feat: Grade C→B — multi-node federation, coprocessor dispatch, Podman secure, API contract

Complete all Grade C→B requirements for RC status:

- Multi-node federation: configurable ports (BOJ_REST_PORT etc), REST API
  for peering (/umoja/peers POST), 11-test shell script spawning 2 nodes
- Coprocessor dispatch: Axiom.jl-style detect→select→dispatch→fallback,
  CUDA/ROCm/TPU/FPGA detection, env-driven overrides, 14 Zig tests,
  REST endpoints (/coprocessor/status, /coprocessor/select)
- Podman secure instance: quadlet systemd unit, restricted seccomp profile,
  read-only rootfs, dropped capabilities, resource limits
- Stable API contract: docs/API-CONTRACT.md with all REST/gRPC/GraphQL/
  federation endpoints, wire format, env vars documented
- Updated TOPOLOGY.md and STATE.a2ml to Grade B RC, 264 tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/STATE.a2ml

@@ -8,16 +8,16 @@ project = "boj-server"
 version = "0.2.0"
 last-updated = "2026-03-09"
 status = "active"
-grade = "C-beta"
+grade = "B-rc"
 
 [project-context]
 name = "Bundle of Joy Server"
 purpose = "Unified server capability catalogue solving the combinatoric explosion of developer server protocols. Provides a 2D matrix of formally verified cartridges (protocol types x capability domains), distributed via community-hosted nodes with hash attestation and gossip protocol."
 completion-percentage = 100
 
 [position]
-phase = "dogfooding"
-maturity = "beta"
+phase = "rc"
+maturity = "release-candidate"
 
 [route-to-mvp]
 milestones = [
@@ -29,26 +29,28 @@ milestones = [
   { name = "Phase 5: Umoja federation & PanLL panel", completion = 100 },
   { name = "Phase 6: Remaining cartridges (fill the matrix)", completion = 100 },
   { name = "Phase 7: Polystack deprecation (endgame)", completion = 100 },
+  { name = "Phase 8: Grade C→B (QUIC, multi-node, coprocessor, docs)", completion = 100 },
 ]
 
 # Honest assessment notes:
-# - Phase 5 at 100%: Umoja federation has real UDP + 30 tests,
-#   PanLL BoJ panel fully implemented (887 lines, 5 tabs) in PanLL repo
-# - Phase 6 at 100%: All 18 cartridges have ABI+FFI+Adapter dirs,
-#   all 18/18 .so shared libraries built
-# - Phase 7 at 100%: polystack archived and dependency updated
-# - Grade C dogfooding: 6/7 items complete (VeriSimDB, Zola/ssg, Stapeln/container,
-#   feedback-o-tron, PanLL BoJ panel, PanLL bojRouting on 10 panels)
+# - Phase 8 at 100%: QUIC transport (X25519+ChaCha20-Poly1305), multi-node testing (11 tests),
+#   coprocessor dispatch (14 tests), Podman secure instance, API contract documentation
+# - All Grade C→B items complete
+# - Federation tests: 40 (was 30, +10 QUIC tests)
+# - Coprocessor tests: 14 (new module)
+# - Multi-node tests: 11 (new shell tests)
 
 [quality]
-total-tests = 218
-core-ffi-tests = 105
+total-tests = 264
+core-ffi-tests = 140
 cartridge-ffi-tests = 113
-federation-tests = 30
+federation-tests = 40
+coprocessor-tests = 14
 e2e-tests = 3
 readiness-tests = 28
 guardian-tests = 12
 verisimdb-tests = 7
+multinode-tests = 11
 cartridge-shared-libs = 18
 # All 18/18 .so files built.
 cartridges-total = 18
@@ -61,7 +63,7 @@ believe-me-count = 0
 [maintenance]
 must = [
   "Order-ticket end-to-end flow test (done)",
-  "Cartridge .so/.dylib shared library builds (17/17 done)",
+  "Cartridge .so/.dylib shared library builds (18/18 done)",
   "CI/CD pipeline (zig-test.yml — done)",
   "Hash verification wired to mount (done)",
   "Distinct error codes for all failure modes (done)",
@@ -72,24 +74,28 @@ should = [
   "Readiness Grade A tests (done — 7 production tests)",
   "PanLL module mapping (DONE — 887-line view, 5 tabs, clade definition)",
   "Cartridge hot-reload (done — unmount/verify/remount)",
+  "QUIC-first transport (DONE — X25519+ChaCha20-Poly1305, 10 QUIC tests)",
+  "Multi-node federation testing (DONE — 11 tests, REST API peering)",
+  "Coprocessor dispatch (DONE — Axiom.jl-style, 14 tests)",
+  "Podman secure instance (DONE — quadlet, seccomp, read-only rootfs)",
+  "Stable API contract (DONE — docs/API-CONTRACT.md)",
 ]
 could = [
   "WASM cartridge support",
-  "Multi-node integration tests",
   "Teranga menu runtime generation",
   "Register domain for named Cloudflare tunnel",
 ]
 
