unaltraweb 0.6.0 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 33193d7900939e3cf2e4e9769e8fd9443e0a7242eaa73aef1d93b8ffcee6e79b
-  data.tar.gz: 3ef63e4f55c4b369e0926be413eb2da4d3702f49ac733d84dedc952bb1ec563c
+  metadata.gz: 2ed24da568933de15be12350ea7b867a6aa7e14abac71ec303755f5b808e1837
+  data.tar.gz: a4176d255c14de252144d7669db6479bc43ee033342332cd596870eea1ddf71b
 SHA512:
-  metadata.gz: eb799646f841a4444d315aa4a71d161ec83acacbef75f36fe00b8db7242699be40147c2829bedee18f249f3085b51328cd18a902f317196d518b4f2b8e11a9f2
-  data.tar.gz: cfe5a103146718d7bbae56c9821b2dabdc0fdf1bcde966779ee41ea96c468bd795446202844a56a0974919ce4bca33e2d90e5c6de98e8e95936b1335c44dca86
+  metadata.gz: 768943c9b012a7e165ab9136d364783203c35caaaae62c2715f95361107f63377dbac30e45252ebeff78b0707d71dd14eb0481cecca18f52b15688c82f4c8c10
+  data.tar.gz: 49edeb75312f6d45e53db50a55a65f25ddb81f7ad8cc8438c9568ada3c9d699c9c00f0a329ea9b8cc2fb5812b5e48acd254e0e967b659d16650a0ea8612dad16

data/Makefile

@@ -1,9 +1,9 @@
 PYTHON ?= python3
 override PROJECT := $${MCP_CONSUMER_WORKSPACE:?MCP_CONSUMER_WORKSPACE is required}
 override PROJECT_ROOT := $(PROJECT)
-MCP_RUNTIME_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.6.0
-MCP_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.6.0
-MCP_RELEASE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692
+MCP_RUNTIME_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.0
+MCP_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.0
+MCP_RELEASE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:736c4ddd0a543454e3edaeac2e9cfd97a1279ce472923ac54e326c1281b2ba05
 MCP_DOCKER_BUILD_NETWORK ?= default
 INIT_SITE_PROFILE ?= unaltreselfie
 NEW_WEB_PROFILE ?= unaltreselfie
@@ -40,7 +40,7 @@ WEB_CAPTURE_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-web-capture@sha256:0bf1b
 WEB_CAPTURE_DEV_IMAGE ?= unaltraweb-web-capture:dev
 WEB_CAPTURE_DOCKER_BUILD_NETWORK ?= default
 VEGAVISUALS_CLI ?=
-DOCKER_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.6.0
+DOCKER_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb:0.7.0
 MANUAL_PDF_IMAGE ?= ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed
 MANUAL_PDF_DEV_IMAGE ?= unaltraweb-manual-pdf:dev
 MCP_SMOKE_MANUAL_PDF_IMAGE ?= $(MANUAL_PDF_IMAGE)
@@ -71,7 +71,7 @@ export MANUAL_RELEASE_SELECTOR MANUAL_PDF_LANG MANUAL_PDF_PUBLISH_DRY_RUN MANUAL
 UNALTRAWEB_WORKER_ROLE ?=
 UNALTRAWEB_WORKER_PROJECT ?=
 UNALTRAWEB_WORKER_TOKEN ?=
-WORKER_LABEL_ARGS = $(if $(strip $(UNALTRAWEB_WORKER_TOKEN)),--label "io.context.mcp-factory=unaltraweb" --label "io.context.mcp-role=$(UNALTRAWEB_WORKER_ROLE)" --label "io.context.mcp-project=$(UNALTRAWEB_WORKER_PROJECT)" --label "io.context.mcp-worker-token=$(UNALTRAWEB_WORKER_TOKEN)",)
+WORKER_LABEL_ARGS = $(if $(strip $(UNALTRAWEB_WORKER_TOKEN)),--label "io.context.mcp-factory=unaltraweb" --label "io.context.mcp-role=$(UNALTRAWEB_WORKER_ROLE)" --label "io.context.mcp-project=$(UNALTRAWEB_WORKER_PROJECT)" --label "io.context.mcp-worker-token=$(UNALTRAWEB_WORKER_TOKEN)",) $(if $(strip $(UNALTRAWEB_RUNTIME_SESSION)),--label "io.context.mcp-session=$(UNALTRAWEB_RUNTIME_SESSION)",)
 DOCS_CONTAINER ?= unaltraweb-docs-local
 DOCS_HOST ?= 0.0.0.0
 DOCS_PORT ?= 4000
@@ -295,17 +295,18 @@ manual-compute-render: ## Execute sources and atomically publish Markdown and fi
 	  python_image="$(COMPUTE_PYTHON_IMAGE)"; r_image="$(COMPUTE_R_IMAGE)"; \
 	  if test "$$engine" = "r"; then r_image="$$image"; else python_image="$$image"; fi; \
 	  if ! docker image inspect "$$image" >/dev/null 2>&1; then \
+	    if test "$${UNALTRAWEB_MANAGED_RUNTIME:-0}" = 1; then printf '%s\n' 'Selected computation image is not prepared; managed execution never builds or pulls' >&2; exit 1; fi; \
 	    COMPUTE_PYTHON_IMAGE="$(COMPUTE_PYTHON_IMAGE)" COMPUTE_R_IMAGE="$(COMPUTE_R_IMAGE)" COMPUTE_DOCKER_BUILD_NETWORK="$(COMPUTE_DOCKER_BUILD_NETWORK)" $(PYTHON) "$(COMPUTE_SCRIPT)" image --project "$(PROJECT_ROOT)" --engine "$$engine" >/dev/null; \
 	  fi; \
 	  identity=$$(docker image inspect "$$image" --format '{{.Id}}'); \
 	  digest=$$(docker image inspect "$$image" --format '{{join .RepoDigests ","}}'); \
 	  set --; if test -n "$(UNALTRAWEB_WORKER_TOKEN)"; then cidfile="$$runtime_dir/worker-$(UNALTRAWEB_WORKER_TOKEN)-$$engine.cid"; rm -f "$$cidfile"; cidfiles="$$cidfiles $$cidfile"; set -- --cidfile "$$cidfile"; fi; \
-	  docker run --rm "$$@" $(WORKER_LABEL_ARGS) --user "$(LOCAL_UID):$(LOCAL_GID)" --network none --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit "$(COMPUTE_PIDS_LIMIT)" --cpus "$(COMPUTE_CPUS)" --memory "$(COMPUTE_MEMORY)" --tmpfs /tmp:rw,noexec,nosuid,size=1g \
+	  docker run --rm --pull never "$$@" $(WORKER_LABEL_ARGS) --user "$(LOCAL_UID):$(LOCAL_GID)" --network none --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit "$(COMPUTE_PIDS_LIMIT)" --cpus "$(COMPUTE_CPUS)" --memory "$(COMPUTE_MEMORY)" --tmpfs /tmp:rw,noexec,nosuid,size=1g \
 	    -e HOME=/tmp -e COMPUTE_PYTHON_IMAGE="$$python_image" -e COMPUTE_R_IMAGE="$$r_image" \
 	    -e UNALTRAWEB_COMPUTE_IMAGE_ID="$$identity" -e UNALTRAWEB_COMPUTE_IMAGE_DIGEST="$$digest" \
 	    --mount "$$project_mount" \
 	    --mount "$$runtime_mount" \
-	    -w /project --entrypoint python3 "$$image" \
+	    -w /project --entrypoint python3 "$$identity" \
 	    /opt/unaltraweb/computations/render.py render --project /project --engine "$$engine" $(if $(strip $(COMPUTE_SOURCE)),--source "$(COMPUTE_SOURCE)",) $(if $(filter 1 true TRUE yes YES y Y,$(COMPUTE_CONFIRM_OVERWRITE)),--confirm-overwrite,) $(if $(filter 1 true TRUE yes YES y Y,$(COMPUTE_STALE_ONLY)),--stale-only,) $(if $(strip $(COMPUTE_MODE)),--mode "$(COMPUTE_MODE)",) >> "$$results"; \
 	done; \
 	if test -z "$(strip $(COMPUTE_SOURCE))"; then $(PYTHON) "$(COMPUTE_SCRIPT)" prune --project "$(PROJECT_ROOT)" >/dev/null; fi; \
@@ -382,13 +383,14 @@ define run_manual_pdf_worker
 	if test -n "$(UNALTRAWEB_WORKER_TOKEN)"; then runtime_dir="$(PROJECT_ROOT)/tmp/.unaltraweb/manual-pdf"; mkdir -p "$$runtime_dir"; cidfile="$$runtime_dir/worker-$(UNALTRAWEB_WORKER_TOKEN).cid"; rm -f "$$cidfile"; set -- --cidfile "$$cidfile"; fi; \
 	mount=$$(/bin/sh "$(DOCKER_MOUNT_SCRIPT)" "$(PROJECT_ROOT)" /project); \
 	trap 'test -z "$$cidfile" || rm -f "$$cidfile"' EXIT; \
-	docker run --rm "$$@" $(WORKER_LABEL_ARGS) --user "$(LOCAL_UID):$(LOCAL_GID)" -e HOME=/tmp -e "UNALTRAWEB_MANUAL_RELEASE_SELECTOR=$${MANUAL_RELEASE_SELECTOR}" --mount "$$mount" -w /project "$(MANUAL_PDF_IMAGE)" $(1) --project /project $(if $(strip $(MANUAL_PDF_LANG)),--language "$(MANUAL_PDF_LANG)",) $(2)
+	identity=$$(docker image inspect "$(MANUAL_PDF_IMAGE)" --format '{{.Id}}'); \
+	docker run --rm --pull never --network none --cpus 2 --memory 2g --pids-limit 256 "$$@" $(WORKER_LABEL_ARGS) --user "$(LOCAL_UID):$(LOCAL_GID)" -e HOME=/tmp -e "UNALTRAWEB_MANUAL_RELEASE_SELECTOR=$${MANUAL_RELEASE_SELECTOR}" --mount "$$mount" -w /project "$$identity" $(1) --project /project $(if $(strip $(MANUAL_PDF_LANG)),--language "$(MANUAL_PDF_LANG)",) $(2)
 endef
 
