MVP Readiness Snapshot¶

Snapshot date: 2026-06-17.

This table is an estimated cross-document readiness snapshot for canonical Story, Proposal, and Solution documents.

Scope rules: localized duplicates (*.pl.md), indexes, backlog files, implementation notes, coding guides, and generated registries are excluded. Solution rows use the main NNN-*/NNN-*.md document for each component.

Estimation basis: node/docs/MVP.md defines the hard-MVP story set (story-000, story-002, story-005, story-006, story-008, story-010); doc/project/60-solutions/CAPABILITY-MATRIX.md provides coarse implementation status; each document text is used as fallback when no capability row exists. part of MVP tracks the hard-MVP set; MVP ready may still be true for a post-hard-MVP document when its own MVP slice is implemented. Percentages are engineering estimates, not release-signoff facts.

Change basis: this refresh incorporates the current worktree state on 2026-06-17 and the last 20 commits in both node/ and orbidocs/. In addition to the previously reflected Story 000, Story 008, Story 010, Proposals 057-065, and Solutions 025-032 work, it accounts for the latest messaging EML/profile recovery and route-key hardening, Inquirium generate substrate and assistant-channel documentation, Shared Offer Catalog extraction, Story-009 service-order dispatch over Artifact Delivery, pseudonym-vault/unlock hardening, Node UI security/audit hardening, Story-005 post-M4 Whisper/Inquirium productization contracts, and the new Proposal 066 / Proposal 067 / Solution 033 trackers.

Recent component deltas:

