@entrorove/skill 0.1.71 → 0.1.73

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.1.73 — 2026-10-20
+
+- 修复通用范围连接在长时间扫描后的签名期限绑定：原 S 证明到期时间不晚于原云端挑战，保留原随机数、完整范围、独立验签和失败历史；已过期挑战仍明确拒绝。
+- Bind ordinary scope signatures to their original cloud deadline after long scans. The original S proof expires no later than its challenge, preserving the nonce, complete scope, independent signatures and failure history; expired challenges still reject explicitly.
+
+## 0.1.72 — 2026-10-20
+
+- 将完整范围证据与签名控制分离：四类原 S 证明经有界独立通道上传，紧凑权威绑定不可变摘要与字节数；未知上传仅恢复原 GET，保留原路径、上下文、审批、独立 M 写入和全部旧失败记录。
+- Separate full scope evidence from signed controls: upload four kinds of original S proof through a bounded data channel and bind immutable hashes and byte counts in compact authorities. Recover uncertain uploads with the original GET only, preserving complete paths, contexts, approvals, separate M writes and prior failures.
+
 ## 0.1.71 — 2026-10-20
 
 - 通用分离源码依赖事实与未知构建行为：动态配置、宏及加载器保留真实哈希与只读来源，不执行项目代码，不把构建未知标为完整。原审批与独立 S/M 签名仅允许已知源码的非结构修改；隐私文件、路径、资源预算、未知目标及配置漂移继续明确拒绝，实际构建与测试仍需原流程验收。

package/IDE-EXECUTION.md

@@ -92,6 +92,10 @@ When intake returns `workflow-gate`, connect the current repository before invok
 
 Scope inspection resolves aliases from actual `tsconfig.json` or `jsconfig.json`, including relative and npm `extends` and ordered inheritance arrays. Npm configuration lookup uses the pinned TypeScript JSON-config resolver over controlled metadata reads, including scoped packages, subpaths, package `tsconfig`, `exports` and `typesVersions`. Read-only candidate probes treat a child beneath an ordinary file as absent so normal TypeScript fallbacks continue; actual sources, control files and mutation targets retain strict validation. Rejected paths report the requested path, blocking ancestor, resolved target and reason, including broken or cyclic dependency links. Configurations and package metadata enter the signed hashes; dependencies are read only, never executed. Repository-local pnpm links use their actual configuration location. Read-only external dependency packages support parents and mappings inside their reference boundary; references requiring an unrepresentable external canonical ancestor fail explicitly rather than selecting a different same-name repository package. For plugin source compiled by a host project whose config is outside the source's ancestors, include `importContexts: [{"sourcePrefix":"<plugin source directory>","configPath":"<actual host tsconfig.json>"}]` in `scope-connect` input. Inspect the real build configuration first; never invent an alias or mark an unresolved import as external. These context paths remain inside the repository, their hashes enter the signed facts, and the local task binding freezes them.
 
+Full scope observations travel through a separate authenticated evidence channel. The SDK keeps the complete original canonical UTF8 S proof in a private SHA256-derived sidecar, reserves an upload with the discovered `scope-evidence-prepare`, and sends its exact bytes once through that reservation's `PUT`. The fixed data limit is 16,000,000 bytes, with bounded structure, time and concurrency; ordinary request, signed-control and journal limits remain unchanged. Ordinary observations, context corrections, scope revisions and post-write refreshes have distinct evidence kinds and exact original identity bindings. An upload or reference grants no execution authority. Apply still verifies the original signatures, freshness, full scope, owner approval, nonce and revision CAS, including separate M consumption for changed writes.
+
+An interrupted upload is recovered only with its original reservation's `GET`; a missing or pending result does not authorize another upload, nonce or changed input. Reuse the exact original connector command and input so its private journal performs that recovery. Compact v2 authorities sign the immutable evidence reference, digest, byte count and original task identities. Their revision digest hashes the signed compact record, never a hydrated projection. Readers verify the full sidecar before using the retained context history or amendment reference. Old v1 records and known failures retain their exact bytes; a known terminal rejection is archived before a fresh same-proposal attempt. Do not hand-edit a managed SDK, sidecar, binding or journal to bypass these checks.
+
 ### Correcting build contexts before the first scope gate
 
