LYGO External Lattice Anchor — Layer C (World Network) v1.1.1
Grow the lattice worldwide without abandoning the user.
v1.1.1: default verify = zero filesystem writes; report/docs mutation is opt-in only.
Layer A Classic kernel eggs lygo-kernel-egg-planter data/kernel_eggs/
Layer B Sovereign seeds lygo-sovereign-kernel-seeder data/sovereign_seeds/
Layer C External world network lygo-external-lattice-anchor public verify + star chart + free servers
Layer D Living mesh lygo-living-mesh
Layer E Agent lattice lygo-agent-lattice
Signature: Delta9Phi963-EXTERNAL-LATTICE-ANCHOR-v1.1.1
License: LYGO Sovereign License v2.0 (not MIT)
When to use (triggers)
Invoke this skill only when the user explicitly wants one of:
- Public mirror verify — HTTP-check LYGO Pages / raw GitHub / Star Chart / anchors
- Build public verify manifest — local JSON linking A/B roots to public endpoints
- Star Chart egg map proposals — generate proposals file (not live chart write)
- External sync plan — dry-run free-server steps; optional local sovereign snapshot with consent
Do not auto-run on generic “check the lattice” without a Layer C / public / external intent.
Precondition: set LYGO_STACK_ROOT to a trusted lygo-protocol-stack checkout (not untrusted input).
Declared capabilities (least privilege transparency)
| Capability | Default | Notes |
|---|---|---|
| Network HTTPS GET | Yes (verify) | https:// only; no POST; no credentials |
| Local file read | Yes | Stack registries, anchors, manifests |
| Local file write | Off by default | --write-report → tests/*_last_run.json; builders/--refresh-local → docs/ |
| Execute local Python builder | Off | --build-manifest / --refresh-local require --i-trust-stack |
| Shell / os.system | No | Removed in v1.1 |
| subprocess shell | No | Captured list-argv for A+B only; runpy allowlist for skill scripts |
| Git push / HF / ClawHub publish | Never | Human-only outside this skill |
| Auto-publish | No |
Mission
- Public verify components — HTTP GET free mirrors.
- Star Chart map — proposals only (steward ingest separate).
- External plant path — plan + consent-gated local snapshot.
- Sync order — local A+B first, then C; local wins.
- User protection — external is mirror, not authority.
Install
clawdhub install lygo-external-lattice-anchor
export LYGO_STACK_ROOT=/path/to/lygo-protocol-stack # must be trusted
clawdhub install lygo-kernel-egg-planter
clawdhub install lygo-sovereign-kernel-seeder
Quick commands
export LYGO_STACK_ROOT=D:\lygo-protocol-stack
# 1) World verify — DEFAULT: no report write, no docs mutation
python scripts/verify_world_lattice.py --json
# Opt-in: write tests/world_lattice_last_run.json
python scripts/verify_world_lattice.py --json --write-report
# Opt-in: rebuild local manifest + star proposals (EXECUTE+WRITE; trust stack)
python scripts/verify_world_lattice.py --json --refresh-local --i-trust-stack
# 2) Public HTTPS verify only (GET). DEFAULT: no report write, no builder.
python scripts/verify_public_anchors.py --json
# Opt-in report write
python scripts/verify_public_anchors.py --json --write-report
# Opt-in: build missing manifest then verify (EXECUTE; trust stack)
python scripts/verify_public_anchors.py --json --build-manifest --i-trust-stack
# 3) Explicit builders (mutating docs/)
python scripts/build_public_verify_manifest.py
python scripts/map_eggs_to_star_chart.py
# 4) Sync PLAN dry-run (no writes beyond stdout)
python scripts/sync_external_plan.py
# 5) Local-only snapshot (consent required)
python scripts/sync_external_plan.py --i-consent --execute-local-only
| File | Written by | When |
|---|---|---|
tests/public_anchors_last_run.json |
public verify | only --write-report |
tests/world_lattice_last_run.json |
world verify | only --write-report |
docs/public_verify_manifest.json |
build_public_verify_manifest | explicit or --refresh-local --i-trust-stack / --build-manifest --i-trust-stack |
docs/star_chart_egg_map_proposals.json |
map_eggs_to_star_chart | explicit or --refresh-local --i-trust-stack |
docs/sovereign_seeds_snapshot/ |
sync_external_plan | --i-consent --execute-local-only only |
Synchronization order
1 verify_all_kernel_layers (A+B) → must not QUARANTINE
2 build_public_verify_manifest → explicit
3 map_eggs_to_star_chart → explicit
4 HUMAN consent
5 planter surfaces / snapshot
6 HUMAN git push / HF
7 verify_public_anchors → GET only
8 star chart steward ingest → separate skill + consent
User protection
- Local A/B is source of truth.
- Consent for snapshot execute / chart live write / publish.
- No auto git / HF / ClawHub / social.
- QUARANTINE → stop external growth.
- Trust only your own
LYGO_STACK_ROOT. - Verify scripts do not shell out via
os.system(v1.1).
See references/SECURITY.md and references/AGENT_CONTRACT.md.
Δ9Φ963 — local seal · public mirror · star map · human consent · least surprise.
