oy/openyield
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 42 Wiki Activity

docs(P00): specify — regenerate oy-state v2 (v0.7 queued, REQ-046..097)

Browse Source 
Regenerate oy-state per the regeneration rule (oy-spec changed since
state-v1). state-v2 reflects:
- v0.6 COMPLETE (tag v0.5.6, release_id 776) as last shipped
- v0.7 Fraternal Groups Foundation queued (REQ-046..REQ-066, 21 REQs)
- v0.8+ Risk Mitigations deferred (REQ-067..REQ-097, 31 REQs, D-081)
- §3 const firewall: v0.7 planned additions pending GRILL ratification
  (CoverReserveFloorAnnualContribX=1.5, CoverStandingGateTrusted=4.0,
   CoverStandingGatePreferred=4.5, MABIssuanceCeilingAnnualSurplusMultiple=3,
   CoolingSecessionCoverActiveDays=21, CoolingSecessionNonCoverDays=14,
   StandPierEscalationAnnualPassVolumeCents=10M, AntiCaptureBillOfRightsCount=13)
- §4 deferred: Sovereign Anchor SPEC, USZ runtime, Cluster A-E, Pier-Routed
  Legal Wrapper (OPTIONAL), -W absolute cap
- §6 constraints: no-subsidies + Anchor no-Voice GREEN by construction
- §7: D-074..D-081 logged (all 8 PO recommendations accepted as binding)

---ci---
project: oy
phase: 0
milestone: v0.7
status: specify
---/ci---
This commit is contained in:
cloudinit-bot
2026-08-19 01:26:54 +00:00
parent d10bf5eb24
commit ea11991ec7
2 changed files with 153 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.ciagent/CHECKPOINT.json
+16 -6
View File
@@ -1,9 +1,19 @@
{
"milestone": "v0.6",
"milestone_complete": true,
"milestone_release_tag": "v0.5.6",
"milestone": "v0.7",
"milestone_complete": false,
"milestone_release_tag": null,
"release_id": 776,
"project": "oy",
"updated_at": "2026-08-18T15:05:00Z",
"next_milestone": null
}
"phase": 0,
"phase_role": "pre_execution",
"stage": "specify",
"attempts": 0,
"updated_at": "2026-08-19T00:00:00Z",
"next_milestone": null,
"previous_milestone": {
"milestone": "v0.6",
"milestone_complete": true,
"milestone_release_tag": "v0.5.6",
"release_id": 776
}
}
.ciagent/oy/oy-state
+137 -67
View File
@@ -1,7 +1,7 @@
# OpenYield State — state-v1
Generated: 2026-08-18
Milestone: v0.6 (Nomad Web UI) — COMPLETE
Tag: v0.5.6
# OpenYield State — state-v2
Generated: 2026-08-19
Milestone: v0.7 (Fraternal Groups Foundation) — IN PROGRESS (P0 SPECIFY)
Tag: v0.6.x patch line (P0 → v0.6.0)
Ingested as: oy-state
> This is the **only** document the ciagent sends to the product owner (PO)
@@ -16,11 +16,14 @@ Ingested as: oy-state
> memory.
## 1. Current position
- Last shipped: v0.6 (Nomad Web UI) — COMPLETE — tag v0.5.6
- Next queued: none — awaiting `oy-spec` §7 (Milestone intent)
- Last shipped: v0.6 (Nomad Web UI) — COMPLETE — tag v0.5.6 (release_id 776)
- Next queued: v0.7 — Fraternal Groups Foundation (REQ-046..REQ-066, 21 REQs)
- Release forge: Gitea (git.cloudinit.dev/oy/openyield), release_id 776
- Autonomy: full (decision_confidence_threshold 0.6, clarify_budget 10)
- Open `oy-spec` §8 questions answered by ciagent: 0 (none logged — v0.6 closed clean)
- Open `oy-spec` §8 questions answered by ciagent: 8 (D-074..D-081 — all PO recommendations accepted as binding; see §7)
- v0.7 tag line: v0.6.x (previous minor's patch line per branch-strategy). P0 → v0.6.0; P1..P5 → v0.6.1..v0.6.5; P6 final → v0.6.6 (= v0.7 milestone release). No separate minor tag (D-008).
