MVP Readiness Snapshot¶

Snapshot date: 2026-05-22.

This table is an estimated cross-document readiness snapshot for canonical Story, Proposal, and Solution documents.

Scope rules: localized duplicates (*.pl.md), indexes, backlog files, implementation notes, coding guides, and generated registries are excluded. Solution rows use the main NNN-*/NNN-*.md document for each component.

Estimation basis: node/docs/MVP.md defines the hard-MVP story set (story-000, story-002, story-005, story-006, story-008, story-010); doc/project/60-solutions/CAPABILITY-MATRIX.md provides coarse implementation status; each document text is used as fallback when no capability row exists. part of MVP tracks the hard-MVP set; MVP ready may still be true for a post-hard-MVP document when its own MVP slice is implemented. Percentages are engineering estimates, not release-signoff facts.

Change basis: this refresh incorporates the current worktree state on 2026-05-22, including Story 000 and Story 008 operator acceptance coverage, Story 010, Proposals 057-065, Solutions 025-032, the Artifact Delivery / INAC / TLS trust updates, and the related notification, contact, messaging, pseudonym-vault, service-CA, artifact-mailbox, artifact-object-pointer, temporal-storage, bounded-deferred-operation, and local-relationship schemas and trackers.

Recent component deltas:

Artifact Delivery moved from "MVP transport foundation" to hard-MVP complete: Memarium custody target-space policy, profiling counters, metadata-only observers, Matrix mailbox hardening, and object-store-indirect fetch/rehydrate through artifact-object-pointer.v1 are now documented and implemented. Lower-level zero-copy and Matrix media variants remain post-MVP optimization layers.
Notifications now have a local durable MVP foundation: schema-gated notification.create, temporal SQLite event log, derived queue projection, JSONL audit mirror, SSE state ping, operator UI, legacy notify_emit adapter, first daemon-owned actions, profile-aware manifests, and destructive temporal compaction for local notification history. They remain partial because pod-user UX, OS notifications, and cross-node aggregation are later layers.
Contact Catalog hard-MVP is tracker-complete: Proposal 058 and Solution 025 now report the implemented route-set contact-claim.v1 / contact-lookup-result.v1 runtime, supervised service, local contact recovery, tombstone/revocation replay, PSI/blinded lookup, provider sync, provider trust controls, and contact-control-vs-identity wording as done for the hard-MVP slice.
Messaging hard-MVP is tracker-complete: Proposal 060 and Solution 027 now report supervised messaging runtime, daemon-mediated contactability provider discovery/challenge/redeem, Contact Catalog lookup/contact-request handoff, classification-bearing private-direct AD/INAC delivery, messaging.flag.v1 read/unread replay, recorded-message lineage plus best-effort encrypted Agora Vault storage, Node UI controls, and Story 010 strict ad-smoke as done for the hard-MVP slice. Production privacy/federation expansion, receive-passport restoration matrices beyond the current sealed local recovery path, Maildir body encryption, richer per-recipient vault key wrapping, HTML rendering, group messaging, and live multi-device push remain post-MVP work.
Local Relationship Layer is now an active MVP track rather than only a proposal: Proposal 065 and Solution 032 split the work into M1-M6. M1 contracts and M2 pure core are done. M3 is partial with daemon-owned LocalRelationshipStore, Pseudonym Vault local-relationship startup replay, default untrusted/contacts/friends/trusted seeding when the vault is writable, reserved-class archive rejection, editable reserved-class metadata, SQLite projection (transactions, events, current_*, predicates, predicate_class_ids, decisions), local control API, and guarded host capabilities. Projection JSON cells are now sealed through the daemon sealer AEAD backend under local-relationship-projection:v1, and lookup columns use sealer-derived keyed HMAC indexes. M4 is partial with a minimal /admin/local-relationships operator surface for classes, memberships, predicates, evaluation, and decision audit; the surface now uses required/class-ids[], validates at least one selected class before daemon submission, visually distinguishes the four reserved tiers, and requires typed secondary confirmation with a bounded modal lifetime before approving trusted predicates. Middleware package manifests can declare trust_requirements[]; signed package readiness blocks startup until the referenced predicate is approved and links the operator to Local Relationships. M5 is now canonical-only before first release: contact-request.accept appends canonical contacts membership and pairwise messaging nym binding, messaging-service receives the primary operator owner/ref, reads point membership status through local-relationship.membership.latest, appends canonical membership through local-relationship.membership.append, fails closed without host/owner configuration, and owner-scoped tests prove owner A membership does not satisfy owner B. The pre-release contacts_membership