unaltraweb 0.6.0 → 0.7.1

data/docs/agents/owner-closeout-85.md

@@ -0,0 +1,269 @@
+# unaltraweb 0.7.0 D0 delivery closeout
+
+Published **2026-10-05 21:45:13 UTC**:
+[v0.7.0](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.7.0).
+Owner: [issue 85](https://github.com/dosquartsdedocs/unaltraweb/issues/85).
+Coordination: [gaContExt 15](https://github.com/dosquartsdedocs/gacontext/issues/15).
+Requirements: gaContExt `5634ea2e3e42122bb365992dfca9f248feb89dec`.
+This report supersedes the chronological candidate state in the
+[native API contract](d0-runtime-identity.md).
+
+## Review and exact source
+
+The owner explicitly authorized the complete review/PR/integration, gated
+publication and separate post-release checkout pin. Work used only
+`/home/benizar/git/unaltraweb`, ordinary serial branches and synthetic consumers.
+Existing releases, authored state and unrelated client registrations were retained.
+
+| Role | Revision / evidence |
+| --- | --- |
+| Reviewed D0 implementation | `0c87e8c276e58ac9c747833df69cdb439aa6132b` |
+| Integrated core selected by consumers | `216ab2e8b6b8b45a5bb7da0a54bffd10edee895d`, [PR 87](https://github.com/dosquartsdedocs/unaltraweb/pull/87) |
+| Core selection commit | `2881a37dd6e5071d71c30cb44aa9af6faba5e886` |
+| Final artifact-producing source | `b44818c67eecef159f7aa0f825b0416cd511bc43`, [PR 88](https://github.com/dosquartsdedocs/unaltraweb/pull/88) |
+| Receipt-only child | `6dc13638c49bfb53a1c456e9e6b30aec7b3fd713` |
+| Receipt integration / tag target | `9fc84ac7fd01c78c6fe15fe862beb6a5d1633a9e`, [PR 89](https://github.com/dosquartsdedocs/unaltraweb/pull/89) |
+| Annotated tag object | `28a2a40b4b633be2fefb3f1c753cf95db1c7bdf6` |
+| Reviewed post-release pin / report | `7f9ce5b3bd844aed3a820c98f9712b7cfc8c23ea` |
+| Post-release integration | `833c5548ff01801097ddd56114d9039fd3914a43`, [PR 90](https://github.com/dosquartsdedocs/unaltraweb/pull/90) |
+
+Review records are explicitly agent-attributed, not human approval. The receipt
+integration's first parent is the artifact source; its first-parent diff contains
+only `release-candidates.json`. Native package authorization, exact staging,
+strict distribution/publication-ref checks and annotated-tag verification passed
+before privileged publication. These release checks apply to the receipt/tag
+revision, not later ordinary post-release commits.
+
+## Receipt, packages and images
+
+[Tagged receipt](https://github.com/dosquartsdedocs/unaltraweb/blob/v0.7.0/release-candidates.json):
+schema 1, source `b44818c67eecef159f7aa0f825b0416cd511bc43`, SHA-256
+`92b4feafbf822ff5b0d9fc6534f963e68c2a28a875d4e2e841c051e7c619e7dc`.
+It contains exactly the four components marked `ready` in the source BOM.
+
+| Component | Artifact / repository | SHA-256 / OCI index digest |
+| --- | --- | --- |
+| Gem | `unaltraweb-0.7.0.gem` | `1f4c71fc03bc3025018873eae73f7a2274e46b87ac678805e4150b8351b9ff0c` |
+| Wheel | `unaltraweb_mcp-0.7.0-py3-none-any.whl` | `3c9cd477e8c2fa0f69c1309c9302b110b73032600e8cf040c4818169863dd868` |
+| Base runtime | `ghcr.io/dosquartsdedocs/unaltraweb` | `sha256:ce67aa8fb90899e3c770c4ec8952b760cc8cafb3ed203e8e15266a9623bb3d31` |
+| MCP | `ghcr.io/dosquartsdedocs/unaltraweb-mcp` | `sha256:b84cdb404ba7bab5ff0b14fa8a7ee93d7293e829cf32e28ff0dacaa8afff4677` |
+
+Both OCI aliases `0.7.0` and `v0.7.0` were inspected anonymously and match these
+digests. Local Linux/amd64 configuration IDs are distinct:
+
+- Runtime: `sha256:beec5459bc7aa159af428fbad5d14a4527f3143e5062ec305a00619c31aae706`.
+- MCP: `sha256:b03e463343abcd0d5891f68ec423256f970d7c1fb35dc875e089e0f745cfe39a`.
+
+Their revision labels equal the artifact source. The image workflow verified
+GitHub-signed provenance, signer workflow, source revision and labels before
+executing the exact candidates. Semver promotion reverified those identities and
+reused the tested manifests without rebuilding.
+
+The package workflow artifact is `11329540867`, named
+`unaltraweb-0.7.0-b44818c67eecef159f7aa0f825b0416cd511bc43`; its archive digest is
+`sha256:9af51fb8447cf77691ffd362a752b247a9a1ee45a351f44b8de8ac60d62317c9`.
+The publisher authorized the exact successful run, source and inventory, then
+verified/staged the recorded hashes. Separate OIDC jobs published those bytes.
+Anonymous PyPI/RubyGems metadata and downloads match them. Downloaded GitHub
+Release assets also pass `SHA256SUMS`, whose SHA-256 is
+`4abdefd44dd6cce44262fd19e224a54ca7a1d1b7ada66071d5b737d94f9270ab`.
+
+## Reused workers and accepted helpers
+
+The selected PDF remains the published, signed 0.6.0 specialization:
+`ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed`.
+Its configuration ID is
+`sha256:d7e7d3243616270fc9e6eed7f8238c412dbe3d9ffc18d2832d17d66ca630d139`.
+It is `released`, outside the four-component receipt. The source-bound workflow
+also tested PDF candidate
+`sha256:d6d866cd16eab156e7dc3fea2fd7e649d8b91dca2916b45cd5c2218184d5928b`;
+that verification-only candidate received no 0.7.0 semver promotion and is not
+the selected worker.
+
+Computation and capture keep their 0.4.0 immutable BOM references. The retained D0
+observation reports Python compute as prepared; R compute and web capture were
+locally missing and remained explicitly `missing`, without fallback. This
+acceptance executes web/manual-PDF work, not every optional computation/capture
+workflow. An adapter enabling those features must prepare and verify their exact
+workers separately.
+
+| Accepted helper | Wheel SHA-256 | Renderer configuration ID |
+| --- | --- | --- |
+| Diavisuals 0.5.0 | `f52e20f20f1fb3a2418f07adb8d6a68a5567d0c321fb7c0ccc0f4db04917b96b` | `sha256:5a6887b372a0e1c386a7b54981d11ae1910215baeb6a12dfd0706b3e85ef0846` |
+| Vega 0.5.1 | `5aba4f267a37179c520b3cd164e1cec62ac5561872aa33b069cce73442dc52b1` | `sha256:695125943d0fbc3aa7c877babb9a11a6501bbc7ac265b0975bb5657c60439d98` |
+
+Native selection uses Diavisuals `--runtime-image` / `--runtime-expected-id` and
