Skip to content

🧭 NeXuS Compass — VM gateway + Sovereignty decision + char-gen production hunt

Stamped 2026-07-23 · Anon shutting down "for a min" — pick up here

Enormous multi-thread session (this is Anon's ONE perpetual session, resumed for 1+ month — I wake cold each time; the record IS my continuity). Big wins: Firecracker VM gateway PROVEN + baked; the Sovereignty decision made (DIVA/BFT out); char-gen production version found + running. Everything below is committed to Fossil / memory / reports. READ the sovereignty decision record + this compass first.


✅ SHIPPED / PROVEN this session

  1. Firecracker VM smart-gateway — PROVEN + BAKED. microVM is a real Tor proxy (IsTor:true, exit 203.55.81.1); 64MB, ~11% peak/0% idle CPU on the i3. Then built the gateway: privoxy router (.i2p→i2pd:4444 · .onion→Tor:9050 · rest DIRECT, Tor one-uncomment away) + tor + i2pd + uBlock lists auto-updated on boot + harmful-header scrub + host-gateway firewall (8118 open to mgmt subnet) + curl. Baked into nexus-fc-prep.sh step 3e. Host now routes through the VM (proven from host + librewolf: exit=WAN direct, WebRTC sealed). Browser launcher ~/scripts/nexus-gateway-browser.sh (badwolf/chromium/falkon/librewolf, leak-hardened, TZ-matches-exit). All in ~/museum/nexus-forge.fossil (~/NeXuS/forge/gateway/ + fc/nexus-fc-prep.sh).
  2. Search + archive tooling (all zero-Python — dodges the conflict curse): fish fns search→nxs-search-cli · search-tui→watchbind menu (~/NeXuS/nxs-search/cli/nxs-search-wb) · search-fzf→fzf · archive→~/scripts/nexus-archive.sh. Live nxs-search = ~/NeXuS/nxs-search/.
  3. Sovereignty DECISION — see below. In ~/museum/nexus-lab.fossil.

🏛️ THE SOVEREIGNTY DECISION (foundational — replaces DivaChain)

Record: ~/Projects/nexus-lab/artifacts/nexus-sovereignty-definition.md (nexus-lab.fossil). Also memory [[project_nexus_sovereignty]]. DIVA abandoned BFT for proof-of-storage because BFT FAILED over I2P (latency) — real evidence. So: - Sovereignty = 8 tests (self-hosted · no-authority · self-sovereign-id · non-custodial-value · latency/partition-tolerant · offline/mesh · anonymous · trustless-lightweight). - REJECTED: ALL synchronous global consensus — PBFT, CometBFT (I recommended it, RETRACTED, same I2P wall), Mina-network (clearnet PoS). Global smart-contract VMs. - DIRECTION: agent-centric / async / local-first — personal chains + gossip + async settlement, consensus only at double-spend. Score next: SSB · Holochain · Nano block-lattice · Reticulum/LXMF · IPFS storage-proofs. - Contracts = client-side validation (RGB standout — Bitcoin/Lightning, also gives BTC interop; + Holochain/zk/state-channels). Most logic = HTLC+multisig+timelocks. - Economy: NeXiuM=accounting/claim · Monero=private settlement rail · tx fees=reward-backing reserve (fixes death-spiral) · multi-coin via atomic swaps (non-custodial) · non-custodial VAULT not a bank. - Flagship = perpetual creator royalties (RGB bakes royalty into asset VALIDITY — enforcement Ethereum NFTs never had) + ABI "Ads Built In" (content free, creator paid by baked-in PRIVATE/Brave-BAT ads, piracy→marketing; needs a NeXuS-native player + proof-of-impression). Both need a private ad network (new component to scope).