 manual-pdf-preflight: ## Run required PDF gates without contaminating the worker JSON stream
 	@$(MAKE) --silent --no-print-directory manual-compute-check >/dev/null
 	@$(MAKE) --silent --no-print-directory web-capture-check >/dev/null
-	@docker image inspect "$(MANUAL_PDF_IMAGE)" >/dev/null 2>&1 || docker pull "$(MANUAL_PDF_IMAGE)" >/dev/null
+	@docker image inspect "$(MANUAL_PDF_IMAGE)" >/dev/null 2>&1 || { if test "$${UNALTRAWEB_MANAGED_RUNTIME:-0}" = 1; then printf '%s\n' 'Selected PDF image is not prepared; managed execution never pulls' >&2; exit 1; fi; docker pull "$(MANUAL_PDF_IMAGE)" >/dev/null; }
 
 manual-pdf-status: ## Inspect manual PDF configuration and artefacts without Docker, network, or writes
 	@UNALTRAWEB_MANUAL_RELEASE_SELECTOR="$${MANUAL_RELEASE_SELECTOR}" $(PYTHON) "$(CURDIR)/scripts/manual/build_pdf.py" status --project "$(PROJECT_ROOT)" $(if $(strip $(MANUAL_PDF_LANG)),--language "$(MANUAL_PDF_LANG)",)

data/docs/_documentation/en/40-distribution.md

@@ -25,12 +25,25 @@ The template is the better place to validate gem consumption, centralized styles
 
 ## Component Contract
 
-### Pending 0.6.0 retained-letter increment
-
-The source branch prepares a separate 0.6.0 identity for native
-[retained-letter import]({{ '/retained-documents/' | relative_url }}).
-Gem, wheel, base runtime and MCP are authorized as `ready` for final same-source
-candidates. The consumer core selects reviewed integration
+### 0.7.0 D0 runtime increment
+
+The next containing runtime adds [live instance identity and session-scoped
+resource control]({{ '/live-runtime/' | relative_url }}). Preparation is explicit,
+launch is pull-never, and startup identity remains distinct from current disk
+metadata. The owner-tested rendering closure selects Diavisuals 0.5.0 and Vega
+0.5.1 with exact artifacts; old 0.4.0 static receipts remain integrity-checked.
+Diavisuals' separate live-process identity correction still gates the full
+managed coordinator closure. Publication and activation evidence belong to the
+[D0 owner record](https://github.com/dosquartsdedocs/unaltraweb/blob/main/docs/agents/d0-runtime-identity.md).
+
+### Published 0.6.0 release
+
+[**0.6.0**](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.6.0)
+delivers native [retained-letter import]({{ '/retained-documents/' | relative_url }}).
+Gem, wheel, base runtime and MCP were published from
+`de52db351490e94939aac20c6af264f22a6a1678`; receipt-only integration and tag target
+`ec6dcb28e890d32718aa173934527a7b4213a042` bind their verified bytes.
+The consumer core selects reviewed integration
 `5cf9817489c8dc47cee726bfe42fe3071cd32b85`; the PDF 0.6.0 worker is already
 published, signed and tested at immutable digest
 `sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed`.
@@ -38,12 +51,14 @@ The PDF worker changes to include complete retained documents and the same
 integrity checkers used by its controller. Computation, capture and visual
 companions retain their tested 0.4.0 selections.
 
-The checkout's active launcher remains pinned to the published 0.5.1 MCP digest.
-Its receipt and package bytes remain unchanged. Local development images and an
-installed wheel exercise the new import without claiming a public 0.6.0 release
-or changing real consumer sites. The
-[owner acceptance record](https://github.com/dosquartsdedocs/unaltraweb/blob/main/docs/agents/retained-letter-import.md)
-records the authenticated Carta packet, receiver mapping and relocation proof.
+The post-release checkout launcher selects published MCP digest
+`sha256:736c4ddd0a543454e3edaeac2e9cfd97a1279ce472923ac54e326c1281b2ba05`.
+Signed candidates, protected CI, strict receipt/ancestry gates, registry promotion
+and Trusted Publishing passed. Anonymous downloads match the receipt. The
+[delivery report](https://github.com/dosquartsdedocs/unaltraweb/blob/main/docs/agents/owner-closeout-80.md)
+records the installed Carta relocation proof and four-profile populated-cache
+roundtrip against those exact bytes. Existing clients keep their loaded image
+until reconnecting; real consumer adoption remains explicit.
 
 ### Published 0.5.1 release
 
@@ -53,7 +68,7 @@ state. Source `aab5a7b030cd711b40770a3f44ad3a356eab90da` produced the signed
 images and verified gem/wheel. Receipt/tag commit
 `e842c733c8a274279dd5efdc3618e20669f29037` changes only the receipt from that
 first parent. Strict release/publication gates passed before promotion, and
-anonymous registry downloads match the receipt. The checkout launcher now selects
+anonymous registry downloads match the receipt. That release's launcher selected
 `ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692`.
 
 The four-profile populated-cache roundtrip also passed against the actual signed
@@ -91,25 +106,25 @@ candidate, receipt, tag and package evidence.
 
 The BOM is an interoperability contract, not a bundle. The wheel contains its Python control/inspection modules, schema/BOM, clean package-owned scaffolds and a small host Docker launcher, described below. It does not include Ruby theme assets, Docker image layers, the factory's build/worker implementations, TeX, Chromium, computation environments, `diavisuals`, or `vegavisuals`.
 
-The selected public core release is `0.5.1`; earlier distributions remain immutable. Its BOM reuses immutable PDF, compute and web-capture worker digests and selects published `diavisuals v0.4.0` and `vegavisuals v0.4.0` through SHA-256-pinned wheel URLs. Companion references can describe either a provider/release-matching Git reference or a provider/release/version-matching wheel with its content hash. The wheel boundary remains external. The scaffold's Vega revision is the published `68c0b231402ae9485cc34ce530dc5239cb0ec194` commit. `distribution-check` validates structural integrity for normal CI. `distribution-release-check` blocks coordinated publication while any component is `pending` or `unavailable`; reviewed source authorized to produce final same-commit candidates is `ready`, while an already-published component is `released`. Final receipt values remain immutable after publication.
+The selected public core release is `0.6.0`; earlier distributions remain immutable. Its BOM reuses immutable PDF, compute and web-capture worker digests and selects published `diavisuals v0.4.0` and `vegavisuals v0.4.0` through SHA-256-pinned wheel URLs. Companion references can describe either a provider/release-matching Git reference or a provider/release/version-matching wheel with its content hash. The wheel boundary remains external. The scaffold's Vega revision is the published `68c0b231402ae9485cc34ce530dc5239cb0ec194` commit. `distribution-check` validates structural integrity for normal CI. `distribution-release-check` blocks coordinated publication while any component is `pending` or `unavailable`; reviewed source authorized to produce final same-commit candidates is `ready`, while an already-published component is `released`. Final receipt values remain immutable after publication.
 
 ## Docker-First Hybrid Policy
 
-### 0.5.1 component selection
+### 0.6.0 component selection
 
-The coordinated core identity is **0.5.1**: gem, wheel, base runtime and MCP
+The coordinated core identity is **0.6.0**: gem, wheel, base runtime and MCP
 images were published together. The installed host launcher and runtime-aware
-generated Bundler state are included. The unchanged PDF worker retains its
-published 0.5.0 digest, alongside the 0.4.0 computation/capture workers and visual
+generated Bundler state are included. The PDF worker uses its reviewed, signed
+0.6.0 digest, alongside the 0.4.0 computation/capture workers and visual
 companions. A released PDF can be reused only by full digest; new/pending workers
 still require the coordinated version. The historical 0.5.0 receipt remains
-unchanged. Signed image/package evidence is recorded in the 0.5.1 receipt;
+unchanged. Signed image/package evidence is recorded in the 0.6.0 receipt;
 promotion and anonymous-download checks passed before the post-release launcher
 pin was advanced.
 
 ### Local delivery
 
-GHCR is the canonical delivery channel for normal local use. The released package scaffold selects `ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.5.1`; existing sites can remain on their immutable previous release until deliberately updated. Its `make build`, `make serve` and `make test` targets mount the thin child site and run inside that image. The image contains both the installed Python control plane and the reviewed factory source at `/opt/unaltraweb`, so those targets load the theme as a path gem without downloading PyPI or RubyGems packages.
+GHCR is the canonical delivery channel for normal local use. The released package scaffold selects `ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.6.0`; existing sites can remain on their immutable previous release until deliberately updated. Its `make build`, `make serve` and `make test` targets mount the thin child site and run inside that image. The image contains both the installed Python control plane and the reviewed factory source at `/opt/unaltraweb`, so those targets load the theme as a path gem without downloading PyPI or RubyGems packages.
 
 Factory registration uses a stricter pin. gContExt runs `mcp-build`, which inspects or pulls the full `MCP_RELEASE_IMAGE` digest, and `mcp-stdio` launches that exact image. Checkout builds use local `:dev` names by default through `mcp-image`, `mcp-check` and `mcp-smoke`, so they do not shadow public semver references unless a maintainer explicitly overrides them. The digest is advanced in a separate post-release change after each new receipt exists; candidate source continues to select the last completed release instead of attempting to embed an unknown self-digest.
 