+Vega `--renderer-image-id`. Actual Mermaid, PlantUML, Vega-Lite/CSV and Vega renders
+passed receipt verification, tamper refusal and consumer relocation. Existing
+renderer aliases were unchanged. Exact 0.4.0 static receipt compatibility retains
+all input/output/request integrity checks; no continuous version range is inferred.
+
+## Live identity and installed acceptance
+
+The actual serving process provides `runtime_identity` and
+`web://runtime-identity`; both agreed on the backend instance. Native profile
+`unaltraweb-docker-stdio-v1` uses one connection per backend, one operation at a
+time, explicit drain and scoped orphan recovery. Host commands `session-status`
+and `reap-session` consume the retained consumer/session/container tuple.
+
+The initial accepted backend instance was `400244b6784c46498aadd3ec3b9c088f`, with
+inner PID 7 in `pid:[4026533734]`, start ticks `65541450`, Python 3.13.5 and
+executable `/usr/bin/python3`. Container
+`3feb725c68984e69fe208d56bdf06ec2dfcff4d43f1071045ebc0eadf3779ffe` had daemon init
+PID `3938960`; these PIDs belong to different namespaces. The canonical consumer
+binding was `/tmp/opencode/unaltraweb-d0-85/candidate-d0-proof/consumer A`.
+Reconnection produced instance `9c9d94e47c324be89abff5e80defb024` while the second
+consumer retained instance `413e89f4ebd34e5d8570b1db6a8360af`.
+
+The installed engine root was `/usr/local/lib/python3.13/dist-packages/unaltraweb_mcp`.
+Loaded version 0.7.0 and startup code fingerprint
+`5fdfb154f82d01bb5dcc5a35d74ba2f384b36e60a5111b63831b6216adfb8996` remained fixed
+when metadata in the disposable container overlay changed to 99.0.0. Current
+bytes reported drift; the prepared image was unchanged. Observed canonical
+component-contract hash:
+`d2cddda50780f00ec3af47826a93341e014d4811146195ed09a9bf1ee5fcdf81`;
+profile hash:
+`6c9305143f2f5e3dee831f3d5bf2b5413e51f24e3f28310fa21019c645532481`.
+Selection hashes additionally bind each consumer/worker tuple and are retained in
+the evidence. These observations are not permanent process attestations.
+
+`test/d0_runtime_smoke.py` passed all eight stages against the downloaded CI wheel
+and signed MCP: reconnect/scope, loaded-versus-disk, busy drain, backend-crash
+recovery, offline launch, explicit nested daemon mapping, wrong worker and missing
+worker. Wrong/missing controller images were also refused. A real PDF job was
+observed **busy after backend death**; recovery waited until it became eligible,
+then proved resource absence while another live backend remained connected.
+EOF/drain released only the retired session's resources.
+
+The real 0.6.0 → 0.7.0 → 0.6.0 roundtrip preserved authored files and old generated
+cache entries. The unrelated registration sentinel retained SHA-256
+`2705c6065bbc5665798be533b1057070b6efeae289cab3e800579cb6b5608afb`.
+The historical 0.6.0 process lacks live identity and remains an explicitly
+**partial** point, not a second D0-capable release.
+
+## Retained Carta and populated Bundler regressions
+
+`test/artifact_import_smoke.py` consumed the authenticated published Carta packet.
+Bundle hash `aeaa757ee1be19bfe56dc9af8dd1178032929b4a2bec2dad2ebb621b158ad999`
+and the 12-file seal remain intact. The mapping from `payload/output/letter.pdf`
+to `assets/documents/carta.pdf` retains original PDF hash
+`4a661740a18fe1cf75b84aa0d8532511fd105eb5484a5af700e11e8e30828ea4`.
+Integration record hash:
+`995e213e9c5677763809b4d108b84882e1821be58796e0823b8260c22f891a18`.
+
+The copied producer and incoming tree were removed, author prose survived
+reimport, and the receiver moved before native/generic checking and a forced PDF
+rebuild. Web/HTTP passed at both locations. Both 11-page PDFs have SHA-256
+`026552039659771d73a26875dc628c5dbccb8da2d4c32bcf0a199929efdd60e2`; the unchanged
+letter appears on page 10. Generic verification confirmed one bundle, one mapping
+and 14 files; the native checker also bound the chapter and rendered page.
+
+`test/bundler_transition_smoke.py` passed all four profiles using actual immutable
+0.4.0, unpatched 0.5.0 and new 0.7.0 MCP references. The known failure was
+reproduced on a separate copy. Each 0.7.0 activation and return to 0.4.0 passed
+two builds and a preview. All six author/cache files kept their hashes, with no
+cache clearing. `test/published_companion_smoke.py` passed with the published
+helper wheels and explicit renderer IDs above. The downloaded CI gem passed
+`scripts/test_gem_build.py:inspect_gem`, including isolated native helper closure.
+
+## CI and retained evidence
+
+| Gate | Successful run |
+| --- | --- |
+| Implementation PR CI / CodeQL | [37271200816](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37271200816) / [37271200817](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37271200817) |
+| Core selection PR CI / CodeQL | [37272201763](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37272201763) / [37272201726](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37272201726) |
+| Final artifact source CI / CodeQL | [37272717370](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37272717370) / [37272717381](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37272717381) |
+| Signed candidate image build/test | [37273192732](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37273192732) |
+| Package preparation | [37273195884](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37273195884) |
+| Receipt PR CI / CodeQL | [37371882737](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37371882737) / [37371882776](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37371882776) |
+| Receipt integration CI / CodeQL | [37375549493](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37375549493) / [37375549627](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37375549627) |
+| Tag CI | [37376786630](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37376786630) |
+| Semver image promotion | [37377435437](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37377435437) |
