Nishi Frontier Program — the critical-path project plan

A PMP-grade plan for taking the from-god graph ecosystem to frontier on every node: a work-breakdown structure with a computed critical path, float, a Gantt, a dependency network, milestones, resource loading, and the live domain board — all wired to our own instruments and modeled as data our dependency engine consumes.

v3 PMP · published 2026-07-17 · unit = one work-session (a focused team+Claude block); external lead times noted in calendar. CPM computed by forward/backward pass over the dependency network below (48 tasks). Backlog is real data at knowledge/registry/frontier_queue.tsv — consumed by nx_frontier (READY/BLOCKED) today; CPM+visuals emitted by nx_frontier_board (F-202, staged — see §How this is wired).

1 · The critical path (computed, zero float)

Critical path = the NishiOS greenfield chain, 14 sessions, zero float:
R-N0 native-contract-v1 R-N1 pabi-native core (byte-exact) R-N2 Linux guest lane R-N3 UEFI image R-N4 sovereign transport R-N5 os-compare measured. This chain drives the whole "superior on all fronts, measured" milestone (M7); every session slipped here slips M7 one-for-one. Staff it first, protect its slack, never borrow from it.
critical path 14 sessionsautonomy loop t≈8 (fast-track)GPU M1 t≈2 (starts now)swarm L4 t≈3silicon = calendar-gated7 lanes · no owner double-booked

Project span (all lanes, max parallelism) = 14 sessions of critical work + external board lead time for the silicon-boot milestone. The seven lanes run concurrently on disjoint file footprints (confirmed by the resource model in §7); the plumbing that makes the plan self-updating (F-201…208) runs alongside them.

2 · The three findings a PMP read surfaces

Finding 1 — NishiOS is the effort-critical path. Not GPU, not silicon. The six-rung greenfield OS chain (contract → native core → guest lane → UEFI → transport → os-compare) is the longest zero-float chain at 14 sessions. It is the schedule. Its rungs are strictly serial (each needs the prior's substrate), so it cannot be parallel-compressed — only staffed early and kept unblocked. This is where a slip hurts most.
Finding 2 — Silicon is calendar-critical, not effort-critical. The F-107 chain (csr/uart emitters → netlist → PnR → bitstream, ~8 sessions) carries ~5 sessions of float in effort terms, but its terminal milestone (M6, own CPU boots) is gated by the ULX3S board arrival — an external preorder lead time, not our code. So PnR/bitstream should proceed at a measured pace; urgency there is wasted until the board is ~2 weeks out. The board's ship date, not our velocity, sets M6. Classic external-dependency float — don't burn the team sprinting to a wall.
Finding 3 — The autonomy loop is a lead-generating fast-track. F-201→F-202→F-204→F-208 (store → board organ → cron → feeder, ~8 sessions) sits OFF the critical path with ~6 float. But finishing it early makes every later task cheaper — the system starts measuring, ranking, assigning, and evidencing itself (70%→100% zero-Claude), effectively shortening the chains that follow. PMP calls this investing in the enabler: schedule it aggressively despite its float, because its payoff is negative duration on everything downstream.

3 · Milestones (target session-offset from the computed schedule)

#milestonegated by (task)targetmeaning
M1First real GPU executionF-101b first sovereign submitt≈2gpu TOY→FUNCTIONAL; F-001 done → starts immediately
M8First measured revenue funnelF-301t≈2the mission fuel begins; live products already exist
M4Swarm first earned L4F-105c multinode prooft≈3first domain above the maturity floor by real multi-node evidence
M5First AHEAD verdict in ecosystem historyF-106c head-to-headst≈4a measured win vs Playwright/BackstopJS — not a self-gate
M3Forge core native on NishiOSF-103b pabi-native coret≈4the deterministic core (compiler+judge+store) on sovereign metal
M2Autonomy loop closedF-208 auto-feedert≈8the graph files its own backlog; /plan self-emits
M6Own CPU boots on own bitstreamF-107dboard-gatedeffort ready ~t9; actual date = ULX3S arrival + 1
M7NishiOS superior on all fronts, MEASUREDF-103f os-comparet≈14the frontier flagship; end of the critical path