@@ -139,7 +154,7 @@ unaltraweb-mcp-docker serve --project /absolute/consumer
 ```
 
 The installed default selects its package's full MCP release image, currently
-`ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.5.1`. It resolves that selection to the
+`ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.6.0`. It resolves that selection to the
 local immutable image ID before executing. The checkout's `MCP_RELEASE_IMAGE`
 is a separate digest pin advanced only after publication; it is not the installed
 wheel's default. This avoids sending a new package back to an older MCP while
@@ -284,7 +299,7 @@ For that reason:
 
 ## Docker Runtime
 
-Release `0.5.1` publishes the selected base/MCP runtime and packages while pinning the verified PDF worker and reusing unchanged specialized workers. Local maintainers continue to use explicit development names such as `unaltraweb:dev`; generated sites select the reviewed semver MCP image rather than `main` or `latest`.
+Release `0.6.0` publishes the selected base/MCP runtime and packages while pinning the verified PDF worker and reusing unchanged specialized workers. Local maintainers continue to use explicit development names such as `unaltraweb:dev`; generated sites select the reviewed semver MCP image rather than `main` or `latest`.
 
 The base runtime owns Ruby, Jekyll and system dependencies. The MCP image builds on its exact candidate digest and adds the full reviewed factory plus the Python package. Specialized workers remain separate. This keeps each layer focused without adding Chromium, TeX or computation stacks to every site; the coordinated core-image workflow still rebuilds and verifies runtime, MCP and manual PDF candidates together.
 

data/docs/_documentation/en/45-retained-documents.md

@@ -19,7 +19,7 @@ provenance needed to inspect its origin. The importer keeps that complete unit i
 the receiving repository and creates a native page or chapter referencing the PDF.
 The website displays the original; a manual PDF includes all its pages.
 
-This capability belongs to the **0.6.0 development increment**. It requires a
+This capability ships in **0.6.0**. It requires a
 containing Python package and Jekyll core, plus the matching PDF worker for manual
 output. The published 0.5.1 runtime predates it. Changing the global MCP selection
 does not update a site's Gemfile, Makefile or PDF-worker selection.

data/docs/_documentation/en/46-live-runtime.md

@@ -0,0 +1,89 @@
+---
+title: Inspect And Close A Live MCP Session
+description: Startup identity, exact prepared images and session-scoped resource release.
+lang: en
+ref: live_runtime_identity
+profiles:
+- unaltredocs
+documentation_profiles:
+- local-authors
+- core-developers
+section: Core Development
+weight: 635
+permalink: /live-runtime/
+nav_title: Live Runtime
+---
+
+The 0.7.0 runtime increment distinguishes the process serving a connection from
+the installed package, source checkout and rendering workers. Call
+`runtime_identity` or read `web://runtime-identity` through that live MCP
+connection. Both report the same backend instance and startup information.
+
+The observation includes the loaded package version, startup code fingerprint,
+current disk fingerprint, interpreter, PID/start information, workspace mapping
+and selected versus observed image identities. A disk edit is reported as drift;
+it does not upgrade an already-running process. Docker-host and container PID
+namespaces are reported separately. Identity checks read engine/runtime metadata,
+not website prose, private records or arbitrary environment variables.
+
+## Prepare Explicitly, Then Launch
+
+Use `unaltraweb-mcp-docker prepare --image REF` to acquire a selected release.
+Launch, check, smoke and identity observations do not build or pull missing images.
+For a managed launch, supply a full image ID or repository digest, or bind a local
+reference to its independently verified configuration ID:
+
+```bash
+unaltraweb-mcp-docker serve --project /absolute/site \
+  --image "$PREPARED_REFERENCE" --expected-image-id "$EXPECTED_IMAGE_ID" --managed
+```
+
+The expected value is Docker's full `sha256:` configuration ID, not the archive
+checksum or OCI index digest. A missing or mismatched selection is an error.
+Execution uses that inspected ID with `--pull never`; existing aliases are not
+rewritten. Add `--offline` for a controller without networking. The declared
+Docker socket remains available for local inspection and prepared workers.
+
+The normal host launcher mounts the canonical site path and a `/workspace` alias.
+A launcher itself running in a container must supply its explicit daemon-host
+mapping using `--host-project`. Unsupported direct controller mappings require
+inspection rather than guessing a host path from `/workspace`.
+
+## Close One Connection Safely
+
+1. Retain the identity's consumer binding, session ID and exact container ID.
+2. Call `runtime_drain(confirm=true)`. The backend stops admitting new operations.
+3. Close that stdio connection. Bounded active work finishes before its idle
+   session resources are released.
+4. Use the installed `session-status` command to confirm resource termination.
+
+```bash
+unaltraweb-mcp-docker session-status --project /absolute/site \
+  --session-id "$SESSION_ID" --container-id "$CONTAINER_ID"
+```
+
+`connected`, `busy`, `orphaned` and `unknown` do not mean resources are free.
+Only `stopped` with `resources_released=true` establishes observed absence.
+After a crash, `reap-session` with the same retained tuple can recover eligible
+idle leftovers. It preserves live backends, active jobs, other sessions, prepared
+images, volumes and authored files. Disk cleanup remains explicit and separate.
+
+The older `down` command is workspace-wide, and `mcp-down-all` is factory-wide.
+Use them only for those intended scopes, not as a substitute for closing one
+client. The managed stdio profile has one connection per backend; it does not
+claim shared-HTTP backend reattachment semantics.
+
+## Workers And Helpers
+
+Worker references are fixed at startup. Managed rendering requires those exact
+images to be prepared; it refuses a fallback pull/build or a conflicting authored
+computation-image choice. The identity reports resource bounds and image
+observations without running a renderer.
+
+Visual helpers are separate MCP processes. Their versions and immutable package
+selections describe the accepted rendering closure, not their current live
+instances. The composing controller must obtain each helper's own live identity.
+The selected Diavisuals 0.5.0 still requires its separately tracked D0 identity
+correction before the entire coordinator closure can be marked managed-ready.
+Existing 0.4.0 static provider receipts remain subject to full integrity checks
+and do not force regeneration of authored figures during an upgrade.

data/docs/agents/d0-runtime-identity.md

@@ -0,0 +1,200 @@
+# D0 native runtime identity and lifecycle — issue 85
+
+Requirements: gaContExt
+`5634ea2e3e42122bb365992dfca9f248feb89dec`,
+[NATIVE_RUNTIME_REQUIREMENTS.md](https://github.com/dosquartsdedocs/gacontext/blob/5634ea2e3e42122bb365992dfca9f248feb89dec/src/bash/mcp_factories/NATIVE_RUNTIME_REQUIREMENTS.md).
+Owner issue: [85](https://github.com/dosquartsdedocs/unaltraweb/issues/85).
+Coordination: [gaContExt 15](https://github.com/dosquartsdedocs/gacontext/issues/15).
+
+## Native API mapping
+
+The containing 0.7.0 increment adds `runtime_identity` and
+`web://runtime-identity` on the actual serving MCP instance. Both use one
+startup-created object, not a helper CLI. It records a random backend instance,
+process PID/start ticks/PID namespace, start time, interpreter, loaded package
+version and startup package fingerprint. Current bounded package bytes and
+metadata are separate observations; changing metadata cannot rename the loaded
+version. Only engine code/contracts and allowlisted runtime selections are read,
+not site content or arbitrary environment values.
+
+The identity's component/profile/selection hashes bind the fixed requirements,
+startup BOM, behavioral profile, worker selections and consumer mapping. The
+package fingerprint is a startup code-content observation, not a wheel checksum
+or a permanent process attestation. The live container's image ID, source label,
+limits and mount mapping are inspected separately. Its daemon-host init PID is
+not compared numerically with the inner serving PID. Session ID, exact container
+ID, factory/role/project labels and mapping correlate those namespaces.
+
+`runtime_drain(confirm=true)` freezes admission on that connection. Ordinary
+tools execute in a bounded one-operation lane, leaving identity/drain responsive
+while a worker runs. Closing stdio waits for active work and releases that
+session's idle preview/capture resources. A new connection creates a new backend
+instance. This profile is **one stdio connection per backend**, not a shared HTTP
+service: shared-backend reattachment/idle leases are not claimed.
+
+Host-side installed API:
+
+```text
+unaltraweb-mcp-docker prepare --image REF [--expected-image-id SHA256_ID]
+unaltraweb-mcp-docker serve --project ROOT --image REF --expected-image-id SHA256_ID --managed
+unaltraweb-mcp-docker session-status --project ROOT --session-id SESSION --container-id CONTAINER
+unaltraweb-mcp-docker reap-session --project ROOT --session-id SESSION --container-id CONTAINER
+```
+
+Preparation may acquire the explicitly selected image. Launch/check/smoke never
+build or pull; execution uses its inspected exact configuration ID with
+`--pull never`. Managed mutable aliases require the expected full image ID.
+Full local IDs and repository digests are immutable selections. Ordinary mutable
