[immakermatty]

Why

Decision of the Principal on 2026-09-28: maximum priority for the Platform Launchpad. It takes the concepts of the resident Launchpad and does them properly, so that Machines switch fully to it in one apply. No period with both Launchpads side by side, no transition hostname, no rollback. First usable version for hosted Remote Environments on Ubuntu; macOS and Windows later, planned in outline.

What this adds

One document, docs/launchpad-parity.md, the shaping of proposed decision F22. No product code.

• A. The complete inventory: what the resident Launchpad does, what the Platform has, the gap.
• B. Concept by concept: what was accidental in the old implementation and the Platform design, CLI first, no new Folder state (catalog, toolchain, module lifecycle, hosted links, gateway ensure, logs, Organizations, Chat into T3 Code, doctor, SSH keys, Personalspace, Team Environment, the unit, worktree previews as temporary leases).
• C. The hosted switch in one apply: preconditions, the order of steps with the point of no return after read-only checks, the acceptance checklist of a switched Machine, the order of repositories, qualification on a disposable Ubuntu VM.
• D. The workstation, macOS first.
• E. Slices with dependencies and sizes, the switch line per kind of Environment, the rebuild of personal VMs on Ubuntu 24.04 with state transfer (M6) and its acceptance without re-pairing.
• F. What is deliberately not carried over, confirmed by the Principal.
• G, H, I. Risks, the Principal's answers of 2026-09-28 (H1, H3, H4, H6 decided; H2, H5, H7 proceed on the recommendation), what could not be determined.

The Mission Control plan DEV-6628 and roadmap steps 032–038 follow this document; the root decision register carries it as row 0167 (HumanAndMachines/Lazurio pull request 442).

Verification

bun run check:public passes. Every statement about code is cited; the ones the author could not verify are marked.

Refs #50

🤖 Generated with Claude Code

Note

Add launchpad-parity design document for Platform Launchpad replacing resident Launchpad

Adds docs/launchpad-parity.md, a design and migration document for decision F22. It inventories resident and Platform Launchpad capabilities and covers the catalog, module lifecycle, handover, gateway contracts, logging, sync, Chat, doctor, SSH, Personalspace, supervision, and worktree previews. It also defines the migration sequence, preflight and acceptance checks, recovery boundaries, and implementation slices. This is analysis and design only; no implementation is included.

^{Macroscope summarized a52d93c.}

[agentrozjedemeai]

@immakermatty — exact-head review of a52d93c. The Ubuntu and macOS checks pass on this head; check:public also passes locally. I request changes to the shaping document before accepting its authority or switch procedure.

1. Decision attribution (docs/launchpad-parity.md:3-7, 43-45, 460-465, 900-922, 943-965): H3 is presented as a Principal-accepted temporary preview URL and lease direction. The root decision-register row 0167 in HumanAndMachines/Lazurio#442 explicitly leaves hosted PR previews open, says only that worktree source is off the switch line, and calls for design later; merged DEV-6628 (mission-control-data#175, open_questions H3) does not record acceptance of this URL/lease. Keep the URL and its lease as a shaping proposal unless the Principal decision is first recorded in the authority register. The F22 proposed-decision block also says launchpad.gen3*.json have no successor, while H5 and row 0167 point 9 explicitly label that as unconfirmed proposal; distinguish it there too.

2. Non-executable handover example (docs/launchpad-parity.md:280-300): entry.launchpad.listen_port is 0, but parseHostedEntry rejects any listenPort below 1 (src/launchpad/hosted-trust.ts:74-79). P3 promises to project this entry and start the installed service on it. Use the real nonzero gateway route port in the example and specify the wire-to-binding conversion; otherwise following B4 produces an invalid binding and C.2 cannot start.

3. Unit ownership at the point of no return (docs/launchpad-parity.md:592-599): deleting lazurio-launchpad.service whenever it lacks the installer marker would also delete an unrelated operator-owned unit. The product explicitly classifies such a unit as foreign and refuses to overwrite it (src/update/install.ts:173-183; src/update/service-control.ts:15-20). Require positive proof that it is the exact Machines-owned resident unit, and block on any other foreign unit rather than using marker absence as deletion authority.

These are document changes, not a request to implement the switch in this PR. Existing source facts for the Bun flag, Host rewriting and resident unit were corroborated at the cited frozen SHAs. No merge performed.

[agentrozjedemeai]

@immakermatty — exact-head re-review of 201e5ae (replaces my REQUEST_CHANGES on a52d93c). APPROVED for the shaping document only.

All three prior findings are addressed: (1) H3 now cites the 2026-09-28 addendum to decision 0167 in HumanAndMachines/Lazurio#442; the decision-register row at af9d907 records the temporary preview URL/lease direction while B14 rules remain proposals, and F22 labels H5/unconfirmed launchpad.gen3*.json successor as a proposal. (2) The handover sample uses listen_port 20000 and enumerates every wire-to-binding member, with validation before recording; parseHostedEntry requires 1–65535. (3) C.2 step 5 requires positive byte-for-byte proof against this Machine’s Machines-rendered resident unit before disabling/removing it; any other unit stops the switch without removal.

Platform checks succeeded on Ubuntu and macOS for this SHA (run 36425882141). Local bun run check:public: PASS (316 files); git diff --check origin/main...HEAD: clean. No unresolved review threads. This is documentation, not implementation or switch authorization. Dependency hold: decision-register PR HumanAndMachines/Lazurio#442 remains OPEN; do not treat its unmerged addendum as main-branch authority or merge/publish this shaping as accepted authority before that decision is accepted. The PR currently reports BEHIND live main, so re-evaluate base/integration gates before any merge. No merge performed.

[agentrozjedemeai]

@immakermatty — APPROVED on exact head 6e8f76a for docs/launchpad-parity.md (shaping only). The 201e5ae..6e8f76a delta contains only integrations of main (#62, #63, #66, #68, #69, #71); the document has a byte-identical Git tree blob to the previously approved head. Local bun run check:public passes (344 files), git diff --check is clean, and both Platform checks (ubuntu-24.04 and macos-14) passed on this exact SHA. Zero unresolved review threads, no pending review requests, and live main is integrated. Dependency hold: HumanAndMachines/Lazurio#442 is still open; do not merge #65 until #442 is merged and all live merge gates are rechecked. No merge or product switch authorization here.