{
  "schema": "intrikata.instance-onboard-short-circuit/v1",
  "cycle": "inv-mmgp-20260718-intrikata-session-mgs-onboard-retention",
  "generated_at": "2026-07-18T23:50:00Z",
  "surface": "intrikata.com",
  "purpose": "Collapse full-spectrum praxis domains into a cascade short-circuit for user/instance onboarding, persistence, and retention — without re-running meta-audit each visit.",
  "swarm_invocation": {
    "id": "inv-mmgp-20260718-intrikata-session-mgs-onboard-retention",
    "name": "SwarmInvocation::inv-mmgp-20260718-intrikata-session-mgs-onboard-retention::source=metamegapraxis::class=onboarding-retention-short-circuit::surface=intrikata.com::verdict=converged-modulo-harness::rule=cascade::backend=cf-d1+browser-js+local-bridge+d1-git::mcp=optional",
    "verdict": "converged-modulo-harness",
    "rule": "cascade",
    "coordinator": "metamegapraxis+human+session-evidence",
    "members": [],
    "evidence": [
      "Session shipped browser-iframe runtime + download + per-instance D1 dumb/smart-HTTP git (c02bcb1, cb40e5c)",
      "SIMG resolve ladder + Tarski-honest generative escalate + auto app provision (18ada95…d3a88e8)",
      "OP_CONTEXT delegate when CF→localhost proxy + ClaudeCode/GrokBuild operational (6e0df03)",
      "OP_CONTEXT packs ASEC + M/G/S/MGS Fusion hits + SNAP bridges (49ca0d8)",
      "Auto-dispatch Contribution on seed non-converge via execute-async+poll (3ebef11)",
      "Intent-aware app scaffolds form|game|page (080a7a5)",
      "MFA multi-contact + recovery key + mTLS 4th factor + transport negotiate/degrade (b7fa138…6e878af)",
      "Bridge session_id must match console (trap #25); session shortcircuit inv-mmgp-20260719-…",
      "praxis-stack consumer path: git clone + install.py + MANIFEST 0 mismatches"
    ]
  },
  "short_circuit": {
    "eligible": true,
    "bridge_class": "onboarding-retention-short-circuit",
    "analogue": "bridge::fixed-point-short-circuit + cascade first-hit-stops",
    "rule": "cascade",
    "predicate": "first satisfied domain stops re-discovery of that domain; full meta-swarm only on explicit audit/ops run",
    "cost_target": "one console visit + optional skill install + optional bootstrap",
    "full_cost_when": [
      "user types metamegapraxis / audit / swarm",
      "ops run (model tokens)",
      "install or bootstrap failed and task depends on it"
    ]
  },
  "mgs": {
    "meta": {
      "role": "what this product is",
      "short": "Isolated praxis instance console: skills live on praxis-stack; graphs/apps live per-handle on Intrikata",
      "stop_rediscovering": "do not re-derive megapraxis/metamegapraxis architecture — use certificates below"
    },
    "genesis": {
      "role": "create identity + substrate",
      "ladder": [
        { "step": 0, "domain": "skills", "action": "install praxis once per harness", "cmd": "codex|grok|claude install via praxis-stack", "cert": "/data/codex-onboard.json|/data/grok-onboard.json" },
        { "step": 1, "domain": "identity", "action": "derive instance", "cmd": "instance new <handle>", "persist": "localStorage intrikata.instances" },
        { "step": 2, "domain": "graph", "action": "seed graphs", "cmd": "bootstrap (CF D1) OR auto browser-js on instance new", "cert": "/data/operant-bootstrap.json" },
        { "step": 3, "domain": "rich_local", "action": "full GraphDoc + auto op Contribution on seed fail", "cmd": "bridge (session match) then free-text; ops auto-dispatch if not converged", "cert": "/deploy-pharosiraptor.md" },
        { "step": 4, "domain": "app", "action": "generative free-text → live artifact (intent-aware scaffold)", "cmd": "create a sign up form | create a game | app provision", "surfaces": ["iframe", "download", "git clone"], "kinds": ["form", "game", "page"] },
        { "step": 5, "domain": "mfa", "action": "claim handle with factors 1–4", "cmd": "link <email> → link +phone → (auto recovery key) → link-mtls", "surfaces": ["OTP", "recovery file", "mtls pem"] }
      ]
    },
    "shadow": {
      "role": "named failures / residuals",
      "residuals": [