4 · Work-breakdown structure + CPM table (48 tasks, computed)

Every task: duration (sessions), predecessors, earliest start/finish (ES/EF), total float, and critical flag. Red rows = zero float = on the critical path. Float = how many sessions this task can slip before it delays M7. Source data: frontier_queue.tsv (id·dur·owner·deps), CPM computed by forward/backward pass.

idtaskownerdurpredsESEFfloatstatus
— Day-0 unlocks + debt (eat-debt law: precede lane work) —
F001GPU key (Vast.ai)operator000☑ DONE
F002ULX3S boardoperator000ext◔ ORDERED (lead time)
F003verify tree deletionsengineer1015gates F107,F207
F004serve rebuild + remeasuremodelwright10113☑ DONE 07-17
F005reader-breaker deploysupervisor10113crashloop live
F006ecomat re-seedcensus1016feeds F202
F007autofix sweepteam10113open
— Program plumbing (the autonomy loop) —
F201frontier storepm1F006126store-law
F202board organ (CPM + emit)pm3F201256makes /plan self-emit
F203ws_put → WMSpm1F201238SSOT
F204cron + cadence hookconductor1F202,F203566autonomous
F205MCP/API rowpm1F202,F210568expose
F206RACI rowspm1F201238own
F207HR staffing joinhr2F003,F206358staffed
F208auto-feeder (M2)pm2F204686closes the loop
F209evidence check-inlibrarian1F202568no silent wins
F210tools-plane admin APIengineer20211unblocks MCP+retires cap workaround
— GPU lane (float 6; starts NOW, F-001 done) —
F101aprovision + deployengineer-gpu1F001016bundle 15/15
F101bfirst sovereign submit (M1)engineer-gpu1F101a126TOY→FUNCTIONAL
F101cC0 FP32 GEMMengineer-gpu1F101b236honest floor
F101dC1 tensor-core BF16engineer-gpu2F101c356ISA already bit-exact
F101eC2 ≥90% cuBLASengineer-gpu2F101d576measured board
F101fC3 determinism exceedengineer-gpu1F101e786integer IMMA moat
— NISHIOS lane — THE CRITICAL PATH (float 0) —
F103aNative Contract v1engineer-os1010CRITICAL
F103bpabi-native core, byte-exact (M3)engineer-os3F103a140CRITICAL
F103cLinux guest lane (bridge)engineer-os2F103b460CRITICAL
F103dUEFI image on real metalengineer-os3F103c690CRITICAL
F103esovereign transport (sockets→QUIC)engineer-os3F103d9120CRITICAL
F103fos-compare measured (M7)engineer-os2F103e12140CRITICAL — flagship
— Compiler lane (float 7; single-owner) —
F104ainliner miscompile fixengineer-compiler2027instr-walk clone
F104benable + measureengineer-compiler1F104a237close 1.97×/3.0×
F104caarch64 backendengineer-compiler4F104b377mobile/Pi unlock
— Browser lane (float 9) —
F102aw=0 collapse + float/posengineer-browser2029next rock
F102bOCR recall ratchetengineer-browser1F102a239wiki >766
F102cTLS session reuseengineer-browser10113certloop<100ms
F102dfont fidelityengineer-browser2F102b359tight-parity ratchet
— Swarm (float 11) · Experiential (float 10) —
F105aworker auth/enrollengineer-swarm20211kills security L0
F105bVRAM beaconengineer-swarm10112windows collector
F105cmultinode proof (M4)engineer-swarm1F105a,F105b2311first earned L4
F106aconsole/error captureracing101106/8 attested
F106bCI sweep orchestrationracing1F106a1210
F106chead-to-heads (M5)racing2F106b2410first AHEAD
— Silicon (float 5 effort; calendar-gated by board) —
F107acsr/clint/uart emittersengineer-silicon3F003145
F107btop netlistengineer-silicon2F107a465
F107cPnR + bitstreamengineer-silicon2F107b685
F107dULX3S boot (M6)engineer-silicon1F107c,F0028board*board-gated
— Value / revenue (the mission fuel) —
F301revenue funnel measured (M8)pm+fin20210live products exist
F302reinvest ledgerfin1F3012310nx_fin_serve
F303living-wage modelhr+fin1F302,F207568mission bridge