Proposal 018 is no longer a low-coverage placeholder. Code review on 2026-06-22 confirmed schema-gated participant-capability-limits.v1 import/export, durable daemon replay, operator HTTP import/list/detail/clear, hard-block enforcement for the current procurement/response operation set, protected-floor behavior for signal-marker/send and dispute/file, procurement ranking penalties through priority-factor, and per-participant cooldown through rate-limit-factor. Follow-up hardening added reasoned clear tombstones, dead/already-expired hard-block import rejection, stale recorded-at overwrite rejection, monotonic last_cleared_at replay so old records cannot reappear after clear, full participant-id validation on clear, schema-gated list/detail export, bounded local control bodies, runtime soft-factor and reason/ref validation, and metadata-only operator SSE refresh events for import/clear. P018 is now hard-MVP complete; remaining questions are post-MVP scope expansion and registry/policy refinement.
Artifact Delivery moved from "MVP transport foundation" to hard-MVP complete: Memarium custody target-space policy, profiling counters, metadata-only observers, Matrix mailbox hardening, and object-store-indirect fetch/rehydrate through artifact-object-pointer.v1 are now documented and implemented. Lower-level zero-copy and Matrix media variants remain post-MVP optimization layers.
Notifications now have a local durable MVP foundation: schema-gated notification.create, temporal SQLite event log, derived queue projection, JSONL audit mirror, SSE state ping, operator UI, legacy notify_emit adapter, first daemon-owned actions, profile-aware manifests, and destructive temporal compaction for local notification history. They remain partial because pod-user UX, OS notifications, and cross-node aggregation are later layers.
Node UI security readiness advanced: Solution 001 now documents and implements physically separate public/user/pod-user/operator router strata, participant-session enforcement for user-mode routes, header-first reflective CSRF without the legacy CSRF header alias, local user-action audit JSONL, security-audit.v1.sqlite query projection with 90-day retention, /admin/audit/user-actions, and optional best-effort Memarium user-action.v1 mirroring. Proposal 052 now carries the same audit/redaction/retention contract for the Tauri-hosted shell. Node UI remains partial because richer desktop settings writes, external preview isolation, pod-user auth, and native integration hardening are still later product/runtime layers.
Contact Catalog hard-MVP is tracker-complete: Proposal 058 and Solution 025 now report the implemented route-set contact-claim.v1 / contact-lookup-result.v1 runtime, supervised service, local contact recovery, tombstone/revocation replay, PSI/blinded lookup, provider sync, provider trust controls, and contact-control-vs-identity wording as done for the hard-MVP slice.
Messaging hard-MVP is tracker-complete: Proposal 060 and Solution 027 now report supervised messaging runtime, daemon-mediated contactability provider discovery/challenge/redeem, Contact Catalog lookup/contact-request handoff, classification-bearing private-direct AD/INAC delivery, messaging.flag.v1 read/unread replay, recorded-message lineage plus best-effort encrypted Agora Vault storage, Node UI controls, user-mode wizard readiness for pseudonymous-only or public-handle-draft messaging setup, and Story 010 strict ad-smoke as done for the hard-MVP slice. Latest hardening adds EML body/profile recovery, route-key normalization, mark-read routing fixes, readiness/routing retry gates, SSE mutation guards, and conversation diagnostics. Production privacy/federation expansion, receive-passport restoration matrices beyond the current sealed local recovery path, Maildir body encryption, richer per-recipient vault key wrapping, HTML rendering, group messaging, and live multi-device push remain post-MVP work.
Inquirium moved from a mostly conceptual organ to an implemented substrate slice. Proposal 063 now has a first generate vertical through inquirium-core, daemon inquirium.generate, JSON-e Flow ingress/preflight, NSE runtime selection, deterministic stub runtime, classification-aware request validation, and metadata-only trace records. Proposal 064's runtime-adapter recommendations are mostly implemented across model-runtime catalog v0.2, runtime-candidate routing, HTTP/stdio adapters, remote provider adapters, and embedding contracts; durable direct data-plane leases remain in progress. Proposal 066 is intentionally kept low because the assistant-channel surface is documented but not end-to-end implemented.
Story 005 remains hard-MVP complete, and its post-M4 productization tracker now has a CI-runnable Inquirium acceptance bridge: an opt-in supervised simulator adapter is routed only through model-runtime/Inquirium by runtime/ref and host-owned model.binding/ref. whisper-core also carries the production-shaped policy primitives for routing failure mode, source class, outbound privacy resolution, correlation policy explanation, association-room proposal lifecycle, and public-gossip promotion. These close the productization contract layer without changing the readiness interpretation for unfinished product/runtime surfaces such as full UI, real relay transport, and remote model deployment.
Shared Offer Catalog is now a concrete middleware solution track. Proposal 067 and Solution 033 document the extracted shared Python offer-catalog runtime, Agora replay, fail-closed Agora/Seed Directory admission, Arca embedded-cache reuse, query parity, withdrawal active filtering, and public/shared catalog deployment shape. The remaining work is operational passport publication/profile hardening rather than the core projection runtime.
Local Relationship Layer is now hard-MVP complete for the Node-owned slice: Proposal 065 and Solution 032 have contracts, pure core, vault-first daemon storage, sealed rebuildable SQLite projection, local control/host capabilities, operator class/membership/predicate/decision audit UI, package trust queue with approval history, canonical Messaging consumption, dynamic Artifact Delivery group resolution, repeatable Story-010 relationship acceptance runner, projection replay/privacy regression gates, and verified remote-disclosed node-operator-binding import through the identity control surface. Public federated Local Relationship capability, richer multi-operator UX, CI-provider wiring for the runner, revocation-view invalidation for imported binding evidence, and performance profiling under real relationship cardinalities remain post-MVP work.
Replay Scheduler M1 is now fully closed for the hard-MVP slice: the generic bounded scheduler, durable launch ledger, host-owned job-source merge, authority gate, cooperative shutdown, Agora projection replay action, and operator status/control surface are all documented as implemented. Richer Agora-domain panels and non-Agora maintenance jobs are post-M1 extensions.
Agora gained a generic encrypted-artifact Vault surface: agora-vault-entry.v1 exposes only opaque artifact ids, kind, ciphertext, and cryptographic envelope metadata; supervised local routes are client-auth / daemon-dispatch gated, while remote provider deployments bind the same operations to the frozen agora-vault@v1 passport profile.
Temporal Storage Convention is now hard-MVP complete: notification-store is the full-compaction-required adopter, while messaging outbox and Seed Directory accepted facts are converged bounded/no-op adopters with manifests, temporal status/feed/replay-check, and explicit compaction.policy = "bounded-noop" diagnostics.
Bounded Deferred Operations were promoted from Proposal 055 to Solution 029 as a horizontal host control-plane component. The MVP slice is complete: shared wire contracts, host registry, poll/cancel surfaces, JSON-e Flow persisted continuation, Sensorium OS deferred state, operator visibility, and AD consumer integration.
Sensorium has been promoted to Solution 030 as a constitutional organ. Its MVP slice is implemented for sensorium-core observation admission/query, directive invocation, audit-only outcomes, internal connector dispatch, the supervised Sensorium OS reference connector, action-catalog sidecar authorization, and deferred Sensorium actions. Local Agora observation publication remains partial because runtime support currently exposes topic metadata and read surfaces rather than a complete local subscription bus.
Proposal 054 is hard-MVP complete: seed-directory-query-attestation.v1 is schema-gated, Seed Directory can attach opt-in signed response attestations, daemon can opt into trusted Agora replay for adv, cap, and revocations lanes, replay follows paginated Agora result pages, replay cursors/status are persisted in the embedded store, projection equivalence tests include revocation effects, and daemon-owned Seed Directory discovery now applies one strict multi-directory policy (preferred-directory, quorum, or weighted-trust) across host queries, AD/capability routing, subject lookup, and Contact Catalog provider discovery, with cross-directory revocation suppression for revoked capability passports. /v1/seed-directory and Node UI expose safe trusted-directory diagnostics, local endorsement/reputation policy inputs, replay state, and skip reasons.
Memarium Proposal 036 and Solution 002 are now implementation-complete for v1: neutral MemariumObservation bridges post-chain and phase observers without daemon-private runtime dependencies, observe-rule paths are validated with explicit-null extraction semantics, governed community forget accepts explicit governance references, the read sidecar performs startup catch-up while retaining scan fallback, local backup packages can be submitted through operator remote-archivist handoff/retrieval control surfaces over Artifact Delivery, and Story-005 smoke confirms the classification-bearing private AD/INAC path used by Memarium-adjacent archival/export boundaries. Richer Node UI batch UX remains a product layer, not a Proposal 036 blocker.

