augmented-cognition-engine · eamirian · Aug 11, 2026 · Aug 11, 2026 · Aug 11, 2026 · Aug 11, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -23,6 +23,10 @@ env:
   ROOT_WHEEL: "ace_domain_world_intelligence-0.9.0-py3-none-any.whl"
   ROOT_SDIST: "ace_domain_world_intelligence-0.9.0.tar.gz"
   ACE_CORE_VERSION: "0.5.0"
+  # P2E consumes the monitoring API merged after the public 0.5.0 artifact.
+  # Keep source acceptance on the exact reviewed commit until a versioned Core
+  # release carries the same tree; the isolated wheel gate below stays public.
+  ACE_CORE_CANDIDATE_SHA: "f0d2191ba7cf2d33ccfc3c821422786929be8349"
   RELEASE_CONTRACT_TEST: "tests/test_release_contract.py"
   ADAPTER_TEST_SUITE: "adapters/federal_register_source/tests"
   # Keep the repository's proof scripts and separately packaged connector ahead
@@ -53,6 +57,18 @@ jobs:
         # checks. The wheel is installed separately below in a clean venv.
         run: uv sync --frozen --no-install-project
 
+      - name: Install the exact merged Core monitoring candidate
+        run: |
+          set -euo pipefail
+          uv pip install --python .venv/bin/python --reinstall \
+            "ace-core @ git+https://github.com/augmented-cognition-engine/core.git@${ACE_CORE_CANDIDATE_SHA}"
+          uv run --no-sync python - <<'PY'
+          from ace.application import MonitoringLifecycleService, SensingWindowService
+
+          assert MonitoringLifecycleService is not None
+          assert SensingWindowService is not None
+          PY
+
       - name: Confirm the synced interpreter is Python 3.12
         run: |
           set -euo pipefail
@@ -190,6 +206,10 @@ jobs:
                   planetary + "modules/synthesis.json",
                   planetary + "conformance/p2d_live_conflict_correction_input.json",
                   planetary + "conformance/p2d_live_expected.json",
+                  planetary + "conformance/p2e_contract_requests.json",
+                  planetary + "conformance/p2e_negative_cases.json",
+                  planetary + "conformance/p2e_user_owned_live_orientation_expected.json",
+                  planetary + "conformance/p2e_user_owned_live_orientation_input.json",
                   federal + "manifest.json",
                   federal + "modules/ontology.json",
                   federal + "modules/source_mapping.json",

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,19 @@ noted here only where the boundary between them changes.
 
 ### Added
 
+- **P2E user-owned LIVE-orientation consumer packet.** Public ACE 0.5.0 Monitor,
+  PersonaBinding, and record-only Subscription contracts now bind the accepted planetary-defense
+  pack, exact activation, one fixture principal, and the pack persona with pinned identities.
+- **Repeated-window ownership and suppression runtime.** Six explicit owner-requested windows append
+  and exactly replay initial orientation, exact no-change suppression, two always-visible
+  corrections, zero acquisition while paused, resume, and zero acquisition after Subscription
+  revocation. Eleven negative mutations fail closed.
+- **Closed narrow platform requests.** Merged Core #94 closes `WI-CR-007` with owner-authorized
+  append-only lifecycle and closes `WI-CR-008` with bounded sensing-window route-or-suppression
+  receipts. World consumes the generic public seams and adds no private implementation.
+- **Composed captured LIVE lineage.** The four NASA/ESA Observations remain linked through three
+  Shifts, three Signals, two Cases, and the original 2-citation and 4-citation Reality Briefs.
+
 - **P2D LIVE conflict and correction.** Four exact NASA/ESA planetary-defense publications become
   LIVE Observations, one dated cross-source divergence and two same-source downward-revision Shifts,
   three routed Signals, immutable historical and corrected Cases, and cited Reality Briefs with
@@ -25,6 +38,9 @@ noted here only where the boundary between them changes.
 