 An unresolved alias can occur after the original local signer has been enrolled but before any scope facts or gate have been accepted. Ordinary `scope-connect` still rejects a changed `importContexts` list. Use the explicit `scope-context <original absolute repositoryRoot>` recovery on that same flow; do not edit `identity/binding.json`, replace its key, drop target paths or create a replacement flow.

package/SKILL.md

@@ -5,7 +5,7 @@ description: Execute a task selected for Entrorove through explicit SDK operatio
 
 # entrorove · 熵巡
 
-Version: 0.1.71.
+Version: 0.1.73.
 
 Entrorove applies only to the task for which it is selected; reading these instructions, discovering capabilities or installing the package never selects or governs another task. Hooks are optional. Reading this document or calling an entry once does not execute the task. On every later turn, including after compaction, continue the original task and its required next operation before dependent work. Keep the original goal, scope, account, flow, cloud task and failure records. Never describe planning, a reported step or model output as verified delivery.
 
@@ -46,6 +46,7 @@ When a new user requirement arrives while the original task is unfinished, store
 - Invoke service operations with JSON stdin to `npx @entrorove/skill invoke` or a host-approved rewritten equivalent.
 - Explicit domains use `native <domain> <operation>`. Domains: aimlock, blueprint, calctool, swarm, validator, mergeguard, archguard, confirm-protocol. Aimlock `brain-plan`, `brain-check`, `brain-validate`, `brain-status` use the original stored plan.
 - At `workflow-gate`, connect the actual repository and exact source paths with `scope-connect`, then use its original `nextInput`. Scope inspection does not grant execution or writes. Dynamic references remain unknown; never set graph completeness manually.
+- Complete S evidence uses a separate bounded upload and private hash-bound data file. Keep every original path, context and unknown origin. An interrupted upload permits only its original GET recovery through the unchanged connector input; a missing result never permits another PUT or challenge. Compact signed authorities bind the complete evidence reference while preserving the original control limits and v1 history.
 - If a real missing build context blocks the first scope scan, use the same-flow `scope-context` review and original-owner answer described in [IDE-EXECUTION.md](IDE-EXECUTION.md#correcting-build-contexts-before-the-first-scope-gate). Apply its exact approved proposal with the original S signer and fresh actual snapshot, then retry the returned complete `scope-connect` input. Keep the original binding, all paths and failed attempts; ordinary reconnects cannot silently change contexts.
 - If actual files were omitted before plan freeze, follow the discovered same-flow `workflow-scope-review`, original owner approval and `scope-amend` recovery in [IDE-EXECUTION.md](IDE-EXECUTION.md#correcting-omitted-scope-before-plan-freeze). Preserve each file's explicit write or read-only role and bind the resulting `scopeRevisionDigest` in the corrected plan; never widen ordinary `scope-connect` input to bypass its original binding.
 - `local capabilities` describes scope, snapshot, budget, ownership, mutation, review and evidence contracts. Do not call a guessed operation or construct a local signature in place of cloud authority.

