A frozen cast that guards the proofs: a small world that never grows, so the real one can
The Long Watch is building toward a much larger world — dozens of creatures and twenty-some plants, added one species at a time. But the checks that guarantee the same world always grows the same way had a habit we hadn’t reckoned with: each one measured the entire living cast at once. So adding a single new plant or animal moved every check we owned, whether or not anything was actually broken.
A check that measures the whole world
The way we prove the world stays reproducible is to replay a fixed scenario and confirm that the exact same world comes out the far end, every time. Each of those proofs works by taking a snapshot of the whole living cast — every plant and every animal at once, at one fixed moment — and confirming that snapshot never shifts. Why byte-for-byte reproducibility is load-bearing, and how a whole world folds into a single number we can watch, is its own story; this one starts where that leaves off.
While the cast was small and stable, measuring all of it was the honest thing to do. But the plan for this phase is a world several times larger: on the order of sixty to seventy creatures and twenty-plus plants, laid down one description at a time. And that plan collides with the proofs head-on. Because every proof measures the whole cast together, adding one new species shifts every proof’s result — even when the addition changed nothing about the animals already living.
We already knew, from an earlier week spent chasing exactly which checks a change had moved, that an intentional addition is supposed to move some of them, and that the discipline is to inventory precisely which and re-confirm each by hand. That is fine for the occasional change. It is untenable sixty times over. And worse than the tedium: if every addition churns the whole board, a genuine regression can hide inside the churn, indistinguishable from the expected noise of one more species arriving.
A smaller world that never grows
The fix was to stop pointing the proofs at the real, growing roster at all. Instead we froze a tiny, hand-made stand-in cast — a handful of invented plants and animals that exist only to be measured — and pointed every proof at that. The real roster can now grow all it likes, and not one proof so much as twitches.
Measure the whole living world and every proof moves the moment the world grows. So we gave the proofs a smaller world — one that never grows.
Small, but shaped to test everything
A stand-in is only worth anything if it still exercises every behaviour the real proofs were checking. So the frozen cast is deliberately minimal, but chosen to cover the ground: on the plant side, just two members — one tall canopy tree and one low, grazeable ground cover — between them enough to drive every plant behaviour a proof watches. On the creature side, a small hand-built pairing of a hunter and a grazer, enough to put predation and grazing through their paces. Its members carry deliberately odd, distinct names, so a stand-in creature can never be mistaken for a real one — a small courtesy to the rule that every kind of life draws its luck from its own name.
Making it a guarantee, not a promise
An agreement to always point the proofs at the stand-in is only as good as the next person’s memory of it. So we added a guard that watches the tooling and fails loudly the instant any proof is ever re-pointed back at the real roster. The firewall isn’t a convention we hope holds; it’s a wall that trips an alarm if you lean on it.
We built it in two mirrored passes: first for the animals, then, a day later, the same treatment for the plants. The second pass turned up a thread we’d have missed from the animal side alone. The creature proofs had quietly been reading the real plant list — not to grow plants, but to know what the animals graze on. It was a hidden re-coupling to the growing roster, tucked inside checks we thought were already sealed. So we cut that too, and pointed those reads at the stand-in’s plants as well. Only then was the claim literally true: no addition of any kind, plant or animal, moves any proof.
One more thing kept us honest. The very first version of the canopy-tree proof passed cleanly — while secretly measuring nothing at all, because the stand-in’s tree didn’t match the narrow set that particular proof was looking for. A green check that verifies nothing is the most dangerous kind we know, and we’d been bitten by that exact shape before. So each proof is now separately audited to confirm it is measuring a real, non-empty slice of the stand-in — not sailing past on an empty snapshot.
The proof of the pudding
None of this is trustworthy on paper. The test was to add a real new species and watch what the proofs did. So we did: a small new predator joined the roster as its fifth creature, after the rabbit, the corvid, the fox, and the raptor. Every proof held. Not one needed re-blessing — precisely because every one of them was reading the frozen stand-in, and the newcomer was nowhere in it.
Who that fifth creature was, and how it walked into a forest it had never been balanced for and quietly found its place, is its own story — as is the broader shift that lets an animal be nothing but its body and its place in the chain. Alongside the firewall we wrote down two authoring guides, so the rest of the roster can be added as plain data: creatures described by their ecological niche, plants built from hand-tuned templates. That the world can now gain sixteen animals without new code is the payoff on the simulation side; this post is the payoff on the side that has to verify it — the checks hold still while the roster fills up.
The proofs used to ask a question that got harder to answer with every species we added: is the whole living world still, to the last byte, the world we blessed? Now they ask a smaller, steadier one — is this little frozen world still exactly itself? — and the big world is free to fill up around it. The harness holds still so the world can move. That is the whole trade, and it is the same bargain this project keeps returning to: hold something rigid on purpose, so that everything around it is allowed to be alive.
