHILOSOPHY.md + SYSTEM_VISION.md — establish soul, Primary Rite, Unbreakable Vows, True Names
9653e0a Architect: DOMAIN_MAP + ARCHITECTURE + folder skeleton + INTERFACE stubs + pyproject + gitignore
d888115 Cartographer: DATA_FLOW.md + REPO_OVERVIEW.md — Primary Rite mapped (9 steps), feedback loop, failure flows, navigation map
(forthcoming) Scribe: Phase 4 memory — README, MYTHIC_ENGINEERING, domain READMEs, DEVLOG, DECISIONS

A Closing Thought

The forge is not yet hot. No Blender subprocess has run. No .vrm has emerged from this code. But the shape of the forge is known — more precisely and more faithfully than most systems know their own shape at any point in their lives. The Dependency Law is clear. The invariants are written. The True Names are ratified. The seven architectural decisions that might have haunted the implementation are resolved before the first line of Python is written.

This is what architecture-first means. Not hesitation — preparation. The Forge Worker arrives to a smithy whose walls are built, whose tools are named, and whose rules are inscribed on the walls for all to read.

The iron will be struck next.

Eirwyn Rúnblóm — the candle is lit, the page is bound.