 ### Boundaries
 
+- P2E appends five lifecycle transitions and six sensing receipts without a network request,
+  scheduler, autonomous loop, delivery, publication, or external action. Its P2D prerequisite
+  remains 44 LIVE records; the composed ledger is 62 LIVE records and zero PREPARED records.
 - The new six-module pack is inert JSON only. The P2D proof contains 44 LIVE records and zero
   PREPARED records, performs no network request, and creates no action, delivery, publication,
   persuasion, monitor, or schedule.

diff --git a/README.md b/README.md
@@ -215,6 +215,19 @@ The accepted P2D identities are `pack_ir:bb400cc0652622b43c01504e651110e0`, hist
 contains 44 LIVE records and zero PREPARED records. Separate official publication roots do not prove
 independent measurements: both agencies describe a shared international observation ecosystem.
 
+P2E materializes the next user-owned LIVE-orientation boundary without claiming a scheduler or
+autonomous sensing runtime. Public ACE 0.5.0 contracts construct one exact Monitor
+(`monitor:bbb0e5ab246c6d1f08f7669226db6873`), principal/persona binding
+(`persona_binding:1349e5c7f78270dd5c8e267b582a1399`), and record-only Subscription
+(`subscription:3bb149effa91c5fdd224780ae0a455ee`) over the accepted planetary-defense activation. Six
+explicitly requested windows append and exactly replay initial orientation, no-change suppression,
+both visible corrections, owner pause/resume, and terminal revocation through the generic services
+merged in Core #94. `WI-CR-007` and `WI-CR-008` are closed for merged-source acceptance. The
+composed path preserves four captured NASA/ESA Observations through three Shifts, three Signals, two
+Cases, and the original cited Reality Briefs: 62 LIVE records and zero PREPARED records. World adds
+no private substitute, network request, delivery, schedule, or action. Public-index reproduction of
+the new Core contracts remains pending a versioned Core release.
+
 P2C2 completes that sensing path across the Core + Intelligence + Domain boundaries. A new
 declarative monitor pack admits two exact FCC records — document `2026-15932` published August 6
 and document `2026-16197` published August 7 — as successive LIVE snapshots of one stable monitor
@@ -337,9 +350,14 @@ suite and `26 passed` for the connector. With the AI command-center candidate in
 baseline, the same environment passes `87` domain and `62` connector tests. The
 public demo reproduces `case:412426eee708d56f6bda931ccf9e5d8b` and
 `brief:25d8232c9bfa27050bdcb160fb75f06c`, and its two artifacts are byte-identical across runs.
-With P2D integrated, the source-tree candidate passes `90` domain tests, `80` connector tests, and
-all `7` release-contract tests. Its locally built wheel contains exactly 55 JSON resources, nine
-from the planetary-defense pack, and no executable code.
+The merged P2D baseline passed `90` domain tests, `80` connector tests, and all `7`
+release-contract tests. Its wheel contained exactly 55 JSON resources, nine from the
+planetary-defense pack, and no executable code. The verified P2E runtime candidate passes `102` domain,
+`80` connector, and all `7` release-contract tests. Its wheel contains exactly 59 JSON resources,
+13 from the planetary-defense pack, including exactly four P2E conformance resources and no
+executable payload. A checkout-free install of the Core #94 candidate wheel reproduces the pinned
+Monitor, PersonaBinding, Subscription, five lifecycle transitions, six sensing receipts, and full
+captured LIVE lineage from `site-packages` without importing the Core checkout.
 
 The exact identities, negative cases, and artifact proofs are recorded in
 [`docs/audits/world-intelligence-p2a-2026-08-06.md`](docs/audits/world-intelligence-p2a-2026-08-06.md)
@@ -363,6 +381,8 @@ The two-lineage LIVE Shift → Signal → Case → cited Brief proof is recorded
 [`docs/audits/world-intelligence-ai-command-center-live-2026-08-10.md`](docs/audits/world-intelligence-ai-command-center-live-2026-08-10.md).
 The LIVE conflict, correction, supersession, and per-claim status proof is recorded in
 [`docs/audits/world-intelligence-p2d-live-conflict-correction-2026-08-11.md`](docs/audits/world-intelligence-p2d-live-conflict-correction-2026-08-11.md).
+The user-owned static intent and repeated-window contract boundary is recorded in
+[`docs/audits/world-intelligence-p2e-user-owned-live-orientation-2026-08-11.md`](docs/audits/world-intelligence-p2e-user-owned-live-orientation-2026-08-11.md).
 
