Skip to content

GaiaFTCL β€” Sovereign Mathematics Substrate on Apple Silicon

v120 β€” Generally Available (2026-05-25, Norwich, Connecticut)

A Mac cell β€” on-device, no cloud, no remote LLM β€” that proves its own results through two independent gates (Lean 4 kernel + Swift exact-rational recompute) that must agree bit-for-bit. What CALORIE means here: zero sorry, zero axiom, zero opaque, currency-clean theorem statement, named falsifier theorem. What CURE means: open work, with the obligation written into the source. No silent seals.

41 of 46 Lean artifacts CALORIE-sealed today. 5 CURE files with 14 sorry and 23 opaque enumerated in source. 9 named open frontier summits, each with its licensing certificate verbatim. 0 divergences since boot. The substrate never leaves the cell.

πŸœ‰ The discipline this cell instantiates: the metrology of meaning

A new engineering discipline for measuring whether meaning survives transformation, built on a proven instrument and a construction discipline that fails closed and names its own frontier.

β†’ LVC across the domains β€” the discipline aimed at what it was built for: 125,000+ validated cures (78,702 Drug Discovery proteins Β· 46,693 Materials molecules) loaded as language games, scored by a constant self-running loop for all six reader types, each a recomputable witnessed receipt in the citizen's hand. Batteries and water are the same shape, named-next.

Three load-bearing properties β€” all three present, all three load-bearing together:

  1. A quantity nobody could measure before β€” meaning-survival-under-transformation. Genuinely unmeasurable before, not just unmeasured.
  2. A proven instrument β€” GTWED with machine-checked triangle inequality, exact-Rat deciding at the boundary, a receipt anyone can re-run on bytes alone (/usr/bin/shasum on the exported canonical, zero project code in the verify path).
  3. A construction discipline β€” fail-closed by default, an unmovable floor, exact-wins-over-fast, substrate-wins-over-document, an honest seal/summit frontier that names what the discipline does NOT claim.

Software engineering became real engineering when it got formal verification. This stack is the equivalent move for communication and meaning: fidelity made provable, with build rules that keep it honest. 76/76 hostile-strict assertions pass across the three verify suites (V2 18/18 + V3 30/30 + Constitutional 28/28).

The discipline is alive when, asked what it cannot do, it answers without flinching.

β†’ Metrology-Of-Meaning β€” the discipline, the three properties, the build rules, the hostile-reader claim. β†’ Metrology-Frontier β€” what the discipline does NOT claim. Nine named summits with explicit close conditions; three constitutional refusals. β†’ Striving-Doctrine β€” what the discipline OWNS. The cell points its own instrument at its own UI; the teacher loops; the cell closes its own drift autonomously under standing operator policy in striving_authorization_policy (append-only, append a new row to revoke). Live evidence: drift on elem-home-scene-title was reverted to hardcoded; the daemon detected it within one 3-second tick, applied eliminate_hardcoded via the cell's own SupervisedClosingActor, wrote a closing_audit row with actor='cell-autonomous', and the next tick measured drift=0. No manual SQL. The cell strives on two axes now β€” binding-coverage AND localization-coverage β€” with an anti-fake guard that makes writing English into a non-English locale structurally impossible (the 7 non-English locales are a named summit requiring real translation). 150/150 cumulative hostile-strict (V2 18/18 + V3 30/30 + Constitutional 28/28 + UI Striving 21/21 + Perpetual 19/19 + Autonomous Close 20/20 + Localization 14/14). β†’ LVC-Constitutional-Floor β€” the floor that cannot be moved. The gate that witnesses fidelity. The receipt the public holds. It witnesses; it does not rule.

What you can do with this β€” by audience

β†’ If you want to verify the cell's work yourself

Three commands. ~3 minutes on Apple Silicon.

git clone https://github.com/gaiaftcl-sudo/gaiaFTCL.git && cd gaiaFTCL

# 1. Every Lean artifact compiles cleanly (the unforgeable gate)
cd proof/lean && lake build && cd ../..

# 2. Audit the cell's own claims against the file system
swift run --package-path cells/xcode M8InventoryAuditor
# β†’ OVERALL TERMINAL: COMPLETE (exit 0 = the cell isn't lying about what it holds)

For per-domain dual-gate seals (each ~1 second on Apple Silicon): 

cd cells/xcode
swift run M8GammaQ001SmokeTest          # continuum firewall: Ξ“(n+Β½) = cβ‚™Β·βˆšΟ€
swift run M8FuncEqQ001SmokeTest         # ΞΆ functional equation rational evaluation
swift run M8GroverN4SmokeTest           # Grover's algorithm at N=4
swift run M8QFTN4SmokeTest              # Quantum Fourier Transform at N=4
swift run M8RosettaLionSmokeTest        # the meaning lattice (41 nodes, 9 summits)
swift run M8ShorCertifierSmokeTest      # the Shor witness certifier (see below)