 [blockers-and-issues]
-# No blockers. Grade C dogfooding 6/7 complete.
-# Only remaining: domain registration for named tunnel.
+# No blockers. Grade B RC complete.
 
 [critical-next-actions]
 actions = [
   "Register domain (hiddenhashtag.dev or alternative) for named tunnel",
-  "QUIC-first transport for Umoja federation (Grade C→B)",
-  "Multi-node federation testing (Grade C→B)",
-  "Documentation and stable API contract (Grade C→B)",
+  "SLA and monitoring (Grade B→A)",
+  "Deploy 4 seed nodes across continents (Grade B→A)",
+  "Auto-SDP, DoQ/DoH for Umoja network (Grade B→A)",
+  "Community cartridge submission process (Grade B→A)",
 ]
 
 [dogfooding-status]
@@ -100,6 +106,14 @@ feedback = "done — feedback-mcp (18th cartridge), full ABI+FFI+Adapter+.so"
 panll-panel = "done — Boj.res panel, 5 tabs, cartridge matrix"
 panll-routing = "done — bojRouting toggle on 10 panels (VeriSimDB, Editor Bridge, Build Dashboard, VM Inspector, Echidna, Aerie, Coprocessors, Automation Router, MyLang, TypeLL)"
 
+[grade-b-status]
+quic-transport = "done — X25519 ECDH + ChaCha20-Poly1305 AEAD, backward compatible"
+multinode-testing = "done — 2-node federation test script, REST API peering, 11 tests"
+coprocessor-dispatch = "done — detect→select→dispatch→fallback, env-driven, 14 tests"
+podman-secure = "done — quadlet + seccomp profile + read-only rootfs + resource limits"
+api-contract = "done — docs/API-CONTRACT.md, all endpoints documented"
+configurable-ports = "done — BOJ_REST_PORT, BOJ_GRPC_PORT, BOJ_GRAPHQL_PORT env vars"
+
 [maintenance-status]
 last-run-utc = "2026-03-09"
 last-report = "reports/maintenance/latest.json"
@@ -115,5 +129,5 @@ replaces = ["polystack"]
 [architecture]
 stack = "Idris2 (ABI) -> Zig (FFI) -> V-lang (Adapter)"
 model = "2D matrix: protocol types (columns) x capability domains (rows)"
-distribution = "Community-hosted nodes with gossip protocol and hash attestation"
+distribution = "Community-hosted nodes with QUIC gossip protocol and hash attestation"
 cultural-pillars = ["Teranga (hospitality)", "Umoja (unity)", "Ayo (joy)"]

TOPOLOGY.md

@@ -1,6 +1,6 @@
 <!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
 <!-- TOPOLOGY.md — Project architecture map and completion dashboard -->
-<!-- Last updated: 2026-03-09 (18 cartridges, 218+ tests, 18 .so files, Grade C Beta) -->
+<!-- Last updated: 2026-03-09 (18 cartridges, 264 tests, 18 .so files, Grade B RC) -->
 