+| PyPI/RubyGems Trusted Publishing | [37377438226](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37377438226) |
+| Post-release PR CI / CodeQL | [37379728022](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37379728022) / [37379728286](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37379728286) |
+| Post-release integration CI / CodeQL | [37380436187](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37380436187) / [37380436184](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37380436184) |
+
+Two first-attempt receipt PR jobs were not acquired by hosted runners and ran no
+steps. Their retry passed without source changes; original attempts remain in
+the local evidence. The local source suite passed 608 Python cases, with 30
+optional/environment skips. No failed job was bypassed for merge or publication.
+
+Evidence root: `/tmp/opencode/unaltraweb-d0-85/`.
+
+| Retained result | SHA-256 |
+| --- | --- |
+| `image-evidence/tested-images.json` | `6c38a1d08511d0cb6554905bc236de58a9f594b255553361d36e6caa4622335d` |
+| `candidate-d0-proof/evidence.json` | `e8140ef8cf47e4329f7691b8a3733377a17269b83c2cf2e9b444c94ce22621f6` |
+| `candidate-carta-proof/evidence.json` | `c1b12f80b1a3c0d31a83fa015f050f0897923ef578ecac9c20f95e4acaa6fca0` |
+| `candidate-bundler-proof/evidence.json` | `8206e1a9e4a88123390dad30ba314d0b2fa00820a5af426164f060050be3ab4d` |
+| `candidate-helpers-proof/evidence.json` | `df994ccd8afaff45a7e3cfa9b6a29b650c9d01d63db2c9c36e59c31834273473` |
+| `published-packages/verified.json` | `e892bbb22c35ea3eef3b2abbbd6351e4a290e76d322c91ac3de6fb212965909f` |
+| `public-images.json` | `f123c2dc096405bde004cfd6cbce206a0f56925f436731e575830cf111d26314` |
+| `post-pin-proof/evidence.json` | `0944b95eec8d0e1103f4895595c77780d27ebc1a3e64626f421b960be8efd144` |
+
+## Public installation and checkout selection
+
+A fresh public-wheel venv passed default `prepare`, `check` and real stdio
+`smoke`, with the expected MCP configuration ID. That public installation also
+rechecked the relocated Carta source/rendered mapping. The public gem installed
+in an isolated gem home and activated as 0.7.0 with the runtime's existing Ruby
+dependencies, including Ruby's default gem paths; this is not a network-fresh
+dependency installation claim.
+
+The separate `chore/85-pin-published-mcp-0.7.0` source change selects the published
+digest in Make/bootstrap and updates its existing pin regression and current docs.
+It does not alter the published BOM, receipt, tag or artifact bytes. PR 90 and its
+integration passed protected CI; the resulting main checkout was clean and
+synchronized. The later helper-intake clarification is documentation-only.
+
+The actual `MCP_CONSUMER_WORKSPACE=… make mcp-stdio` transport started a synthetic
+consumer with live instance `2ebdbd20c32649c48bf309dc469f2c8b`. Tool/resource
+identity agreed, loaded 0.7.0 and the published image matched, and drain/close
+followed by exact retained-tuple inspection confirmed resource release.
+`make mcp-build` and the bootstrap's `--check` selected that public image directly.
+
+Post-pin local checks passed 608 Python cases (579 passed, 29 optional skips),
+`make distribution-check workflow-check`, the fresh `make wheel-check`, prose
+checks, `editorial-publication-check` and `git diff --check`. The prose checker
+reported only existing informational sentence-length cues, not blocking findings.
+The source Make targets were exercised with independently owned development names:
+
+```bash
+make mcp-check mcp-smoke \
+  MCP_RUNTIME_IMAGE=unaltraweb-d0-85-runtime:post-pin \
+  MCP_IMAGE=unaltraweb-d0-85-mcp:post-pin \
+  MANUAL_PDF_DEV_IMAGE=unaltraweb-d0-85-pdf:post-pin \
+  MCP_SMOKE_MANUAL_PDF_IMAGE=ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed
+make docs-build \
+  DOCKER_IMAGE=ghcr.io/dosquartsdedocs/unaltraweb@sha256:ce67aa8fb90899e3c770c4ec8952b760cc8cafb3ed203e8e15266a9623bb3d31
+```
+
+Both commands passed. Development outputs remain separate from the signed
+artifact acceptance and did not replace public semver images or retained caches.
+
+## Remaining gates and scope
+
+**The complete coordinator dependency graph is not declared managed-ready.**
+Selected Diavisuals 0.5.0 lacks full serving-process identity. The
+[provider return in Diavisuals 14](https://github.com/dosquartsdedocs/diavisuals/issues/14#issuecomment-5987114002)
+records that **Diavisuals 0.6.0 already published the native correction on
+2026-10-05 at 02:25:02 UTC**, from `1c2dd8c8138e27bcdb1b0fee1fd51e1d057130e3`.
+Its live mapping is `server_identity` / `diavisuals://server/identity`, with its
+own lifecycle. The open issue tracks acceptance/intake, not missing publication.
+
+Unaltraweb 0.7.0 was tested and published with 0.5.0. The outstanding composition
+gate is therefore **owner acceptance of the corrected helper and a new reviewed
+selection**, not another claim that the provider correction has yet to ship.
+The hub cannot widen the published 0.7.0 helper pin from metadata alone. It must
+also observe each independent helper process, prepare feature-specific workers
+and accept the native adapter before activation. This clarification does not
+change the released BOM or count Diavisuals 0.6.0 as tested Web compatibility.
+
+The acceptance platform is Linux/amd64 and the claimed backend profile is Docker
+stdio, one connection per instance. Shared HTTP backend reattachment and a fully
+D0-capable two-release roundtrip are not claimed. Arbitrary direct controller
+layouts remain [issue 31](https://github.com/dosquartsdedocs/unaltraweb/issues/31);
+only canonical host and explicitly mapped nested launchers were proved. Retained
+Carta coverage is the published English one-page leaf, not Diapora composition.
+Real manuals, author artifacts and existing client registrations were not migrated.
+Already-running clients retain their loaded runtime until explicit reconnection.