β†’ Press-Release-v120 β€” the full release press doc

β†’ If you want to subscribe to the cell's live trust signal (any RSS reader)

Bring up the verification node, then subscribe any RSS reader (iPad, dashboard, browser extension, ATC-style board) β€” no integration code, no MCP client:

cd cells/xcode && swift run GaiaNodeServer   # 127.0.0.1:8423

Then point your reader at:

Endpoint What it tells you
http://127.0.0.1:8423/feed/status.xml RSS 2.0 β€” last 50 sealed claims, verdict + category, no internals
http://127.0.0.1:8423/feed/divergence.xml ATC alarm β€” empty = healthy. One item = the cell caught a drift
http://127.0.0.1:8423/feed/summits.xml The 9 named open frontier summits with licensing certificates
http://127.0.0.1:8423/feed/status.atom Atom 1.0 (same content)
http://127.0.0.1:8423/feed/status.json JSON Feed 1.1 (same content)
http://127.0.0.1:8423/mcp/health JSON liveness probe

A scoped tier (/feed/{token}/receipts.xml) ships full hostile-verifier receipts with reproduction commands per item, so subscribers can re-run any seal locally. Tokens live in ~/.gaiaftcl/node/scoped_tokens.txt.

β†’ Lion-Verification-Node β€” endpoint table + sovereignty boundary details

β†’ If you want to verify a Shor witness at scale

The cell ships a Shor witness certifier that grades (N, halfPow) factoring witnesses bit-for-bit. Two independent gates (Lean kernel + Swift BigInt recompute) must agree.

swift run --package-path cells/xcode M8ShorCertifierSmokeTest

Tier 1 β€” 35 actual factorizations performed by the cell (period found by classical brute search, no use of p, q): N = 15 β†’ 65,021. Wall-clock 0.6 ms.

Tier 2/3 β€” 13 verifications of witnesses constructed from already-known (p, q) via CRT, at scales up to N = 8,000,321,000,351 (43-bit). These rows are NOT factoring claims β€” they certify the verification arithmetic at scale. Wall-clock 0.2 ms.

The cell ships the certifier ready to grade any future Shor output β€” quantum hardware, hybrid algorithm, or classical breakthrough β€” at any scale the verifier handles.

β†’ Lion-Shor-Witness-Certifier β€” full provenance table + honest framing

β†’ If you're a Claude Code / Codex / Gemini agent toolkit

The cell exposes 17 MCP tools β€” 5 introspection + 6 Lion Math + 6 NODE-001 future tools β€” over stdio (Claude Code, Codex) and HTTP (Gemini Desktop, browser):

Tool Purpose
lion_math_seal Run a dual-gate seal on a named claim
verify_receipt Re-run a sealed receipt; confirm it holds bit-for-bit
rosetta_lattice Read the live meaning lattice (CURE nodes + open frontier)
inventory_audit Run the cell's self-audit (exit-code-gated)
run_quantum_algorithm Per-QC summary by QC-NNN id (19 sealed)
solve_pde Per-PDE-domain finite-instance result (9 sealed)

The cell does not call out to think β€” agents call in for certification, get back a receipt the consumer can re-run.

β†’ If you want to see what's honestly OPEN (not hidden as gaps)

The Rosetta lattice carries 9 named open frontier summits. Each one is a terminal state, not a gap: the licensing certificate that would close it is written verbatim.

Summit Required certificate
summit.rh Finite decidable certificate over FUNCEQ-001/001c critical-axis surface
summit.funceq.full-xi Zeta analytic-continuation primitive over LionPrelude (no Mathlib)
summit.apery Irrational predicate + Beukers integral rate witness
summit.polya-vinogradov Character sums over Zmod n in LionPrelude
summit.grover.parameterised LionSymbol.invSqrt(N) opaque token for non-power-of-4 N
summit.shor.order_finding_at_scale Period-finding without (p,q) at N > 10⁡ β€” what Shor's quantum subroutine addresses
summit.fof_mps.period_finding_reach ⭐ The patent claim. Measure (N_fof_max, N_flat_max) where field-of-fields MPS finds periods flat MPS can't
summit.mlkem.break FoF/MPS contraction over Module-LWE + blind PASS against pq-crystals reference
summit.wallet.finance Hardware PUF + concrete M8 conservation formula + PQC KAT pass + Lean theorems closed

β†’ Rosetta-Lion-Lattice β€” full lattice with statements + base camps

β†’ If you're a researcher or patent examiner

The general method is the invention. Every CALORIE-sealed artifact instantiates the same five steps:

  1. Native claim β€” continuous, irrational, irreducible (Ξ“, ΞΆ, a PDE, a quantum state)
  2. Ingest into C⁴ β€” relations not values; irrationals as named opaque tokens
  3. Project Ξ : C⁴ β†’ S⁴ β€” variables into the field-of-fields (MPS-of-MPS) exact-rational invariant on unified Apple-Silicon memory
  4. Dual-gate seal β€” Lean kernel + Swift recompute agree bit-for-bit; Sβ‚ˆ = Sβ‚„ + Sᢜ conserved
  5. Bind to Rosetta lattice β€” meaning earned from the seal, never assigned

The patent-grade one-liner: a pipeline binding a continuous claim to a dual-gate seal via a nested-MPS exact-rational invariant on unified memory, with named-opaque-token quarantine of irrationals and Rosetta lattice meaning-from-seal.