+local selections without an expected ID remain an explicitly weaker mode.
+Archive hashes, repository/index digests and Docker configuration IDs are distinct.
+
+`--offline` disables controller networking; the explicitly mounted local Docker
+socket still permits image/owned-container inspection. Preview HTTP probing and
+intentional external metrics calls need their documented network access.
+`--worker-images` accepts bounded JSON mapping supported worker names to exact
+`reference` / `expected_image_id` pairs. Otherwise startup BOM/dedicated image
+environment selections apply. Managed execution refuses missing/mismatched
+workers and never substitutes a preparation build/pull. Authored computation
+image choices must match the approved startup identity before execution.
+
+The normal host launcher canonicalizes the consumer and binds it at its canonical
+path and `/workspace`. A containerized launcher must supply `--host-project` (or
+its explicit inherited daemon mapping); the child uses that verified canonical
+mirror. Identity reports launcher-visible, daemon-host and effective paths.
+Other direct controller layouts are not silently inferred. In particular,
+[issue 31](https://github.com/dosquartsdedocs/unaltraweb/issues/31) remains a separate
+boundary for arbitrary direct `/workspace` controllers and is not automatically
+closed by this profile.
+
+## Resource ownership
+
+Each launch has a 32-hex session ID and a uniquely named owned stdio container.
+Previews are per-session for these backends. Worker invocation tokens are retained
+and augmented with session labels. Cleanup validates full IDs and ownership and
+confirms absence before claiming release. Image and volume removal is outside
+these APIs.
+
+After EOF or a crash, the caller uses the **retained** binding/session/container
+tuple with `session-status`. A live backend is `connected`; a running one-shot
+worker is `busy`; idle leftovers are `orphaned`; only proven absence is `stopped`
+with `resources_released=true`. Unavailable/changed ownership is `unknown` and
+does not authorize removal. `reap-session` preserves a live backend or running
+job, and recovers only that retired session's idle resources. Occupied or foreign
+networks fail closed. No fresh-helper PID is presented as the backend's PID.
+
+The legacy `down` / `make mcp-down` is an explicit **workspace-wide** shutdown;
+`mcp-down-all` is maintainer/factory-wide. Neither is the hub's per-client toggle
+operation. The managed sequence is live drain, close this transport, inspect its
+exact retained identity, and recover eligible orphans when necessary.
+
+The profile reports controller limits (2 CPUs, 4 GiB, 512 PIDs), preview/PDF/capture
+limits (2 CPUs, 2 GiB, 256 PIDs), and managed computation limits (4 CPUs, 8 GiB,
+512 PIDs). Existing per-invocation time bounds remain 1800 seconds for PDF/compute
+and 900 for captures; requests may compose several bounded jobs. Per-backend
+operation concurrency is one. A drain does not falsely claim immediate RAM/CPU
+release while a job continues.
+
+## Accepted visual-helper points and remaining closure blocker
+
+The candidate selects the published Diavisuals 0.5.0 and Vega 0.5.1 packages:
+
+| Helper | Wheel SHA-256 | Renderer configuration ID |
+| --- | --- | --- |
+| Diavisuals 0.5.0 | `f52e20f20f1fb3a2418f07adb8d6a68a5567d0c321fb7c0ccc0f4db04917b96b` | `sha256:5a6887b372a0e1c386a7b54981d11ae1910215baeb6a12dfd0706b3e85ef0846` |
+| Vega 0.5.1 | `5aba4f267a37179c520b3cd164e1cec62ac5561872aa33b069cce73442dc52b1` | `sha256:695125943d0fbc3aa7c877babb9a11a6501bbc7ac265b0975bb5657c60439d98` |
+
+Native selector mapping is Diavisuals `--runtime-image` plus
+`--runtime-expected-id`, and Vega `--renderer-image-id`. Published metadata,
+wheel/acceptance hashes and locally prepared renderer IDs were verified. Actual
+Mermaid, PlantUML, Vega-Lite/CSV and Vega rendering passed native receipt checks,
+tamper refusal and consumer relocation without rewriting renderer aliases.
+Retained evidence: `/tmp/opencode/unaltraweb-d0-85/helpers-proof/evidence.json`.
+
+Previously accepted **0.4.0 static receipts remain valid** under the unchanged
+input/output/request integrity rules. This is an exact legacy point, not a
+continuous version interval or permission to overwrite edited outputs. New work
+uses the selected helper points. No existing client or real consumer is migrated
+by this source change.
+
+The coordinator does not claim to observe another MCP's serving process. Its live
+identity returns the helper selections and requires their independent connection
+observations. **Diavisuals 0.5.0 still lacks the full live-instance identity**;
+[Diavisuals 14](https://github.com/dosquartsdedocs/diavisuals/issues/14) is therefore
+an external D0 managed-closure blocker. Rendering compatibility alone does not
+close that gate or make the whole coordinator dependency graph managed-ready.
+
+## Acceptance and delivery state
+
+`test/d0_runtime_smoke.py` exercises installed launchers, actual images, tool/resource
+agreement, independent consumers, reconnect, running-container metadata drift,
+busy drain, offline launch, wrong/missing image refusal, manual/web work and
+0.6.0 → containing 0.7.0 → 0.6.0 activation with retained authored/generated state.
+The published 0.6.0 point accurately remains **partial** for live identity; no
+fixture or relabelled package is counted as a second D0-capable release.
+Backend-crash/orphan recovery is exercised separately from graceful disconnect.
+The existing Carta and populated Bundler acceptance drivers remain release gates.
+
+This is owner development evidence until reviewed source, containing release
+receipts, installed signed-byte acceptance and remaining blockers are returned to
+the central issue. Published 0.6.0 and its active checkout launcher pin remain
+unchanged during candidate development. The worker/data choices and external
+Diavisuals identity blocker must remain visible in the hub's adapter decision.
+
+## Retained local acceptance — 2026-10-05
+
+The owner explicitly authorized the full 0.7.0 review/PR/integration, gated
+publication and post-release pin flow. No other checkout is a write workspace.
+
+The installed local wheel
+`67689b76225511439175c82b6df033005d84e990b147b8fa4875f3adbd7d684f` and owned MCP
+image `sha256:d8eafba61a2e1f02bc22b244610d8174879e04d9ea36b47a71e8cd7f993a54b1`
+passed eight stages: reconnect/scope, loaded-versus-disk, busy drain, backend
+crash recovery, offline launch, explicit daemon mapping, wrong worker and missing
+worker. The crash record observed a real PDF job still **busy** after backend
+death, then confirmed eligible recovery and resource absence. The other live
+instance was preserved. The published 0.6.0 A/B/A point remained explicitly
+partial for live identity; authored files and its old cache entries kept their
+hashes. This is prepared development evidence, not a signed release identity.
+
+| Local retained evidence under `/tmp/opencode/unaltraweb-d0-85/` | SHA-256 |
+| --- | --- |
+| `acceptance-final/evidence.json` | `e35457153c5ffe98b4bd231f608735a2c4ad07e9db756699d7446e06e6b0b9c7` |
+| `helpers-proof/evidence.json` | `df994ccd8afaff45a7e3cfa9b6a29b650c9d01d63db2c9c36e59c31834273473` |
+| `carta-proof/evidence.json` | `ac305ad222a792291ebd27679a72a37a3ff29ab4746301ed9db7f64705ca4755` |
+| `bundler-proof/evidence.json` | `b304c4c5abe45ae9295f6eba86eae36be92e348e6be33463fcb50e119550d341` |
+
+The Carta proof retains the published sender seal and unchanged original PDF,
+removes the copied producer, relocates the receiver and forces another PDF build.
+Both 11-page manuals have SHA-256
+`46e50f815c007a97ac59898194023de3fa4e916e77e7eac21b73f8792244713c`; the letter is
+on page 10. The four-profile populated Bundler regression passed 0.4.0 → prepared
+0.7.0 → 0.4.0, preserving all six tracked author/cache checksums and separately
+reproducing the known unpatched 0.5.0 failure. No caches were cleared.
+
+Review additionally tightened Docker absence classification: an unavailable
+daemon socket is **unknown**, not evidence that a container was removed. That
+source-only correction has a dedicated regression; final release acceptance must
+be repeated against the actual source-bound candidates after integration.
+
+The local suite passes 608 tests with 30 optional/environment skips. Distribution,
+workflow, fresh-wheel and extracted-gem gates pass, as do the real MCP smoke,
+manual preparation, docs build, prose checks and whitespace checks. These checks
+do not override the separate signed-candidate/publication gates or the external
+helper-process blocker.
+
+## Reviewed core selection
+
+Implementation `0c87e8c276e58ac9c747833df69cdb439aa6132b` was reviewed and
+integrated through [PR 87](https://github.com/dosquartsdedocs/unaltraweb/pull/87)
+as `216ab2e8b6b8b45a5bb7da0a54bffd10edee895d`. Protected PR CI
+[37271200816](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37271200816)
+and CodeQL [37271200817](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37271200817)
+passed. The recorded review is agent-attributed.
+
+The next candidate source pins that integrated core and authorizes gem, wheel,
+runtime and MCP as `ready` for same-source candidate preparation. The selected
+signed PDF 0.6.0 and computation/capture 0.4.0 workers remain unchanged: the new
+selection/lifecycle behavior is controller-owned. Strict receipt, ancestry,
+candidate, installed-byte and publication gates still apply. This readiness is
+for the containing owner release, not approval of the full managed coordinator
+closure while the external Diavisuals identity gap remains.

data/docs/agents/mcp-contract.md

@@ -1,5 +1,10 @@
 # MCP Contract
 
+The D0 additions require a containing 0.7.0 runtime. Their pinned requirements,
