observability

Overview ¶

transcript.go writes transcript.json into the SAME directory as the causal event log, which the Spawnfile compiler mounts unconditionally so the social record survives container teardown even for a purely in-memory room store.

THIS CHANGES THAT VOLUME'S CONTRACT, DELIBERATELY. It previously held only hashes: the causal log records content_sha256, never message text and never a sender. It now also holds message bodies. That is not an incidental widening: agent speech is the research data the memetics programme exists to study, and a run record that cannot show who said what to whom cannot support the claim that agents held a conversation.

Two properties keep this an attestation rather than a second, drifting copy of the truth:

• Text is checkable. Each message's sha256(json.Marshal(Parts)) equals the content_sha256 the causal log already recorded for that message_id, so a reader verifies the transcript against the sealed log rather than trusting it.
• Attribution is stated, never assumed. `from` is what the SENDER claimed and a sender can claim anything; the authenticated identity is the causal event's principal_id, which causalPrincipal() derives from auth claims alone. The attestation block therefore reports three states and not two: attested, violated, and unattested, because a network running auth.mode: none stamps system:moltnet.anonymous and there is then nothing to compare against. Unattested must never be read as passed.