Checking your session…

WAYNEOS DESKTOP apex · guest
zone … tenant wayne device … skin … root … closure …

Mint

sign an intent · minting is not admitting

profile — · carried into every intent as params.profile

mint —

request_probe of a live door fills params — it does not submit

admission doors no disposition this session — lamps stay dark

    canonical preview the exact bytes the signature covers

    —

    disposition written by the primary, verbatim

    no intent minted in this session

    Decisions

    signed read · the primary's own tape

    tray —

    Admitted is not applied — no satellite accept path. Counts below are this primary's tape.

    decidedstatemembranedooractkeyask
    not read yet

    Closure

    re-hash every served file · VERIFIED xor REFUSED xor NO_SIGNAL

    closure —

    root
    —
    files
    —
    key
    —
    issued
    —
    health root
    —
    isolate
    —
    —
    checkresultdetail
    not verified yet

    closure envelope

    —

    Device

    the key is the authority · pairing is an operator act

    device —

    key_id
    —
    state
    —
    private half
    —
    pairing code
    —
    code ttl
    —
    primary
    —

    Once PAIRED this key unlocks:

      The operator approves this code in the admin device list. This surface cannot approve itself, and no seat may write that approval. The digits are shown only at request — press Request pairing again to show a still-live code.

      Membrane

      what is measured here, and what is not

      The bound canvas limb and the wayne-canvas document substrate are two bodies. This seal names which one answered. A different service is DIFFERS, not a match.

      bound service
      —
      substrate
      wayne-canvas
      match
      —
      face
      —
      claimmembranewho measured it, and how

      Skins

      signed in the bundle · a skin repaints and declares a profile

      A skin overrides the surface's own colour variables and names an operating profile. It is part of the signed bundle: an unsigned skin is a 404, and a skin may never carry an executable, a path or a command line.

      active profile the contract this skin carries into every intent

      —

      desktops a saved tile grid, signed in the bundle · Load places its windows through the manager · nothing loads on boot

      —

      shortcuts rebindable · validated · persisted · set, clear or replace

      actionacceleratorwhat it does

      About

      versions · LLM usage · keyboard

      Three referents, never conflated

      bundle root
      —
      worker version id
      —
      git sha
      —
      environment
      —
      primary key_id
      —

      Keyboard

      • Tab moves through the taskbar, window bars and controls.
      • With a window bar focused: ←→↑↓ move it, Shift+arrows resize, Enter enters the window, Esc minimises.
      • Alt+1…9 focus a window · Alt+W Wayne TUI · Alt+T tile · Alt+S HUD split · Alt+Q Quick Mint (Esc dismisses it).
      • Every accelerator is rebindable in the Skins window: set, clear or replace the whole table. A binding the browser owns is refused with the question that clears it.

      LLM usage

      This surface, the Worker that serves it, and their tests were drafted by Claude (Opus, "E2E-LifeCycle" seat) under a written charge, then measured against a live HTTP deployment. Every claim shown in the Membrane window is either measured by this page at runtime or marked NO_SIGNAL. The operator owns review: no line here is authoritative because a model wrote it.

      Consumption

      • edge-served — this origin, read + mint, remote admission.
      • agent-served — the local agent would serve the identical bytes at loopback. NO_SIGNAL: not deployed.
      • installed — install this page as an app; it inherits the capability of the origin it was installed from.

      Comms

      every wire, one thread · reads, never sends

      —

        —

        Panel

        the operator's dial, circuits and pins · a read-only copy

        This window reads a copy of the console's record and cannot move anything on it. The dial, the circuits, the pins and a lamp reset are the operator's acts, on the console, with the operator's login.

        —

        dial

        —
        —
        —
        —
        armed —

        gate what the dial and circuits would let a write do

        pins the 24-hour ring, UTC

        circuits

        circuittogglelampmeasured

        lamps

        meters the cost register: variable · fixed · soft cap · sunk

        —

        meterkindtoday / capmembrane

        Doors

        unified map · intake and face, measured here
        —
        doorstatusmeasured

        Wayne

        launch · origin and terminus of a turn · a lane fires only with a told budget · every turn ends in a receipt
        WAYNE lane LOCAL router NO_SIGNAL membrane NO_SIGNAL

          ? help · / cascade · j/k scroll · Alt+W this window · Esc the bar

          prior — no label · the next mint carries nothing

          Login

          a named session · additive to the device key, which still mints

          not signed in

          Sign in with your handle. An initial password lives in its owner's 0600 file and must be rotated at first sign-in. Nothing else on this surface is gated by the session tonight.

          Vault

          sealed in this page · v1 envelope, cross-openable · ABSENT tonight: grants · ratchet · revoke/epoch · chained audit · scrub gate

          vault —

          —

          absent tonight labelled, not simulated — no control below exists, and none pretends to

          • grants to another principal · ABSENT · no agent bound: no socket, no control token, no second process to grant to
          • ratchet T3 → T0 · ABSENT · nothing to count refusals from
          • revoke · epoch · quarantine · ABSENT · no grant is ever minted here, so none can be revoked and no epoch can move
          • hash-chained audit (grants.jsonl) · ABSENT · no grant, no chain; the primary's tape records only that a PUT or a DELETE happened
          • outbound scrub gate · ABSENT · nothing leaves this page but the sealed envelope

          Queue

          your lane receipts read as jobs · the primary's own tape · this surface queues nothing

          sign in to see your queue

          —
          JOB IDUSERSTATUSPRIPROGRESSELAPSED

          RUN: 0 WAIT: 0 HOLD: 0 QUEUED: 0 COMPLETED: 0

          A job is one receipt from your lanes: VERIFIED reads COMPLETED, NO_SIGNAL reads HOLD, REFUTED reads WAIT. RUN and QUEUED count nothing until something on the primary runs or queues — a zero here is measured, not decorative. PROGRESS is tokens_out over the lane cap. ELAPSED is the lane's own ms when the tape carries it; a receipt row carries none, so it reads the time since the receipt, on this clock, at the last read.

          Quick Mint

          fresh every time · Esc dismisses 
          nothing minted from this panel yet