Portability and authority

Continuity should survive the host.

The strongest result is not that the Bolt-On controls a host. The strongest result is that continuity and governance can be carried beside a host while the adapter retains no execution authority.

Claim boundary: this page records frozen v0.3 evidence and a bounded v0.4 Stage 1 external-host contract. It does not claim production integration, live third-party integration, network security qualification, complete host control, or a completed persistent observer.

Required architecture

Replaceable host, host-owned action.

  1. HostReplaceable host owns native state.
  2. AdapterRead-only adapter normalizes events.
  3. ProjectionCanonical event / projection.
  4. ReceiptNatural Math receipt and replay.
  5. WeightOptional WeightReceipt.
  6. BasinCognitive Basin changed accessibility.
  7. GuardGUARD / HOLD / target contract.
  8. BoundaryHost-owned command boundary and native host action.
Host authority boundary with read-only adapter, canonical events, receipts, optional WeightReceipt, Cognitive Basin, guard, and host-owned native action.
No direct arrow flows from the read-only adapter to native action.

Status evidence

Verified / Frozen

v0.3

20/20 frozen manifest files verified; aggregate verifier passed. Release record reports 256 tests, two host families, 48 adversarial rejections, two baseline host-owned actions, zero bolt-on-executed actions, and one host substitution. Claims: CLAIM-0065 through CLAIM-0070.

Built and Locally Validated

v0.4 Stage 1

External-host contract demonstration only: 73/73 unit tests, 37 contract requirements, 28/28 rejection cases, host actions=0, bolt-on actions=0. Claims: CLAIM-0071 and CLAIM-0072.

Limitation

No production claim

No third-party or production host is qualified. The mapping is not universal and does not prove compatibility with ChatGPT or any production LLM service.

Replay, substitution, and zero adapter authority

Replay

Receipts and checkpoints make prior decisions inspectable and replayable under bounded fixtures.

Substitution

The portable sidecar can carry continuity across replaceable hosts without acquiring native execution authority.

Adapter boundary

The adapter reads and projects. Native action remains host-owned.

Non-claim

The Bolt-On is not a completed persistent observer and not a production-host controller.