cache, bootstrap migration endpoint, and contacts.membership-changed.v1 compatibility fact have been removed instead of deferred; Story-010 strict ad-smoke now passes over this canonical-only path. M6 is partial with a dynamic Artifact Delivery group selector hook and daemon wiring to resolve relationship classes for the primary local operator into ordinary AD recipient selectors when candidates carry AD-routable contact/ref values (node:, participant:, routing:), or local-contact: records that carry a local routing-subject/id or participant remote/subject; tests now assert candidate-not-authority and fail-closed unroutable groups, and Story-005 ad-smoke passes the current private AD/INAC path. Middleware predicate evaluation returns redacted decision data rather than host-internal candidates. Current hardening adds vault-first endpoint writes with sealed Pseudonym Vault append as the commit point, rebuildable pending-vault-rebuild projection failure state, vaulted predicate approval/reject audit records, predicate-rejected readiness blocking, redacted host predicate evaluation, local binding-store evidence verification, and Story-010 acceptance flags for relationship-group delivery and multi-operator owner-scope checks; the combined variant passes locally. AD config validation permits late-bound group references, so Local Relationship groups do not need static placeholder groups. Remaining MVP work is narrower: wire those new Story-010 variants into CI, deepen the pending/rejected package queue and package-install audit UI, broaden privacy/performance gates, and add remote-disclosed binding import beyond the local verified binding store. Public protocol capability remains post-MVP deferred.
Replay Scheduler M1 is now fully closed for the hard-MVP slice: the generic bounded scheduler, durable launch ledger, host-owned job-source merge, authority gate, cooperative shutdown, Agora projection replay action, and operator status/control surface are all documented as implemented. Richer Agora-domain panels and non-Agora maintenance jobs are post-M1 extensions.
Agora gained a generic encrypted-artifact Vault surface: agora-vault-entry.v1 exposes only opaque artifact ids, kind, ciphertext, and cryptographic envelope metadata; supervised local routes are client-auth / daemon-dispatch gated, while remote provider deployments bind the same operations to the frozen agora-vault@v1 passport profile.
Temporal Storage Convention is now hard-MVP complete: notification-store is the full-compaction-required adopter, while messaging outbox and Seed Directory accepted facts are converged bounded/no-op adopters with manifests, temporal status/feed/replay-check, and explicit compaction.policy = "bounded-noop" diagnostics.
Bounded Deferred Operations were promoted from Proposal 055 to Solution 029 as a horizontal host control-plane component. The MVP slice is complete: shared wire contracts, host registry, poll/cancel surfaces, JSON-e Flow persisted continuation, Sensorium OS deferred state, operator visibility, and AD consumer integration.
Sensorium has been promoted to Solution 030 as a constitutional organ. Its MVP slice is implemented for sensorium-core observation admission/query, directive invocation, audit-only outcomes, internal connector dispatch, the supervised Sensorium OS reference connector, action-catalog sidecar authorization, and deferred Sensorium actions. Local Agora observation publication remains partial because runtime support currently exposes topic metadata and read surfaces rather than a complete local subscription bus.
Proposal 054 is hard-MVP complete: seed-directory-query-attestation.v1 is schema-gated, Seed Directory can attach opt-in signed response attestations, daemon can opt into trusted Agora replay for adv, cap, and revocations lanes, replay follows paginated Agora result pages, replay cursors/status are persisted in the embedded store, projection equivalence tests include revocation effects, and daemon-owned Seed Directory discovery now applies one strict multi-directory policy (preferred-directory, quorum, or weighted-trust) across host queries, AD/capability routing, subject lookup, and Contact Catalog provider discovery, with cross-directory revocation suppression for revoked capability passports. /v1/seed-directory and Node UI expose safe trusted-directory diagnostics, local endorsement/reputation policy inputs, replay state, and skip reasons.
Memarium Proposal 036 and Solution 002 are now implementation-complete for v1: neutral MemariumObservation bridges post-chain and phase observers without daemon-private runtime dependencies, observe-rule paths are validated with explicit-null extraction semantics, governed community forget accepts explicit governance references, the read sidecar performs startup catch-up while retaining scan fallback, local backup packages can be submitted through operator remote-archivist handoff/retrieval control surfaces over Artifact Delivery, and Story-005 smoke confirms the classification-bearing private AD/INAC path used by Memarium-adjacent archival/export boundaries. Richer Node UI batch UX remains a product layer, not a Proposal 036 blocker.