data/docs/agents/retained-letter-import.md

@@ -1,5 +1,9 @@
 # Native retained-letter import — issue 80
 
+Delivery completed on 2026-10-02; see [the 0.6.0 closeout](owner-closeout-80.md)
+for final revisions, receipts, registry downloads and the post-release pin.
+The following sections retain the chronological preparation and review evidence.
+
 ## Scope and release state
 
 This is a separate 0.6.0 development increment after the administrative closeout

data/scripts/test_wheel_install.py

@@ -142,14 +142,14 @@ def main() -> int:
         fake_bin = temp / "fake-bin"
         fake_bin.mkdir()
         fake_docker = fake_bin / "docker"
-        fake_docker.write_text("#!/bin/sh\n[ \"$1 $2\" = 'image inspect' ] || exit 99\n[ \"$5\" = \"$EXPECTED_IMAGE\" ] || exit 98\nprintf 'sha256:fixture\\n'\n", encoding="utf-8")
+        fake_docker.write_text("#!/bin/sh\n[ \"$1 $2\" = 'image inspect' ] || exit 99\n[ \"$5\" = \"$EXPECTED_IMAGE\" ] || exit 98\nprintf 'sha256:1111111111111111111111111111111111111111111111111111111111111111\\n'\n", encoding="utf-8")
         fake_docker.chmod(0o755)
         expected_image = json.loads((ROOT / "src/unaltraweb_mcp/component-contract.json").read_text())["components"]["mcp"]["reference"]
         launcher_env = {**no_consumer_env, "PATH": f"{fake_bin}:{env['PATH']}", "EXPECTED_IMAGE": expected_image}
         launcher_env.pop("UNALTRAWEB_MCP_IMAGE", None)
         launcher_env.pop("MCP_RELEASE_IMAGE", None)
         prepared_image = run([str(docker_cli), "prepare"], cwd=temp, env=launcher_env).stdout.strip()
-        if prepared_image != "sha256:fixture":
+        if prepared_image != "sha256:" + "1" * 64:
             raise RuntimeError("Installed preparation did not use the packaged bootstrap")
         run(["make", "--silent", "--no-print-directory", "-C", str(launcher), "mcp-build"], cwd=temp, env=launcher_env)
         run([str(docker_cli), "prepare", "--image", "explicit:override"], cwd=temp,
@@ -290,7 +290,7 @@ def main() -> int:
                 raise RuntimeError(f"generated {profile} Gemfile does not use the reviewed core revision")
             if f'revision: {integration["core_sha"]}' not in lockfile:
                 raise RuntimeError(f"generated {profile} lockfile does not use the reviewed core revision")
-            if f'uses: {integration["site_deploy_workflow"]}@{integration["core_sha"]}' not in deploy:
+            if f'uses: {integration["site_deploy_workflow"]}@{integration["site_deploy_workflow_sha"]}' not in deploy:
                 raise RuntimeError(f"generated {profile} deploy caller does not use the reviewed core revision")
             if f'manual-pdf-image: "{integration["manual_pdf_image"]}"' not in deploy:
                 raise RuntimeError(f"generated {profile} deploy caller does not use the reviewed PDF image")