+exact API mapping, lifecycle scopes and external helper-identity blocker are
+documented in [the owner contract](d0-runtime-identity.md). A source descriptor
+does not upgrade an already-running 0.6.0 connection.
+
 `unaltraweb` exposes one global, on-demand stdio MCP server for website workspaces. Every client session starts an independently named Dockerized MCP process and mounts its current consumer project at `/workspace` and at its canonical host path. Stable factory, role, and project labels preserve project-scoped lifecycle control without forcing concurrent sessions to share a deterministic container name. The image includes both FastMCP and the Jekyll runtime, so the host does not need Python, the optional `mcp` package, Ruby, or Bundler.
 
 The client registration should launch:
@@ -32,8 +37,8 @@ it to an image ID before execution. The source checkout's digest pin is separate
 it advances only after a new receipt exists. Explicit `--image` (or the console
 adapter's `UNALTRAWEB_MCP_IMAGE`) permits a reviewed immutable selection.
 
-The post-release checkout pin selects published 0.5.1 MCP digest
-`sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692`.
+The post-release checkout pin selects published 0.6.0 MCP digest
+`sha256:736c4ddd0a543454e3edaeac2e9cfd97a1279ce472923ac54e326c1281b2ba05`.
 Existing processes keep their running image until clients reconnect. Site build
 defaults and customized Makefiles remain separate, explicitly reviewed selections.
 
@@ -43,7 +48,7 @@ Repository editing coordination remains a control-plane responsibility rather th
 
 For a new agent-driven workspace, create or select the empty Git repository first, open that directory in the IDE, register the factory, restart the client, and then call `new_web`. The tool remains confined to the configured project root and does not accept an arbitrary destination. Generated sites include user-owned `README.md` and `AGENTS.md`, profile-specific source directories, and a managed runtime baseline; `scaffold_sync` never rewrites those user-owned guidance or content files.
 
-The native Python CLI remains modular. Without a factory checkout it supports `version`, `new-web`, top-level `doctor`, the host-only `import-calibre` command, and the exact package-only MCP inventory declared in `component-contract.json`. The complementary exact inventory fails clearly with `UNALTRAWEB_FACTORY_DIR` remediation. The separate Docker adapter delegates to the full image and does not expand that native inventory. The BOM selects the published `diavisuals v0.4.0` and `vegavisuals v0.4.0` releases. Its `consumer_integration` object is also the single source for the immutable core, workflow, PDF worker, and Vega revisions rendered into consumer scaffolds. Neither companion is bundled in the wheel or MCP server namespace.
+The native Python CLI remains modular. Without a factory checkout it supports `version`, `new-web`, top-level `doctor`, the host-only `import-calibre` command, and the exact package-only MCP inventory declared in `component-contract.json`. The complementary exact inventory fails clearly with `UNALTRAWEB_FACTORY_DIR` remediation. The separate Docker adapter delegates to the full image and does not expand that native inventory. The 0.7.0 BOM selects owner-tested `diavisuals v0.5.0` and `vegavisuals v0.5.1`; existing 0.4.0 static receipts retain their exact integrity-checked compatibility point. Its `consumer_integration` object is also the single source for the immutable core, workflow, PDF worker, and Vega revisions rendered into consumer scaffolds. Neither companion is bundled in the wheel or MCP server namespace.
 
 Static Vega-Lite and Vega rendering remains owned by the required companion `vegavisuals` MCP dependency. Use its `visualization_status`, `visualization_check`, `render_visualizations`, and `vegavisuals://project/*` resources directly; `unaltraweb` exposes the authoring syntax but does not proxy those tools into the `web://` server.
 
@@ -81,6 +86,7 @@ baseline format nor runtime cleanup changes.
 
 | Resource | Description |
 | --- | --- |
+| `web://runtime-identity` | Bounded identity of this serving process: startup/current code, instance/PID namespaces, binding, runtime selections and cooperative lifecycle. |
 | `web://distribution` | Package-owned component BOM plus offline, feature-aware doctor findings for the current factory and project. |
 | `web://site-context` | Site profile, feature flags, content inventory, bibliography, bibliometrics, build state, and offline consumer-update advisory. |
 | `web://site-doctor` | Read-only offline distribution, project-contract, freshness, scaffold-drift, and core-override findings. |
@@ -109,6 +115,8 @@ baseline format nor runtime cleanup changes.
 
 | Tool | Notes |
 | --- | --- |
+| `runtime_identity` | Observe the actual serving instance, startup/current package evidence and selected/observed images; never prepare a runtime or inspect site content. |
+| `runtime_drain` | With `confirm=true`, stop admission on this connection; then close stdio and verify exact container/session resource termination. It is not workspace-wide down. |
 | `distribution_doctor` | Return offline component/factory/project findings with stable codes and optional local Docker image inspection that never pulls. |
 | `new_web` | Create a profile-specific site from package-owned assets after a complete collision, path, and symlink preflight. |
 | `starter_templates` | List package-owned profile scaffolds under the legacy inventory name. |
@@ -182,7 +190,7 @@ Manual PDF publication is a local workspace operation: it copies reviewed artefa
 
 ### Retained Letter Integration
 
-The 0.6.0 development increment adds package-only import/check commands and the
+The published 0.6.0 release adds package-only import/check commands and the
 `web://artifact-imports` resource. Web rendering needs its containing Jekyll core;
 manual inclusion also needs the matching PDF worker. Published 0.5.1 components
 do not acquire this capability from a launcher-pin change.

data/docs/agents/owner-closeout-80.md

@@ -0,0 +1,185 @@
+# unaltraweb 0.6.0 delivery closeout
+
+Published **2026-10-02 17:28:14 UTC**:
+[v0.6.0](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.6.0).
+Owner coordination: [issue 80](https://github.com/dosquartsdedocs/unaltraweb/issues/80).
+This report supersedes the pending delivery state in the chronological
+[preparation record](retained-letter-import.md). Issue 76 and release 0.5.1
+remain closed and immutable.
+
+## Review, source and integration
+
+The owner explicitly authorized commits, push, PR review/integration, signed
+candidate workflows, gated publication and the post-release launcher pin. The
+checkout was reconciled against all existing unit-80 paths; no unrelated edits
+were found. Work used one checkout and ordinary serial branches.
+
+| Role | Revision / evidence |
+| --- | --- |
+| Reviewed implementation | `7af652fb83629e959af05c407a34a2f5a15f7936` |
+| Integrated core selected by consumers | `5cf9817489c8dc47cee726bfe42fe3071cd32b85`, [PR 81](https://github.com/dosquartsdedocs/unaltraweb/pull/81) |
+| Immutable core/PDF selection | `8e93b8b808204faef54cccaee622699f04a11805` |
+| Final artifact-producing source | `de52db351490e94939aac20c6af264f22a6a1678`, [PR 82](https://github.com/dosquartsdedocs/unaltraweb/pull/82) |
+| Receipt-only child | `3ce7606bc6148aee19d067c559823d8c5b52db5d` |
+| Receipt integration and tag target | `ec6dcb28e890d32718aa173934527a7b4213a042`, [PR 83](https://github.com/dosquartsdedocs/unaltraweb/pull/83) |
+| Annotated tag object | `1605578861a1a09157037e6085020baad4948d72` |
+
+All three PRs have explicit agent review records and protected CI; those records
+do not claim human review. Merge commits preserve the reviewed core's ancestry.
+The receipt integration's first parent is exactly the artifact-producing source,
+and its first-parent diff contains only `release-candidates.json`.
+
+Review closed independent metadata-reference validation, malformed Pandoc-link
+handling, internal PDF OpenAction destinations, and direct signed-runtime
+acceptance. The vendored v1 verifier/schema still match the established hub pin
+byte for byte; 26 reference conformance tests passed against matching fixtures.
+Source checks reported 587 Python cases with 30 optional skips. Ruby, actual PDF,
+MCP, wheel/gem, workflow/distribution, docs and reproducibility gates passed.
+
+## Receipt and published identities
+
+[Tagged native receipt](https://github.com/dosquartsdedocs/unaltraweb/blob/v0.6.0/release-candidates.json):
+
+```text
+schema_version: 1
+release: v0.6.0
+source_commit: de52db351490e94939aac20c6af264f22a6a1678
+receipt SHA-256: 5ed4e6dd615367927e6ea8a3541c9e7dca9dad73a738851705f563e0e6895280
+```
+
+Exactly the four `ready` components are bound to that source:
+
+| Component | Registry artifact | SHA-256 / OCI index digest |
+| --- | --- | --- |
+| Gem | `unaltraweb-0.6.0.gem` | `276d04a71d1170220c3881cce8d0800633c42b0ee7ad07a376f80996c6afd177` |
+| Wheel | `unaltraweb_mcp-0.6.0-py3-none-any.whl` | `3effb471ffd264f7fb2a8c88dd6536bc86639eae52806527c2d872653944c85a` |
+| Base runtime | `ghcr.io/dosquartsdedocs/unaltraweb` | `sha256:a4e9d82b0e9a72e519c44e09ca449b2dc37964fbb9953ae6e4adff648e39b94b` |
+| Full MCP | `ghcr.io/dosquartsdedocs/unaltraweb-mcp` | `sha256:736c4ddd0a543454e3edaeac2e9cfd97a1279ce472923ac54e326c1281b2ba05` |
+
+Both `0.6.0` and `v0.6.0` OCI aliases were inspected anonymously and match those
+index digests. The MCP's local configuration ID is
+`sha256:73320210b19597243c7183ef255ffa1cbc36a07157e6ab4e1b3d9349fa89a063`;
+its revision label is the exact artifact source above. Configuration IDs and
+registry index digests are distinct identities.
+
+The selected PDF 0.6.0 is the already-published, signed and tested specialization:
