Delvehold authority
The Delvehold world organ owns the Greathold and its quantitative economy: Vaults, Holds, routes, workshop identities, civic home affiliations, Hold-local workshop sites, workshop-wide presence leases, parties, institutions, charters, founding distribution policies, civic seals, institutional budgets and reserves, dungeon lifecycle pressure, commodities, resource lots, custody, recipes, facilities, capacity, inventories, plans, orders, administered price terms, realized price observations, services, shortfalls, contracts, expeditions, and local consequences. It accepts typed intents and emits typed receipts plus updated documents through CultMesh.
The world host admits Vault opening, civic-home changes, site establishment or closure, route transfers, workshop activation, and the atomic all-sites dormancy transition. The client cannot renew presence through a heartbeat, infer a site from presentation placement, transfer local inventory through shared identity, or keep a dormant workshop in local projections. Hosting and matchmaking may scale independently but cannot create canonical Vaults.
Ghostlight authority
One persistent Ghostlight WorldKernel owns the world outside the Greathold: foreign regions, routes, actors, institutions, population Gestalts, relationships, knowledge, goals, posture, pressures, strategic decisions, events, and news. Its current coarse resource handles support strategic narrative agency; they do not replace HOLD’s quantities, production, market, or conservation model.
DELVE/HOLD supplies Ghostlight an authored ontology and fixed seed. This bypasses generative world compilation, not WorldKernel validation or its atomic commit path.
Boundary authority
CultMesh carries two directions of typed exchange. Delvehold publishes a derived greathold institution containing only committed externally visible state and realized effects. Ghostlight publishes external decisions and proposed Greathold consequences. The recipient validates every item in its own domain and returns an idempotent receipt.
greathold is no longer an owner; it is derived from Delvehold state. It receives no Ghostlight Persona or strategic turn. The bridge is no longer an owner; it transports documents and receipts. Neither side can mutate the other’s canonical domain or use reconciliation to disguise a rejected effect.
Game client projection
One Godot C# client projects both DELVE and HOLD. DELVE scenes present embodied expeditions; HOLD scenes present workshops, Holds, contracts, news, and civic play. The client’s shared session owns its CultMesh connection, local projections, prediction, controls, animation, and presentation. It does not own economic, dungeon-lifecycle, or civic truth.
One central C# world host contains the canonical Delvehold organs. Every client-originated action crosses CultMesh as a typed intent and returns a typed receipt. Switching modes changes the active projection and interaction set; it does not synchronize two clients or transfer authority.
Contract handoff
A delving contract is the first shared object joining both experiences. Its canonical state includes issuer, objective, offered equipment, reward allocation, target region, accepted expedition, lifecycle status, and outcome references.
Delvers own the visible choice of equipped gear and carried inventory. Workshops and institutions own the equipment and services they offer under explicit custody and contract terms. On departure, the world host validates the visible state and records that choice automatically as expedition evidence.
Workshop players own the intent to publish or amend their own workshop contracts. The Delvehold world organ owns institutional contract emission from Greathold civic, guild, commercial, and military state. Foreign Ghostlight actors may issue offers or demands across the boundary, but a Greathold contract exists only after Delvehold admits the intent. Institutional contracts must carry their actual simulated provenance and cannot impersonate player authorship.
Factory and delver interfaces expose different projections of that state. Incomplete knowledge belongs in the projection; canonical state must not be falsified to manufacture mystery.
Civic handoff
Each franchised workshop identity owns its one seal and the intents it submits while present through its civic home: vote, petition, amendment, capacity pledge, refusal, or withdrawal. Sites in other Holds may create affected-party jurisdiction and remain subject to local policy but do not clone the seal. The Delvehold world organ owns the resulting assembly state, jurisdiction derived from civic home and realized consequence paths, ratified common commitments, and institutional consequences.
A ballot cannot directly mutate a mine, inventory, contract market, price observation, or military order. The ratified mandate becomes one input to the responsible institution’s plan. The world host admits that plan against its current policy version, budget, reserves, facilities, inventory, staff, knowledge, routes, and obligations; receipts name accepted actions and shortfalls. A mandate can create an obligation, but only material execution can satisfy it.
Institutional planners are no longer owners once they emit those intents. They cannot repair rejected actions, invent a baseline contract, or reconcile the economy back toward a preferred state. Clients, forecasts, settlement recommendations, and news projections remain observers.
See Simulation Architecture and Ghostlight Boundary for the complete exchange contract.