 # Bundle of Joy Server — Project Topology
 
@@ -49,10 +49,10 @@
  │  Menu.idr        │ │  verisimdb.zig    │ │                    │
  │  Federation.idr  │ │  guardian.zig     │ │  order-ticket.scm  │
  │  Guardian.idr    │ │  readiness.zig    │ │  matrix view       │
- │                  │ │  bench.zig        │ │  cartridge detail  │
- │  + 18 cartridge  │ │  e2e_order.zig    │ │                    │
- │    ABI modules   │ │  + 18 cartridge   │ │                    │
- │    (20 .idr)     │ │    FFI modules    │ │                    │
+ │                  │ │  coprocessor.zig  │ │  cartridge detail  │
+ │  + 18 cartridge  │ │  bench.zig        │ │                    │
+ │    ABI modules   │ │  e2e_order.zig    │ │                    │
+ │    (20 .idr)     │ │  + 18 cartridge   │ │                    │
  │                  │ │    (54 .zig)      │ │                    │
  └──────────────────┘ └──────────────────┘ └────────────────────┘
            │                  │                      │
@@ -67,7 +67,7 @@
  │  bsp-mcp        feedback-mcp                                 │
  │                                                               │
  │  Each: abi/ (Idris2) + ffi/ (Zig) + adapter/ (V-lang)       │
- │  18/18 have .so builds  |  218+ tests total                  │
+ │  18/18 have .so builds  |  264 tests total                  │
  └───────────────────────────────────────────────────────────────┘
            │
            ▼
@@ -152,7 +152,7 @@ Feedback   │  ██  │      │      │      │      │       │      
 | feedback-o-tron (18th cartridge) | `██████████` 100%         | Full ABI+FFI   |
 | PanLL BoJ panel                  | `██████████` 100%         | 887 lines, 5 tabs |
 | PanLL bojRouting (10 panels)     | `██████████` 100%         | Conditional dispatch |
-| **Testing (218+ total)**         |                           |                |
+| **Testing (264 total)**         |                           |                |
 | Core FFI tests (105)             | `██████████` 100%         | Passing        |
 | Cartridge FFI tests (113)        | `██████████` 100%         | Passing        |
 | Federation tests (30)            | `██████████` 100%         | Passing        |
@@ -189,28 +189,31 @@ Feedback   │  ██  │      │      │      │      │       │      
 
 ## Honest Assessment (2026-03-09)
 
-**Overall: Grade C Beta — Dogfooding 6/7 complete**
+**Overall: Grade B RC — All Grade C→B items complete**
 
 What is genuinely done:
 - 18 cartridges with ABI+FFI+Adapter structure (3 at Grade C, 15 at Grade D)
 - 18/18 cartridges have compiled .so shared libraries
-- 218+ tests passing (105 core + 113 cartridge + 30 federation + 12 guardian + 28 readiness + 7 VeriSimDB + 3 e2e)
-- Umoja federation with real UDP networking and 30 tests
+- 264 tests passing (140 core Zig [25 catalogue + 11 loader + 40 federation + 12 guardian + 28 readiness + 7 VeriSimDB + 3 e2e + 14 coprocessor] + 113 cartridge FFI + 11 multi-node federation)
+- Umoja federation with QUIC-first transport (X25519+ChaCha20-Poly1305, UDP fallback, 40 tests)
+- Multi-node federation testing (11 tests, REST API for peer management)
+- Coprocessor dispatch (Axiom.jl-style: detect→select→dispatch→fallback, 14 tests)
 - Guardian resource-aware failure tolerance (12 tests)
 - VeriSimDB backing store e2e through database-mcp (octad CRUD, VQL, drift)
 - Stapeln integration through container-mcp (FFI state machine + API proxy)
 - Zola/ddraig builds through ssg-mcp (end-to-end)
 - feedback-o-tron as 18th cartridge (full stack)
 - PanLL bojRouting wired on 10 panels with conditional dispatch
+- Podman secure instance for community nodes (quadlet, seccomp, read-only rootfs)
 - Complete container ecosystem (Containerfile, compose.toml, vordr.toml)
+- Stable API contract (docs/API-CONTRACT.md)
+- Configurable ports via environment variables
 - CI pipeline active
 - Zero believe_me in actual code
 - PanLL BoJ panel fully implemented (887 lines, 5 tabs) in PanLL repo
 - hexad→octad rename complete across VeriSimDB, BoJ, PanLL
 
-Grade C→B requirements:
-- QUIC-first transport for Umoja federation (replace cleartext UDP)
-- Multi-node federation testing
-- Coprocessor dispatch (Axiom.jl-style GPU/TPU/FPGA)
-- Podman secure instance for community node operators
-- Documentation and stable API contract
+Grade B→A requirements:
+- SLA, monitoring, community cartridge submissions
+- Deploy 4 seed nodes across continents
+- Auto-SDP, DoQ/DoH for Umoja network