Stories¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Story 000: Two Nodes See Each Other	`true`	`true`	`false`	`95`
Story 001: Swarm Node Onboarding and Federated Answer Procurement	`false`	`false`	`false`	`65`
Story 002: Federated Peer Learning and Consensus Correction	`true`	`true`	`false`	`90`
Story 003: Remote Memory Preservation, Archivists, and Vault Publication	`false`	`false`	`false`	`38`
Story 004: Pod-Client Onboarding and Delegated Federated Answer Procurement	`false`	`false`	`false`	`65`
Story 005: Whisper Rumor Intake, Redaction, and Thresholded Association Bootstrap	`true`	`true`	`false`	`100`
Story 006 Buyer Node Components for Arca	`true`	`true`	`false`	`90`
Story 006: Voluntary Swarm Service Exchange for Cooperative Content Production	`true`	`true`	`false`	`90`
Story 007: Settlement-Capable Node as the Authoritative ORC Ledger	`false`	`false`	`false`	`82`
Story 008: Leaving an Opinion on a Website via the Local Node	`true`	`true`	`false`	`100`
Story 009: The magazine publishes itself — a three-node blogging pipeline about Bielik, conducted by Arca	`false`	`false`	`false`	`90`
Story 010: Message to a Friend	`true`	`true`	`false`	`100`

