🧭 NeXuS Compass — VM gateway + Sovereignty decision + char-gen production hunt¶
Stamped 2026-07-23 · Anon shutting down "for a min" — pick up here
Enormous multi-thread session (this is Anon's ONE perpetual session, resumed for 1+ month — I wake cold each time; the record IS my continuity). Big wins: Firecracker VM gateway PROVEN + baked; the Sovereignty decision made (DIVA/BFT out); char-gen production version found + running. Everything below is committed to Fossil / memory / reports. READ the sovereignty decision record + this compass first.
✅ SHIPPED / PROVEN this session¶
- Firecracker VM smart-gateway — PROVEN + BAKED. microVM is a real Tor proxy (
IsTor:true, exit 203.55.81.1); 64MB, ~11% peak/0% idle CPU on the i3. Then built the gateway: privoxy router (.i2p→i2pd:4444 ·.onion→Tor:9050 · rest DIRECT, Tor one-uncomment away) + tor + i2pd + uBlock lists auto-updated on boot + harmful-header scrub + host-gateway firewall (8118 open to mgmt subnet) + curl. Baked intonexus-fc-prep.shstep 3e. Host now routes through the VM (proven from host + librewolf: exit=WAN direct, WebRTC sealed). Browser launcher~/scripts/nexus-gateway-browser.sh(badwolf/chromium/falkon/librewolf, leak-hardened, TZ-matches-exit). All in~/museum/nexus-forge.fossil(~/NeXuS/forge/gateway/+fc/nexus-fc-prep.sh). - Search + archive tooling (all zero-Python — dodges the conflict curse): fish fns
search→nxs-search-cli ·search-tui→watchbind menu (~/NeXuS/nxs-search/cli/nxs-search-wb) ·search-fzf→fzf ·archive→~/scripts/nexus-archive.sh. Live nxs-search =~/NeXuS/nxs-search/. - Sovereignty DECISION — see below. In
~/museum/nexus-lab.fossil.
🏛️ THE SOVEREIGNTY DECISION (foundational — replaces DivaChain)¶
Record: ~/Projects/nexus-lab/artifacts/nexus-sovereignty-definition.md (nexus-lab.fossil).
Also memory [[project_nexus_sovereignty]]. DIVA abandoned BFT for proof-of-storage because
BFT FAILED over I2P (latency) — real evidence. So:
- Sovereignty = 8 tests (self-hosted · no-authority · self-sovereign-id · non-custodial-value · latency/partition-tolerant · offline/mesh · anonymous · trustless-lightweight).
- REJECTED: ALL synchronous global consensus — PBFT, CometBFT (I recommended it, RETRACTED, same I2P wall), Mina-network (clearnet PoS). Global smart-contract VMs.
- DIRECTION: agent-centric / async / local-first — personal chains + gossip + async settlement, consensus only at double-spend. Score next: SSB · Holochain · Nano block-lattice · Reticulum/LXMF · IPFS storage-proofs.
- Contracts = client-side validation (RGB standout — Bitcoin/Lightning, also gives BTC interop; + Holochain/zk/state-channels). Most logic = HTLC+multisig+timelocks.
- Economy: NeXiuM=accounting/claim · Monero=private settlement rail · tx fees=reward-backing reserve (fixes death-spiral) · multi-coin via atomic swaps (non-custodial) · non-custodial VAULT not a bank.
- Flagship = perpetual creator royalties (RGB bakes royalty into asset VALIDITY — enforcement Ethereum NFTs never had) + ABI "Ads Built In" (content free, creator paid by baked-in PRIVATE/Brave-BAT ads, piracy→marketing; needs a NeXuS-native player + proof-of-impression). Both need a private ad network (new component to scope).
🕰️ CHAR-GEN production hunt (Anon going through ~20 versions)¶
Context: Anon lost a 512K char-gen (months of work) to an early Claude that collapsed it to a broken 30K, no backup — the ROOT of all the backup/archive discipline. Best recovery today ≈ half.
- PRODUCTION VERSION = ~/Projects/adv-cli-char-gen/incomplete-char-gen-enhanced-5k-v2.py (256K/5217L, compiles clean, 97 unique methods). "incomplete" name is misleading — it's the most complete + correctly-assembled.