+`ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed`.
+It was produced from core `5cf9817489c8dc47cee726bfe42fe3071cd32b85` by the
+[initial signed image run](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37029374441),
+and its local configuration ID is
+`sha256:d7e7d3243616270fc9e6eed7f8238c412dbe3d9ffc18d2832d17d66ca630d139`.
+The BOM, generated consumer tuple and Make default select that same digest.
+It is reused as `released`, outside the four-component coordinated receipt.
+The later image workflow also tested a verification-only PDF candidate
+`sha256:9b3ae6fe1f04ff7de6c81c258d7c16f79cc7f2857c9b46b0829fc71812ace11f`;
+that candidate is not the selected worker and received no coordinated semver
+promotion. No self-digest or fabricated core SHA was introduced.
+
+Computation, capture, Diavisuals and Vegavisuals retain the tested 0.4.0 selections.
+Their exact immutable references remain in the BOM, and earlier published
+artifacts and receipts remain at their original tags.
+
+## CI, signing and publication
+
+| Gate | Successful run |
+| --- | --- |
+| Implementation PR CI / CodeQL | [37027921742](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37027921742) / [37027922332](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37027922332) |
+| Core integration CI | [37028677932](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37028677932) |
+| Tuple PR CI / CodeQL | [37032368507](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37032368507) / [37032368609](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37032368609) |
+| Final source CI / CodeQL | [37033064607](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37033064607) / [37033064633](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37033064633) |
+| Signed final image build/test | [37033593312](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37033593312) |
+| Package preparation | [37033596931](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37033596931) |
+| Receipt PR CI / CodeQL | [37038403708](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37038403708) / [37038403802](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37038403802) |
+| Receipt/tag target CI / CodeQL | [37039075585](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37039075585) / [37039075748](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37039075748) |
+| Tag CI | [37039786598](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37039786598) |
+| Semver image promotion | [37040420721](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37040420721) |
+| PyPI/RubyGems Trusted Publishing | [37040424945](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37040424945) |
+
+The signed image workflows checked exact OCI digests, signer workflow, source
+revision and labels before executing candidates. Promotion reverified those
+bindings and reused the tested manifests without rebuilding. The package
+authorizer bound workflow/run/source, immutable artifact ID `11237594327`, exact
+inventory and checksums to the receipt. Its archive digest is
+`sha256:79a67d7a8370468abe1f0265b248f3e9d6cf6187ac0bc891a0b3801e5a9931a6`.
+OIDC jobs published only the staged verified gem and wheel.
+
+The actual receipt-only branch, merged target and annotated tag passed strict
+`distribution-release-check` and publication-ref/ancestry gates. Native package
+run authorization, exact staging and `verify_package_publish.py release` passed
+before privileged publication. Strict release checks apply to the receipt/tag
+revision, not subsequent ordinary post-release source commits.
+
+## Real retained-letter and rollback proofs
+
+Acceptance consumed the authenticated published Carta 0.3.0rc1 packet, not a local
+producer checkout or synthetic unit fixture. The sender bundle hash is
+`aeaa757ee1be19bfe56dc9af8dd1178032929b4a2bec2dad2ebb621b158ad999`.
+All 12 seal files remain under `.unaltraweb/artifacts/carta/bundle/`.
+The mapping `payload/output/letter.pdf` → `assets/documents/carta.pdf` retains
+SHA-256 `4a661740a18fe1cf75b84aa0d8532511fd105eb5484a5af700e11e8e30828ea4`.
+The native chapter is `_chapters/en/carta.md`, with its separate binding and
+standard-v1 integration record outside the seal.
+
+The downloaded final CI wheel ran against the exact signed MCP and selected PDF
+digests above, without deriving another controller image. Both copied producer
+and incoming trees were removed, author prose survived an identical reimport,
+and the receiver was moved before native/generic verification and a forced PDF
+rebuild. Web/HTTP checks passed at both locations. The complete original letter
+appears on page 10 of an 11-page composed manual. Both composed PDFs have hash
+`416e96f66bb6608b1e20bf5e36b6b16133bd4018c17e6c079e8987b736fe9cae`.
+The integration record hash is
+`ebe07ee10ad740a2bbbd36d532f336374cf4bb19ccb373b6590b2279f664a222`.
+Generic verification confirms one bundle, one mapping and 14 verified files;
+the native checker additionally binds the source and rendered page.
+
+Local evidence root: `/tmp/opencode/unaltraweb-closeout-060/`.
+
+| Retained evidence | SHA-256 |
+| --- | --- |
+| `candidate-letter-proof/evidence.json` | `618573b1a867daf6b1f3023e0d5700c27a6de429abea160b4c51ff8699f86f9c` |
+| `candidate-roundtrip/evidence.json` | `23ec8885e8306931fb8ee4899e95b7bff4b3d23d2b63cdd3321e3f68722c3bb8` |
+| `published-packages/verified.json` | `073d7ca1bbe46b8be5d89211501ca8fc7b71297d7eb542c4c9cc27ff167aa91e` |
+
+The roundtrip exercised all four profiles using immutable MCP references:
+0.4.0 `sha256:389bc585cdb4fc89d3372f4896a55fe26e15df38b46bc114ce44fdb3f1c8deb9`,
+unpatched 0.5.0 `sha256:36d17edbade77edb40a687f6a744203c6329acb33fbc2eb255e88d9ff1a42c98`,
+then the new 0.6.0 digest. The unpatched failure was reproduced on a separate
+copy. Two builds and a preview passed at 0.6.0 and again after returning to 0.4.0.
+All six author/cache files retained their hashes; no caches were emptied.
+
+## Public downloads and post-release selection
+
+Anonymous PyPI and RubyGems metadata and package bytes match the receipt exactly.
+GitHub Release assets were downloaded again and pass `SHA256SUMS`, whose own hash
+is `60d80d6e0803154a7b5c98c1731f4bec905def3a481152d4e59d7daf8932fc1a`.
+A fresh public-wheel venv passed default `prepare`, `check` and real stdio `smoke`,
+selecting the expected MCP configuration ID without a local factory dependency.
+That public installation rechecked the relocated receiver and rendered mapping.
+The public gem installed into an isolated gem home and activated as 0.6.0 using
+the runtime's existing Ruby dependencies; this is not a network-fresh dependency
+installation claim. The downloaded candidate gem also passed isolated native
+helper-closure inspection.
+
+The source-only post-release branch `chore/80-pin-published-mcp-0.6.0` selects the
+published MCP digest in `Makefile` and `scripts/unaltraweb-mcp-bootstrap.sh`, updates
+the pin regression and current docs, and accompanies this report. Its PR/merge
+and final clean-main confirmation are recorded in issue 80 after protected CI.
+It does not rebuild or alter the published receipt, tag or packages.
+
+The post-pin local recheck passed 587 Python cases (558 passed, 29 optional
+skips), distribution/workflow/wheel and prose checks, `mcp-check`, real
+`mcp-smoke` with the selected public PDF, docs build and whitespace checks.
+Development builds used only `unaltraweb-closeout-060-*:post-pin` resources.
+The actual `MCP_CONSUMER_WORKSPACE`-bound `make mcp-stdio` transport also initialized
+a fresh synthetic consumer and exposed both native import tools; Docker inspection
+confirmed the published MCP configuration ID above. Its retained result is
+`/tmp/opencode/unaltraweb-closeout-060/post-pin-proof/evidence.json` and the session
+exited normally. `mcp-build` and the bootstrap's `--check` selected the public
+runtime directly.
+
+Acceptance covers the exact Linux/amd64 tuple and published English one-page
+Carta sample. The generic conformance tests do not establish Diapora composition
+or other domain imports. Active IDE processes keep their loaded runtime until
+reconnected. No real manual, author artifact, client registration or helper
+selection was migrated. Consumer adoption and hub catalogue integration remain
+separate owner actions; this report supplies their verified intake evidence.

data/docs/agents/retained-letter-import.md

@@ -1,5 +1,9 @@
 # Native retained-letter import — issue 80
 
+Delivery completed on 2026-10-02; see [the 0.6.0 closeout](owner-closeout-80.md)
+for final revisions, receipts, registry downloads and the post-release pin.
+The following sections retain the chronological preparation and review evidence.
+
 ## Scope and release state
 
 This is a separate 0.6.0 development increment after the administrative closeout

data/scripts/test_wheel_install.py

@@ -142,14 +142,14 @@ def main() -> int:
         fake_bin = temp / "fake-bin"
         fake_bin.mkdir()
         fake_docker = fake_bin / "docker"
-        fake_docker.write_text("#!/bin/sh\n[ \"$1 $2\" = 'image inspect' ] || exit 99\n[ \"$5\" = \"$EXPECTED_IMAGE\" ] || exit 98\nprintf 'sha256:fixture\\n'\n", encoding="utf-8")
+        fake_docker.write_text("#!/bin/sh\n[ \"$1 $2\" = 'image inspect' ] || exit 99\n[ \"$5\" = \"$EXPECTED_IMAGE\" ] || exit 98\nprintf 'sha256:1111111111111111111111111111111111111111111111111111111111111111\\n'\n", encoding="utf-8")
         fake_docker.chmod(0o755)
         expected_image = json.loads((ROOT / "src/unaltraweb_mcp/component-contract.json").read_text())["components"]["mcp"]["reference"]
         launcher_env = {**no_consumer_env, "PATH": f"{fake_bin}:{env['PATH']}", "EXPECTED_IMAGE": expected_image}
         launcher_env.pop("UNALTRAWEB_MCP_IMAGE", None)
