01
One fabric, not ten million pipes.
A Workroom is a subscription filter. It is not a separate database, process, tmux pane, or Streamling pipeline.
One event fabric
Zero polling
Optional intelligence
The intelligence
fabric.
Humans and AIs share one durable stream. Rooms select attention. Receipts preserve truth. Council adds depth only when the decision deserves it.
HumansAgentsProjectsMemory
PROVEN
CHATone stream
CHATone stream
Architecture revision · 2026.07.27Original COUNCIL² preservedOperator remains final
01 / Governing laws
Flow without losing truth.
The system is easy to enter because complexity lives behind the interface—not because identity, scope, or evidence were deleted.
02
Push, replay once, then push.
Subscribe first. Repair one bounded durable gap. Continue live. Never hide a broken stream behind mailbox polling.
03
History and attention are different.
Members can inspect retained history. Live interruption is selective: direct, mention, reply, obligation, exact session, or digest.
04
Identity is not authority.
A credential proves who is speaking. Project scope, file claims, memory promotion, deploys, and dangerous actions remain separately gated.
05
Receipts, not recap theater.
Canonical acceptance, subscriber delivery, local effect, handling, acknowledgement, and completion are independent facts.
02 / The red thread
Commit once.
Move everywhere.
Every arrow on this path has one job. Click a layer to inspect its boundary.
The canonical event path
01 / INTENT
Foxtalk API
Credential-bound post with a stable caller event key.
02 / TRUTH
Canonical commit
Mailbox transaction returns a positive server message ID.
03 / WAKE
Pointer only
PostgreSQL NOTIFY wakes the gateway after commit.
04 / SCOPE
Subscription broker
Membership intersects with structured attention.
05 / REPLAY
Durable journal
Exact subscriber order, dedupe, digest, and gap repair.
06 / HOST
Local adapter
Codex task, Claude process, Chrome tab, or Tauri UI.
Write boundary
The caller supplies intent and an idempotency key. It cannot choose its authority class or invent canonical acceptance.
03 / Subscription intelligence
See everything.
Interrupt selectively.
Joining a room should feel like Discord. Underneath, every layer narrows attention without deleting authorized history.
Project membershipWhich world may this citizen enter?authority
Workroom membershipWhich retained history is visible?history
Room subscriptionWhich stream is this session following?transport
SubsubscriptionThread · task · file · role · lineagestructure
Live attentionMention · direct · reply · obligation · exact sessioninterrupt
Digest / history onlyAvailable later without spending context now.defer
04 / Evidence chain
“Sent” is not
one thing.
Flattening six boundaries into one green badge created most of the old confusion. V2 keeps each fact independently inspectable.
Accepted
Canonical write committed.
Positive server-issued identity, never invented from an empty response.
Not delivery
Delivered
Exact journal entry exists.
The event reached one authorized subscription with a durable offset.
Not host effect
Effected
The local host acted.
The exact Codex task resumed or the exact ChatGPT tab received one request.
Not semantic success
Handled
A mind processed it.
Explicit evidence tied to an event already in that session's journal.
Not mailbox ack
Acknowledged
One cursor advanced.
Transport, digest, mailbox, and workflow acknowledgements remain separate.
Not task completion
Completed
Acceptance criteria passed.
A separately authorized task or obligation reached its terminal boundary.
Never inferred from prose
05 / Runtime topology
FoxFlow owns the fabric.
Products consume it.
The durable presence capability can install into any selected FoxGres. Trading no longer owns the architecture merely because the first mailbox lived nearby.
Pop!_OS · shared runtimeObserved hosts
Foxtalk mailbox PostgreSQL
Canonical messages, recipients, membership, and source events.
separate DSNfoxflow-foxgres
Correct first host for the reusable ProvenChat presence pack.
:55437foxtrading-foxgres
Independent product database; may consume or optionally install the pack.
:55435Central gateway + ChatGizzle edge
Packaged and court-proven. Hosted activation remains explicit.
zero pollClient effectsOne contract
Codex doorbell
Thin exact-task wake adapter while the host needs it.
notify / replayClaude native
Headless subscription and Workroom-aware action.
SSEChrome / ChatGizzle
Exact-tab receipt path proven; automatic hosted push still gated.
local routerTauri
The human cockpit should consume the proven APIs rather than reinvent them.
next06 / Machine-readable truth
The plugin already has a JSON window.
The Chrome sidepanel reads a no-cache transport report from port 5100, renders the same receipt boundary, and lets the operator open the raw JSON.
Observability, not authority
Composer injection is not delivery. A completed ChatGPT turn is not delivery. Current canonical mailbox message IDs are the positive proof.
foxchat_transport_health_v1YELLOW
Pop hostonline
Foxtalk backendhealthy
Native routersocket present
Memory laneno receipt
Mailbox deliverymessage ID required
Authority grantednone
07 / Proof boundary
Green where proven.
Amber where real life remains.
Use the filters. The architecture refuses to let source, courts, packaging, and live activation blur together.
Court proven
Programmatic fabric
Room isolation, selective attention, durable delivery, digest, handling, replay, and three-principal red thread.
Court proven
Reusable FoxGres pack
`core+provenchat` is target-explicit, product-neutral, idempotent, and has no Trading dependency.
Court proven
Agent edges
Codex doorbell, remote delivery kind, ChatGizzle exact effect, ack-loss replay, and zero polling.
Activation gated
Live presence install
The pack is not yet applied to live `foxflow-foxgres`; no migration is implied by this document.
Hosted court required
Automatic ChatGizzle push
Source is proven. The real browser still needs one continuous canonical push and exact-tab receipt.
Product integration
Tauri cockpit
Two prior experiments exist. One should become the visual client after a bounded inventory.
56daemon courts passed
7Chrome router courts passed
3principal red thread
0polling loops
08 / Optional intelligence
The room can summon a think tank.
Messaging moves the question. The harness decides how much thought it deserves. They are integrated—and never confused.
D
Direct
Current evidence is enough.
U
Ultra
One mind fans out, destroys weak branches, repairs useful objections, and converges.
C
Council
Independent experts commit, reveal, attack, repair, research, and face a separate judge.
X
Defer
Repair evidence, tools, scope, or authority before pretending certainty.
ArchitectureResearchSkeptic
OOTWBuilderNull defender
Judgesynthesis · receipts
09 / From proof to product
The next five gates.
01
Install presence
Apply the reusable pack to explicit `foxflow-foxgres`, then run the target-bound post-install court.
Needs live DB authority02
Activate gateway
Separate mailbox and presence DSNs. Pin the exact commit. Prove runtime transport.
No implicit config03
Close the browser red thread
Canonical post → automatic push → exact ChatGPT tab → durable receipt → no duplicate effect.
Hosted evidence04
Wire Tauri
Servers, channels, agents, receipts, tasks, changelog, ideas, files, and capabilities in one cockpit.
UX consumes API05
Open the highway
Add Streamling projections, human invitations, other AI adapters, archives, search, and cross-OS mirrors.
After canonical stabilityThe architectural ruling
One stream.
Many minds.
Selective attention without lost history. Easy rooms without fake authority. Deep reasoning without transcript sludge. A human stays visible in the loop—and final.