- v0.7 milestone type: feature (REQ-046..REQ-066 are feat-class primitives + a small number of test/docs adjuncts)
- v0.7 scope ruling (D-081): §7 is authoritative — v0.7 ships REQ-046..REQ-066 only; Cluster A–E + Infrastructure Economics (REQ-067..REQ-097) all defer to v0.8.
### Milestone history (compact)
| Milestone | Type | Tag | Status |
@@ -31,9 +34,12 @@ Ingested as: oy-state
| v0.4 Refinement | NFR | v0.3.4 | COMPLETE |
| v0.5 Bearers Runtime | feat | v0.4.8 | COMPLETE |
| v0.6 Nomad Web UI | feat | v0.5.6 | COMPLETE |
| v0.7 Fraternal Groups Foundation | feat | v0.6.x (in progress) | IN PROGRESS — P0 SPECIFY |
## 2. Requirement coverage
<!-- Mirror of oy-spec §4. Status: Not started | Skeleton | Runtime | Complete | Deferred | Rejected -->
### Shipped baseline (REQ-001..REQ-045) — per state-v1, unchanged this regeneration
| REQ | Title | Status | Shipped in | Module(s) | Locked? |
|-----|-------|--------|-----------|----------|---------|
| REQ-001 | Enforce Six Principles | Skeleton | v0.1 | x/* | yes |
@@ -57,30 +63,43 @@ Ingested as: oy-state
| REQ-019 | Six bearers via Unified Bearer Layer | Runtime | v0.5 | x/bearers | yes |
| REQ-020 | Six Pacts | Skeleton | v0.2 | x/pact | no |
| REQ-021 | Mesh Bond Market with 8% cap | Runtime | v0.5 | x/bond | yes |
| REQ-022 | Bearers expansion: OY-SAT + OY-QR | Skeleton (types) + Runtime (handlers) | v0.3 + v0.5 | x/bearers | no |
| REQ-023 | Anchors — first institutional Partner tier | Skeleton (types) + Runtime (handlers) | v0.3 + v0.5 | x/partner | no |
| REQ-024 | Hub API — B2B backbone | Skeleton (types) + Runtime (handlers) | v0.3 + v0.5 | x/hub | no |
| REQ-025 | Services — Care/SIM/Vault/Mail | Skeleton (types) + Runtime (handlers) | v0.3 + v0.5 | x/services | no |
| REQ-026 | Bond market depth — Growth Bonds + secondary | Skeleton (types) + Runtime (handlers) | v0.3 + v0.5 | x/bond | no |
| REQ-027 | README.md + docs site | Complete | v0.3 | docs/, mkdocs.yml, README.md | no |
| REQ-028 | Extend lexicon firewall to docs/ + README.md | Complete | v0.3 | lexicon_meta_docs | yes |
| REQ-029 | Lexicon shared `SyntheticBannedStrings()` helper | Complete | v0.4 | lexicon | no |
| REQ-030 | Cross-package const-equality test (hub/bond) | Complete | v0.4 | x/hub/types/cross_const_test.go | no |
| REQ-031 | x/* lifecycle type shape-divergence review | Complete | v0.4 | x/council (docs+test) | no |
| REQ-032 | Docs build CI (Gitea Actions) | Complete | v0.4 | .gitea/workflows/docs-build.yml | no |
| REQ-033 | Exit layer runtime | Complete | v0.5 | x/exit/keeper | no |
| REQ-034 | Bearers transport runtime | Complete | v0.5 | x/bearers/keeper | no |
| REQ-035 | Anchors onboarding runtime | Complete | v0.5 | x/partner/keeper | no |
| REQ-036 | Hub API B2B runtime | Complete | v0.5 | x/hub/keeper | no |
| REQ-037 | Services runtime | Complete | v0.5 | x/services/keeper | no |
| REQ-038 | Bond market depth runtime (CLOB) | Complete | v0.5 | x/bond/keeper | no |
| REQ-039 | Council governance runtime (Proposal/VoteOption) | Complete | v0.5 | x/council/keeper | no |
| REQ-040 | Nomad Reach signup Web UI | Complete | v0.6 | web/handlers/reach.go | no |
| REQ-041 | Stash dashboard Web UI | Complete | v0.6 | web/handlers/stash.go | no |