        { "class": "undecidable", "name": "product-done-from-seed-hit", "note": "SIMG lookup-converged ≠ shipped product" },
        { "class": "semi-decidable", "name": "local-vs-cf-score", "note": "local GraphDoc wins rich queries; CF seed can lead on seed-tuned phrases" },
        { "class": "semi-decidable", "name": "transport-mtls-on-quick-tunnel", "note": "trycloudflare cannot Access-mTLS; degrade to app-layer device cert" },
        { "class": "residual-ops", "name": "CodexCode_v1", "note": "cli/session may be residual while ClaudeCode+GrokBuild operational" },
        { "class": "oracle-required", "name": "full-graphdoc-parity-on-workers", "note": "full server.py port not free-tier complete" },
        { "class": "infra", "name": "quick-tunnel-ttl", "note": "trycloudflare + lb KV 2h — re-run bridge to refresh" },
        { "class": "infra", "name": "lost-contact-no-recovery-materials", "note": "no email/sms/recovery-key/mtls left → cannot reclaim" }
      ]
    },
    "mgs_ops": {
      "role": "runtime operations for retention",
      "persistence": {
        "browser": ["intrikata.instances", "intrikata.current", "intrikata.proxyBase", "intrikata.bridgeSession", "intrikata.mfaEnroll", "IndexedDB PharosiraptorBrowser"],
        "cloud": ["D1 instances/graphs/nodes", "D1 apps + git_objects/git_refs", "KV claim/otp/enroll/rkey/mtls/lb"],
        "export": ["app download HTML", "git clone /git/{id}.git", "recovery key file", "mtls pem bundle", "provision JSON bundle"]
      },
      "retention_loops": [
        "return visit: localStorage restores instance → operant/pharosiraptor health without re-bootstrap",
        "autoprov at ≥2 instances: re-seed browser + CF for each handle",
        "free-text generative: auto app provision + rail status → re-open iframe",
        "bridge reconnect: same session_id re-registers tunnel; mtls transport negotiate on register",
        "recover <contact> or recover-key or recover-mtls → re-derive instance new <handle>"
      ],
      "console_minimum": [
        "instance new <handle>",
        "bootstrap",
        "create a sign up form | create a game",
        "app open | app download | app clone",
        "link <email|phone> | verify | recover | recover-key | link-mtls | recover-mtls",
        "bridge | ops status | ops context | ops run",
        "codex | grok | megapraxis"
      ]
    }
  },
  "resolution_order": [
    "local-bridge (CF edge → tunnel → localhost GraphDoc)",
    "direct HTTPS proxy",
    "CF D1 operant",
    "browser-js IndexedDB"
  ],
  "instance_default": {
    "handle": "default",
    "instance_id": "c76c9a91bee0",
    "derivation": "sha256('intrikata '+handle)[:12]",
    "live_checks": {
      "app": "/app/c76c9a91bee0/",
      "download": "/api/app/c76c9a91bee0/download",
      "git": "/git/c76c9a91bee0.git",
      "resolve": "/api/resolve/c76c9a91bee0?q=",
      "operant": "/api/operant/c76c9a91bee0/health"
    }
  },
  "session_cycle_map": {
    "meta": "certificates + short-circuits (this file, codex/grok/operant certs)",
    "genesis": "instance new, bootstrap, app provision, git assemble",
    "shadow": "Tarski footers, residual ops, empty BLOB git fix, tunnel health wait",
    "mgs": "resolve ladder, OP_CONTEXT pack ASEC/MGS, bridge proxy, MFA/mTLS, rail Your Instance, autoprov, poll UI"
  },
  "paths": {
    "playbook": "https://intrikata.com/onboard-instance.md",
    "certificate": "https://intrikata.com/data/instance-onboard.json",
    "console": "https://intrikata.com/",
    "deploy": "https://intrikata.com/deploy-pharosiraptor.md",
    "skills": "https://praxis-stack.pages.dev/"
  },
  "tarski": {
    "decidable": "cascade domains 0–4 cover cold→warm user/instance path with named persistence surfaces",
    "semi_decidable": "which backend wins comparative score depends on query + bridge presence",
    "undecidable": "whether user intent is product-complete (never defaulted from seed convergence)"
  },
  "honesty": "Seed scaffolds and SIMG hits orient; only named undecidables stop CTL. No victory claim of full ASEC parity on free tier."
}