◈ Observify

Surfaces are independent and can be scanned in any order; ATLAS.html depends on all of them.

No units killed.

Every artifact reaches Wolf as a local file (no server surface).

Irreversible actions: none in scope — this project is read-only on the machine by construction.

No repo (Wolf's call). Plain files only. Consequence: scan-to-scan drift has no history, and a

Free local-coder lane unavailable. codex --oss has no ollama provider or num_ctx in

Sudo captures: the ask shrank to ONE capture. Empirically, two of the three commands assumed

live_now is a point-in-time claim, stamped at scan time. The gate re-verifies it against the

Count-based parity flakes on a live machine. The S1 gate passed for the worker and failed for

readonly-audit false positives. A naive grep over a worker log matches the guardrail text and

The conductor promoted a unit before its audit passed — my error, not a worker's. I chained

A gate a worker cannot reproduce is not a gate (S3). sfltool dumpbtm succeeds from an

The S3 worker self-reported a G-SECRETS breach and it was honest and accurate. A diagnostic

My secret-detection regex matched ordinary English. sk-[A-Za-z0-9_-]{16,} fired on the

Promoted inventories drift, because the machine keeps moving. S1 passed clean, then failed 40

The control bus silently lost directives to a text-append bug (conductor's). A worker acked by

There is no single "the PATH" (S8). zsh -l inherits its parent's PATH and lets the rc files

Read-only proof is not equally strong across lanes — stated, not implied. Codex logs every

brew outdated is not read-only. Without HOMEBREW_NO_AUTO_UPDATE=1, brew silently runs a

Prefix-based ownership is wrong for three system daemons. com.vix.cron, org.cups.cupsd,

The gate could not pass a legitimately empty surface. items-nonempty hard-failed on

The BSD periodic subsystem is entirely gone on this OS version — not empty, absent: no

colima is installed but idle; the live Docker backend is Docker Desktop (desktop-linux

us.zoom.ZoomDaemon has a plist and binary on disk but is absent from the system domain

Two system extensions are active: Tailscale's network extension and a NordVPN Shield

Zero Intel-only applications — nothing on this machine currently needs Rosetta.

Repo baseline — mac-atlas (README.md)

/continue mac-atlas — handoff: mac-atlas.md