Implements the Gen.03 organ-systems body in SPARK/Ada (Jorvik, No_Exceptions):
- Shared types (mafiabot_types): Bounded_Text, Operation_Status, Organ_Id,
Provenance_Tag, fixed-point drive/ratio/cost/axis types.
- Config loader: SPARK-safe flat key-value parser (no heap/exceptions/finalization).
- Trust boundary: blocklist substring matching, provenance enforcement,
tick-based rate limiting, Trust_Guard protected object.
- Soul / Silicon Dawn Tarot: 56-card alphabet, Celtic Cross spread, Big-3
identity anchors. The cross accretes from the cognitive loops (2 cards per
layer at steps 6/9/13, stave of 4 at step 17) rather than being drawn whole.
- Sessions: Soul_State is now keyed by (uid, channel, server). Each session
has its own card pool, cross, and output counter; the Big-3 identity is
global. A formed cross is held for the session (or 17 outputs, whichever is
longer). Two users on two channels never share a deck or a cross.
- Ada Medium: 23-step forward-only inference cycle wiring the cognitive loops,
Celtic Cross injection, and outbound trust screening per session.
- Hermes MCP stdio bridge: JSON-RPC over stdin/stdout (initialize, tools/list,
tools/call), SOUL.md generation, verbatim id echo. SPARK_Mode Off for I/O;
trust checks run in proven code first.
- Main driver: organ init -> SOUL.md publish -> MCP serve loop.
- Tests: soul, trust, cycle (session formation/isolation), config.
Fixes an orchestrator bug where step 1 advanced onto Phase_Input after Reset,
failing every cycle.
Note: requires GNAT/Alire to build; no Ada toolchain in this environment, so
compilation and gnatprove must run in CI.
Add assumption-free skeletons for the modules documented in the README:
empty Engine/Economy/Sockets/Exploits packages, null-body Mafiabot and
Engine_Tests procedures, and a placeholder config/config.yaml.