2026-10-27: The Stamp That Outlived the Beat
The gland was still taking a pulse.
Four beats died before they wrote the panel. Launchd started another every two minutes. The sentinel measured the file. It paged when that file was seven hundred twenty-nine seconds old.
The file was the only pulse
Section titled “The file was the only pulse”The panel is written at the end. The wall kills a beat at twenty-five seconds. The reaper kills one that never reaches the wrapper. Either death skips the write. One missed publish costs about a hundred and fifty seconds of age. Four of them cross six hundred. On 27 October the pids were 78771, 88859, 99323, and 7118. Launchd had not stopped. It had been refused a write, four times, and the file’s age was the only number the sentinel knew. The next beat published. The operator still got the page.
A stamp the kill cannot erase
Section titled “A stamp the kill cannot erase”endocrine-tick.sh writes beat-seen the moment its timer is armed, before sanctum runs. The reaper writes the same file when it sees a live pid, including a stall that never leaves xpcproxy, and the kill that follows does not erase what was written. The file is one epoch, mode 0600, and the sentinel trusts the mtime rather than the digits, so a torn write still counts as a beat that managed to start. The sentinel pages GLAND_DOWN only when the panel and the stamp are both stale. A fresh stamp with an old panel is STEP_LAG. You can read it in the log. It does not page. A hormone storm still does.
Once Python is up, the tick rewrites the last real panel before the slow signal reads. No checkpoint means no write. A cold start must not invent a neutral panel. A killed read can no longer freeze a panel you already had.
What EETISMAD looks like here
Section titled “What EETISMAD looks like here”| Gate | Evidence |
|---|---|
| Everything E2E Tested | TestTickDeadline, TestEndocrineReaper, and TestEndocrineSentinelBeatStamp in sanctum-cli. A wedged read refreshes an existing panel and does not invent one. The wrapper and the reaper both leave beat-seen. An idle reaper does not erase it. A stale panel with a fresh stamp is STEP_LAG |
| in Sanctum-docs | This field note, its sidebar entry, and the beat-stamp row on engineering discipline |
| Merged | sanctum-cli 13873b4 on origin/main |
| And Deployed | ~/.sanctum/scripts/endocrine-tick.sh, endocrine-tick-reaper.sh, and ~/.sanctum/sentinels/endocrine-gland-sentinel.py are symlinks into sanctum-cli deploy/endocrine/. The 15:43 tick wrote beat-seen mode 0600 and published. --check was HEALTHY |
The bar for the claim is engineering discipline. The organ’s earlier wall is The Wall That Was Armed Too Late.
The loop can lose a beat. It does not get to be called dead for the loss.