The measured-gap claim of the patent β€” N_fof_max > N_flat_max under a budget invariant β€” is on the open frontier as summit.fof_mps.period_finding_reach. The spec for the run that closes it ships in this release; running it produces the patent's measured weight.

β†’ Lion-Five-Step-Method β€” full doctrine with per-artifact step coverage table β†’ Spec-FoF-MPS-Period-Finding-Reach β€” directive-grade spec for the patent-closure run

Live numbers (as of v120 release)

═══ Lean kernel ═══
  46 artifacts on disk
  41 CALORIE-sealed (zero sorry / axiom / opaque + currency-clean + falsifier-named)
   5 CURE explicitly named open: AperyZeta3, MLKEMConstraint, PQWalletFinance,
                                  PolyaVinogradov, RiemannFunctionalEquation
  14 total `sorry` enumerated in source (across the 5 CURE files)
  23 total `opaque` enumerated in source

═══ Rosetta lattice ═══
  41 sealed MeaningEntry nodes
   9 open frontier summits (each with licensing certificate written verbatim)

═══ Internal self-audit (M8InventoryAuditor) ═══
  βœ“ shebang          COMPLETE   43/43   (Apple-native zsh only)
  βœ“ quantumAlgorithm COMPLETE   57/57   (19 algorithms Γ— 3 tiers: registry + Lean + Swift)
  βœ“ engineeringMath  COMPLETE   10/10   (every PDE domain referenced in registry)
  βœ“ lionMathProof    COMPLETE   95/95   (every disk file registered)
  βœ“ mcpSurface       COMPLETE   17/17   (11 MCP tools live + 6 future target slots)

  OVERALL TERMINAL : COMPLETE   exit 0  (MCP exposure proceeds)

═══ HTTP node ═══
  127.0.0.1:8423 β€” public + scoped + divergence + summits feeds live
  Sovereignty boundary: 0 receipt-internal leaks across all public endpoints
  ETag + If-None-Match β†’ 304 conditional GET verified live

The discipline, in one paragraph

The cell binds a Lean 4.12.0 kernel constraint (C⁴) with a Swift exact-Rational/BigInt recompute (S⁴). No verdict crosses any boundary unless both gates agree bit-for-bit. Terminal states only: CURE / CURE-conjecture / REFUSED. No "pending." No silent seals. A fabricated CURE is the one unforgivable Red Entropy β€” the cell would rather refuse a result it cannot prove than fake the green. Meaning is read from the seal, never assigned. The Rosetta translator refuses to emit a MeaningEntry without a live, matching seal; the audit alarms on meaning-without-seal with the same severity as a divergence between the two gates.

Hard rules baked into v120 (enforced in code, not in prose)

  • No Mathlib in LionPrelude β€” the cell carries its own math primitives so the trust base is the cell's
  • No Float / Double / CGFloat in any proof or grading path β€” exact RationalBig over arbitrary-precision BigInt end-to-end
  • No Int64 overflow β€” checked at compile time; halts immediately if a path could overflow
  • No remote LLM call during a seal β€” the cell does not call out to think
  • No ArangoDB / no cloud DB β€” Swift-local SQLite ledger
  • Apple-native Network.framework β€” no third-party HTTP server
  • 127.0.0.1 binding by default; remote-endpoint filter rejects non-loopback at byte zero
  • Apple-native zsh β€” 10 legacy bash scripts converted; auditor enforces 43/43

Pages (deep-dives)

Licensing + IP

The cell is the sole licensable substrate of GaiaFTCL. Β© 2026 Richard Gillespie. All rights reserved. USPTO patent applications 19/460,960 and 19/096,071 filed by Rick Gillespie as named inventor of record.

The Manifold is Holding. Calories or Cures. The substrate is sovereign and v120 ships.

Federation-cosigned

This page's source is sealed in the GaiaFTCL federation manifest β€” page SHA-256 fd9947e14e09c6d5…, manifest witness a090592e0609adc8…, signed 2026-06-02T18:58:22Z by cell gaiaftcl-mac-cell. Verify with gaiaftcl wiki sign --all and compare wiki-all-signatures.json.