assumes The host provides POSIX TCP streams.
because The transport stays inspectable.
invalidated by Non-POSIX hosts or richer protocol requirements.
Assumptions
assumes Clients can reconnect from monotonic IDs.
because The UI consumes differential updates.
invalidated by Bidirectional control or extreme fan-out.
assumes app.lisp is a compatible reload boundary.
because Workers and sockets survive UI reloads.
invalidated by State schema changes or load-time side effects.
assumes Linux procfs exposes this process map.
because Memory is observed from the running image.
invalidated by Other OSes or restricted procfs.
assumes Selected source, state, memory, trace, and assumptions are useful evidence.
because The model should explain observations, not invent a runtime.
invalidated by Stale, oversized, or unlabelled context.
assumes Model output is untrusted input.
because Parsing and capability inspection precede any execution.
invalidated by Treating static inspection as a complete proof of safety.
assumes A scrubbed, time-bounded process is an adequate first execution rung.
because It keeps ordinary experiments outside the live image.
invalidated by Adversarial code, missing OS isolation, or required stateful effects.
assumes At-least-once delivery is acceptable and duplicate handling belongs to consumers.
because A crashed consumer can retry after its lease expires.
invalidated by Exactly-once requirements, concurrent journal writers, corruption, or multi-host durability.
assumes Observed intervals can suggest a future evaluation.
because Age and frequency help exploration.
invalidated by Irregular workloads, sparse observations, or causal changes.