Stories¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Story 000: Two Nodes See Each Other	`true`	`true`	`false`	`95`
Story 001: Swarm Node Onboarding and Federated Answer Procurement	`false`	`false`	`false`	`65`
Story 002: Federated Peer Learning and Consensus Correction	`true`	`true`	`false`	`90`
Story 003: Remote Memory Preservation, Archivists, and Vault Publication	`false`	`false`	`false`	`38`
Story 004: Pod-Client Onboarding and Delegated Federated Answer Procurement	`false`	`false`	`false`	`65`
Story 005: Whisper Rumor Intake, Redaction, and Thresholded Association Bootstrap	`true`	`true`	`false`	`96`
Story 006 Buyer Node Components for Arca	`true`	`true`	`false`	`90`
Story 006: Voluntary Swarm Service Exchange for Cooperative Content Production	`true`	`true`	`false`	`90`
Story 007: Settlement-Capable Node as the Authoritative ORC Ledger	`false`	`false`	`false`	`82`
Story 008: Leaving an Opinion on a Website via the Local Node	`true`	`true`	`false`	`100`
Story 009: The magazine publishes itself — a three-node blogging pipeline about Bielik, conducted by Arca	`false`	`false`	`false`	`85`
Story 010: Message to a Friend	`true`	`true`	`false`	`100`

Proposals¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Licensing Baseline for Orbiplex Swarm Components	`false`	`false`	`false`	`25`
Communication Protocol Baseline for Orbiplex Swarm	`true`	`false`	`false`	`65`
Question Envelope and Answer-Channel Transport for Orbiplex Swarm	`true`	`false`	`false`	`55`
Human-Origin Flags and Operator Participation in Answer Channels	`false`	`false`	`false`	`65`
Operator Participation Room Policy Profiles	`false`	`false`	`false`	`25`
Pod-Backed Access Layer for Thin Clients	`false`	`false`	`false`	`55`
Pod Identity and Tenancy Model	`false`	`false`	`false`	`25`
Transcription Monitors, Archivists, and Public Vaults	`false`	`false`	`false`	`20`
Communication Exposure Modes for Swarm Requests	`false`	`false`	`false`	`25`
Operator Proxy and Co-Regulation Channels	`false`	`false`	`false`	`25`
Federated Answer Procurement Lifecycle Artifacts	`true`	`false`	`false`	`65`
Learning Outcomes, Knowledge Artifacts, and Archival Contracts	`false`	`false`	`false`	`38`
Whisper Social-Signal Exchange and Threshold Bootstrap	`true`	`true`	`false`	`88`
Node Transport and Discovery MVP	`true`	`false`	`false`	`69`
Nym Certificates and Renewal Baseline	`false`	`false`	`false`	`25`
Supervised Prepaid Gateway and Escrow MVP	`true`	`false`	`false`	`65`
Proposal 017: Organization Subjects and org:did:key	`true`	`true`	`false`	`88`
Proposal 018: Layered capability_limited Participant Restrictions	`true`	`false`	`false`	`25`
Proposal 019: Supervised http_local_json Middleware Executor	`true`	`true`	`false`	`100`
Proposal 020: Bundled Python Middleware Modules for Hard MVP	`true`	`true`	`false`	`100`
Proposal 021: Service Offers, Service Orders, and the Host-Owned Procurement Bridge	`true`	`true`	`false`	`88`
Proposal 022: Monus as Host-Granted Local Observation Middleware	`false`	`false`	`false`	`15`
Proposal 023: Federated Offer Distribution and Catalog Listener	`true`	`true`	`false`	`100`
Proposal 024: Capability Passports and Network Ledger Delegation	`true`	`true`	`false`	`85`
Proposal 025: Seed Directory as Capability Catalog	`true`	`true`	`false`	`100`
Proposal 026: Resource Opinions and Discussion Surfaces	`false`	`false`	`false`	`100`
Proposal 027: Middleware Peer-Message Dispatch	`true`	`true`	`true`	`100`
Proposal 028: Service Schema Catalog	`false`	`false`	`false`	`25`
Proposal 029: Workflow Template Catalog	`false`	`false`	`false`	`40`
Proposal 030: Identity Recovery Service	`false`	`false`	`false`	`55`
Proposal 031: Participant Key Passphrase Lock	`false`	`false`	`false`	`65`
Proposal 032: Key Delegation Passports	`true`	`true`	`false`	`100`
Proposal 033: Workflow Fan-Out and Temporal Orchestration	`true`	`true`	`false`	`77`
Proposal 034: Node Operator Binding and Derived Node Assurance	`true`	`true`	`false`	`90`
Proposal 035: Agora — Topic-Addressed Record Relay and Shared Record Substrate	`true`	`true`	`false`	`92`
Proposal 036: Memarium — Local Memory Organ for the Orbiplex Node	`true`	`true`	`true`	`100`
Proposal 037: Generic Signing Service	`true`	`true`	`false`	`100`
Proposal 038: Key Roles and Key Use Taxonomy	`true`	`true`	`false`	`100`
Proposal 039 Crisis Seed v1 Review Record	`false`	`false`	`false`	`25`
Proposal 039: Crisis Space Seed v1	`false`	`false`	`false`	`100`
Proposal 040: Custodial Redelivery and Tombstones for Agora Records	`false`	`false`	`false`	`38`
Proposal 041: Agora Ingest Attestation and Tiered Access	`false`	`false`	`false`	`65`
Proposal 042: Inter-Node Artifact Channel (F2F Memarium Exchange)	`true`	`true`	`false`	`88`
Proposal 043: Node Address Attestation Fallback	`true`	`false`	`false`	`65`
Proposal 044: Host-Owned Generic Module Store	`true`	`true`	`false`	`100`
Proposal 045: Sensorium as a Local Enaction Stratum	`true`	`false`	`false`	`65`
Proposal 046: Agora Topic-Key Namespace Conventions	`false`	`false`	`false`	`100`
Proposal 047: Classification Label Propagation for Memarium-Touching Data	`true`	`false`	`false`	`74`
Proposal 048: Sensorium OS Connector Action Classes	`true`	`false`	`false`	`55`
Proposal 049: JSON-e Middleware Transformer Executor	`true`	`true`	`false`	`82`
Proposal 050: Local Readiness Gate	`true`	`true`	`false`	`85`
Proposal 051: Swarm Membership, Reputation Bootstrap, and Public Adjudication	`false`	`false`	`false`	`25`
Proposal 052: Tauri-Hosted Node UI	`false`	`false`	`false`	`70`
Proposal 053: Raw Signal Access for Middleware Flows	`true`	`true`	`false`	`100`
Proposal 054: User-Maintained Federated Seed Directory	`true`	`true`	`false`	`100`
Proposal 055: Bounded Deferred Operation Contract	`true`	`true`	`false`	`100`
Proposal 056: Orbiplex TLS Trust Policy	`true`	`true`	`false`	`86`
Proposal 057: User and Operator Notifications	`true`	`true`	`false`	`90`
Proposal 058: Contact Catalog and Private Contact Discovery	`true`	`true`	`false`	`100`
Proposal 059: Participant, Nym, and Routing-Subject Key-Role Derivation	`false`	`true`	`false`	`90`
Proposal 060: Messaging Middleware and Personal Message Delivery	`true`	`true`	`false`	`100`
Proposal 061: Contact Attestation Service	`true`	`true`	`false`	`78`
Proposal 062: Temporal Storage Convention	`false`	`true`	`false`	`100`
Proposal 063: Inquirium as a Model Inquiry Organ	`false`	`false`	`false`	`25`
Proposal 064: Inquirium Implementation Recommendations	`false`	`false`	`false`	`15`
Proposal 065: Local Relationship Layer	`true`	`false`	`false`	`78`

