n
The transmutable interface-engine library — a design corpus with an honest ledger, on its way to a demonstrable kernel.
cleave is a transmutable integration surface — one interface you dial
across a spectrum with no hard cap at either end: raw FFI-ABI
(direct/fast) at one end, a sandboxed SNIF point (native → WASM →
wasmtime, crash-isolated) in the middle, a unified-protocol point (feels like
an internal API call) at the far end. The dial is a zipper walking a
well-founded staircase of connection steps: how far down you walk is how
hard you groove. Two type-visible assumptions carry it — WF
(well-foundedness: the staircase has a bottom perp; descents terminate) and
OF (ordinal fidelity: each step’s loss is graded and known). connect
mints down the order; disconnect linearly consumes up the dual; graceful
teardown reaches perp = zero residue. Ownership edges are ranked
(rank(child) < rank(parent)), making ownership cycles unrepresentable
(invariants RC-1..RC-13). The claimed novelty on top:
integration-degree = security posture — gating, permissions and
preemptability as a function of dial position (TS-1..TS-7, DRAFT).
Demonstrated at one kernel point (2026-07-09); the full surface remains
feasible, not demonstrated. The kernel of docs/KERNEL.adoc is implemented
(src/, ~600 lines of dep-free Rust) with KERN-1..7 green: ranked
owns-arena (RC-1 live), linear Handle (move-consumed + debug drop-bomb),
soft/hard leases (RC-6), postorder teardown to ⊥ = zero residue asserted
(RC-13 degenerate), and posture as a function of the dial (TS promotion,
KERN-7). Idris2 proof mirrors (cleave-proofs.ipkg) typecheck in CI —
rebuilt fresh, never lifted from the phantom (G-6). docs/PROOF-NEEDS.adoc
remains the authoritative truth-ledger: G-1/G-2/G-3 are closed for the
kernel path only; O-1..O-8 residuals and the multi-process/wire
obligations stay open. No claim extends past the kernel point.
The RSR-template scaffolding (the generic FFI src/ skeleton, per-directory
AI manifests, and the 24-workflow governance CI) has been removed; the repo
now sits at the minimal layout in groove-protocol/docs/REPO-LAYOUT.adoc
(ADR 0008), with a single structure-check workflow. The kernel
implementation restarts src/ per docs/KERNEL.adoc. Some generic estate
docs still live under docs/ (governance/, onboarding/, legal/, …) and can
be curated separately — they were kept rather than deleted because they carry
real content.
|
RC-1..RC-13 + TS-1..TS-7 normative invariants + falsifier tables (v0.3-draft; TS promoted 2026-07-09) |
|
The dial/zipper/staircase model; soft vs hard groove as descent depth; self-dual teardown |
|
TS rationale + open questions (normative text now lives in RANKED-OWNERSHIP v0.3) |
|
The orientation doc: maths / art / science / engineering of cleave-groove-spline, and the triage |
|
The honest ledger. Do not edit casually; it is the best artifact in this repo |
|
The kernel contract — implemented in |
The Groove protocol lives at
groove-protocol and is
normatively independent of cleave (its ADR 0007). The cleave-layered
formulation of groove (soft/hard as dial positions, lease semantics from
RC-6) is preserved there as spec/LAYERING.adoc, an explicitly aspirational
annex. Nothing in groove-protocol blocks on this repo; this repo’s bar for
mattering is docs/KERNEL.adoc.
Differentiated out of the gossamer/groove tangle on 2026-06-16; the spec was
rehomed from ~/developer/dev-notes/. The relocated gossamer proof modules
are a phantom surface (G-6) — they were deliberately not lifted here; the
kernel’s assertions get proofs rebuilt fresh once idris2 is available in CI.