36. Vision

Status

Vision admission is Partial. The current v1 compatibility spine defines immutable ArtifactRef metadata, distinguishes the closed vision family from image-capable chat, and filters capability declarations by explicitly supplied required input modalities. Delegated-job contracts can carry artifact references; the current Intent and BridgeChatChat admission remain text-only and carry neither artifacts nor required modalities through the RunJob RecordJob Record ledger. These shapes prove metadata and routing contracts, not an executable visual interface.

It does not upload, store, authorize, materialize, decode, normalize, or transport image bytes. Bridge does not forward artifact modalities into dispatch. No PrismVision & MediaVision & Media package, image custody adapter, OCR tool, or managed visual provider ships. The separate bounded local WAV custody seam provides no visual execution. State of Work owns that boundary.

Decision

PrismVision & MediaVision & Media owns visual grounding and transformation. Given an admitted source artifact, it produces bounded derivatives and observations while preserving the source's identity, classification, provenance, and declared information loss.

Here Eye and Lens name PrismVision & Media faculties. An external observability Eye consumes bounded evidence exports; a Shadow Lens seeds a speculative branch with a Posture. Their owners and contracts remain distinct.

Language and faculty admission

Visual language is typed per job, not inherited from the host or AltarControl PanelControl Panel locale. Original prompt, requested model-facing language, permitted detection, translation or enhancement revision, and declared loss remain separate facts. A translated prompt is a derivative instruction, not a replacement for the operator's visual direction; a model that happens to understand a language has not passed the image, video, typography, or control bake for that language.

A CovenModel GroupModel Group may group compatible local services for operation. It is not a dispatch unit: manifesting one visual faculty does not manifest the rest.

Form does not establish a universal spatial DispatcherTraffic ControllerTraffic Controller family. Each future implementation must declare its exact operation, accepted modalities, produced artifact facets, tool or effect semantics, and recovery contract; a repository that can emit a mesh is not thereby a general 3D runtime.

Finite and live perception

Sight likewise does not establish another capability family or turn image-capable chat into precise perception. A finite Sight result binds every estimate to original source pixels and, for video, exact frame identity, PTS, and rational timebase through the full transform chain. Masks, depth and flow remain typed derivative artifacts; confidence is model evidence rather than a universal probability; a local track id is not identity; and an uncovered region or skipped frame cannot prove absence.

A camera or feed is not a finite SightJob extended indefinitely. Its future session binds capture purpose and authority, source and stream epoch, privacy masks, active window, viewers, retention, bounded queues, sampling and drop policy, gaps, and downstream consumers. A proved contiguous transport reconnect may continue the same epoch; otherwise reconnect closes it, and every new epoch receives a new track namespace. Observation grants no PTZ, recording, robot, game, or other effect authority.

Spatial form, motion, and engine use

Form owns the exact skeleton, hierarchy, rest and bind pose, skinning, morph controls, and rig revision. Kinesis owns structured curves and their technical motion derivatives. A pose observation is not a motion clip; a rig is not proof of compatible animation; moving pixels are not reusable curves; and a clip is not an engine controller or an authorized world effect. KinesisJob@2 acts on finite admitted material and returns a typed MotionAssetSet@1 or, for validation, MotionFindingSet@1; later live motion requires a separate LiveKinesisSession@2 with bounded queues, clock and calibration epochs, drop policy, consent, retention, and consumers. Neither contract inherits source capture, creative acceptance, engine, avatar, robot, or publication authority.

A portable Form assembly remains spatial material rather than a playable engine world. Foundry owns engine-native scene hierarchy, placements, collision and physics meaning, navigation, streaming, animation-controller use, gameplay bindings, scenario evidence, and build derivatives. Import or a beauty render proves none of those facts.

Custody before sight

PrismVision & MediaVision & Media begins with source bytes already owned by the Reliquary. Their durable reference binds identity and SHA-256 digest, media type and byte size, classification and owning Principal, and custody and retention policy. A future materializer must recheck authority on every read. ArtifactRef itself supplies neither byte custody nor a bearer token; a provider URL supplies neither durable custody nor permission.

The first Reliquary custody profile compares the complete retained reference before materialization, including identity and classification as well as digest, media type, and size. Owner and trusted acquisition attribution remain separate from producer claims. Quarantine inspection requires different authority from an admitted read. EchoVoiceVoice's PCM inspector is the first bounded consumer; its structural result grants no admission, speech eligibility, or visual/provider compatibility. A separately authorized trusted handler admits only the exact retained bytes.