Proposals¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Licensing Baseline for Orbiplex Swarm Components	`false`	`false`	`false`	`25`
Communication Protocol Baseline for Orbiplex Swarm	`true`	`false`	`false`	`65`
Question Envelope and Answer-Channel Transport for Orbiplex Swarm	`true`	`false`	`false`	`55`
Human-Origin Flags and Operator Participation in Answer Channels	`false`	`false`	`false`	`65`
Operator Participation Room Policy Profiles	`false`	`false`	`false`	`25`
Pod-Backed Access Layer for Thin Clients	`false`	`false`	`false`	`55`
Pod Identity and Tenancy Model	`false`	`false`	`false`	`25`
Transcription Monitors, Archivists, and Public Vaults	`false`	`false`	`false`	`20`
Communication Exposure Modes for Swarm Requests	`false`	`false`	`false`	`25`
Operator Proxy and Co-Regulation Channels	`false`	`false`	`false`	`25`
Federated Answer Procurement Lifecycle Artifacts	`true`	`false`	`false`	`65`
Learning Outcomes, Knowledge Artifacts, and Archival Contracts	`false`	`false`	`false`	`38`
Whisper Social-Signal Exchange and Threshold Bootstrap	`true`	`true`	`false`	`88`
Node Transport and Discovery MVP	`true`	`false`	`false`	`69`
Nym Certificates and Renewal Baseline	`false`	`false`	`false`	`25`
Supervised Prepaid Gateway and Escrow MVP	`true`	`false`	`false`	`65`
Proposal 017: Organization Subjects and org:did:key	`true`	`true`	`false`	`88`
Proposal 018: Layered capability_limited Participant Restrictions	`true`	`true`	`false`	`100`
Proposal 019: Supervised http_local_json Middleware Executor	`true`	`true`	`false`	`100`
Proposal 020: Bundled Python Middleware Modules for Hard MVP	`true`	`true`	`false`	`100`
Proposal 021: Service Offers, Service Orders, and the Host-Owned Procurement Bridge	`true`	`true`	`false`	`88`
Proposal 022: Monus as Host-Granted Local Observation Middleware	`false`	`false`	`false`	`15`
Proposal 023: Federated Offer Distribution and Catalog Listener	`true`	`true`	`false`	`100`
Proposal 024: Capability Passports and Network Ledger Delegation	`true`	`true`	`false`	`85`
Proposal 025: Seed Directory as Capability Catalog	`true`	`true`	`false`	`100`
Proposal 026: Resource Opinions and Discussion Surfaces	`false`	`false`	`false`	`100`
Proposal 027: Middleware Peer-Message Dispatch	`true`	`true`	`true`	`100`
Proposal 028: Service Schema Catalog	`false`	`false`	`false`	`25`
Proposal 029: Workflow Template Catalog	`false`	`false`	`false`	`40`
Proposal 030: Identity Recovery Service	`false`	`false`	`false`	`55`
Proposal 031: Participant Key Passphrase Lock	`true`	`true`	`false`	`100`
Proposal 032: Key Delegation Passports	`true`	`true`	`false`	`100`
Proposal 033: Workflow Fan-Out and Temporal Orchestration	`true`	`true`	`false`	`77`
Proposal 034: Node Operator Binding and Derived Node Assurance	`true`	`true`	`false`	`90`
Proposal 035: Agora — Topic-Addressed Record Relay and Shared Record Substrate	`true`	`true`	`false`	`92`
Proposal 036: Memarium — Local Memory Organ for the Orbiplex Node	`true`	`true`	`true`	`100`
Proposal 037: Generic Signing Service	`true`	`true`	`false`	`100`
Proposal 038: Key Roles and Key Use Taxonomy	`true`	`true`	`false`	`100`
Proposal 039 Crisis Seed v1 Review Record	`false`	`false`	`false`	`25`
Proposal 039: Crisis Space Seed v1	`false`	`false`	`false`	`100`
Proposal 040: Custodial Redelivery and Tombstones for Agora Records	`false`	`false`	`false`	`38`
Proposal 041: Agora Ingest Attestation and Tiered Access	`false`	`false`	`false`	`65`
Proposal 042: Inter-Node Artifact Channel (F2F Memarium Exchange)	`true`	`true`	`false`	`88`
Proposal 043: Node Address Attestation Fallback	`true`	`false`	`false`	`65`
Proposal 044: Host-Owned Generic Module Store	`true`	`true`	`false`	`100`
Proposal 045: Sensorium as a Local Enaction Stratum	`true`	`false`	`false`	`65`
Proposal 046: Agora Topic-Key Namespace Conventions	`false`	`false`	`false`	`100`
Proposal 047: Classification Label Propagation for Memarium-Touching Data	`true`	`false`	`false`	`74`
Proposal 048: Sensorium OS Connector Action Classes	`true`	`false`	`false`	`55`
Proposal 049: JSON-e Middleware Transformer Executor	`true`	`true`	`false`	`82`
Proposal 050: Local Readiness Gate	`true`	`true`	`false`	`85`
Proposal 051: Swarm Membership, Reputation Bootstrap, and Public Adjudication	`false`	`false`	`false`	`25`
Proposal 052: Tauri-Hosted Node UI	`false`	`false`	`false`	`82`
Proposal 053: Raw Signal Access for Middleware Flows	`true`	`true`	`false`	`100`
Proposal 054: User-Maintained Federated Seed Directory	`true`	`true`	`false`	`100`
Proposal 055: Bounded Deferred Operation Contract	`true`	`true`	`false`	`100`
Proposal 056: Orbiplex TLS Trust Policy	`true`	`true`	`false`	`86`
Proposal 057: User and Operator Notifications	`true`	`true`	`false`	`90`
Proposal 058: Contact Catalog and Private Contact Discovery	`true`	`true`	`false`	`100`
Proposal 059: Participant, Nym, and Routing-Subject Key-Role Derivation	`false`	`true`	`false`	`90`
Proposal 060: Messaging Middleware and Personal Message Delivery	`true`	`true`	`false`	`100`
Proposal 061: Contact Attestation Service	`true`	`true`	`false`	`78`
Proposal 062: Temporal Storage Convention	`false`	`true`	`false`	`100`
Proposal 063: Inquirium as a Model Inquiry Organ	`false`	`false`	`false`	`72`
Proposal 064: Inquirium Implementation Recommendations	`false`	`false`	`false`	`88`
Proposal 065: Local Relationship Layer	`true`	`true`	`false`	`100`
Proposal 066: Inquirium Assistant Channel	`false`	`false`	`false`	`15`
Proposal 067: Shared Offer Catalog over Agora	`true`	`true`	`false`	`90`