         launcher_env.pop("MCP_RELEASE_IMAGE", None)
         prepared_image = run([str(docker_cli), "prepare"], cwd=temp, env=launcher_env).stdout.strip()
-        if prepared_image != "sha256:fixture":
+        if prepared_image != "sha256:" + "1" * 64:
             raise RuntimeError("Installed preparation did not use the packaged bootstrap")
         run(["make", "--silent", "--no-print-directory", "-C", str(launcher), "mcp-build"], cwd=temp, env=launcher_env)
         run([str(docker_cli), "prepare", "--image", "explicit:override"], cwd=temp,

data/scripts/unaltraweb-mcp-bootstrap.sh

@@ -3,18 +3,28 @@ set -eu
 
 usage() {
   cat <<'USAGE'
-Usage: unaltraweb-mcp-bootstrap [--project PATH] [--image IMAGE] [--prepare|--check|--smoke]
+Usage: unaltraweb-mcp-bootstrap [--project PATH] [--host-project PATH] [--image IMAGE]
+       [--expected-image-id ID] [--managed] [--offline] [--session-id ID] [--worker-images JSON]
+       [--prepare|--check|--smoke]
 
 Start one Dockerized unaltraweb MCP stdio server for the selected workspace.
 If --project is omitted, MCP_CONSUMER_WORKSPACE is used, then the current directory.
 --prepare inspects or pulls the selected image without mounting a consumer.
---check and --smoke require that image locally; neither builds nor pulls.
+Launch, --check and --smoke require that exact image locally; none builds or pulls.
+Managed mode requires an immutable reference or an expected full image ID.
 USAGE
 }
 
-image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692}"
+image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:736c4ddd0a543454e3edaeac2e9cfd97a1279ce472923ac54e326c1281b2ba05}"
 project="${MCP_CONSUMER_WORKSPACE:-${UNALTRAWEB_PROJECT:-}}"
 operation=serve
+expected_image="${UNALTRAWEB_EXPECTED_IMAGE_ID:-}"
+managed="${UNALTRAWEB_MANAGED_RUNTIME:-0}"
+session_id=""
+host_project=""
+network=bridge
+worker_images="${UNALTRAWEB_WORKER_IMAGES:-}"
+[ -n "$worker_images" ] || worker_images='{}'
 
 while [ "$#" -gt 0 ]; do
   case "$1" in
@@ -28,6 +38,18 @@ while [ "$#" -gt 0 ]; do
       image="$2"
       shift 2
       ;;
+    --host-project|--expected-image-id|--session-id|--worker-images)
+      [ "$#" -ge 2 ] || { printf 'Missing value for %s\n' "$1" >&2; exit 2; }
+      case "$1" in
+        --host-project) host_project=$2 ;;
+        --expected-image-id) expected_image=$2 ;;
+        --session-id) session_id=$2 ;;
+        --worker-images) worker_images=$2 ;;
+      esac
+      shift 2
+      ;;
+    --managed) managed=1; shift ;;
+    --offline) network=none; shift ;;
     --prepare|--check|--smoke)
       [ "$operation" = serve ] || { printf '%s\n' 'Select only one operation.' >&2; exit 2; }
       operation="${1#--}"
@@ -45,10 +67,33 @@ while [ "$#" -gt 0 ]; do
   esac
 done
 
+valid_image_id() {
+  case "$1" in sha256:*) hex=${1#sha256:} ;; *) return 1 ;; esac
+  [ "${#hex}" -eq 64 ] || return 1
+  case "$hex" in *[!0-9a-f]*) return 1 ;; esac
+}
+case "$image" in ''|*[!A-Za-z0-9._/:@-]*) printf '%s\n' 'Invalid image reference' >&2; exit 2 ;; esac
+case "$image" in *://*) printf '%s\n' 'Docker references are not URLs' >&2; exit 2 ;; esac
+case "$image" in
+  *@*)
+    valid_image_id "${image##*@}" || { printf '%s\n' 'Invalid digest reference' >&2; exit 2; }
+    case "${image%@*}" in *@*) printf '%s\n' 'Invalid digest reference' >&2; exit 2 ;; esac
+    ;;
+esac
+if [ -n "$expected_image" ]; then
+  valid_image_id "$expected_image" || { printf '%s\n' 'Expected image ID must be a full lowercase sha256' >&2; exit 2; }
+  managed=1
+fi
+case "$image" in
+  sha256:*) valid_image_id "$image" || exit 2; managed=1 ;;
+  *@sha256:*) valid_image_id "sha256:${image##*@sha256:}" || exit 2; managed=1 ;;
+  *) if [ "$managed" = 1 ] && [ -z "$expected_image" ]; then printf '%s\n' 'Managed mutable references require --expected-image-id' >&2; exit 2; fi ;;
+esac
+
 resolve_image() {
   if ! resolved_image="$(docker image inspect --format '{{.Id}}' "$image" 2>/dev/null)"; then
     case "$operation" in
-      check|smoke)
+      serve|check|smoke)
         printf 'Image is not prepared: %s. Run --prepare first.\n' "$image" >&2
         exit 1
         ;;
@@ -56,14 +101,19 @@ resolve_image() {
     docker pull "$image" >&2
     resolved_image="$(docker image inspect --format '{{.Id}}' "$image")"
   fi
+  valid_image_id "$resolved_image" || { printf '%s\n' 'Docker returned an invalid image identity' >&2; exit 2; }
+  case "$image" in sha256:*) [ "$image" = "$resolved_image" ] || { printf '%s\n' 'Selected image ID mismatch' >&2; exit 1; } ;; esac
+  if [ -n "$expected_image" ] && [ "$expected_image" != "$resolved_image" ]; then
+    printf '%s\n' 'Prepared image does not match the expected image ID; no fallback was attempted' >&2; exit 1
+  fi
 }
 
 if [ "$operation" != serve ]; then
   resolve_image
   case "$operation" in
     prepare) printf '%s\n' "$resolved_image"; exit 0 ;;
-    check) exec docker run --rm --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint unaltraweb-mcp "$resolved_image" version ;;
-    smoke) exec docker run --rm --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint python3 "$resolved_image" /opt/unaltraweb/test/mcp_smoke.py ;;
+    check) exec docker run --rm --pull never --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint unaltraweb-mcp "$resolved_image" version ;;
+    smoke) exec docker run --rm --pull never --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint python3 "$resolved_image" /opt/unaltraweb/test/mcp_smoke.py ;;
   esac
 fi
 
@@ -85,10 +135,28 @@ if [ ! -d "$project" ]; then
 fi
 
 project="$(CDPATH= cd -- "$project" && pwd -P)"
+launcher_project="$project"
+if [ -z "$host_project" ]; then
+  host_project="${UNALTRAWEB_DOCKER_ROOT:-}"
+  if [ -n "$host_project" ]; then
+    inherited_workspace="${MCP_CONSUMER_WORKSPACE:-}"
+    if [ -z "$inherited_workspace" ] || [ ! -d "$inherited_workspace" ] || [ "$(CDPATH= cd -- "$inherited_workspace" && pwd -P)" != "$launcher_project" ]; then
+      printf '%s\n' 'Inherited daemon mapping belongs to another or unknown workspace; pass --host-project explicitly' >&2; exit 2
+    fi
+  fi
+fi
+if [ -z "$host_project" ] && [ -f /.dockerenv ]; then
+  printf '%s\n' 'A containerized launcher needs --host-project with the explicit daemon-host mapping' >&2; exit 2
+fi
+host_project="${host_project:-$project}"
+case "$host_project" in /*) ;; *) printf '%s\n' 'Host project must be absolute' >&2; exit 2 ;; esac
+case "$host_project" in *"$newline"*|*"$carriage_return"*) exit 2 ;; esac
+[ "$host_project" != / ] && [ "$(realpath -ms -- "$host_project")" = "$host_project" ] || { printf '%s\n' 'Host project must be normalized' >&2; exit 2; }
+project="$host_project"
 owner="${UNALTRAWEB_PROJECT_USER:-$(id -u):$(id -g)}"
 docker_socket="${UNALTRAWEB_DOCKER_SOCKET:-/var/run/docker.sock}"
 script_dir="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P)"
-project_id="$(/bin/sh "$script_dir/unaltraweb-mcp-project-id.sh" "$project")"
+project_id="$(printf '%s' "$project" | sha256sum | cut -c 1-16)"
 workspace_mount="$(/bin/sh "$script_dir/unaltraweb-docker-mount.sh" "$project" /workspace)"
 mirror_mount="$(/bin/sh "$script_dir/unaltraweb-docker-mount.sh" "$project" "$project")"
 
@@ -103,7 +171,7 @@ if [ -S "$docker_socket" ]; then
     exit 1
   fi
   case "$docker_socket" in
-    "$project"|"$project"/*)
+    "$project"|"$project"/*|"$launcher_project"|"$launcher_project"/*)
       printf '%s\n' 'UNALTRAWEB_DOCKER_SOCKET must be outside the consumer project so the persistent preview cannot inherit it.' >&2
       exit 1
       ;;
@@ -111,6 +179,9 @@ if [ -S "$docker_socket" ]; then
 fi
 
 resolve_image
+if [ -z "$session_id" ]; then session_id=$(od -An -N16 -tx1 /dev/urandom | tr -d ' \n'); fi
+[ "${#session_id}" -eq 32 ] || { printf '%s\n' 'Session ID must contain 32 lowercase hex characters' >&2; exit 2; }
+case "$session_id" in *[!0-9a-f]*) exit 2 ;; esac
 image_reference="$image"
 case "$image_reference" in
   ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:*) ;;
@@ -123,10 +194,13 @@ case "$image_reference" in
     ;;
 esac
 
-set -- docker run --rm -i \
+set -- docker run --rm --pull never --init -i \
+  --network "$network" \
+  --name "unaltraweb-stdio-$session_id" --cpus 2 --memory 4g --pids-limit 512 \
   --label io.context.mcp-factory=unaltraweb \
   --label io.context.mcp-role=stdio \
   --label "io.context.mcp-project=$project_id" \
+  --label "io.context.mcp-session=$session_id" \
   --user "$owner" \
   -e HOME=/tmp \
   -e COMPUTE_CORE=/opt/unaltraweb \
@@ -136,6 +210,13 @@ set -- docker run --rm -i \
   -e UNALTRAWEB_FACTORY_DIR=/opt/unaltraweb \
   -e "UNALTRAWEB_MCP_IMAGE=$resolved_image" \
   -e "UNALTRAWEB_MCP_IMAGE_REFERENCE=$image_reference" \
+  -e "UNALTRAWEB_MCP_REQUESTED_IMAGE=$image" \
+  -e "UNALTRAWEB_EXPECTED_IMAGE_ID=$resolved_image" \
+  -e "UNALTRAWEB_RUNTIME_SESSION=$session_id" \
+  -e "UNALTRAWEB_MANAGED_RUNTIME=$managed" \
+  -e "UNALTRAWEB_RUNTIME_NETWORK=$network" \
+  -e "UNALTRAWEB_LAUNCHER_PROJECT=$launcher_project" \
+  -e "UNALTRAWEB_WORKER_IMAGES=$worker_images" \
   -e "UNALTRAWEB_PROJECT_USER=$owner" \
   --mount "$workspace_mount" \
   --mount "$mirror_mount" \

data/scripts/unaltraweb-mcp-cleanup.sh

@@ -58,16 +58,48 @@ case "$project_id" in
     ;;
 esac
 
-containers=$(docker ps -aq \
+# Explicit workspace-wide shutdown. Managed per-client detach uses live drain,
+# stdio EOF and the separate session-status/reap-session native adapter instead.
+containers=$(docker ps -aq --no-trunc \
   --filter "label=io.context.mcp-factory=unaltraweb" \
   --filter "label=io.context.mcp-project=$project_id")
-if [ -n "$containers" ]; then
-  docker rm -f $containers >/dev/null
-fi
-
-networks=$(docker network ls -q \
+networks=$(docker network ls -q --no-trunc \
   --filter "label=io.context.mcp-factory=unaltraweb" \