data/scripts/unaltraweb-mcp-bootstrap.sh

@@ -3,18 +3,28 @@ set -eu
 
 usage() {
   cat <<'USAGE'
-Usage: unaltraweb-mcp-bootstrap [--project PATH] [--image IMAGE] [--prepare|--check|--smoke]
+Usage: unaltraweb-mcp-bootstrap [--project PATH] [--host-project PATH] [--image IMAGE]
+       [--expected-image-id ID] [--managed] [--offline] [--session-id ID] [--worker-images JSON]
+       [--prepare|--check|--smoke]
 
 Start one Dockerized unaltraweb MCP stdio server for the selected workspace.
 If --project is omitted, MCP_CONSUMER_WORKSPACE is used, then the current directory.
 --prepare inspects or pulls the selected image without mounting a consumer.
---check and --smoke require that image locally; neither builds nor pulls.
+Launch, --check and --smoke require that exact image locally; none builds or pulls.
+Managed mode requires an immutable reference or an expected full image ID.
 USAGE
 }
 
-image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692}"
+image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:b84cdb404ba7bab5ff0b14fa8a7ee93d7293e829cf32e28ff0dacaa8afff4677}"
 project="${MCP_CONSUMER_WORKSPACE:-${UNALTRAWEB_PROJECT:-}}"
 operation=serve
+expected_image="${UNALTRAWEB_EXPECTED_IMAGE_ID:-}"
+managed="${UNALTRAWEB_MANAGED_RUNTIME:-0}"
+session_id=""
+host_project=""
+network=bridge
+worker_images="${UNALTRAWEB_WORKER_IMAGES:-}"
+[ -n "$worker_images" ] || worker_images='{}'
 
 while [ "$#" -gt 0 ]; do
   case "$1" in
@@ -28,6 +38,18 @@ while [ "$#" -gt 0 ]; do
       image="$2"
       shift 2
       ;;
+    --host-project|--expected-image-id|--session-id|--worker-images)
+      [ "$#" -ge 2 ] || { printf 'Missing value for %s\n' "$1" >&2; exit 2; }
+      case "$1" in
+        --host-project) host_project=$2 ;;
+        --expected-image-id) expected_image=$2 ;;
+        --session-id) session_id=$2 ;;
+        --worker-images) worker_images=$2 ;;
+      esac
+      shift 2
+      ;;
+    --managed) managed=1; shift ;;
+    --offline) network=none; shift ;;
     --prepare|--check|--smoke)
       [ "$operation" = serve ] || { printf '%s\n' 'Select only one operation.' >&2; exit 2; }
       operation="${1#--}"
@@ -45,10 +67,33 @@ while [ "$#" -gt 0 ]; do
   esac
 done
 
+valid_image_id() {
+  case "$1" in sha256:*) hex=${1#sha256:} ;; *) return 1 ;; esac
+  [ "${#hex}" -eq 64 ] || return 1
+  case "$hex" in *[!0-9a-f]*) return 1 ;; esac
+}
+case "$image" in ''|*[!A-Za-z0-9._/:@-]*) printf '%s\n' 'Invalid image reference' >&2; exit 2 ;; esac
+case "$image" in *://*) printf '%s\n' 'Docker references are not URLs' >&2; exit 2 ;; esac
+case "$image" in
+  *@*)
+    valid_image_id "${image##*@}" || { printf '%s\n' 'Invalid digest reference' >&2; exit 2; }
+    case "${image%@*}" in *@*) printf '%s\n' 'Invalid digest reference' >&2; exit 2 ;; esac
+    ;;
+esac
+if [ -n "$expected_image" ]; then
+  valid_image_id "$expected_image" || { printf '%s\n' 'Expected image ID must be a full lowercase sha256' >&2; exit 2; }
+  managed=1
+fi
+case "$image" in
+  sha256:*) valid_image_id "$image" || exit 2; managed=1 ;;
+  *@sha256:*) valid_image_id "sha256:${image##*@sha256:}" || exit 2; managed=1 ;;
+  *) if [ "$managed" = 1 ] && [ -z "$expected_image" ]; then printf '%s\n' 'Managed mutable references require --expected-image-id' >&2; exit 2; fi ;;
+esac
+
 resolve_image() {
   if ! resolved_image="$(docker image inspect --format '{{.Id}}' "$image" 2>/dev/null)"; then
     case "$operation" in
-      check|smoke)
+      serve|check|smoke)
         printf 'Image is not prepared: %s. Run --prepare first.\n' "$image" >&2
         exit 1
         ;;
@@ -56,14 +101,19 @@ resolve_image() {
     docker pull "$image" >&2
     resolved_image="$(docker image inspect --format '{{.Id}}' "$image")"
   fi
+  valid_image_id "$resolved_image" || { printf '%s\n' 'Docker returned an invalid image identity' >&2; exit 2; }
+  case "$image" in sha256:*) [ "$image" = "$resolved_image" ] || { printf '%s\n' 'Selected image ID mismatch' >&2; exit 1; } ;; esac
+  if [ -n "$expected_image" ] && [ "$expected_image" != "$resolved_image" ]; then
+    printf '%s\n' 'Prepared image does not match the expected image ID; no fallback was attempted' >&2; exit 1
+  fi
 }
 
