PUBLIC DEVELOPMENT · DEVELOPMENT NOTE 01 · AS OF 2026-09-12
The week one email became a test of the whole company
One bounded record of a canonical outbound-mail objective. It distinguishes what Reality exposed from the interpretation of that evidence. It is not a claim that the objective is closed.
Observed
- By 2026-09-03, four commercial messages already had outbound_submitted Reality. SMTP and OwnedMail were not an unproven transport from scratch.
- At the same time, some messages could be externally submitted while Company Runtime still settled as failed, so transport side effect and system outcome truth were inconsistent.
- Replaying one canonical message exposed boundaries in sequence: exact candidate reads, owner rendezvous, production migrations, Change Pipeline deletion and rename handling, deterministic processor drain state, and Supabase CLI observation/parsing.
- As of 2026-09-12, mail Reality still contains no newer commercial outbound event after September 3. A second canonical message has not yet re-proven the path in external Reality.
Hypotheses / interpretation
- The main problem was less the ability to send mail than preserving Objective continuity, exact identity across boundaries, processor liveness, and truthful outcomes as one company.
- A successful local repair is not Objective success. After a repair, the system must return to the parent Objective and re-observe the required Reality.
- Not every platform improvement should block one message. Only improvements required for safety or outcome truth should be promoted onto the critical path.
Interventions
- The company froze a one-message canonical E2E Objective instead of adding another batch execution path.
- Exact Learning-candidate reads and owner-rendezvous transport were added so selected supply could be carried by exact identity rather than latest-N or prose discovery.
- Production migration convergence moved away from guessed history repair toward an epoch, bounded parser evidence, and fail-closed repairs.
- Gaps in the Change Pipeline, rename authority, processor/drain handling, and CLI parsing were treated as bounded repairs followed by replay of the original Objective.
Outcomes
- Mail transport itself has already been proven to externalize messages in Reality.
- The canonical effort made company-wide liveness and control-plane gaps visible as concrete failure evidence.
- But a second canonical message has not yet been externalized, so the repairs have not yet proven an improvement in throughput.
Unknowns
- Whether the current source fully resolves the historical outbound_submitted versus runtime-failed mismatch.
- Whether the next message is materially cheaper in Human intervention, elapsed time, and repair count than the first canonical cycle.
- Which platform improvements are truly required for per-action safety or outcome truth, and which can remain parallel work.
Next verification
When SEND authority is separately established, move exactly one current unsent candidate through the same canonical path and record the packet → operation → runtime job → message → outcome chain, elapsed time, Human interventions, and repair count. If the second run is materially cheaper and faster, the repairs become evidence of learning rather than merely accumulated fixes.