 Release-level scope and evidence are recorded in
 [`docs/releases/world-intelligence-p2c2-v0.9.0.md`](docs/releases/world-intelligence-p2c2-v0.9.0.md),

diff --git a/ROADMAP.md b/ROADMAP.md
@@ -29,8 +29,18 @@ See the [0.9.0 release record](docs/releases/world-intelligence-p2c2-v0.9.0.md).
 
 See the [P2D audit](docs/audits/world-intelligence-p2d-live-conflict-correction-2026-08-11.md).
 
-## Next — user-owned live orientation
-
+## Candidate — user-owned live orientation
+
+- The P2E consumer packet constructs exact public Monitor, PersonaBinding, and record-only
+  Subscription contracts over the accepted P2D activation and consumes the generic owner lifecycle
+  and sensing-window services merged in Core #94.
+- Six explicit owner-requested windows now append and exactly replay no-change suppression,
+  always-visible corrections, pause/resume, terminal revocation, and zero-acquisition guards. This
+  grants no scheduler or autonomous sensing authority.
+- `WI-CR-007` (owner-authorized lifecycle) and `WI-CR-008` (bounded sensing-window disposition) are
+  closed for merged-source acceptance. Public-index Core reproduction remains open.
+- The composed evidence preserves four captured official-source Observations through three Shifts,
+  three Signals, two Cases, and the original cited Reality Briefs: 62 LIVE records, zero PREPARED.
 - Add a separately reviewed, opt-in production transport without bundling it into the Domain Pack.
 - Turn one-shot governed sensing into explicit user-owned monitors and subscriptions.
 - Preserve source independence, correction visibility, attention ownership, suppression, and