 if [ "$operation" != serve ]; then
   resolve_image
   case "$operation" in
     prepare) printf '%s\n' "$resolved_image"; exit 0 ;;
-    check) exec docker run --rm --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint unaltraweb-mcp "$resolved_image" version ;;
-    smoke) exec docker run --rm --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint python3 "$resolved_image" /opt/unaltraweb/test/mcp_smoke.py ;;
+    check) exec docker run --rm --pull never --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint unaltraweb-mcp "$resolved_image" version ;;
+    smoke) exec docker run --rm --pull never --network none --user "$(id -u):$(id -g)" -e HOME=/tmp --entrypoint python3 "$resolved_image" /opt/unaltraweb/test/mcp_smoke.py ;;
   esac
 fi
 
@@ -85,10 +135,28 @@ if [ ! -d "$project" ]; then
 fi
 
 project="$(CDPATH= cd -- "$project" && pwd -P)"
+launcher_project="$project"
+if [ -z "$host_project" ]; then
+  host_project="${UNALTRAWEB_DOCKER_ROOT:-}"
+  if [ -n "$host_project" ]; then
+    inherited_workspace="${MCP_CONSUMER_WORKSPACE:-}"
+    if [ -z "$inherited_workspace" ] || [ ! -d "$inherited_workspace" ] || [ "$(CDPATH= cd -- "$inherited_workspace" && pwd -P)" != "$launcher_project" ]; then
+      printf '%s\n' 'Inherited daemon mapping belongs to another or unknown workspace; pass --host-project explicitly' >&2; exit 2
+    fi
+  fi
+fi
+if [ -z "$host_project" ] && [ -f /.dockerenv ]; then
+  printf '%s\n' 'A containerized launcher needs --host-project with the explicit daemon-host mapping' >&2; exit 2
+fi
+host_project="${host_project:-$project}"
+case "$host_project" in /*) ;; *) printf '%s\n' 'Host project must be absolute' >&2; exit 2 ;; esac
+case "$host_project" in *"$newline"*|*"$carriage_return"*) exit 2 ;; esac
+[ "$host_project" != / ] && [ "$(realpath -ms -- "$host_project")" = "$host_project" ] || { printf '%s\n' 'Host project must be normalized' >&2; exit 2; }
+project="$host_project"
 owner="${UNALTRAWEB_PROJECT_USER:-$(id -u):$(id -g)}"
 docker_socket="${UNALTRAWEB_DOCKER_SOCKET:-/var/run/docker.sock}"
 script_dir="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P)"
-project_id="$(/bin/sh "$script_dir/unaltraweb-mcp-project-id.sh" "$project")"
+project_id="$(printf '%s' "$project" | sha256sum | cut -c 1-16)"
 workspace_mount="$(/bin/sh "$script_dir/unaltraweb-docker-mount.sh" "$project" /workspace)"
 mirror_mount="$(/bin/sh "$script_dir/unaltraweb-docker-mount.sh" "$project" "$project")"
 
@@ -103,7 +171,7 @@ if [ -S "$docker_socket" ]; then
     exit 1
   fi
   case "$docker_socket" in
-    "$project"|"$project"/*)
+    "$project"|"$project"/*|"$launcher_project"|"$launcher_project"/*)
       printf '%s\n' 'UNALTRAWEB_DOCKER_SOCKET must be outside the consumer project so the persistent preview cannot inherit it.' >&2
       exit 1
       ;;
@@ -111,6 +179,9 @@ if [ -S "$docker_socket" ]; then
 fi
 
 resolve_image
+if [ -z "$session_id" ]; then session_id=$(od -An -N16 -tx1 /dev/urandom | tr -d ' \n'); fi
+[ "${#session_id}" -eq 32 ] || { printf '%s\n' 'Session ID must contain 32 lowercase hex characters' >&2; exit 2; }
+case "$session_id" in *[!0-9a-f]*) exit 2 ;; esac
 image_reference="$image"
 case "$image_reference" in
   ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:*) ;;
@@ -123,10 +194,13 @@ case "$image_reference" in
     ;;
 esac
 