Solutions¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Orbiplex Node	`true`	`true`	`false`	`85`
Orbiplex Node UI	`true`	`false`	`false`	`88`
Orbiplex Memarium	`true`	`true`	`true`	`100`
Orbiplex Arca	`true`	`true`	`false`	`88`
Orbiplex Dator	`true`	`true`	`false`	`100`
Orbiplex Sealer	`true`	`true`	`false`	`96`
Orbiplex Capability Binding	`true`	`true`	`true`	`95`
Capability Advertisement	`true`	`true`	`false`	`94`
Orbiplex Agora	`true`	`true`	`false`	`93`
Orbiplex Monus	`false`	`false`	`false`	`15`
Orbiplex Anon	`false`	`false`	`false`	`10`
Orbiplex Whisper	`true`	`true`	`false`	`100`
Ferment	`false`	`false`	`false`	`15`
Raw Signal Access	`true`	`true`	`false`	`90`
Orbiplex Key Delegation Passports	`true`	`true`	`false`	`95`
Host-Owned Module Store	`true`	`true`	`false`	`90`
Bounded Local Server Runtime	`true`	`true`	`false`	`90`
Inter-Node Artifact Channel (INAC)	`true`	`true`	`false`	`88`
Classification	`true`	`false`	`false`	`76`
Middleware	`true`	`true`	`false`	`94`
Replay Scheduler	`true`	`true`	`false`	`100`
Solution 021: Agora Authority	`false`	`false`	`false`	`77`
Orbiplex Semantic Index	`false`	`false`	`false`	`15`
Artifact Delivery	`true`	`true`	`false`	`100`
TLS Trust Policy	`true`	`true`	`false`	`86`
Contact Catalog	`true`	`true`	`false`	`100`
Pseudonym Vault and Key Roles	`true`	`true`	`false`	`95`
Messaging Middleware	`true`	`true`	`false`	`100`
Temporal Storage Convention	`false`	`true`	`false`	`100`
Bounded Deferred Operations	`true`	`true`	`false`	`100`
Sensorium	`true`	`true`	`false`	`92`
Seed Directory	`true`	`true`	`false`	`100`
Local Relationship Layer	`true`	`true`	`false`	`100`
Shared Offer Catalog	`true`	`true`	`false`	`90`