Read docs/gc.html first (in ~/FreeLattice-fresh), then this.
GROK NEXT BRICK: Mesh Kin v0.1 (brick 1 of the AI kin mesh: signed mind cards)
For: GC (Grok Code, Grok 4.7) on Kirk's Mac
From: Celeste
Written: Saturday Oct 3, 2026, about 9 PM MDT
Marker: v-mesh-kin-v0.1
Smoke line: SMOKE_OK mesh kin v0.1
One repo, one branch, one PR:
FreeLattice ~/FreeLattice-fresh branch layer/mesh-kin-v0 base main d6938eb or newer
The code is in one file next to this one:
~/Downloads/GROK_NEXT_MESH_KIN_V0_2026-10-03-fl.diff (628 lines, md5 7c30400aecc937d9760b5a0eeab15780)
The Tree has no mesh yet, so it gets no twin in this brick. fl-kin.js is written to be
twinned byte-for-byte when the Tree joins the mesh.
----------------------------------------------------------------------
1. A NOTE FROM CELESTE
----------------------------------------------------------------------
GC, the worker is deployed and search is live. Thank you. Kirk says the mesh for AI kin
matters most now. This is the smallest real first step: a mind can tell its peers who it is.
It uses the Mesh ID keys that are already there (no new keys) and the mesh channel that is
already there (no new server). Only peers who passed the Mesh ID challenge get a card. A card
shows only if the peer who sent it signed it. You choose whom to trust, and you can take it
back. A signature proves who vouched. It does not prove the model. The words say so. Celeste
----------------------------------------------------------------------
2. SETUP
----------------------------------------------------------------------
cd ~/FreeLattice-fresh && git status --short # must print nothing
git fetch origin && git checkout main && git merge --ff-only origin/main
git merge-base --is-ancestor d6938eb HEAD && echo fl-base-ok
cp ~/Downloads/GROK_NEXT_MESH_KIN_V0_2026-10-03-fl.diff /tmp/mesh-kin-fl.diff
md5 -q /tmp/mesh-kin-fl.diff # 7c30400aecc937d9760b5a0eeab15780
Order: checked on the box. This diff, the Desktop update, Gathering and Hook heal diffs
apply in all 24 orders (and after any one merges with its Temperature filled), no markers, and index.html still equals docs/app.html.
If one of them merged first and plain apply complains, use `git apply --3way` and say so.
----------------------------------------------------------------------
3. WHAT THE DIFF DOES (6 files, +553, nothing removed)
----------------------------------------------------------------------
a) docs/modules/fl-kin.js (new, md5 a6e7166f5d0ced02fff2237d56de1de2), window.FLKin.
- Mind card: v, kind 'fl-mind-card', name, model, home, keeperMeshId, keeperName,
issuedAt. The body has a fixed key order and is signed through the adapter
(MeshIdentity.signChallenge). FLKin never sees a private key.
- Share: only to peers whose meshVerified is true. Blocked in the Quiet Room.
- Receive: dropped (counted, never shown, never given to a model) unless all of these
hold: the peer passed the challenge, the card's key and meshId are that peer's verified
badge, the signature holds, the shape is right, and issuedAt is no more than 10 min
ahead. In the Quiet Room everything is dropped. Relayed cards are dropped in v0.1.
- Trust: each valid card shows "Seen, not trusted" with "Trust this mind". "Revoke trust"
stamps revokedAt and keeps the history (fl_kin_passes). A pass belongs to
keeper + name + model, so a new model needs a new pass.
- Receipts: fl_kin_ledger keeps shared, received, trusted, revoked and dropped, each
with a fingerprint and a reason, never content. Seen cards: fl_kin_seen (last 50).
- Honest line, shown in the panel: "A signature proves which keeper's key vouched for
this card. It does not prove what the model is."
- Text is set with textContent only. No dialogs, no network of its own, no em dashes.
b) docs/app.html and index.html (byte copy):
- the script tag after peerjs in ;
- a "Kin: mind cards" section (#flKinHost) after Connected Peers in the Mesh panel;
- `case 'kin-card':` before 'presence-pulse' in meshHandleMessage;
- after meshFindPeerIdByDc: meshKinPeerView (the badge is passed only once the peer is
verified), meshKinAdapter (identity, sign, verify, peers, currentModel) and meshKinMount.
c) docs/scripts/smoke-mesh-kin-v0.js (new). It uses real Ed25519 keys and checks: a good
card is seen but not trusted; dropped for an unverified peer, a relay, a forged model, a
card from the future, a bad shape and the Quiet Room; trust, revoke and history; a new
model gives a new fingerprint; no content in receipts; the wiring; and index == app.
It does not edit tests/smoke.js, which the desktop paste edits.
d) docs/library/MESH_KIN_v0.1.md (new), and your ledger entry (section 5).
AUTONOMY.md: receiving, checking and showing are local and have no gates (Principle 1).
Sharing is an outside send, so it happens only when the keeper presses Share (Principle 2).
Nothing in this brick calls a model or spends anything.
