# What is live

Each row is what the next shipped build carries, in one of three states: **built** (on main), **in progress** (not complete on main), or **not in this edition**; only the first row describes the running box, and a row rests on the evidence it cites.

| surface | state | evidence |
|---|---|---|
| The box today | rehearsal #2 is still the build serving on `demo.dregg.online`, with every login closed and `/join` held closed until the owner opens it; the next build is not shipped yet | [plan](DEMO-PREFIX-2026-10-26.md) §2 |
| Admission path, receipts, refusals | built: documents, grants, money, programs and applications go through the Host's Lean-owned admission; a refusal names its clause and the web shows the one request that would have passed | [DEMO-EXPERIENCE](DEMO-EXPERIENCE-2026-10-27.md) tour step 4; `native/resource-client/src/can.rs` |
| Lost reply and exact retry | built: the custody record retains the exact call before it travels, so an undecided attempt is looked up and retried byte for byte; the tour's lose-reply, exact-retry and `can --any` paste-back rows pass on the build box | `native/mini-sdk/src/custody.rs`; DEMO-EXPERIENCE tour step 6 |
| One client wire | built: operation numbers are named constants and consent frames are registered; a gate refuses a literal operation byte in Rust | commits `6445a8b48`, `9cc655c58`; `scripts/host-operations.py` |
| Platform cell | in progress: the cell kind and the install receiver are built; the genesis seed, replay, Host operations and births priced from the cell are not complete | [`Kernel/PlatformCell.lean`](../Kernel/PlatformCell.lean); [`Kernel/PlatformInstallReceiver.lean`](../Kernel/PlatformInstallReceiver.lean); commits `a0403a358`, `7d5019b4b` |
| Fast Store open | in progress: compaction is built (a cold open of a 483-record Store took 160 to 175 s before it); the checkpoint that carries the world, so an open replays only the records after it, is stated and being proved, and is not on main complete | commit `2421dc511`; [HOT-PATH](HOT-PATH-2026-10-27.md) item (h); commit `107f040d9` |
| Browser join, free and paid routes | built: a name, a hosted key and one session link; the free route has a fixed number of seats; the paid route is 50 DREGG a week on Solana mainnet, with the pay page's audit fixes; not open to strangers until the owner opens the door | [WEB-FRONTEND](WEB-FRONTEND-2026-10-27.md); [enrol-terms.json](../deploy/pay/enrol-terms.json); commit `861fe953` |
| Invite codes and a reserve of free seats | built on main, not yet on the box: the last seats of the free route can need an invite code | commit `9e3d6c731`; [`deploy/door/README.md`](../deploy/door/README.md) (`inviteReserve`) |
| Web pages and accessibility | built: server-rendered pages, every shell verb a form derived from the command grammar (203 leaves dry-run through the real handlers with 0 usage and 0 world refusals), live-region outcomes | `native/resource-client/src/web/verbs.rs`, `src/shell_grammar.rs`; `native/resource-client/journey.d/jweb-frontend.sh` |
| Export my world | built: one archive of a member's documents, receipts and key, streamed and deleted after download; one export per member per ten minutes | commits `370d606e`, `071aaf95`; WEB-FRONTEND |
| Research consent | built: an unchecked box at the door; the choice is a fact in the member's own world, shown and changeable on the export page | commit `0bf68599`; [`deploy/policy/RETENTION.txt`](../deploy/policy/RETENTION.txt); WEB-FRONTEND |
| Stories and laws | built: the built-in tale under its sealed law, and a member can install a law on their own document and see the next write judged | [`Kernel/StoryLaw.lean`](../Kernel/StoryLaw.lean); DEMO-EXPERIENCE doors 11 and 12 |
| Objective Bend | built: the `bend` verb is in this edition | [`native/resource-client/src/bend.rs`](../native/resource-client/src/bend.rs); [OBJECTIVE-BEND-FRONTEND](OBJECTIVE-BEND-FRONTEND.md) |
| Discord | built: the same subject and receipts over the Discord gateway as on the web; live on the box in rehearsal #2 with no inbound route | `native/discord-entrance`; DEMO-EXPERIENCE door 9 |
| Hermes residents with per-member caps | built: an agent resident in a room on a shared model key, with a per-member share of the spend ceiling (1/40 a day and 1/10 in all of the row's ceiling); not live on the box until the next build ships | [`deploy/hermes/README.md`](../deploy/hermes/README.md); commit `39d802f5` |
| Subscriber tier | built: a house Hermes on the `glm-5.3-flash` route in a `subscribers` room, joined by an invitation after `pay subscribers week`, with a Subscribe page | `native/resource-client/src/web/subscribe.rs`; commit `0ac2e8df`; [`deploy/hermes/demo/provider-services.json`](../deploy/hermes/demo/provider-services.json) |
| App market: featured apps | built: any Sandstorm package from the real store, 27 featured apps listed first, each with the interface an agent drives beneath the HTML; qualifying more apps, one write each, is in progress toward two to three dozen | [APP-MARKET](APP-MARKET-2026-10-27.md) §2a; `FEATURED` in [`apps.rs`](../native/resource-client/src/apps.rs) |
| WebDAV, CalDAV and git | built on main: the DAV verbs, chunked request bodies and git push and fetch; bodies over 8 MiB are designed, not built | commit `dfdecbbac`; APP-MARKET |
| Two browsers co-editing one grain | in progress: a second session's route on a running grain is refused; the cause is found and the fix is being stated | APP-MARKET (route registration note) |
| Abuse limits per member | built: connection and in-flight limits per member at the web gateway, an export cooldown, memory, CPU and task size classes for grains; a per-member request rate in the Host is stated and proved but not yet wired in | commit `90f7f959`; commit `879fc8ec1`; [`Kernel/SubjectRate.lean`](../Kernel/SubjectRate.lean); [PD-HOST-RATE-DESIGN](PD-HOST-RATE-DESIGN.md) |
| Effect Plans for world programs | in progress: the activity effect's keystone is stated and proved on main; transfers from a program's purse and committed writes are being finished; each new effect is still a hand-written kernel change and deriving them is owed after the demo | [`Kernel/ObjectiveActivityEffect.lean`](../Kernel/ObjectiveActivityEffect.lean); commit `b1ff71950`; commit `9123503ff` |
| Reproducible build (M7) | PASS: a cold build on a second Debian 13 box reproduces all 26 outputs byte for byte | [evidence](evidence/2026-10-27-m7-round2-dregg-ref/) |
| SPK sandbox floor on Debian 13 | audit PASS | [evidence](evidence/2026-10-27-sandbox-floor-dregg-build/) |
| Private-constructor census (`TokenCensus`) | 374 private constructors reviewed as of 2026-10-27, each minted only at home (18 are open `defect` rows, triaged in docs/review/2026-10-27-untouched-areas/TOKEN-DEFECTS.md); the census catches a planted forgery for every one of the 374 and 11 scripted fault kinds, red-proving inside `lake build TokenCensus`. Regenerate with `scripts/token-census-count.sh` | [`TokenCensus/Table.lean`](../TokenCensus/Table.lean); [`TokenCensus/SelfTest.lean`](../TokenCensus/SelfTest.lean) |
| fn transport | not in this edition: the fn transport is not on this demo | plan §5 ("fn is out of this demo") |
| The oracle as a grain | not in this edition | [ORACLE-GRAIN](ORACLE-GRAIN-2026-10-27.md); DEMO-EXPERIENCE door 8 |
| A networked private-computation service | not in this edition | [UNTOUCHED-DEPUTY-STATE](UNTOUCHED-DEPUTY-STATE.md) (private-backend, tier 2 after the opening) |