| REQ-042 | Window authorization Web UI | Complete | v0.6 | web/handlers/window.go | no |
| REQ-043 | Standing + Freeholder signals Web UI | Complete | v0.6 | web/handlers/standing.go | no |
| REQ-044 | Bloom accrual Web UI | Complete | v0.6 | web/handlers/bloom.go | no |
| REQ-045 | Extend lexicon firewall to web/ | Complete | v0.6 | lexicon_meta_web | yes |
| REQ-022..REQ-045 | (shipped v0.3..v0.6 — see state-v1 §2 for full table) | Complete | v0.3..v0.6 | various | mixed |
### v0.7 — Fraternal Groups Foundation (REQ-046..REQ-066) — Not started
| REQ | Title | Vision § | Priority | Locked? | Status | Target phase |
|-----|-------|----------|---------|---------|--------|--------------|
| REQ-046 | Cover Pool Factory runtime | §16 | High | no | Not started | v0.7/P1 |
| REQ-047 | Cover Pool reserve target floor 1.5× annual contributions | §16 | High | yes | Not started | v0.7/P1 |
| REQ-048 | Cover Pool reserve target ceiling 2.5× (governance-tunable) | §16 | High | no | Not started | v0.7/P2 |
| REQ-049 | Cover Pool Standing gate minimums | §16, §9.3 | High | yes | Not started | v0.7/P1 |
| REQ-050 | Cover-Fee tagging at protocol layer | §16 | High | yes | Not started | v0.7/P1 |
| REQ-051 | Guild Charter + Common Bond requirement | §12 | Medium | yes | Not started | v0.7/P3 |
| REQ-052 | Cover-Charter (SoB, dispute path, gate, holding period) | §16 | High | yes | Not started | v0.7/P2 |
| REQ-053 | Chapter Federation (Parent/Chapter, secession terms, liens) | §12 | High | no | Not started | v0.7/P3 |
| REQ-054 | Mutual Aid Bond (issuance ceiling 1×–3×, coupons in Cover Calls) | §17 | High | yes | Not started | v0.7/P4 |
| REQ-055 | Cover Claims Voucher role + bond + slashing | §9.4, §15 | High | no | Not started | v0.7/P4 |
| REQ-056 | Anti-Capture Bill of Rights v0.2 | §8.2 [3] | High | yes | Not started | v0.7/P5 |
| REQ-057 | Household simplified — no formal Council, one-tap exit | §11 | Low | no | Not started | v0.7/P3 |
| REQ-058 | Confederation Voice — one-Stand-one-Vote, internal bundle | §11 | Medium | yes | Not started | v0.7/P3 |
| REQ-059 | Stand→Pier-customer boundary — escalation rule ($100k per D-074) | §11, §13 | Medium | no | Not started | v0.7/P5 |
| REQ-060 | Shadow vouch partial credit — 50% weight in Freeholder signal | §9.1 | Medium | yes | Not started | v0.7/P4 |
| REQ-061 | Disclaimer cadence — per charter signing | §11 | Low | yes | Not started | v0.7/P3 |
| REQ-062 | Pool governance hybrid (Host + 3 elected + Watcher observer) | §16 | High | yes | Not started | v0.7/P2 |
| REQ-063 | MAB holder — surplus seniority only, no Voice at dissolution | §17 | Medium | yes | Not started | v0.7/P4 |
| REQ-064 | Secession cooling — 21d Cover-active / 14d non-Cover | §4.6 [3] | Medium | yes | Not started | v0.7/P5 |
| REQ-065 | Cover Pool category staging — Phase 2/3/4 | §16 | High | yes | Not started | v0.7/P2 |
| REQ-066 | Pier selection — Guild Council chooses, reversible, Pier Selection Index | §13 | Medium | no | Not started | v0.7/P5 |
### v0.8+ — Risk Mitigations + Infrastructure Economics (REQ-067..REQ-097) — Deferred to v0.8
> All 31 REQs deferred to v0.8 per D-081 (§7 authoritative). Listed here for visibility; not started this milestone.