Decoders receive hostile input. Admission bounds supported formats, dimensions, frames, pages, geometry, vertices, faces, nodes, materials, textures, scene depth, animation channels, bone influences, points, splats, voxels, archive expansion, decompression, metadata, and parser or compute resources. Media-type labels are claims to verify. Embedded links, external URIs, profiles, scripts, drivers, plug-ins, scene procedures, and metadata receive no network or execution authority.

One optic path

admit source → authorize materialization → inspect and decode → admit declared transform or effect
→ resolve an exact finite tool or dispatch an eligible provider → retain grounded observation or derivative

Each PrismVision & MediaVision & Media Lens transformation records its exact parent, operation and implementation revision, parameters, result artifact and digest, and loss from crop, resize, compression, frame selection, or color conversion. The source remains available according to retention policy; a thumbnail, OCR result, or caption cannot silently replace it.

Provider adapters may use Pydantic AI BinaryContent, Base64, a tensor, or a provider handle. Those are request representations, never the universal artifact format.

Dispatch, egress, and result

A PatternWorkflowWorkflow asks for an exact semantic interface, operation, typed material, and feature facts. Current v1 can only project general analysis as vision plus image and general reasoning as chat plus image; precise Sight, Scanner, Lens, Image, Video, Form, and Kinesis work requires its own declared service or tool contract. Generated visual output never arises merely because a chat capability accepts visual input. The Dispatcher admits only an eligible capability. For an otherwise eligible managed binding that is not WARM, DispatcherTraffic ControllerTraffic Controller returns HardwareTransitionRequired; the requesting RunJob RecordJob Record enters GraphStep MapStep Map StasisPausePause while Orchestrator converges readiness, then re-dispatches. In current source, however, even a WARM v1 vision declaration fails closed at grant issue because no typed visual surface exists; readiness convergence cannot manufacture one. A live pause need not become a ReanimationCrash RecoveryCrash Recovery boundary. PrismVision & MediaVision & Media cannot evict a provider, revoke a lease, raise priority, or infer remote fallback. Declared coexistence and measured operator evidence, not a universal VRAM formula, decide whether visual and reasoning providers can remain resident together.

A PortalCloud ModelCloud Model additionally needs source-and-derivative classification eligibility, explicit egress policy, consent where required, and a cost bound. A caption cannot launder restricted pixels; Security evaluates every source and derivative.

A grounded observation names the source and derivative chain; relevant page, frame, time, or region; task; producing provider or deterministic revision; output; and suitable uncertainty. It also says whether it is extraction, deterministic geometrical measurement, learned estimate, or interpretation. OCR is attributed extraction, a caption interpretation, and generated or edited image, video, audio-video, mesh, scene, voxel, or structured-motion material a new artifact set with effect provenance. Fluent output never becomes source truth, and conversion between spatial or motion representations creates a new derivative with declared loss.

Compound media and application acceptance

Synchronized audio and video from a provider belong to one technical attempt and one compound provenance parent. Before execution, MediaFacetAuthoritySet@1 names every requested semantic role, its owning CompositionAppApp identity and revision, and the exact owner-request digest. PrismVision & MediaVision & Media records the container, stream digests, shared timebase and technical settlement.

Each declared owner then issues its own SemanticFacetAdmissionReceipt@1 before that facet may enter application truth:

• Atelier judges visual and VFX material;
• Riffmaw judges music;
• Language Edition judges timed-language material;
• Foundry judges interactive world sound; and
• Broadcast judges picture-bound sound and the final editorial audiovisual relation.

An undeclared facet fails closed. Inseparable streams must be accepted or refused for their declared compound use. Neither the provider's output shape nor a generate_sound flag supplies an owner's judgment.

Consequences and acceptance

Keeping a result connected to its source lets PrismVision & MediaVision & Media compose vision, multimodal chat, OCR, transforms, and generation. That continuity brings explicit costs: custody, safe decoding, derivative storage, retention, and provider loss all remain part of the contract.

It cannot move beyond the current schema seam until focused evidence proves upload and custody, principal-bound materialization, hostile-media limits, transform lineage, modality forwarding, local and PortalCloud ModelCloud Model policy, provider conversion, grounded results, retention/deletion, and failure recovery.