Solutions¶

Document	part of MVP	MVP ready	post-MVP ready	readiness %
Orbiplex Node	`true`	`true`	`false`	`85`
Orbiplex Node UI	`true`	`false`	`false`	`82`
Orbiplex Memarium	`true`	`true`	`true`	`100`
Orbiplex Arca	`true`	`true`	`false`	`88`
Orbiplex Dator	`true`	`true`	`false`	`100`
Orbiplex Sealer	`true`	`true`	`false`	`96`
Orbiplex Capability Binding	`true`	`true`	`true`	`95`
Capability Advertisement	`true`	`true`	`false`	`94`
Orbiplex Agora	`true`	`true`	`false`	`93`
Orbiplex Monus	`false`	`false`	`false`	`15`
Orbiplex Anon	`false`	`false`	`false`	`10`
Orbiplex Whisper	`true`	`true`	`false`	`100`
Ferment	`false`	`false`	`false`	`15`
Raw Signal Access	`true`	`true`	`false`	`90`
Orbiplex Key Delegation Passports	`true`	`true`	`false`	`95`
Host-Owned Module Store	`true`	`true`	`false`	`90`
Bounded Local Server Runtime	`true`	`true`	`false`	`90`
Inter-Node Artifact Channel (INAC)	`true`	`true`	`false`	`88`
Classification	`true`	`false`	`false`	`76`
Middleware	`true`	`true`	`false`	`94`
Replay Scheduler	`true`	`true`	`false`	`100`
Solution 021: Agora Authority	`false`	`false`	`false`	`77`
Orbiplex Semantic Index	`false`	`false`	`false`	`15`
Artifact Delivery	`true`	`true`	`false`	`100`
TLS Trust Policy	`true`	`true`	`false`	`86`
Contact Catalog	`true`	`true`	`false`	`100`
Pseudonym Vault and Key Roles	`false`	`true`	`false`	`90`
Messaging Middleware	`true`	`true`	`false`	`100`
Temporal Storage Convention	`false`	`true`	`false`	`100`
Bounded Deferred Operations	`true`	`true`	`false`	`100`
Sensorium	`true`	`true`	`false`	`92`
Seed Directory	`true`	`true`	`false`	`100`
Local Relationship Layer	`true`	`false`	`false`	`78`