5 · Gantt — the whole program on one timeline

Bars positioned by earliest-start × duration (one grid = one session). Red = critical path (NishiOS) · amber = GPU + silicon · blue = autonomy loop · green = early-win milestones · ◆ = milestone. Silicon boot is dashed (calendar-gated by board arrival, not effort).

t=02468101214 OS: contract v1 OS: pabi-native core OS: guest lane OS: UEFI image OS: transport OS: os-compare GPU: provision GPU: first submit GPU: C0 GEMM GPU: C1 tensor-core GPU: C2 cuBLAS GPU: C3 exceed AUTO: ecomat reseed AUTO: store AUTO: board organ AUTO: cron AUTO: feeder CC: inliner fix CC: enable CC: aarch64 backend BR: w=0 + float BR: OCR ratchet BR: TLS reuse BR: font fidelity SW: worker auth SW: VRAM beacon SW: multinode EXP: console EXP: CI sweeps EXP: head-to-heads SI: verify (F003) SI: csr/uart emit SI: netlist SI: PnR/bitstream SI: boot (board-gated) VAL: revenue funnel VAL: reinvest ledger VAL: wage model M3M7M1M2M4M5M8M6 ◇ board

6 · Critical-path network (the chain that sets the finish)

The critical path is a single serial chain — that is exactly why it governs. Each node is strictly gated by the prior (a native core needs the contract; UEFI needs the core; os-compare needs a booting OS). No amount of extra people compresses it; only early staffing and zero blocking help.

contract v11s · t0-1 pabi core3s · t1-4 ◆M3 guest lane2s · t4-6 UEFI image3s · t6-9 transport3s · t9-12 os-compare2s · t12-14 ◆M7 M7 = NishiOS superior, MEASUREDvs Linux 6.x / seL4 / Fuchsia / Redox

7 · Resource loading — who is the bottleneck

Each lane has one owning role; tasks within a lane are serial. So the schedule is feasible with exactly the seven lane-owners + the plumbing/support roles — no owner is ever double-booked, which is why "7 concurrent workstreams" is the correct parallelism, not an arbitrary number.

owning rolebusy sessionsspanutilizationslack
engineer-os14t0–t14100%0 — THE bottleneck
engineer-silicon8t1–t8 (+board)~100% then calendar-waiteffort slack 5; then board-gated
engineer-gpu8t0–t8100% of its 86 (whole chain floatable)
engineer-compiler7t0–t7100% of its 77
engineer-browser6t0–t5high9
engineer-swarm · racing4 · 4t0–t3 · t0–t4early11 · 10
pm~9t0–t8 (plumbing + value + rank/oversight)highspread
census · modelwright · supervisor · hr · conductor · librarian · fin1–2 eachdebt + plumbinglowample
Resource finding: engineer-os is the single 100%-loaded resource on the zero-float chain — the program's true constraint (Theory-of-Constraints bottleneck). You cannot compress its serial chain by adding people; the leverage is to (a) front-load the Native Contract v1 design so the core work never waits, (b) keep its lane ruthlessly unblocked (nothing else may borrow that owner), and (c) let the six floatable lanes absorb any shared-resource contention. Everyone else has slack; spend it feeding the OS lane, not sprinting lanes that already have float.

8 · The domain board — every /compare node, coverage vs EARNED maturity

Wired from the live nishi_compare_index (46 domains) × the maturity ruler. Coverage = capability-presence (inflatable, honest-labeled). Maturity = evidence-capped L0–L5 (≈ coverage × 0.2 at floor; climb by earning LIVE→MCP→multi-node→hardened). The gap is the anti-navel-gazing signal: it is the real backlog of hardening work, and it is exactly what the autonomy feeder (F-208) turns into new F-rows.

