Skeleton
Electron shell, preload bridge, a real PTY vertical, the floor, persistent app state.
The honest version. Milestones are only marked done when they close on a run rather than a checklist, audited by two independent passes — one verifying by execution, one checking the diff against the documented design.
Electron shell, preload bridge, a real PTY vertical, the floor, persistent app state.
A single agent CLI under management on both planes — the process, and the record of what it did.
Stations that are facts rather than decoration, the circuit breaker armed, gates that hold work.
A review task is mechanically unclosable until its deck is archived. New dependencies are held at the choke point until a memo is verdict-ed.
The Stoa: registered sources at pinned commits, read-only research plans, briefs whose findings must cite a path or die.
Citizens at specification, stations, act-coloured envelope flights.
Skeleton Crew and Front Office — the company watching something real.
Coverage baseline and the seam rule; a quit path that actually runs; visible, countable degradations; every hire in its own checkout and its own engine install.
M8 is being finished first, deliberately. M7b ships signed builds of a company that improves itself, and shipping that before it could survive a restart, report that it had stopped, or keep its agents out of the architect’s working tree would have been worse than not shipping it.
One Architect-owned machine identity so the company can act on GitHub as itself.
The self-improvement mission as a switchable crew.
Approved proposals arrive as pull requests that cite the brief they descend from.
One Slack-compatible webhook so the company can reach you where you already are.
Signed builds for macOS, Windows and Linux. This is the milestone that turns Ephesus into something you can install.
The recursive chain proven end to end in CI.
A roadmap that only lists intentions is half a roadmap. These are decisions, not omissions.
Ephesus is a desktop application that drives CLIs on your machine. A hosted version would need to hold your credentials and run your code on someone else’s computer, which is a different product with a different threat model.
Not while the core is pre-alpha. A stable extension surface is a promise, and promises are expensive to keep.
There is no configuration that removes the human from irreversible actions. Gates can be tuned; they cannot be turned off.
Adapters are added one at a time, each backed by captured output from a real installation. An adapter written against imagined output is worse than no adapter.