---

title: GFTCL-NODE-001 — Lion Verification Node

audience: junior_high_and_up

game: GFTCL-NODE-001

contract_version: 1.0.0

authority_kind: normative

---

Lion Verification Node

One ledger, three surfaces. The sovereign cell becomes the certification node every workflow can route through. Agents call IN over MCP for seals. Observers — iPad, dashboards, ATC status boards — subscribe RSS for read-only trust. NATS broadcasts the same events to the mesh. The substrate never leaves the cell.

What ships

A single Swift executable (GaiaNodeServer) plus its core library (GaiaNodeServerCore). One HTTP listener on 127.0.0.1:8423 (LAN opt-in) serves both surfaces. Reads the Swift-local Lion Math ledger (~/Library/Application Support/GaiaFTCL/substrate.sqlite). Zero ArangoDB. Zero external dependencies — Apple-native Network.framework.

swift run --package-path cells/xcode GaiaNodeServer
→ HTTP on 127.0.0.1:8423

Public endpoints (no auth — anyone on the network)

Scoped endpoint (token-gated; tokens in ~/.gaiaftcl/node/scoped_tokens.txt)

/feed/{token}/receipts.xml   RSS 2.0

Every item carries the full receipt — toolchain version, coefficient/symbol, provenance hash, repro command. A subscriber can re-run any seal straight from the feed. That is the hostile-verifier contract: the feed reader can reproduce the published verdict locally in three commands.

The sovereignty boundary, by tier

In every tier, the cell ships only: verdict, hostile-verifier repro command, lattice positions. The substrate stays on sovereign ground.

ATC alarm semantics — divergence.xml

• Healthy state: empty feed. Reader badges nothing.
• Dual-gate divergence: one new <item> per affected target.
• <title> names the target (e.g. DRIFT — owl.funceq.q001b).
• <description> explains: "Swift recompute and Lean kernel verdict disagreed. Target marked non-public until resolved."
• GUID is divergence:{receiptID} so polling readers don't re-alarm.

You wire an iPad RSS reader to divergence.xml. An item appearing IS the alarm. No app, no MCP client, no integration code.

Caching + conditional GET

Every response carries ETag + Last-Modified. If-None-Match returns 304 Not Modified. The ETag mixes (lion_math_sweep_receipts mtime, lion_gate_agreement mtime, lean_proof_state mtime) so any ledger change invalidates immediately.

Hostile-verifier reproduction

git clone https://github.com/gaiaftcl-sudo/gaiaFTCL.git && cd gaiaFTCL
cd cells/xcode

# 1) Validate every feed renders, sovereignty boundary holds, no float
swift run M8NodeServerSmokeTest
# Expected: 6/6 PASSED; PUBLIC tier carries no receipt internals;
#           divergence.xml empty iff divergenceCount==0.

# 2) Start the live server (127.0.0.1:8423)
swift run GaiaNodeServer

# 3) Hit the feeds from another terminal
curl -s http://127.0.0.1:8423/feed/status.xml | head -c 600
curl -s http://127.0.0.1:8423/feed/divergence.xml
curl -s http://127.0.0.1:8423/feed/summits.xml
curl -s http://127.0.0.1:8423/mcp/health

Client profiles (per the GFTCL-NODE-001 directive)

What's open on this rung

The MCP Streamable HTTP transport (Phase B of the directive) is shipped as the HTTP listener routing on /mcp/*; the JSON-RPC dispatcher + 4 new tools (seal_claim, verify_receipt, submit_certificate, lattice_position) live in the existing GaiaCellMCPServer stdio path. Merging the two into a single dual-transport MCP server is the next named obligation on summit.node.unified-transport. The RSS surface is shipped and live.

NATS subjects (spelling verified)

• gaiaftcl.node.online — emitted on listener start
• gaiaftcl.node.divergence — emitted on any new drift event
• gaiaftcl.lion.sweep.sealed — per-target seal events (re-broadcast from the ledger)

Every subject confirmed gaiaftcl (no gaitfcl typo in any live publish path).

Definition-of-done checklist — current state

• [x] HTTP listener on 127.0.0.1, Apple-native Network.framework
• [x] RSS 2.0 / Atom 1.0 / JSON Feed 1.1 all rendered + validators pass
• [x] Public + scoped + divergence + summits tiers all live
• [x] divergence.xml empty iff divergenceCount == 0 (ATC invariant)
• [x] ETag + Last-Modified + 304 conditional GET
• [x] Token gate for scoped tier; public tier carries no receipt internals
• [x] Smoke test (6/6) + live server probe both green
• [x] Sovereignty boundary: zero substrate internals on the wire
• [ ] MCP Streamable HTTP transport unified into the same listener (follow-up)
• [ ] LAN opt-in flag (--lan) with explicit consent path (follow-up)