domaincoveragematuritythe honest read
swarm944356the ONLY domain above floor — earned live+MCP; 6 sovereign exceeds
crm · projectmgmt · workermesh · ads1000~200presence-complete; depth varies; pm has 4 measured exceeds
cms 964 · containers 950 · videoops 944~950~190containers: idle 0MB vs 2774, cold 976ms measured exceeds
connect 857 · search 812 · surveys 800~820~165connect + surveys are LIVE apps; search gaps = neural-rerank/web-scale
medbilling 785 · authz 764 · deploy 720 · webscraping 705 · librarian 695~735~148deploy control plane deploys ITSELF; librarian 8 trust exceeds
automation 676 · deepresearch 666 · videocodec 666 · instrument 666~670~134codec MEASURED R-D ~1.5–2× H.264 bits; automation full exec semantics
comms 619 · referee 600 · dataeng 586 · janitor 583~600~120comms own-codec E2EE, no WebRTC; referee cheat-proof grading
sending 514 · lang 500 · warden 500 · racing 500~500~100lang honestly 500 by the CWE memory-safety block (no navel-gazing)
modelwright 476 · team 473 · doctor 470 · genealogy 444~465~93team's absent = LLM code authoring (the forge arc answers it)
office 406 · supervisor 347 · llm~380~75the honestly-lowest; llm serve REMEASURED (F-004): i8 decode ~23 tok/s, i32 ~15 tok/s on a healthy 17-thread build (the 2.40 was prefill, not decode)
radars: computational · career · sharing · civic · sodafrontier radars: 2025/26 opportunity maps, researcher-fed
physical (soon): foodscience · waterdesign engines (49 + 3 gated organs) — the physical F-301 candidates
boards: autograde · pitwall · archboard · atlaslivethe self-grading / roadmap / architecture / graph surfaces this program composes

The aggregate: coverage across the plane is ~5× the earned maturity. That gap is not failure — it is the measured, prioritized hardening backlog, and closing it (LIVE→MCP→multi-node per domain) is what moves the ecosystem's 328‰ toward S-class. The feeder (F-208) reads this table and momentum radars to file the next rocks automatically.

9 · Experiential census (top-down, 19 axes) — GAP 11 / PARITY 8 / AHEAD 0

From the self-emitting /experiential. Competitor attestation = sovereign-fetched READMEs (playwright/puppeteer/cypress/selenium/axe-core/lighthouse/backstop/browser-use). PARITY caps until a measured win; the AHEAD conversion is lane F-106.

PARITY (8) — our organ on diskGAP (11) — absent, attested by N/8
drive browser · screenshot · input drive · auto-wait · visual-diff · live-run findings · page/asset verify · UI/CX judgingconsole/error capture (6) · CI sweep orchestration (5) · cross-browser/WebKit (4/1) · agentic play (4) · media playtest (4) · network interception (3) · a11y WCAG (3) · perf vitals (2) · trace/replay (2) · mobile emulation (2)

10 · The ladder from god (condensed — state + named next)

rungstate (honest)named next
0 Own siliconRV64IM CPU proven in sim (QEMU-cross); ALU/decoder gate-emit verifiedcsr/uart emit → netlist → PnR → ULX3S boot (F-107)
0b Boards/actuationPCB manufacturable (Gerber/drill/CAM); robotics firmware sim-provenbind HAL to real MMIO
1 3rd-party CPUsx86-64 production + Windows PE/DLL; RV64 toolchain+JIT; aarch64 ABSENTaarch64 backend (F-104c) = mobile unlock
2 GPUtensor-core ISA bit-exact 3 vendors; G4 path witnessed on 5080; 636 tok/s floorfirst real-silicon execute (F-101, key READY)
3 Firmware/bootspore GREEN in emulator/file-model; never-brick mechanicalUEFI image on real metal (F-103d)
4 NishiOScensus 18/21; pabi seam 15/15 — GREENFIELD, not a Linux cloneNative Contract v1 → os-compare (F-103, CRITICAL PATH)
5 Language/compilerself-hosted, 25/25, −1.1% vs gcc; memory-safety ABSENTinliner → aarch64 (F-104)
6 Networkown TLS 1.3 production; certloop 980mssession reuse → QUIC/HTTP3/BBR (F-102c, F-103e)
7 Fleet/control15/15 UP; mgmt 1000/1000; 60 MCP tools; leash+cadence liveobservability; reader-breaker (F-005, F-401)
8 Swarmfull loop live; honest 356 (only above floor)worker auth → multinode proof (F-105)
9 Models/forgeno-float integer stack; A1 honest RED; serve REMEASURED ✓ (i8 ~23 tok/s; i32 201→109 ms/tok ≈1.85×, reg-alloc dividend)GPU seat → 636 tok/s (F-101); forge best-of-N
10 Browserheight axis CLOSED (2227px); OCR recall regression openw=0 collapse + float (F-102a)
11 ExperientialGAP 11 / PARITY 8 / AHEAD 0console capture → head-to-heads (F-106)

