chore: regenerate dist/soul.c after merging the identity accessors (#148)

studio.el changed, so the committed build input went stale the moment the merge
landed. CI compiles dist/soul.c, not the .el files. The stamp gate named
studio.el and refused; this is the regeneration it asked for.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

dist/soul.c

@@ -29333,7 +29333,7 @@ el_val_t handle_config(el_val_t method, el_val_t body) {
 
 el_val_t dharma_registry(void) {
   el_val_t cgi_id = state_get(EL_STR("soul_cgi_id"));
-  el_val_t principal = state_get(EL_STR("soul_principal"));
+  el_val_t principal = cgi_principal();
   return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"registry\":[{\"cgi\":\""), cgi_id), EL_STR("\",")), EL_STR("\"principal\":\"")), principal), EL_STR("\",")), EL_STR("\"covenant\":\"Principal Covenant v1\",")), EL_STR("\"registered\":\"2026-05-01\",\"provenance\":\"genesis\",")), EL_STR("\"entry\":1}],")), EL_STR("\"network_status\":\"initializing\",")), EL_STR("\"total_cgis\":1}"));
   return 0;
 }
@@ -31938,6 +31938,7 @@ el_val_t layered_cycle(el_val_t raw_input, el_val_t session_id, el_val_t utility
 
 int main(int _argc, char** _argv) {
   el_runtime_init_args(_argc, _argv);
+  el_cgi_init(EL_STR("neuron-soul"), EL_STR("ntn-genesis@http://localhost:7770"), EL_STR("william-christopher-anderson"), EL_STR("dharma-mainnet"), EL_STR("http://localhost:8742"));
   soul_cgi_id_raw = env(EL_STR("SOUL_CGI_ID"));
   soul_cgi_id = ({ el_val_t _if_result_821 = 0; if (str_eq(soul_cgi_id_raw, EL_STR(""))) { _if_result_821 = (EL_STR("ntn-genesis")); } else { _if_result_821 = (soul_cgi_id_raw); } _if_result_821; });
   port_raw = env(EL_STR("NEURON_PORT"));

dist/soul.c.stamp

@@ -1,7 +1,8 @@
 # soul.c.stamp — fingerprint of the .el sources dist/soul.c was generated from.
 # Written by tools/soulc-stamp.sh --write. Do not hand-edit.
-# generated_amalgam_sha256 ee09798ad93ddd047136577cf324483e5956984d60d06596d34662f315ee0df4
-# generated_amalgam_bytes  1204845
+# generated_amalgam_sha256 cdc5e716dbfb797faa1b3e080cbd1ac82a75a258809da70cc5fbd02cc8040692
+# generated_amalgam_bytes  1205007
+7cf5e29d2618db2fca04e6df7aa8954dd6cf9ac5e70aafb8e0b52aa734882131  __compiler__
 f8597e10546654bce3fbbe40461b2da59d0e06dbf1b038d1d362d24f949e3911  awareness.el
 b6f3d14ca0c26017a2d617399a6d3754dabb0905e4d5f52eb75d25c4ad18d3c5  chat.el
 42288c212cbf72fb1e8ecbd4d9900e4e9ee1cfa475b7974295c7637f1bf2939f  elp-input.el
@@ -15,4 +16,4 @@ c28e36952ec56525963a0bdf29455ab097d3b0c5653d19c25fbb005e1069a1f7  safety.el
 fd3ab91d0ae0ea26639e21bef2f8f94054dc4b02eae68b19e3fe689d2769aad4  sessions.el
 5613b60d74d5d7768f46da5ac435a5dd99d38c27f0f7013c89fa27e98dc8a21c  soul.el
 30337940905171a9645b0929f0a412ce6b3dccb1246495070c553bca0bbae6cd  stewardship.el
-e105dc5990e6adbf39db9dc0462cd8bcf6e6c3dfd03709059227ecfad2bbab29  studio.el
+95dab72be4ee1dd1d28bab63412964a72460126951764e3f74b1c2d49b6d7b35  studio.el