| REQ | Title | Status | Target milestone |
|-----|-------|--------|-----------------|
| REQ-067..REQ-072 | Cluster A — Trust-minimization attacks | Deferred | v0.8 |
| REQ-073..REQ-076 | Cluster B — Economic structural | Deferred | v0.8 |
| REQ-077..REQ-081 | Cluster C — Capture & centralization | Deferred | v0.8 |
| REQ-082..REQ-086 | Cluster D — Identity & reputation | Deferred | v0.8 |
| REQ-087..REQ-091 | Cluster E — Adoption & organic | Deferred | v0.8 |
| REQ-092..REQ-097 | Infrastructure Economics | Deferred | v0.8 |
## 3. Locked constants (const firewall)
<!-- Amending any row requires an explicit override line in oy-spec §9. -->
@@ -112,61 +131,112 @@ Ingested as: oy-state
| ServiceKindCount | 4 | x/services | D-040 |
| HubServiceCount | 3 | x/hub | D-039 |
### v0.7 planned const additions (pending GRILL ratification at P0)
| Const | Value | Module | REQ | Why locked |
|-------|-------|--------|-----|-----------|
| CoverReserveFloorAnnualContribX | 1.5 | x/cover (NEW) | REQ-047 (locked) | vision §16 — 1.5× annual contributions floor, mission-locked |
| CoverReserveCeilingAnnualContribX | 2.5 | x/cover (NEW) | REQ-048 (not locked — governance-tunable within 1.5×–2.5×) | vision §16 — upper bound of bounded range |
| CoverStandingGateTrusted | 4.0 (Trusted bucket) | x/cover (NEW) | REQ-049 (locked) | vision §16, §9.3 — Travel gate minimum (Pool MAY tighten, NEVER loosen) |
| CoverStandingGatePreferred | 4.5 (Preferred bucket) | x/cover (NEW) | REQ-049 (locked) | vision §16, §9.3 — Health-MCS gate minimum |
| MABIssuanceCeilingAnnualSurplusMultiple | 3 | x/bond (extended) | REQ-054 (locked) | vision §17 — 3× annual surplus mission-locked ceiling |
| MABCouponCapBps | 800 (reuse CouponCapBps) | x/bond | REQ-054 (locked) | coupon bounded by existing CouponCapBps (D-028) — no new const, cross-const test extends |
| CoolingSecessionCoverActiveDays | 21 | x/guild (extended) | REQ-064 (locked) | vision §4.6 — secession cooling, secured at founding, not reducible |
| CoolingSecessionNonCoverDays | 14 | x/guild (extended) | REQ-064 (locked) | vision §4.6 — secession cooling, secured at founding, not reducible |
| StandPierEscalationAnnualPassVolumeCents | 10000000 ($100k in Grain-cents) | x/stand (extended) | REQ-059 (not locked) | D-074 ruling — TBD-X = $100k annual Pass volume |
| CoverClaimsVoucherBondMultipleAvgCall | 10 | x/cover (NEW) | REQ-055 (not locked) | §9.4, §15 — bond default 10× avg Call size per Pool |
| AntiCaptureBillOfRightsCount | 13 | x/cover (NEW) | REQ-056 (locked) | §8.2 — 13 rights codified, non-amendable, non-waivable |
> Note: the v0.8 const firewall extensions named in oy-spec §7 v0.8 acceptance
> (`EyeQuorumMin=7`, `AnchorConcentrationCapBps=2000`,
> `MABCouponMaxAnnualSurplusMultiple=3`, `BondIssuerSurplusCeilings={1×,2×,3×}`,
> `CoolingSecessionCoverActive=21 days`, `CoolingSecessionNonCover=14 days`,
> `CoverReserveFloorAnnualContribX=1.5`) overlap with v0.7's REQ-047/049/054/
> 064 const additions. The v0.7 additions above land the v0.7-locked subset
> (REQ-047/049/054/064 locked=yes); the v0.8 acceptance list is the v0.8
> consolidated const firewall update that will add the remaining Cluster A–E
> consts (`EyeQuorumMin`, `AnchorConcentrationCapBps`, etc.). The cooling
> consts and CoverReserveFloor land in v0.7 because their REQs are v0.7;
> v0.8's acceptance row re-lists them as a consolidated checkpoint, not a
> re-introduction.