-set -- docker run --rm -i \
+set -- docker run --rm --pull never --init -i \
+  --network "$network" \
+  --name "unaltraweb-stdio-$session_id" --cpus 2 --memory 4g --pids-limit 512 \
   --label io.context.mcp-factory=unaltraweb \
   --label io.context.mcp-role=stdio \
   --label "io.context.mcp-project=$project_id" \
+  --label "io.context.mcp-session=$session_id" \
   --user "$owner" \
   -e HOME=/tmp \
   -e COMPUTE_CORE=/opt/unaltraweb \
@@ -136,6 +210,13 @@ set -- docker run --rm -i \
   -e UNALTRAWEB_FACTORY_DIR=/opt/unaltraweb \
   -e "UNALTRAWEB_MCP_IMAGE=$resolved_image" \
   -e "UNALTRAWEB_MCP_IMAGE_REFERENCE=$image_reference" \
+  -e "UNALTRAWEB_MCP_REQUESTED_IMAGE=$image" \
+  -e "UNALTRAWEB_EXPECTED_IMAGE_ID=$resolved_image" \
+  -e "UNALTRAWEB_RUNTIME_SESSION=$session_id" \
+  -e "UNALTRAWEB_MANAGED_RUNTIME=$managed" \
+  -e "UNALTRAWEB_RUNTIME_NETWORK=$network" \
+  -e "UNALTRAWEB_LAUNCHER_PROJECT=$launcher_project" \
+  -e "UNALTRAWEB_WORKER_IMAGES=$worker_images" \
   -e "UNALTRAWEB_PROJECT_USER=$owner" \
   --mount "$workspace_mount" \
   --mount "$mirror_mount" \

data/scripts/unaltraweb-mcp-cleanup.sh

@@ -58,16 +58,48 @@ case "$project_id" in
     ;;
 esac
 
-containers=$(docker ps -aq \
+# Explicit workspace-wide shutdown. Managed per-client detach uses live drain,
+# stdio EOF and the separate session-status/reap-session native adapter instead.
+containers=$(docker ps -aq --no-trunc \
   --filter "label=io.context.mcp-factory=unaltraweb" \
   --filter "label=io.context.mcp-project=$project_id")
-if [ -n "$containers" ]; then
-  docker rm -f $containers >/dev/null
-fi
-
-networks=$(docker network ls -q \
+networks=$(docker network ls -q --no-trunc \
   --filter "label=io.context.mcp-factory=unaltraweb" \
   --filter "label=io.context.mcp-project=$project_id")
-if [ -n "$networks" ]; then
-  docker network rm $networks >/dev/null
-fi
+
+valid_id() {
+  [ "${#1}" -eq 64 ] || return 1
+  case "$1" in *[!0-9a-f]*) return 1 ;; esac
+}
+count=0
+for cid in $containers; do
+  count=$((count + 1))
+  [ "$count" -le 64 ] && valid_id "$cid" || { printf '%s\n' 'Container inventory is invalid or exceeds bounds' >&2; exit 2; }
+  labels=$(docker container inspect --format '{{index .Config.Labels "io.context.mcp-factory"}}|{{index .Config.Labels "io.context.mcp-role"}}|{{index .Config.Labels "io.context.mcp-project"}}' "$cid")
+  case "$labels" in
+    "unaltraweb|stdio|$project_id"|"unaltraweb|preview|$project_id"|"unaltraweb|computation|$project_id"|"unaltraweb|manual-pdf|$project_id"|"unaltraweb|web-capture|$project_id"|"unaltraweb|web-capture-site|$project_id") ;;
+    *) printf '%s\n' 'Refusing unknown container ownership' >&2; exit 2 ;;
+  esac
+done
+for nid in $networks; do
+  count=$((count + 1))
+  [ "$count" -le 64 ] && valid_id "$nid" || { printf '%s\n' 'Network inventory is invalid or exceeds bounds' >&2; exit 2; }
+  labels=$(docker network inspect --format '{{index .Labels "io.context.mcp-factory"}}|{{index .Labels "io.context.mcp-role"}}|{{index .Labels "io.context.mcp-project"}}' "$nid")
+  [ "$labels" = "unaltraweb|web-capture|$project_id" ] || { printf '%s\n' 'Refusing unknown network ownership' >&2; exit 2; }
+done
+if [ -n "$containers" ]; then docker rm -f $containers >/dev/null; fi
+if [ -n "$networks" ]; then docker network rm $networks >/dev/null; fi
+for cid in $containers; do
+  if observed=$(docker container inspect --format '{{.Id}}' "$cid" 2>&1); then
+    printf '%s\n' 'Container termination is not confirmed' >&2; exit 1
+  else
+    case "$observed" in *"No such container"*|*"no such container"*|*"No such object"*) ;; *) printf '%s\n' 'Container absence is unknown' >&2; exit 1 ;; esac
+  fi
+done
+for nid in $networks; do
+  if observed=$(docker network inspect --format '{{.Id}}' "$nid" 2>&1); then
+    printf '%s\n' 'Network removal is not confirmed' >&2; exit 1
+  else
+    case "$observed" in *"No such network"*|*"no such network"*|*"No such object"*) ;; *) printf '%s\n' 'Network absence is unknown' >&2; exit 1 ;; esac
+  fi
+done

data/scripts/validate_distribution.py

@@ -4,6 +4,7 @@
 from __future__ import annotations
 
 import argparse
+import hashlib
 import json
 import os
 import re
@@ -39,7 +40,7 @@ from unaltraweb_mcp.distribution import (  # noqa: E402
     is_mutable_reference,
     validate_component_contract,
 )
-from scripts.validate_workflows import load_workflow_text, reusable_deploy_input_errors  # noqa: E402
+from scripts.validate_workflows import DEPLOY_PDF_PROVENANCE_POLICY_SHA256, load_workflow_text, reusable_deploy_input_errors  # noqa: E402
 
 
 def load_yaml(path: Path) -> dict[str, Any]:
@@ -88,6 +89,21 @@ def component_version_errors(contract: dict[str, Any]) -> list[str]:
     return errors
 