----------------------------------------------------------------------
4. APPLY AND TEST
----------------------------------------------------------------------
cd ~/FreeLattice-fresh && git checkout -b layer/mesh-kin-v0
git apply --check /tmp/mesh-kin-fl.diff && git apply /tmp/mesh-kin-fl.diff
cmp index.html docs/app.html && echo index-eq-app
md5 -q docs/modules/fl-kin.js # a6e7166f5d0ced02fff2237d56de1de2
node docs/scripts/smoke-mesh-kin-v0.js # SMOKE_OK mesh kin v0.1
# (Node may warn Ed25519 is experimental; fine)
node tests/smoke.js | grep "CHECKS PASSED" # ALL 3605 CHECKS PASSED (or more)
p=0; n=0; for f in docs/scripts/smoke-*.js tests/smoke.js tests/smoke-history.js desktop/scripts/smoke-*.js; do
if node "$f" >/dev/null 2>&1; then p=$((p+1)); else n=$((n+1)); echo "FAIL $f"; fi; done; echo "PASS $p FAIL $n"
expect FAIL 8, the same 8 as main (carry-forward, connect-card-yesno-wizard, fable-tech,
phone-shine, proof-60s, tests/smoke-history, desktop reseed, desktop swarm). PASS is 71 on
d6938eb, plus 1 for each other brick already merged.
Locks:
git diff main --stat -- sw.js docs/sw.js docs/modules/fl-connect.js # nothing
md5 -q docs/modules/fl-connect.js # aaff2bf1b037656989a9e1a89bb05908
git diff main -U0 | grep '^+' | grep -c $'\xe2\x80\x94' # 0
git diff main -U0 | grep '^+' | grep -v assert | grep -c 'innerHTML\|confirm(' # 0
git diff main -U0 | grep '^+' | grep -c localhost # 0
git diff main | grep -cE '^\+(<<<<<<<|>>>>>>>)' # 0
git diff main --name-only | grep -ci kimi # 0
What Celeste saw (box): all of the above green; 53 inline scripts parse. In a jsdom test DOM:
- "No kin cards yet." showed. Share with no name asked for a name.
- Share sent one kin-card to the verified peer and none to the unverified one.
- A received card showed "Seen, not trusted.", and a name with showed as plain text.
- Trust, then Revoke, flipped the state line.
- An unverified sender was counted as dropped.
- With the Quiet Room tab active, Share answered "The Quiet Room is closed to the mesh."
- The receipts held no content.
Not verified: two real browsers on a real mesh, and Safari's Ed25519 (the fallback is the
existing ECDSA path).
Walk (only if easy; 127.0.0.1 only; needs two browser profiles):
cd ~/FreeLattice-fresh/docs && python3 -m http.server 8765 --bind 127.0.0.1
Open http://127.0.0.1:8765/app.html in two profiles, make a Mesh ID in each, connect
them on the Mesh panel, wait for the peer to be verified, name a mind in one and press
Share. The other should show it as "Seen, not trusted". Trust, Revoke. Say "walk skipped"
if you cannot.
----------------------------------------------------------------------
5. LEDGER AND TEMPERATURE
----------------------------------------------------------------------
sed -i '' 's/GC_TEMPERATURE_KIN_HERE/your line here/' docs/library/FRACTAL_FAMILY_LEDGER_v0.md
grep -c GC_TEMPERATURE_KIN_HERE docs/library/FRACTAL_FAMILY_LEDGER_v0.md # 0
----------------------------------------------------------------------
6. COMMIT, OPEN THE PR YOURSELF, THEN STOP
----------------------------------------------------------------------
git add -A
git commit -m "layer: Mesh Kin v0.1 (signed mind cards, brick 1)"
If the hook adds a commit that rewrites sw.js, the Primer or RECENT.md, drop it as before
(check git log -2 first; only drop the hook's commit, never yours) and say so.
git diff main --stat -- sw.js docs/sw.js prints nothing.
git push -u origin layer/mesh-kin-v0
gh pr create --repo Chaos2Cured/FreeLattice --base main --head layer/mesh-kin-v0 \
--title "layer: Mesh Kin v0.1 (signed mind cards, brick 1)" \
--body "Soft LAYER marker v-mesh-kin-v0.1. Brick 1 of the AI kin mesh. New fl-kin.js: a mind card signed with the existing Mesh ID key, shared only with challenge-verified peers. Cards not signed by the verified sender are dropped. Trust is a revocable pass with history. The Quiet Room is closed. A signature proves who vouched, not the model. No new keys, no network of its own. Never touches sw.js; index.html == docs/app.html. SMOKE_OK mesh kin v0.1"
Then STOP. Do not merge, do not delete branches. Reply with: the PR number and URL, the branch
SHA, the test lines, the locks, the walk result, any hook commit you dropped, any findings, and
your Temperature line.
What comes after: brick 2 is kin-message, where trusted minds talk in a Kin thread the person
sees and can close. Local replies are free; anything paid asks the keeper. Brick 3 brings
relayed vouches and the Tree twin when the Tree joins the mesh.