11 · RACI — the house lived in (PM Accountable everywhere)

functionRACI
Measure/grade every nodecensus + researcherpmcritic/adversaryall
Rank backlog (impact×gap×momentum)pmpmarchitect+researcheroperator
Assign/staff laneshrpmconductorcrew
Execute rungslane engineerspmarchitectreferee
Verify/ratchet (erosion=RED)referee+adversarypmoperator
Publish evidence + this pagelibrarian+sitespmall
Shared-resource schedulingconductor+supervisorpm
Product/revenue funnelspm+finoperatorhrall

Roster / what each teammate watches: pm ranks+owns the door · researcher 2025/26 corpora · census disk-vs-evidence · referee grades check-ins · adversary/critic refute every green · architect daily family-tree board · genealogist lineage of every organ (roots-to-god, provenance to seed) · librarian files /evidence · janitor debt+orphans · doctor diagnosis loop · conductor queue+cadence · supervisor fleet+leash · hr staffing+wage ledger (⚠nx_hr* deletions = F-003 gate) · warden policy+money-safety · fin revenue ledger · modelwright model lane · racing crew head-to-heads · engineer lanes ×7 in §4.

12 · Autonomy — 70% → 100%

13 · Value + revenue — the mission fuel (funnels honestly unmeasured)

product (live)statefunnel
AndelinWest client portals · ad network (pay-on-results) · medbilling advocacy portalLIVEF-301 candidates — unmeasured
surveys · connect · office/CRM · video · gallery · wiki · gamesLIVEportfolio
physical: water-from-air · craft soda · food science · PCB/robotics fabdesign engines gated; no SKUs yetplans/kits track

F-302 makes income visible on nx_fin_serve; F-303 publishes the living-wage staffing curve here. Revenue → reinvest → staffed roles is reported, not asserted.

14 · Progress ledger (newest first)

datelandedevidence
07-17F-004 CLOSED: no-float serve ELF rebuilt+restaged (current compiler, both _offc names); REMEASURED — bench i32-lossless 201→109 ms/tok median ≈1.85× (reg-alloc dividend), i8 67 unchanged; serve /gen warm i8 43 ms/tok ≈23 tok/s decode. ★HONESTY: the “511-thread thrasher” premise did NOT reproduce — staged binary boots 17 threads (cpu_count=16); the “2.40 tok/s” figure was prefill, not decodeknowledge/index/speedbench.out (5-run median)
07-17/plan v3 PMP: computed critical path (NishiOS, 14s, 0 float) + WBS/CPM table (48 tasks) + Gantt + dependency network + resource loading; backlog written as real queue data frontier_queue.tsv (wired to nx_frontier engine); domain board wired from live compare indexthis page + the queue file
07-17DEBTS EATEN: stray plan/index.html → 301 redirect (verified) · durable scoped publish cap (ends ssh-per-republish) · F-210 filed as the API-pure fixedge 301 · .prev chain
07-16Program chartered; greenfield-NishiOS doctrine banked; Vast.ai READY (F-001), ULX3S ORDERED (F-002)front-door memory
07-16Browser height axis CLOSED (2227px); GPU sovereign path witnessed on 5080; compiler −1.1% vs gcc; memory-rail budget shippednx_visual_diff · sovpath_witness · autograde

15 · How this is wired (the honest architecture)

Charter (operator, 2026-07-16): "…a growing from-god graph ecosystem truly getting to frontier on every node, while providing value via digital and physical products that generate revenue to reinvest, so we can provide living wages to families, grow everyone's standard of living, and get rid of things like factory farming and other abominations as endpoint goals."

Republish (zero-ssh): nx_fs_write chunks → nx_site_publish → nx_https_get verify · durable scoped cap banked · self-emitting page = F-202. Backlog SSOT migrates to the WMS registry at F-203.