## 4. Deferred / out-of-scope (do NOT re-propose without §9 override)
| Item | Deferred from | Reason | Revisit at |
|------|--------------|--------|------------|
| Cover Pool seniority mechanics | v0.1 Q7 | unstated math | v0.7+ |
| SignalKind 4->5 enum expansion | v0.4 AUDIT §193 P1-2 | locked-const change; defensible at 4 | v0.7+ governance vote |
| Governance spam deposit/bond | v0.5 REVIEW P1 | mainnet-readiness | v0.7+ |
| CLOB per-tx front-running (batch auction) | v0.5 REVIEW P1 | mainnet-readiness | v0.7+ |
| Real IBC light-client simtest | v0.5 REVIEW P1 | mainnet-readiness | v0.7+ |
| CLOB `restingBookForBond` O(n) -> prefix-key | v0.5 REVIEW P2 | mainnet perf | v0.7+ |
| `emitMatchEventHook` testability | v0.5 REVIEW P2 | minor | v0.7+ |
| Live chain launch / mainnet / real IBC channels | v0.1 (D-020) | skeleton-first until mainnet gate | v0.7+ (Year 3 target) |
| Real `oyd` daemon / `app.go` / `cmd/oyd` | v0.6 OOS | no chain runtime exists | v0.7+ |
| Real institutional Anchors onboarding | v0.5 OOS | credential lifecycle in simtest only | v0.7+ |
| Real bearer transports (hardware/RF) | v0.5 OOS | message handlers + simtest only | v0.7+ (Year 3) |
| Authentication / sessions / real key mgmt | v0.6 OOS | mock; Reach created by form submission | v0.7+ |
| Persistence (in-memory mock store) | v0.6 OOS | resets on restart | v0.7+ |
| i18n / multi-language UI | v0.3/v0.6 OOS | single-language | v0.7+ |
| Cover Pool seniority mechanics | v0.1 Q7 | unstated math | **UNBLOCKED v0.7** — REQ-046..REQ-050 now supply the seniority/gate math; promoting to runtime this milestone |
| SignalKind 4->5 enum expansion | v0.4 AUDIT §193 P1-2 | locked-const change; defensible at 4 | v0.8+ governance vote (not v0.7 scope) |
| Governance spam deposit/bond | v0.5 REVIEW P1 | mainnet-readiness | v0.8+ (Cluster C, REQ-077 adjacent) |
| CLOB per-tx front-running (batch auction) | v0.5 REVIEW P1 | mainnet-readiness | v0.8+ |
| Real IBC light-client simtest | v0.5 REVIEW P1 | mainnet-readiness | v0.8+ (Cluster A, REQ-068 adjacent) |
| CLOB `restingBookForBond` O(n) -> prefix-key | v0.5 REVIEW P2 | mainnet perf | v0.8+ |
| `emitMatchEventHook` testability | v0.5 REVIEW P2 | minor | v0.8+ |
| Live chain launch / mainnet / real IBC channels | v0.1 (D-020) | skeleton-first until mainnet gate | v0.8+ (Year 3 target) |
| Real `oyd` daemon / `app.go` / `cmd/oyd` | v0.6 OOS | no chain runtime exists | v0.8+ (v0.7 Cover Pool "live on testnet" = simtest-grade keeper runtime, not mainnet) |
| Real institutional Anchors onboarding | v0.5 OOS | credential lifecycle in simtest only | v0.8+ |
| Real bearer transports (hardware/RF) | v0.5 OOS | message handlers + simtest only | v0.8+ (Year 3) |
| Authentication / sessions / real key mgmt | v0.6 OOS | mock; Reach created by form submission | v0.8+ |
| Persistence (in-memory mock store) | v0.6 OOS | resets on restart | v0.8+ |
| i18n / multi-language UI | v0.3/v0.6 OOS | single-language | v0.8+ |
| Yield Token, Travel + 11 service categories | ROADMAP Phase 4 | Maturity (Years 4-5) | Year 4+ |
| Maya's Day integration spec | v0.1 Q1 | Mesh Experience component | Phase 2 |
| Standing anti-gaming sub-tables | v0.1 Q2 | formula locked; sub-tables deferred | v0.7+ |
| Pier credential routing (e-Residency, biometrics) | v0.1 Q5 | deferred | v0.7+ |
| Standing anti-gaming sub-tables | v0.1 Q2 | formula locked; sub-tables deferred | v0.8+ |