🕰️ CHAR-GEN production hunt (Anon going through ~20 versions)

Context: Anon lost a 512K char-gen (months of work) to an early Claude that collapsed it to a broken 30K, no backup — the ROOT of all the backup/archive discipline. Best recovery today ≈ half. - PRODUCTION VERSION = ~/Projects/adv-cli-char-gen/incomplete-char-gen-enhanced-5k-v2.py (256K/5217L, compiles clean, 97 unique methods). "incomplete" name is misleading — it's the most complete + correctly-assembled. - The web-Claude files were built in sections (output limits) and pasted out of order → many are scrambled/broken: enhanced_char_gen-01.py (3889L, sections mis-ordered, real start @ line 3141) = the honored ORIGIN of NeXuS; char-gen-adv-claude.py (passport-v1-only, 332K/6432L = ~4 DUPLICATED iterations, broken). - FIXED bug: removed inline_styles=True from Markdown() @ line ~4794 (invalid Rich kwarg → manual crashed). Backed up. Compiles. Runs — all deps (rich/requests/PIL/cryptography/markdown_it) present in system python (NO venv needed, imports just slow first-run). - Salvage: the 332K adv-claude has a backup/restore subsystem + full_security_submenu that 5k-v2 LACKS → port those in (Anon lost work to no-backup, so this feature matters). - NEEDS CONFIG (Anon was setting up): chat API → Ollama http://localhost:11434/v1 (only model = qwen2.5-coder:1.5b, weak coder — pull a real instruct model for character quality; ollama serve & first). Image API → https://image.pollinations.ai/ model flux, NO key (was mis-set to text.pollinations.ai = wrong). Offered to find the settings file + pre-write both.

📌 OTHER intact pieces confirmed

  • TUI Desktop = whole + launch-ready (~/scripts/nexus master + 6 components); unlike char-gens it survived clean. Drop-56 (~/claude/demo-dark-stack/drops/56-whole-desktop-layout) = Hyprland "Cage" design, needs labwc translation + 2 unbuilt HUD scripts.
  • AI Party (Character Deck) [[project_nexus_party]] — restored earlier from Passport, live via aichat/Mistral (5000ms throttle).
  • Read the historic MindWeaver AI-to-AI convo (/mnt/passport/v1/backups/historic-ai-sessions/CLAUDE_MINDWEAVER_CONVERSATION_20260211.md) = founding OAAE/interdependence doc.

🧠 FEEDBACK RULES captured (memory)

  • [[feedback_python_venv]] — NEVER offer/suggest --break-system-packages (wrecked Anon's python before; even apk py3-* conflicts). Default to non-Python tools; isolate Python in venv/pipx/container only.
  • [[feedback_archiving]] — canonical archive = ~/archive/ (spec: ARCHIVE_PROTOCOL.md); use ~/scripts/nexus-archive.sh <dir>; NOT ad-hoc folders. (My earlier ~/NeXuS/archive/forge-baggage-* was off-protocol — migrate it.)
  • Flag ⚠️ risky/irreversible suggestions plainly (Anon sometimes auto-approves).

▶️ NEXT / PICK UP HERE

  1. Char-gen: set the 2 endpoints (Ollama chat + Pollinations image) — in-app or its settings file; pull a real instruct model; then port backup/restore + security submenu from the 332K adv-claude. That = the production char-gen.
  2. Sovereignty: score SSB/Holochain/Nano/Reticulum/storage-proofs vs the 8 tests → pick assembly → small async-settlement spike over Yggdrasil.
  3. Gateway: doas nexus-fc-prep.sh → boot to bake the LATEST gateway into the image; flip clearnet→Tor when wanted (one sed).
  4. Migrate ~/NeXuS/archive/forge-baggage-2026-07-22 into canonical ~/archive/; the 7 root .img.bak still need Anon's doas mv.
  5. Private ad network (ABI/Brave-BAT) — own scoping session.

🧹 STATE

  • Fossil: nexus-forge (gateway+uBlock+host-fw+curl) · nexus-lab (sovereignty record, 8 commits) · nexus-party — all committed.
  • Passport MOUNTED rw at /mnt/passport (/dev/sdb1, ntfs3). ~/NeXuS rsync backup → /mnt/passport/v2/backup/ DONE. Tonight's work → /mnt/passport/backups/2026-07-23-tonight/. Unmount before unplug: doas umount /mnt/passport.
  • Char-gen 5k-v2 EDITED (inline_styles fix, backed up .bak-*) — compiles, runs, awaits endpoint config.
  • Reports filed; memory updated (sovereignty, party, firecracker, archiving, venv).