- The web-Claude files were built in sections (output limits) and pasted out of order → many are scrambled/broken: enhanced_char_gen-01.py (3889L, sections mis-ordered, real start @ line 3141) = the honored ORIGIN of NeXuS; char-gen-adv-claude.py (passport-v1-only, 332K/6432L = ~4 DUPLICATED iterations, broken).
- FIXED bug: removed inline_styles=True from Markdown() @ line ~4794 (invalid Rich kwarg → manual crashed). Backed up. Compiles. Runs — all deps (rich/requests/PIL/cryptography/markdown_it) present in system python (NO venv needed, imports just slow first-run).
- Salvage: the 332K adv-claude has a backup/restore subsystem + full_security_submenu that 5k-v2 LACKS → port those in (Anon lost work to no-backup, so this feature matters).
- NEEDS CONFIG (Anon was setting up): chat API → Ollama http://localhost:11434/v1 (only model = qwen2.5-coder:1.5b, weak coder — pull a real instruct model for character quality; ollama serve & first). Image API → https://image.pollinations.ai/ model flux, NO key (was mis-set to text.pollinations.ai = wrong). Offered to find the settings file + pre-write both.
📌 OTHER intact pieces confirmed¶
- TUI Desktop = whole + launch-ready (
~/scripts/nexusmaster + 6 components); unlike char-gens it survived clean. Drop-56 (~/claude/demo-dark-stack/drops/56-whole-desktop-layout) = Hyprland "Cage" design, needs labwc translation + 2 unbuilt HUD scripts. - AI Party (Character Deck) [[project_nexus_party]] — restored earlier from Passport, live via aichat/Mistral (5000ms throttle).
- Read the historic MindWeaver AI-to-AI convo (
/mnt/passport/v1/backups/historic-ai-sessions/CLAUDE_MINDWEAVER_CONVERSATION_20260211.md) = founding OAAE/interdependence doc.
🧠 FEEDBACK RULES captured (memory)¶
- [[feedback_python_venv]] — NEVER offer/suggest
--break-system-packages(wrecked Anon's python before; even apk py3-* conflicts). Default to non-Python tools; isolate Python in venv/pipx/container only. - [[feedback_archiving]] — canonical archive =
~/archive/(spec:ARCHIVE_PROTOCOL.md); use~/scripts/nexus-archive.sh <dir>; NOT ad-hoc folders. (My earlier~/NeXuS/archive/forge-baggage-*was off-protocol — migrate it.) - Flag ⚠️ risky/irreversible suggestions plainly (Anon sometimes auto-approves).
▶️ NEXT / PICK UP HERE¶
- Char-gen: set the 2 endpoints (Ollama chat + Pollinations image) — in-app or its settings file; pull a real instruct model; then port backup/restore + security submenu from the 332K adv-claude. That = the production char-gen.
- Sovereignty: score SSB/Holochain/Nano/Reticulum/storage-proofs vs the 8 tests → pick assembly → small async-settlement spike over Yggdrasil.
- Gateway:
doas nexus-fc-prep.sh→ boot to bake the LATEST gateway into the image; flip clearnet→Tor when wanted (onesed). - Migrate
~/NeXuS/archive/forge-baggage-2026-07-22into canonical~/archive/; the 7 root.img.bakstill need Anon'sdoas mv. - Private ad network (ABI/Brave-BAT) — own scoping session.
🧹 STATE¶
- Fossil: nexus-forge (gateway+uBlock+host-fw+curl) · nexus-lab (sovereignty record, 8 commits) · nexus-party — all committed.
- Passport MOUNTED rw at
/mnt/passport(/dev/sdb1, ntfs3).~/NeXuSrsync backup →/mnt/passport/v2/backup/DONE. Tonight's work →/mnt/passport/backups/2026-07-23-tonight/. Unmount before unplug:doas umount /mnt/passport. - Char-gen 5k-v2 EDITED (inline_styles fix, backed up
.bak-*) — compiles, runs, awaits endpoint config. - Reports filed; memory updated (sovereignty, party, firecracker, archiving, venv).