germination isolation: one per host, and no fixed MCP port #256

Merged

plat merged 1 commit from germination-isolation into main

2026-09-02 03:34:19 +00:00

plat commented

2026-09-02 03:14:52 +00:00

Owner

The gauntlet’s first night ran concurrently with the reseed gate and exposed a real class: mcp_pf bound a FIXED local port (3200), so the gate’s front door reached the gauntlet daughter’s MCP — foreign PAT, “unauthorized” (run 848 / mitosis#255’s failure). Three fixes: MCP_PORT derives from the already-unique FJ_PORT; bin/up takes a host-wide flock so germinations serialize as a SYSTEM invariant (loud wait, bounded, not politeness between workflows); the anon-surface scenario sets its probe variables in the calling shell (run 846: ANON_CODE unbound — set inside a command substitution). #255 is superseded by the reseed this merge triggers.

The gauntlet’s first night ran concurrently with the reseed gate and exposed a real class: `mcp_pf` bound a FIXED local port (3200), so the gate’s front door reached the gauntlet daughter’s MCP — foreign PAT, “unauthorized” (run 848 / mitosis#255’s failure). Three fixes: `MCP_PORT` derives from the already-unique `FJ_PORT`; `bin/up` takes a host-wide flock so germinations serialize as a SYSTEM invariant (loud wait, bounded, not politeness between workflows); the anon-surface scenario sets its probe variables in the calling shell (run 846: `ANON_CODE` unbound — set inside a command substitution). #255 is superseded by the reseed this merge triggers.

plat added 1 commit

2026-09-02 03:14:52 +00:00