 
+def selected_deployment_errors(contract: dict[str, Any], workflow: dict[str, Any], provider_contract: dict[str, Any]) -> list[str]:
+    """Release readiness binds the called workflow's code and data, not local YAML."""
+    errors = []
+    steps = workflow.get("jobs", {}).get("build", {}).get("steps", [])
+    step = next((row for row in steps if row.get("name") == "Verify manual PDF image provenance"), {})
+    if hashlib.sha256(json.dumps(step, sort_keys=True, separators=(",", ":")).encode()).hexdigest() != DEPLOY_PDF_PROVENANCE_POLICY_SHA256:
+        errors.append("selected deployment workflow does not contain the reviewed contract-driven provenance gate")
+    reference = contract["consumer_integration"]["manual_pdf_image"]
+    expected = [row for row in contract.get("deployment_contract", {}).get("manual_pdf_workers", []) if row.get("reference") == reference]
+    actual = [row for row in provider_contract.get("deployment_contract", {}).get("manual_pdf_workers", []) if row.get("reference") == reference]
+    if len(expected) != 1 or actual != expected:
+        errors.append("selected deployment workflow's producer record differs from the package's PDF identity")
+    return errors
+
+
 def validate(root: Path = ROOT) -> list[str]:
     errors: list[str] = []
     contract = distribution_contract()
@@ -125,6 +141,11 @@ def validate(root: Path = ROOT) -> list[str]:
         errors.append(f"component contract schema validation failed: {exc}")
     errors.extend(f"component contract semantic validation failed: {error}" for error in component_contract_semantic_errors(contract))
     core_sha = str(contract["consumer_integration"]["core_sha"])
+    workflow_sha = str(contract["consumer_integration"].get("site_deploy_workflow_sha", core_sha))
+    workflow_ancestor = subprocess.run(["git", "merge-base", "--is-ancestor", workflow_sha, "HEAD"], cwd=root,
+                                       stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False)
+    if workflow_ancestor.returncode != 0:
+        errors.append("consumer integration workflow SHA must be an ancestor of the current source")
     core_object = subprocess.run(
         ["git", "cat-file", "-e", f"{core_sha}^{{commit}}"],
         cwd=root,
@@ -145,7 +166,7 @@ def validate(root: Path = ROOT) -> list[str]:
         if core_ancestor.returncode != 0:
             errors.append("consumer integration core SHA must be an ancestor of the current source")
         pinned_workflow = subprocess.run(
-            ["git", "show", f"{core_sha}:.github/workflows/site-deploy.yml"],
+            ["git", "show", f"{workflow_sha}:.github/workflows/site-deploy.yml"],
             cwd=root,
             text=True,
             stdout=subprocess.PIPE,
@@ -153,7 +174,7 @@ def validate(root: Path = ROOT) -> list[str]:
             check=False,
         )
         if pinned_workflow.returncode != 0:
-            errors.append("consumer integration core SHA does not contain the reusable deploy workflow")
+            errors.append("consumer integration workflow SHA does not contain the reusable deploy workflow")
         else:
             try:
                 pinned_deploy = load_workflow_text(pinned_workflow.stdout)
@@ -164,6 +185,14 @@ def validate(root: Path = ROOT) -> list[str]:
                     f"consumer integration workflow: {error}"
                     for error in reusable_deploy_input_errors(pinned_deploy)
                 )
+                if "deployment_contract" in contract and contract["components"]["mcp"]["release_status"] == "ready":
+                    recorded = subprocess.run(["git", "show", f"{workflow_sha}:src/unaltraweb_mcp/component-contract.json"],
+                                              cwd=root, text=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False)
+                    try:
+                        provider_contract = json.loads(recorded.stdout) if recorded.returncode == 0 else {}
+                        errors.extend(selected_deployment_errors(contract, pinned_deploy, provider_contract))
+                    except (ValueError, KeyError, TypeError):
+                        errors.append("selected deployment workflow has no valid provider-owned component contract")
     if schema.get("properties", {}).get("schema_version", {}).get("const") != 1:
         errors.append("component contract schema does not select version 1")
 
@@ -273,7 +302,7 @@ def validate(root: Path = ROOT) -> list[str]:
         "Makefile.tmpl": ["__MCP_IMAGE__", "__MANUAL_PDF_IMAGE__"],
         ".github/workflows/deploy.yml.tmpl": [
             "__SITE_DEPLOY_WORKFLOW__",
-            "__CORE_SHA__",
+            "__SITE_DEPLOY_WORKFLOW_SHA__",
             "__MANUAL_PDF_IMAGE__",
             "__VEGAVISUALS_SHA__",
         ],