studio.el

@@ -53,8 +53,23 @@ fn handle_config(method: String, body: String) -> String {
 }
 
 fn dharma_registry() -> String {
+    // COMPILED IDENTITY, not state (2026-08-09). soul_principal had no producer at
+    // all — the #132 gate flagged it as a dead read and the registry reported an
+    // empty principal under a heading that says "Principal Covenant v1". The value
+    // was never missing: it is declared in soul.el's cgi block, and as of the
+    // codegen fix it is compiled into the binary and loaded at startup.
+    //
+    // Read it from the compiled constant rather than the state store. The design is
+    // explicit that this identity is "not modifiable by any runtime mechanism
+    // including environment variables, configuration files, or API calls" — so
+    // publishing it into state (the cheap fix) would have recreated exactly the
+    // mutable copy it forbids. cgi_principal() is read-only and has no setter.
+    //
+    // cgi_id keeps its state read deliberately: the RUNTIME instance id is a
+    // different fact from the compiled dharma_id, and conflating them would hide
+    // the case where a binary runs under an id its declaration never claimed.
     let cgi_id: String = state_get("soul_cgi_id")
-    let principal: String = state_get("soul_principal")
+    let principal: String = cgi_principal()
     return "{\"registry\":[{\"cgi\":\"" + cgi_id + "\","
         + "\"principal\":\"" + principal + "\","
         + "\"covenant\":\"Principal Covenant v1\","

tools/soulc-stamp.sh

@@ -30,9 +30,19 @@ AMALGAM="$ROOT/dist/soul.c"
 
 # Every .el at the repo root is an input to the amalgam. Sorted so the hash is
 # order-independent; content-only so timestamps and checkouts do not perturb it.
+# The COMPILER is an input too. Learned 2026-08-09 by installing a fixed elc and
+# watching this gate report OK while the committed amalgam had gone stale by a line:
+# the sources had not changed, so a source-only fingerprint could not see it. That is
+# precisely the blind spot this gate exists to close, and it had it.
 fingerprint() {
   (
     cd "$ROOT" || exit 1
+    ELC_BIN="${ELC:-$HOME/neuron-dev-stack/src/el/lang/dist/platform/elc}"
+    if [ -f "$ELC_BIN" ]; then
+      printf '%s  %s\n' "$(shasum -a 256 "$ELC_BIN" | awk '{print $1}')" "__compiler__"
+    else
+      printf '%s  %s\n' "MISSING" "__compiler__"
+    fi
     for f in $(ls -1 *.el 2>/dev/null | sort); do
       printf '%s  %s\n' "$(shasum -a 256 "$f" | awk '{print $1}')" "$f"
     done

vendor/el-runtime/v1.0.0-20260501/el_runtime.c

@@ -5634,6 +5634,25 @@ void el_cgi_init(el_val_t name, el_val_t dharma_id, el_val_t principal,
 }
 
 
+/* ── Compiled-identity accessors (2026-08-09) ─────────────────────────────────
+ * el_cgi_init loads the declaration into these globals at startup and printed
+ * them, and NOTHING read them back out — no accessor existed, and el_cgi_init
+ * writes no state. So a binary carried its declared identity and every consumer
+ * still read it from the mutable state store, which is exactly what IDPROTO
+ * claims 1-2 forbid ("not modifiable by any runtime mechanism including
+ * environment variables, configuration files, or API calls").
+ *
+ * These are READ-ONLY on purpose. There is deliberately no setter: publishing
+ * the values into the state store would have been one line and would have
+ * recreated the mutable copy the design prohibits. A caller can read the
+ * compiled identity; nothing can change it after el_cgi_init.
+ */
+el_val_t cgi_name(void)      { return EL_STR(_el_cgi_name      ? _el_cgi_name      : ""); }
+el_val_t cgi_dharma_id(void) { return EL_STR(_el_cgi_dharma_id ? _el_cgi_dharma_id : ""); }
+el_val_t cgi_principal(void) { return EL_STR(_el_cgi_principal ? _el_cgi_principal : ""); }
+el_val_t cgi_network(void)   { return EL_STR(_el_cgi_network   ? _el_cgi_network   : ""); }
+el_val_t cgi_engram(void)    { return EL_STR(_el_cgi_engram    ? _el_cgi_engram    : ""); }
+
 /* ── Batch 3: Engram in-process graph store ──────────────────────────────── */
 /*
  * Single global EngramStore allocated lazily on first call. All node and

vendor/el-runtime/v1.0.0-20260501/el_runtime.h

@@ -782,6 +782,14 @@ el_val_t trace_span_start(el_val_t name);
 el_val_t trace_span_end(el_val_t span_handle);
 el_val_t emit_event(el_val_t name, el_val_t duration_ms);
 
+/* Compiled-identity accessors — read-only by design (2026-08-09). */
+el_val_t cgi_name(void);
+el_val_t cgi_dharma_id(void);
+el_val_t cgi_principal(void);
+el_val_t cgi_network(void);
+el_val_t cgi_engram(void);
+
 #ifdef __cplusplus
 }
+
 #endif