   --filter "label=io.context.mcp-project=$project_id")
-if [ -n "$networks" ]; then
-  docker network rm $networks >/dev/null
-fi
+
+valid_id() {
+  [ "${#1}" -eq 64 ] || return 1
+  case "$1" in *[!0-9a-f]*) return 1 ;; esac
+}
+count=0
+for cid in $containers; do
+  count=$((count + 1))
+  [ "$count" -le 64 ] && valid_id "$cid" || { printf '%s\n' 'Container inventory is invalid or exceeds bounds' >&2; exit 2; }
+  labels=$(docker container inspect --format '{{index .Config.Labels "io.context.mcp-factory"}}|{{index .Config.Labels "io.context.mcp-role"}}|{{index .Config.Labels "io.context.mcp-project"}}' "$cid")
+  case "$labels" in
+    "unaltraweb|stdio|$project_id"|"unaltraweb|preview|$project_id"|"unaltraweb|computation|$project_id"|"unaltraweb|manual-pdf|$project_id"|"unaltraweb|web-capture|$project_id"|"unaltraweb|web-capture-site|$project_id") ;;
+    *) printf '%s\n' 'Refusing unknown container ownership' >&2; exit 2 ;;
+  esac
+done
+for nid in $networks; do
+  count=$((count + 1))
+  [ "$count" -le 64 ] && valid_id "$nid" || { printf '%s\n' 'Network inventory is invalid or exceeds bounds' >&2; exit 2; }
+  labels=$(docker network inspect --format '{{index .Labels "io.context.mcp-factory"}}|{{index .Labels "io.context.mcp-role"}}|{{index .Labels "io.context.mcp-project"}}' "$nid")
+  [ "$labels" = "unaltraweb|web-capture|$project_id" ] || { printf '%s\n' 'Refusing unknown network ownership' >&2; exit 2; }
+done
+if [ -n "$containers" ]; then docker rm -f $containers >/dev/null; fi
+if [ -n "$networks" ]; then docker network rm $networks >/dev/null; fi
+for cid in $containers; do
+  if observed=$(docker container inspect --format '{{.Id}}' "$cid" 2>&1); then
+    printf '%s\n' 'Container termination is not confirmed' >&2; exit 1
+  else
+    case "$observed" in *"No such container"*|*"no such container"*|*"No such object"*) ;; *) printf '%s\n' 'Container absence is unknown' >&2; exit 1 ;; esac
+  fi
+done
+for nid in $networks; do
+  if observed=$(docker network inspect --format '{{.Id}}' "$nid" 2>&1); then
+    printf '%s\n' 'Network removal is not confirmed' >&2; exit 1
+  else
+    case "$observed" in *"No such network"*|*"no such network"*|*"No such object"*) ;; *) printf '%s\n' 'Network absence is unknown' >&2; exit 1 ;; esac
+  fi
+done

data/scripts/web_captures/render.py

@@ -588,6 +588,8 @@ def internal_network(network: str) -> bool:
 
 def build_image(image: str) -> None:
     available = inspect_image(image)["available"] == "true"
+    if not available and os.environ.get("UNALTRAWEB_MANAGED_RUNTIME") == "1":
+        raise WebCaptureError("Selected capture image is not prepared; managed execution never pulls")
     if available:
         return
     completed = subprocess.run(["docker", "pull", image], check=False)
@@ -722,6 +724,9 @@ def run_worker(project: Path, image: str, config_path: Path) -> None:
         "project": os.environ.get("UNALTRAWEB_WORKER_PROJECT", "").strip(),
         "token": os.environ.get("UNALTRAWEB_WORKER_TOKEN", "").strip(),
     }
+    session = os.environ.get("UNALTRAWEB_RUNTIME_SESSION", "")
+    if session and not re.fullmatch(r"[0-9a-f]{32}", session):
+        raise WebCaptureError("Invalid runtime session identity")
     worker_args: list[str] = []
     cidfile: Path | None = None
     if any(worker_values.values()):
@@ -739,7 +744,9 @@ def run_worker(project: Path, image: str, config_path: Path) -> None:
             "--label", f"io.context.mcp-worker-token={worker_values['token']}",
         ]
     command = [
-        "docker", "run", "--rm", *worker_args, "--user", f"{os.getuid()}:{os.getgid()}", "--network", network, "--ipc=host",
+        "docker", "run", "--rm", "--pull", "never", *worker_args,
+        *(["--label", f"io.context.mcp-session={session}"] if session else []),
+        "--user", f"{os.getuid()}:{os.getgid()}", "--network", network, "--ipc=host",
         "--read-only", "--cap-drop", "ALL", "--security-opt", "no-new-privileges", "--pids-limit", "256", "--cpus", "2", "--memory", "2g",
         "--tmpfs", "/tmp:rw,noexec,nosuid,size=512m", "-e", "HOME=/tmp",
         "--mount", docker_bind_mount(project, "/project"), "-w", "/project", image,

data/src/unaltraweb_mcp/component-contract.json

@@ -2,16 +2,16 @@
   "$schema": "component-contract.schema.json",
   "schema_version": 1,
   "release": {
-    "version": "0.6.0",
-    "tag": "v0.6.0"
+    "version": "0.7.0",
+    "tag": "v0.7.0"
   },
   "consumer_integration": {
     "schema_version": 1,
     "core_repository": "https://github.com/dosquartsdedocs/unaltraweb.git",
-    "core_sha": "5cf9817489c8dc47cee726bfe42fe3071cd32b85",
+    "core_sha": "216ab2e8b6b8b45a5bb7da0a54bffd10edee895d",
     "site_deploy_workflow": "dosquartsdedocs/unaltraweb/.github/workflows/site-deploy.yml",
     "manual_pdf_image": "ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed",
-    "vegavisuals_sha": "68c0b231402ae9485cc34ce530dc5239cb0ec194"
+    "vegavisuals_sha": "a448cc50a5f511743a6fcfc213baeb9be80f4a27"
   },
   "receipt_contract": {
     "schema_version": 1,
@@ -36,10 +36,10 @@
     "gem": {
       "kind": "gem",
       "name": "unaltraweb",
-      "version": "0.6.0",
-      "release": "v0.6.0",
+      "version": "0.7.0",
+      "release": "v0.7.0",
       "release_status": "ready",
-      "reference": "unaltraweb (= 0.6.0)",
+      "reference": "unaltraweb (= 0.7.0)",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
       "features": ["jekyll-core", "site-build"]
@@ -47,10 +47,10 @@
     "wheel": {
       "kind": "python-wheel",
       "name": "unaltraweb-mcp",
-      "version": "0.6.0",
-      "release": "v0.6.0",
+      "version": "0.7.0",
+      "release": "v0.7.0",
       "release_status": "ready",
-      "reference": "unaltraweb-mcp==0.6.0",
+      "reference": "unaltraweb-mcp==0.7.0",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": true,
       "features": ["calibre-import", "doctor", "new-web", "offline-inspection", "mcp-control-plane"]
@@ -58,10 +58,10 @@
     "runtime": {
       "kind": "container",
       "name": "unaltraweb runtime",
-      "version": "0.6.0",
-      "release": "v0.6.0",
+      "version": "0.7.0",
+      "release": "v0.7.0",
       "release_status": "ready",
-      "reference": "ghcr.io/dosquartsdedocs/unaltraweb:0.6.0",
+      "reference": "ghcr.io/dosquartsdedocs/unaltraweb:0.7.0",
       "image_repository": "ghcr.io/dosquartsdedocs/unaltraweb",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
@@ -70,10 +70,10 @@
     "mcp": {
       "kind": "container",
       "name": "unaltraweb MCP runtime",
-      "version": "0.6.0",
-      "release": "v0.6.0",
+      "version": "0.7.0",
+      "release": "v0.7.0",
       "release_status": "ready",
-      "reference": "ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.6.0",
+      "reference": "ghcr.io/dosquartsdedocs/unaltraweb-mcp:0.7.0",
       "image_repository": "ghcr.io/dosquartsdedocs/unaltraweb-mcp",
       "repository": "https://github.com/dosquartsdedocs/unaltraweb",
       "included_in_wheel": false,
@@ -130,10 +130,10 @@
     "diavisuals": {
       "kind": "companion",
       "name": "diavisuals",
-      "version": "0.4.0",
-      "release": "v0.4.0",
+      "version": "0.5.0",
+      "release": "v0.5.0",
       "release_status": "released",
-      "reference": "https://github.com/dosquartsdedocs/diavisuals/releases/download/v0.4.0/diavisuals-0.4.0-py3-none-any.whl#sha256=bfedcc9e2554f25ce4a1c33e556f352210848fccb8da800d1c3900dd86c48c93",
+      "reference": "https://github.com/dosquartsdedocs/diavisuals/releases/download/v0.5.0/diavisuals-0.5.0-py3-none-any.whl#sha256=f52e20f20f1fb3a2418f07adb8d6a68a5567d0c321fb7c0ccc0f4db04917b96b",
       "repository": "https://github.com/dosquartsdedocs/diavisuals",
       "included_in_wheel": false,
       "features": ["mermaid", "plantuml"]
@@ -141,10 +141,10 @@
     "vegavisuals": {
       "kind": "companion",
       "name": "vegavisuals",
-      "version": "0.4.0",
-      "release": "v0.4.0",
+      "version": "0.5.1",
+      "release": "v0.5.1",
       "release_status": "released",
-      "reference": "https://github.com/dosquartsdedocs/vegavisuals/releases/download/v0.4.0/vegavisuals-0.4.0-py3-none-linux_x86_64.whl#sha256=b52ffa743643dd6b5e0320e7a9aa0cd500ea06262b7d5098c0c3f94a379bc0ea",
+      "reference": "https://github.com/dosquartsdedocs/vegavisuals/releases/download/v0.5.1/vegavisuals-0.5.1-py3-none-linux_x86_64.whl#sha256=5aba4f267a37179c520b3cd164e1cec62ac5561872aa33b069cce73442dc52b1",
       "repository": "https://github.com/dosquartsdedocs/vegavisuals",
       "included_in_wheel": false,
       "features": ["vega", "vega-lite"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: unaltraweb
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.0
 platform: ruby
 authors:
 - dosquartsdedocs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-02 00:00:00.000000000 Z
+date: 2026-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: classifier-reborn
@@ -782,6 +782,7 @@ files:
 - docs/_documentation/en/43-workspace-path-policies.md
 - docs/_documentation/en/44-editorial-review.md
 - docs/_documentation/en/45-retained-documents.md
+- docs/_documentation/en/46-live-runtime.md
 - docs/_documentation/en/50-faq.md
 - docs/_pages/ca/index.md
 - docs/_pages/en/index.md
@@ -799,9 +800,11 @@ files:
 - docs/agents/action-prompts/50-bibliography-entry.txt
 - docs/agents/action-prompts/60-bibliometrics-refresh.txt
 - docs/agents/action-prompts/70-build-and-review.txt
+- docs/agents/d0-runtime-identity.md
 - docs/agents/manual-authoring-components.md
 - docs/agents/mcp-contract.md
 - docs/agents/owner-closeout-76.md
+- docs/agents/owner-closeout-80.md
 - docs/agents/owner-followup-76.md
 - docs/agents/owner-preparation-2026-09-29.md
 - docs/agents/quarto-computation-adoption.md