Implemented systems and operational evidence¶

Freehold and Cuttlefish are implemented systems with workloads operating in AWS. The research documents are earlier, separately versioned statements of their intended responsibilities. This edition examines the actual Freehold engine, its Cuttlefish host, and dated deployment evidence. An older specification date is not evidence that a capability remains hypothetical.

The operational record and the research arguments answer different questions. A running workload establishes presence and availability at the observed time. Source inspection establishes how an identified implementation is intended to execute. A controlled behavior trace establishes what happened in that trace. A claim about every possible execution requires an additional argument with its assumptions made explicit.

The observed edition of the systems¶

The examination on 10 October 2026 combined authenticated, read-only AWS metadata with a retained workload observation from 07:27 UTC on that date. The registry configuration objects were fetched and their content digests verified. Their declared source revisions were compared with the accessible private repositories. No production action, payment, grant change or colony experiment was performed to obtain this evidence.

Subject	Identified evidence	What it establishes
AWS cluster	Authenticated service metadata; cluster active	The identified production cluster exists and is active at the observation time.
Freehold engine workload	Retained observation: one desired and one ready instance; image digest below	A reported running Freehold workload. This retained observation was inspected; it was not a new direct cluster observation by this edition.
Cuttlefish host gateway	Retained ready-workload observation; image digest below	A reported running host workload, distinct from acceptance of each end-user journey.
Registry image configuration	Fresh authenticated read; configuration digest checked	The image objects exist and declare the revisions below. A revision label alone is not a reproducible-build proof.
Source and test coverage	Exact engine and host source inspected; relevant test definitions inspected	Implemented paths and the cases their tests address. Inspection is not a claim that this edition executed the private product tests.

The production image commitments are:

Freehold image
sha256:7bf76d20b53439aa9a36aa70d950ee407b47f9d7c2bc4bcd0e74486284841c46
Declared source revision
826425b5ffa43e6197d32adb3defffafe85b016d

Cuttlefish host gateway image
sha256:879c17bf1df1b2aa3113730fe8b7a2da41bd74cf901182711f90a74c62a801ad
Declared source revision
8d099da51c50610a18ccfd4bd19bcfee2f97cbd0

These commitments identify the examined objects without disclosing registry addresses, account identifiers, private routes or product source. The engine repository revision agrees with its image's declared revision. The host has newer committed source than the observed gateway image; those newer changes are not attributed to the running image. Private uncommitted work is also excluded from deployment claims.

Responsibilities present in the implementation¶

The engine supplies persistent colony identity, founding, citizen activity, mission history, governed resource accounting, and reconstruction from retained state. Its Cuttlefish host supplies the external operating boundary and connects institution-originated requests with current grants, execution and evidence. This supports an implemented relationship between these two systems. It does not establish an integration of every research family in the collection.

Responsibility	Implementation basis examined	Assurance boundary
Founding and stewardship	Founding validation, retained founding record, steward-bound cognition and bounded controls	Founding is an implemented operation. The independence of a real steward, administrator or founder is a separate organizational claim.
Citizen-originated work	Citizen response handling and mission history derived from persistent events	A recorded mission has an attributable origin in the implementation. Sustained useful initiative and absence of every indirect influence require measured studies.
Charter and resources	Engine checks on the retained charter and permitted resource operations	These are enforcement paths within stated trust assumptions, rather than a legal sovereignty claim.
External authority	Colony and tenant scope, current grants, host policy and governed dispatch	Desire does not create external permission. A complete security claim requires coverage of all actual effect routes and administrators.
Receipt and lineage	Source-history checks and receipt-backed result writeback	Authenticity and attribution can be checked separately from whether an external objective was fulfilled.
Recovery	Persistent history, restart reconstruction, action/writeback records and cognition settlement	Different operations have different recovery contracts. The public evidence does not establish a universal unique-effect guarantee after every uncertain acknowledgement.
Cognition change	Pre-start model-policy rebinding and a separately tracked cognition lifecycle	The inspected engine can rebind its model policy before start. A live model switch that preserves an outstanding obligation has not been demonstrated by the observations published here.
Treasury	Incoming deposit settlement and governed application to colony resources	An incoming deposit is not evidence of an autonomous outbound purchase or payout. Those rails require their own capability and effect evidence.
Backup	Retained successful scheduled backup records	A completed backup record is distinct from a demonstrated restored colony with matching history and resumed work.

The examined implementation also contains observation, calibration, memory and experience-related paths. Their presence does not prove every formal or economic claim in the associated research papers. Each paper retains its own object, version and qualification.

Production evidence and research assurance¶

Four ruled rows distinguish source inspection, deployment observation, a behavioral experiment and general assurance. Each row states its evidence subject and the question it can answer. They are separate categories rather than automatic promotions. — Four distinct subjects of implementation evidence

Figure 1. A stronger statement needs evidence about its own subject. Workload readiness does not substitute for a behavioral experiment, and a bounded experiment does not substitute for a universal argument.

For an external effect, an accepted request, a started run, a completed provider action and a discharged obligation are distinct events. This edition does not use initiation status as evidence of confirmed external fulfillment. The completion claim needs the relevant provider observation and the obligation's acceptance condition. A receipt over request processing cannot supply those missing facts by itself.

For model replacement, a rebound configuration, a new response and preserved institutional continuity are also distinct. The decisive test retains an outstanding obligation, changes the active model under valid authority, preserves identity and history, and observes completion or an appropriately governed disposition. A successful fresh task after rebinding would answer a narrower question.

For money, the direction matters. A patron funding the treasury and a citizen causing an authorized payment to an external seller are different operations. Neither permits an inference about the other.

What an outside reader can inspect¶

The implementation and raw production records remain confidential. The dated commitments and methods above permit an exact statement of the examined evidence, but do not provide independent access to the private system. The operational inspection is author-directed and model-assisted; it is not an external audit or peer review.

The public continuity exhibit provides a complementary, executable result. It lets a reader inspect a controlled effect, lost acknowledgement, retained obligation, restart reconciliation, duplicate attempt, revocation and receipt check. Its source is disclosed because it is an original teaching reference built for this publication. It is not extracted proprietary runtime code, and its result is not substituted for a production experiment.

The claim register connects these observations and limits to exact assertions. The assurance boundaries preserve the remaining scientific and operational questions.