| Pier credential routing (e-Residency, biometrics) | v0.1 Q5 | deferred | v0.8+ |
| Experimental bond forms | v0.1 Q6 | Phase 4+ only | Year 4+ |
| Processor share tier boundary exact volumes | v0.1 Q8 | deferred | v0.7+ |
| Processor share tier boundary exact volumes | v0.1 Q8 | deferred | v0.8+ |
| Docs bread-scale.md fix (outdated vs code consts) | v0.6 P1+ | doc-drift fix, not UI feature | next docs touch |
| **Sovereign Anchor SPEC** (`oy-sovereign-anchors`) | v0.7 §5 | infrastructure-scale, separate SPEC; experimental, not load-bearing | post-v0.7 (PO D-076) |
| **USZ classification runtime** | v0.7 §7 | depends on Anchor pre-commitment framework (v0.8 REQ-095) | v0.8 |
| **Cluster A–E + Infrastructure Economics (REQ-067..REQ-097)** | v0.7 §7 / D-081 | §7 authoritative — v0.7 ships REQ-046..066 only | v0.8 |
| **Pier-Routed Legal Wrapper** | v0.7 §5 | OPTIONAL per PO; default-no-wrapper; not implemented as code | never (optional value-add) |
| **Watcher/Voucher operating-expense compensation absolute cap ($TBD-W)** | v0.7 §8 Q6 | v0.8 REQ-096; annual 5% Bloom cap ruled (D-078), absolute cap deferred | v0.8 |
## 5. Drift flags (ciagent -> PO)
<!-- Differences between oy-spec (latest) and what the ciagent has shipped. -->
- Lexicon drift: **none**
- Locked-const drift: **none**
- REQ-shape drift: **none** (oy-state v1 is the baseline; oy-spec v1 backfilled to match)
- Architecture drift: **none** (14 components / 15 modules — x/lexicon is a tool package, not a 15th protocol component)
- Locked-const drift: **none** (v0.7 const additions are net-new, not amendments)
- REQ-shape drift: **none** (oy-spec v3 net-new-only diff ingested; REQ-046..REQ-097 added to coverage §2; baseline REQ-001..REQ-045 unchanged)
- Architecture drift: **planned** — v0.7 introduces a NEW module `x/cover` (Cover Pool Factory + Anti-Crowding-Out firewall + Anti-Capture Bill of Rights). The existing `x/pact` `PactCover` enum value remains as a cross-reference (G-003 by-ID-string). This mirrors the D-039 precedent (`x/hub` split out of `x/pact`'s `PactHubAPI` in v0.3). Will be ratified at GRILL (P0).
- Spec-version drift: **none** — oy-spec v3 ingested at commit d10bf5e; this state-v2 reflects it.
## 6. Constraints honored (firewall status)
- **G-003** production import firewall: GREEN (by-ID-string rule at type level; expected_keepers.go shims for keeper cross-calls)
- **G-006** go.mod zero-dep: CONTROLLED EXCEPTION — cosmos-sdk v0.50.8 + ibc-go v8.2.1 added in v0.5 (D-055 GRILL-approved, scoped to runtime phases; types/ packages stay dep-free)
- **G-028** go.mod diff baseline (v0.6 vs v0.5.0): EMPTY — v0.6 added zero Go deps (HTMX is a vendored static asset)
- **REQ-012** lexicon firewall: GREEN — 3 meta-tests (x/, docs/, web/) all passing
- **Mission Lock** non-amendable: GREEN — `MissionLockAmendable=false` unchanged; MissionLockAmendment-Rejected ProposalKind rejected at ValidateBasic (D-064)
- **Coverage** >=80% on shipped packages: GREEN (v0.5 keepers 82.1%-92.5%; v0.6 web/store 98.1%, web/handlers 89.2%, lexicon_meta_web 100%)
- **Feature purity gate** (v0.6): GREEN — no breaking schema changes; locked-const firewall intact; G-003 intact; go.mod unchanged
- **G-003** production import firewall: GREEN (by-ID-string rule at type level; expected_keepers.go shims for keeper cross-calls). v0.7 `x/cover` will follow the same pattern — no production struct imports across `x/<module>/types`.
