MainFrame vNext: publish curated lifecycle reference implementation

[camerontjs-dot]

Summary

This PR publishes MainFrame vNext as a curated public reference implementation rather than a broad snapshot of a private working environment.

The public tree keeps its existing Git history and introduces a smaller, deliberate core: lifecycle contracts, shared project/operation identity, 40_operations/, a bounded MainFrame Process Evaluation profile, selected deterministic CLIs, and synthetic examples.

Publication boundary

The qualified publication candidate was generated from an exact private source through a positive manifest into a fresh tree. Private Git history was not copied.

• private source SHA: 531e579c32ff4fe5e0bc60bf3918698f93d55f77
• private source tree: 24f3eafedd3d68a443fef8122187c60475333aee
• manifest SHA256: 2e32187f36300e5dbc219e77250029d8f3d390b035fc5dc30c3e2049939ae93b
• candidate bytes SHA256: 8c570c767c327c2cb1660bb939b293a35ad3d19577964e151373b8a77acd8ca9
• candidate mode-aware tree SHA256: 30d4b23ec2500e900c37c2d1334024b4387428951dde1a7dfe2e67818c8e84ec
• public base: bf4b90f52cd0dac689453020ff47c5d59a715874
• exact qualified candidate commit: 2eaa956104b79ad99f0a596b22c10e770534efad

The candidate was reproduced twice independently from the same source identity and matched on file list, bytes, Git modes, manifest identity, and both candidate digests:

DETERMINISTIC_REPRODUCTION_PASS

The pushed candidate was then clean-cloned and rematched exactly: 107 files, identical byte digest, identical mode-aware digest, and no imported private ancestry.

Public-review additions

Two public-only commits follow the exact candidate checkpoint:

1. the README was tightened so the repository leads with the system boundary and a runnable verification path rather than development history;
2. .github/workflows/public-core.yml was added so the public-core tests and CLI checks run on the PR and on main.

These additions are intentionally visible after the immutable candidate commit instead of being folded back into the private publication receipt.

Current PR head: 50906652d3c8cbdb39938afa4755634508e213ff.

Verification

Disposable clean-clone qualification of the candidate:

• 72 passed;
• 3 subtests passed;
• 0 skipped;
• 0 failed;
• 0 errors.

Public GitHub Actions run 34484593670 executed on the current PR head and completed successfully. The public-core job passed both the public test command and CLI smoke step.

The workflow exercises:

python -m pytest tests 40_operations/mainframe-process-eval/tests -q
./bin/process-eval --help
./bin/process-eval status --json
./bin/contract-lint --help
./bin/contract-lint --selftest
./bin/session-open --help
./bin/session-close --help
./bin/ingest-minion --help
./bin/work-inventory --help

session-open intentionally fails closed when local STATE.md authority is absent.

MainFrame Process Evaluation

MPE is included as:

MPE_PUBLIC_CORE_WITH_BOUNDED_PROFILE

The public surface exercises project/operation identity, duplicate and missing identity failure, the real loop-evaluation scorer on labelled synthetic cases, malformed-input failure, and a bounded close --write path whose output remains local-only.

Real evaluation outputs, receipts, traces, and private operational history are not published. The larger private process-eval preflight pack is not claimed as publicly reproducible.

Privacy and repository boundary

Qualification found no unexplained findings for workstation/home paths, token or private-key patterns, credential-shaped files, private Git history, live focus/handoff state, databases, caches, sockets, private project contents, or real MPE outputs and receipts.

Internal Markdown-link qualification reports zero accidental broken repository links.

Intentional deferrals

The previous public skeleton contained components outside the first coherent vNext core. This PR deliberately defers embedded MindGraph implementation and related CLIs, additional operator CLIs and their tests/workflows, client-specific .claude/ configuration, and private/live-state indexes.

The qualification pass found:

ACCIDENTAL_CAPABILITY_LOSS = 0

and:

YES_CORE_COHERENT_WITHOUT_MINDGRAPH

MindGraph remains a candidate for a later bounded public capability slice.

Limits

This PR does not claim that MainFrame is a private-workstation mirror, a fully autonomous agent framework, an enterprise orchestration platform, or a reproduction of the full private MPE environment.

The maintained claim is narrower: this repository is a portable, lifecycle-first reference implementation with explicit authority boundaries, deterministic control surfaces, synthetic examples, and a bounded self-evaluation path.

[camerontjs-dot]

Supervisor publication review opened. Live GitHub confirms this PR is exactly one commit ahead of public main (bf4b90f52cd0dac689453020ff47c5d59a715874) at head 2eaa956104b79ad99f0a596b22c10e770534efad. The pushed branch was independently qualified against the settled 107-file candidate before PR creation. No merge authorization is implied by this review comment. Hosted CI has not executed.

[camerontjs-dot]

Publication gate status: PR opened for public review only. Merge remains a separate decision after final public-surface inspection. Current evidence: exact public base/head relationship, deterministic 107-file candidate match, clean-clone verification, bounded MPE profile, and zero unexplained privacy/security findings from the qualification pass. Hosted CI remains unverified because no workflow/check has run.

[camerontjs-dot]

Private publication provenance remains anchored to mainframe-live@531e579c32ff4fe5e0bc60bf3918698f93d55f77, manifest SHA256 2e32187f36300e5dbc219e77250029d8f3d390b035fc5dc30c3e2049939ae93b, candidate bytes SHA256 8c570c767c327c2cb1660bb939b293a35ad3d19577964e151373b8a77acd8ca9, and mode-aware tree SHA256 30d4b23ec2500e900c37c2d1334024b4387428951dde1a7dfe2e67818c8e84ec. Public head remains 2eaa956104b79ad99f0a596b22c10e770534efad. No merge performed.