The proving matrix
The receipts. This is the full ●/◇ table the Big Picture
summarises — what has been built-and-run versus what has a design of record but is not yet
demonstrated end to end. Source material: the build-and-run matrix in
status/2026-07-18-night.md and its morning addendum, which closed the Windows column when
P-201w merged. Legend: ● proven (verified in the 2026-07-18 matrix) · ◇ designed-only /
blocked (design of record, not yet demonstrated) · — (not applicable / not this leg).
Every ● below is backed by CI-green + a second-mind verdict quoted in the night record; every ◇ names what gates it.
Platform legs — serve, consume, in-frame render
| Platform | Serve an app | Consume an app | Render in Prism’s frame | Evidence / gate |
|---|---|---|---|---|
| Linux | ● | ● | ● | Night matrix, all legs on the smolvm engine socket path. |
| macOS | ● | ● | ● | P-208 (serve) + P-201m (macOS consume-in-frame). |
| Windows | ● | ● | ● | Serve leg P-206 (native VM 200, launcher PR #62); in-frame consume P-201w (launcher PR #64), merged in the morning addendum — column fully closed. |
| Android | — | ● (on-device plane) | ◇ blocked | Consume proven on the on-device plane (P-202); the two frame cells (in-frame render, in-frame offline honesty) wait on PROPOSED d/104. |
The two-device story holds end to end: Device B publishes over iroh and the payload arrives byte-identical (matching sha256); a source drop shows an honest offline notice and recovers on return (P-184).
App kinds — all four proven
| App kind | Status | Evidence |
|---|---|---|
| Static | ● | static-v0 / Origin driver; Excalidraw is the exemplar. |
| Live-backend (single service) | ● | guestbook through install → start → serve → recover (P-141 + P-203). |
| Single-page app (vite / built) | ● | vite-SPA kind exercised in the fleet catalog. |
| Compose (multi-service) | ● | compose-board through the full lifecycle (P-203 auto-wired end to end). |
The fleet catalog that lists and launches all of these is merged on prism main (@98acaa3,
PR #18), with CI runs down to 24–31s (previously red with ~51-min stalls, fixed by PR #19).
Real applications & end-to-end pipelines
| Capability | Status | Evidence / gate |
|---|---|---|
| Real production app inside Prism’s frame | ● | Excalidraw runs the whole peer pipeline (P-211; xe-example-apps @5752a3e, PR #2). |
| Two-device serve → consume, byte-identical | ● | P-184; matching sha256, honest offline notice, recovery on return. |
| Android companion (membership + consent + audit) | ● | v1 phone-as-client: consume, launcher, membership/consent, tamper-evident session ledger. |
| Whole-origin compose UI (e.g. an Immich UI) | ◇ gated | P-210 gated on PROPOSED d/103-B (route type) + the connector socket-custody reconcile; Immich sits at L0 today. |
| Peer-sync v1 (two desktops, metadata only) | ◇ designed | Design of record landed (d/068); not yet wired — volumes stay single-home. |
| Xenon fork artifact | ◇ designed | Not yet built; today = stock Chromium + a flag recipe (d/057). |
| Console reads Prism’s journal (same device) | ◇ open seam | No wiring yet; named in the system spine. |
| App update loop (discover → consent → apply / rollback) | ◇ built, idle | The engine is library-complete but has no user loop (EB-1). |
| Authed-wake (peer wakes a sleeping device) | ◇ designed | Honest disabled stub only; the socket-activation crux is unresolved. |
The night’s merged packets (final main per repo)
For traceability, the merges behind the ● rows above:
xenon-launcher→@2671bea9: P-197 (#56), P-209 hardening (#58), P-202 path (#59), P-203 backend auto-wire (#60), P-204 origin correctness (#61), P-206 Windows peers (#62), P-201w Windows consume-in-frame (#64, morning addendum).xenon-runtime→@ed028a7: P-212 (#9), P-214 first-run (#10), P-213 fronting (#11), P-202 on-device plane (#12).prism→@98acaa3: fleet catalog (#18), CI hardening (#19).xe-example-apps→@5752a3e: P-200 (#1), P-211 Excalidraw (#2).
P-201w’s second-mind verdict was MERGE-READY: gates independently reproduced (cargo test 740
passed / 0 failed, clippy clean -D warnings), clean rebase, workerd-windows 1.20250718.0
hash-verified. The 10s dial deadline is a consciously-ratified honest-offline behaviour on all
platforms.