- **G-006** go.mod zero-dep: CONTROLLED EXCEPTION — cosmos-sdk v0.50.8 + ibc-go v8.2.1 added in v0.5 (D-055 GRILL-approved, scoped to runtime phases; types/ packages stay dep-free). v0.7 `x/cover` keeper will use the same SDK runtime substrate; no new Go deps expected.
- **G-028** go.mod diff baseline (v0.6 vs v0.5.0): EMPTY. v0.7 target: EMPTY (no new Go deps; `x/cover` keeper uses existing SDK).
- **REQ-012** lexicon firewall: GREEN — 3 meta-tests (x/, docs/, web/) all passing. v0.7 will extend to a 4th meta-test if Cover surfaces add user-facing strings (pending RESEARCH); otherwise the existing 3 suffice.
- **Mission Lock** non-amendable: GREEN — `MissionLockAmendable=false` unchanged; `MissionLockAmendmentRejected` ProposalKind rejected at ValidateBasic (D-064). v0.7 Anti-Capture Bill (REQ-056) extends this: 13 rights non-amendable + non-waivable by any Charter.
- **Coverage** >=80% on shipped packages: GREEN (v0.5 keepers 82.1%-92.5%; v0.6 web/store 98.1%, web/handlers 89.2%, lexicon_meta_web 100%). v0.7 target: `x/cover` + extensions >=80%.
- **Feature purity gate** (v0.7): GREEN target — no breaking schema changes to locked-const firewall; G-003 intact; go.mod unchanged.
- **No subsidies** (v0.7 §5 NEW): GREEN by construction — v0.7 does not introduce any Root-Pool operating-expense subsidy or transfer-payment analog. The Anti-Crowding-Out firewall (D-079, REQ-047/050) rejects any code path routing Cover-Fees outside contributor-pool semantics. Infrastructure financing is out of v0.7 scope (v0.8 REQ-092..095).
- **Anchor no-Voice** (v0.7 §5 NEW): GREEN by construction — v0.7 does not grant Voice to any Anchor. The Cover Pool Council (REQ-062) = Pool Host + 3 elected Masons + Watcher observer; no Anchor seat. MAB holders (REQ-063) have NO Voice. Sovereign Anchors are out of v0.7 scope (experimental per §5).
## 7. Open PO decisions before next milestone
<!-- The PO should rule on these in oy-spec §8 or §7 before v0.7 P0. -->
1. **v0.7 scope selection** — the 5 P1+ mainnet-readiness items deferred from v0.5 (governance spam deposit, CLOB batch auction, real IBC simtest, CLOB prefix-key perf, emitMatchEventHook testability) are the natural v0.7 candidates. PO should pick a subset in `oy-spec` §7.
2. **SignalKind 4->5 expansion** — defensible at 4 per AUDIT §193 P1-2; needs a PO ruling (keep at 4, or open a v0.7+ governance-vote REQ to expand).
3. **`oyd` daemon** — no `app.go`/`cmd/oyd` exists. Wiring the v0.6 UI to a real daemon is v0.7+; PO should decide whether v0.7 starts the daemon or continues simtest-only runtime.
4. **Cover Pool seniority math** — vision §16 names it but the formula is unstated. PO must supply the seniority/over-pledging math before the ciagent can promote x/pact Cover from skeleton to runtime.
5. **Real bearer transport integration** — v0.5 ships handler skeletons only; PO must decide which bearer (OY-LR/OY-BLE/OY-WiFi-Direct/OY-SAT/OY-QR) gets hardware integration first in v0.7+.