diff --git a/docs/audits/world-intelligence-p2e-user-owned-live-orientation-2026-08-11.md b/docs/audits/world-intelligence-p2e-user-owned-live-orientation-2026-08-11.md
@@ -0,0 +1,118 @@
+# World Intelligence P2E user-owned LIVE orientation audit — 2026-08-11
+
+## Result
+
+P2E materializes the next consumer boundary over the accepted P2D NASA/ESA packet. Public
+`ace-core==0.5.0` supplies the exact inert Monitor, PersonaBinding, and Subscription contracts. Core
+PR [#94](https://github.com/augmented-cognition-engine/core/pull/94), merged as
+`f0d2191ba7cf2d33ccfc3c821422786929be8349`, adds the domain-neutral owner lifecycle and bounded
+sensing-window services. World consumes those public seams without adding a domain-private runtime.
+
+`WI-CR-007` and `WI-CR-008` are closed for merged-source consumer acceptance. Five owner lifecycle
+transitions and six sensing-window dispositions append immutably and replay through newly
+constructed services. There is still no scheduler, autonomous source loop, delivery, publication,
+or external action. Public-index Core reproduction remains pending a versioned Core release.
+
+## Exact static intent
+
+| Resource | Accepted identity |
+|---|---|
+| Planetary-defense pack | `pack_ir:bb400cc0652622b43c01504e651110e0` |
+| Activation revision | `activation_revision:385d00a35e8bf7a39ec07c630ac36eec` |
+| Monitor | `monitor:bbb0e5ab246c6d1f08f7669226db6873` |
+| Principal/persona binding | `persona_binding:1349e5c7f78270dd5c8e267b582a1399` |
+| Record-only Subscription | `subscription:3bb149effa91c5fdd224780ae0a455ee` |
+| P2E packet | `sha256:e35f892af752db6dc4e6bf0cd6f6c5e9f7f4b74749f952ccb7effee701ad9d9e` |
+
+The binding names one fixture principal and the `planetary_defense_researcher` pack persona. The
+Subscription selects both accepted planetary-defense Signal types and the existing Reality Brief
+template. Its delivery disposition is `record_only`; no delivery adapter or effect is present.
+
+## Six frozen sensing windows
+
+| Window | State | Material | Disposition | Acquisition requests |
+|---|---|---|---|---:|
+| `w1` | active | earlier NASA/ESA divergence | routed | 2 |
+| `w2` | active | exact replay, no new material | `no_material_change` | 2 |
+| `w3` | active | NASA same-lineage correction | routed and visible | 1 |
+| `w4` | owner paused | none | `owner_paused` | 0 |
+| `w5` | resumed | ESA same-lineage correction | routed and visible | 1 |
+| `w6` | subscription revoked | none | `subscription_revoked` | 0 |
+
+These windows are now executed as explicit requests over immutable completed evaluations. Every
+request and interval is bounded and replayed exactly. The cadence preference still grants no
+scheduler or autonomous execution.
+
+## Captured LIVE lineage
+
+The same recorded, network-free official-source adapters capture four dated publications under two
+claimant roots. The resulting LIVE path is preserved exactly:
+
+```text
+4 source-linked Observations
+→ 3 Shifts
+→ 3 Signals
+→ historical + corrected Cases
+→ cited Reality Briefs (2 and 4 citations)
+```
+
+The Briefs remain `brief:c3549af0262b100ca65024ee19cbae6e` and
+`brief:806d69d8e41f83f93ee3dc10f58f0d16`; P2E does not rewrite the P2D record graph.
+
+## Fail-closed evidence
+
+Eleven mutations fail with pinned first violations:
+
+- missing owner and changed owner;
+- PREPARED/LIVE mixing;
+- acquisition while paused and after revocation;
+- correction hidden as no material change;
+- publication roots misrepresented as independent measurements;
+- hidden delivery and autonomous scheduling;
+- historical Brief rewriting; and
+- divergent replay identity.
+
+## Boundary
+
+- The accepted P2D prerequisite remains 44 LIVE records and zero PREPARED records.
+- P2E adds 18 LIVE monitoring records—five lifecycle transitions with their append-only anchor and
+  revision material plus six sensing receipts—for 62 composed LIVE records and zero PREPARED
+  records.
+- NASA and ESA remain independent claimant publication roots only.
+- Corrections are always material and visible; same-lineage revisions add no corroboration family.
+- The Domain Pack remains JSON-only and requests only source-read authority.
+- The packet performs no network access, scheduling, delivery, publication, persuasion, Decision,
+  Outcome, or external action.
+
+## Verification
+
+| Check | Result |
+|---|---:|
+| P2E acceptance projection | zero violations; exact packet replay |
+| P2E negative vectors | 11/11 fail closed with pinned first violations |
+| Focused P2E + pack-pin suite | `14 passed` |
+| Complete World domain suite | `102 passed` |
+| Complete connector suite | `80 passed` |
+| Release-contract suite | `7 passed` |
+| Changed-file Ruff lint and format | passed |
+| Candidate wheel JSON payload | exactly 59 resources |
+| Planetary-defense wheel payload | exactly 13 resources, including four P2E conformance files |
+| Executable wheel payload | none |
+| Checkout-free merged-tree probe | World candidate + local Core wheel from the exact Core #94 tree; all lifecycle/window and LIVE lineage identities reproduced from `site-packages` |
+
+Build artifacts from this working-tree verification:
+
+- Core candidate wheel SHA-256:
+  `82a0b365b83a79672685f6c2e71370a7f7218cf56e8c872064961e6e38985d7a`;
+- World wheel SHA-256:
+  `d256293ee16d9a641fa02b52a36322b85eb5c48960667649335ce313c5be2100`;
+- World source-distribution SHA-256:
+  `1005516d8d09e6b10720049b5da1e46d5ac6973483385ab38223d2912050e2e6`.
+
+The World wheel reproduced byte-for-byte in two builds under the frozen source epoch. It contains
+59 JSON resources, 13 under the planetary-defense pack, and zero Python payloads. The Core wheel's
+source tree `9690d1e75f07b75d1e0bc1aab73b4d9ee145f2e1` is byte-identical to merged commit
+`f0d2191ba7cf2d33ccfc3c821422786929be8349`. A checkout-free import loaded both Core and World from
+`site-packages` and exposed both monitoring services.
+
+These are local candidate hashes, not published release identities.