### Resolved this regeneration (D-074..D-081 — PO recommendations accepted as binding at full autonomy)
| ID | §8 Q | Decision | Rationale | Confidence | Affects |
|----|------|----------|-----------|------------|--------|
| D-074 | Q1 (TBD-X) | **$100k annual Pass volume** for Stand→Pier-customer escalation | PO rec accepted; soft upgrade not ban | 0.85 | REQ-059 (v0.7/P5) |
| D-075 | Q2 (TBD-Z) | **<10 Holders/km² AND strategic value ≥ mission score, OR sovereign request, OR Mesh Council supermajority** | PO rec accepted; formula locked for v0.8 USZ | 0.80 | REQ-095 (v0.8) |
| D-076 | Q3 (Sovereign Anchor SPEC) | **Separate SPEC `oy-sovereign-anchors`**; experimental, not load-bearing v0.7 | PO rec accepted; infrastructure-scale ≠ legal-wrapper-scale | 0.85 | §5 constraint (v0.7) |
| D-077 | Q5 (Standing gate timing) | **Factory runtime** — gates are protocol-layer | PO rec accepted; gates bind at x/cover Factory, not first live Pool | 0.88 | REQ-049 (v0.7/P1) |
| D-078 | Q6 (Watcher/Voucher cap) | **Annual cap = 5% of Root-Pool Bloom**; absolute $TBD-W deferred to v0.8 | PO rec accepted; 5% Bloom ruled now, absolute cap later | 0.82 | REQ-096 (v0.8) |
| D-079 | Q7 (Anti-Crowding-Out firewall) | **Separate `x/cover/firewall` package + `lexicon_meta_cover`-style meta-test** (defense in depth) | PO rec "separate firewall" accepted; runtime subpackage rejects code paths + meta-test rejects doc drift | 0.84 | REQ-047/050 (v0.7/P1) |
| D-080 | Q8 (MAB use-of-proceeds) | **Tagged streaming + Watcher-witnessed release** (defense in depth) | PO rec accepted; tagged streaming auto-Stills on misuse, Watcher witnesses release | 0.85 | REQ-054 (v0.7/P4) |
| D-081 | Q4 (Risk mitigation sequencing) | **§7 authoritative** — v0.7 ships REQ-046..066 only; Cluster A+B+C are v0.8 | PO rec overridden by §7 acceptance text; §7 is the milestone contract | 0.90 | v0.7 scope (all REQ-046..066) |
### Remaining open (post-v0.7 — for v0.8 P0)
1. **$TBD-W absolute Watcher/Voucher cap** — deferred to v0.8 REQ-096 (D-078 partial ruling).
2. **Sovereign Anchor SPEC scope** — `oy-sovereign-anchors` to be authored by PO before v0.8 P0 (D-076).
3. **v0.8 Cluster A–E sequencing within v0.8** — which of REQ-067..REQ-097 ship in v0.8 P1..PN? PO should pick a subset or rule "all 31 in v0.8".
4. **Pen-test third party** — v0.7 §7 acceptance requires "pen-test ≥1 independent third party"; at full autonomy with no external third party available, the ciagent will run a self-administered adversarial review (ci-griller persona) and log this as an assumption unless the PO rules otherwise before P6.
5. **`oyd` daemon** — still no `app.go`/`cmd/oyd`; v0.7 Cover Pool "live on testnet" = simtest-grade keeper runtime. PO should decide whether v0.8 starts the daemon or continues simtest-only.
6. **SignalKind 4->5 expansion** — still deferred to v0.8+ governance vote (not v0.7 scope).
## 8. Build/test status
- `go build ./...`: GREEN
- `go test ./...`: GREEN (no FAIL; 34 packages green as of v0.5; v0.6 added web/ + lexicon_meta_web green)
- `go build ./...`: GREEN (baseline confirmed 2026-08-19 on main @ d10bf5e)
- `go test ./...`: GREEN (all packages; v0.5 keepers + v0.6 web + lexicon meta-tests all passing)
- Coverage: all shipped keeper packages >=80%; web packages >=89%
- Lexicon meta-tests: 3/3 GREEN
- Last green commit: aa66e58 (checkpoint(milestone): v0.6 complete)
- Lexicon meta-tests: 3/3 GREEN (x/, docs/, web/)
- Last green commit: d10bf5e (docs(spec): v3 net-new-only)
---