package/local-probe.mjs

@@ -50,7 +50,7 @@ async function handoffReadBudget(input) {
   const loaded = await loadBudget(await budgetLocation(binding));
   return loaded.state.enforced && loaded.state.grant?.purpose === 'handoff-read';
 }
-async function probeHandoffCandidate(input, root, candidate) {
+async function probeHandoffCandidate(input, root, candidate, signingOptions) {
   scopeBinding(input);
   const native = await import('./local-task-handoff-read-authority.mjs');
   const readHome = await native.assertTaskHandoffReadHome({ ...input, taskId: candidate.receiverTaskId, ownerId: candidate.ownerId });
@@ -67,13 +67,22 @@ async function probeHandoffCandidate(input, root, candidate) {
     preservedSnapshotDigest: null, preservedSnapshotId: null, currentSnapshotFresh: true,
     receiverOrigin: { flowId: candidate.flowId, taskId: candidate.receiverTaskId,
       scopeDigest: candidate.receiverOriginalScopeDigest, checkpointDigest: candidate.receiverCheckpointDigest,
-      acceptanceReceiptId: candidate.receiverAcceptanceReceiptId, sourceCopiesVerified: false } });
+      acceptanceReceiptId: candidate.receiverAcceptanceReceiptId, sourceCopiesVerified: false } }, signingOptions);
 }
-export async function probe(input) {
+function probeSigningOptions(options) {
+  if (!options || typeof options !== 'object' || Array.isArray(options)
+    || Object.keys(options).some(key => key !== 'maximumExpiresAt')
+    || options.maximumExpiresAt !== undefined && (!Number.isSafeInteger(options.maximumExpiresAt) || options.maximumExpiresAt < 1)) {
+    scopeFail('ENTROROVE_SCOPE_ATTESTATION_BINDING', 'Internal probe signing options require only a finite exact deadline');
+  }
+  return { maximumExpiresAt: options.maximumExpiresAt };
+}
+export async function probe(input, options = {}) {
+  const signingOptions = probeSigningOptions(options);
   rejectScopePrivileges(input);
   const root = await scopeRoot(input.repositoryRoot);
   const candidate = await verifiedScopeCandidate(input, root);
-  if (candidate && await handoffReadBudget(input)) return probeHandoffCandidate(input, root, candidate);
+  if (candidate && await handoffReadBudget(input)) return probeHandoffCandidate(input, root, candidate, signingOptions);
   const hasBinding = ['flowId', 'stepId', 'snapshotId'].some(field => input[field] !== undefined);
   const retained = hasBinding ? await retainedScope(input, root, true) : null;
   const fresh = !!candidate || (!!retained && retained.stepId !== input.stepId);
@@ -97,15 +106,15 @@ export async function probe(input) {
         classification: { ...result.classification, mode: candidate ? result.classification.mode : retained.mode }, requiredMode: result.classification.mode,
         originalBinding: { flowId: retained.flowId, stepId: retained.stepId, snapshotId: retained.originalSnapshot.snapshotId },
         snapshotDigest: result.facts.snapshotEvidence.snapshotDigest, preservedSnapshotDigest: retained.originalSnapshot.digest,
-        preservedSnapshotId: retained.originalSnapshot.snapshotId, currentSnapshotFresh: true });
+        preservedSnapshotId: retained.originalSnapshot.snapshotId, currentSnapshotFresh: true }, signingOptions);
     }
     const saved = await initializeScope(input, result.repositoryRoot, result.facts, result.classification);
     return attestScopeFacts(input, { ...result, revision: saved.state.revision, statePath: saved.statePath,
       classification: { ...result.classification, mode: saved.state.mode }, requiredMode: result.classification.mode,
       snapshotDigest: result.facts.snapshotEvidence.snapshotDigest, preservedSnapshotDigest: saved.state.originalSnapshot.digest,
-      preservedSnapshotId: saved.state.originalSnapshot.snapshotId, currentSnapshotFresh: true });
+      preservedSnapshotId: saved.state.originalSnapshot.snapshotId, currentSnapshotFresh: true }, signingOptions);
   }
-  return attestScopeFacts(input, result);
+  return attestScopeFacts(input, result, signingOptions);
 }
 function observationReassessment(input, result) {
   const previousMode = input.currentMode === undefined ? result.classification.mode : input.currentMode;

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"
@@ -325,7 +325,11 @@
     "local-scope-build-io.mjs",
     "local-scope-build-facts.mjs",
     "local-scope-build-data.mjs",
-    "local-scope-build-readset.mjs"
+    "local-scope-build-readset.mjs",
+    "scope-evidence-wire.mjs",
+    "scope-evidence-local.mjs",
+    "scope-evidence-remote.mjs",
+    "scope-runner-journal.mjs"
   ],
   "scripts": {
     "test": "node test/run.mjs",

package/release-source-groups.mjs

@@ -37,3 +37,10 @@ export const memberContinuationSourceFiles = Object.freeze([
   'workflow-observation-state.mjs',
   'workflow-observation-wire.mjs',
 ])
+export const scopeEvidenceSourceFiles = Object.freeze([
+  'scope-evidence-wire.mjs', 'scope-evidence-local.mjs', 'scope-evidence-remote.mjs', 'scope-runner-journal.mjs',
+])
+export const scopeEvidenceReleaseNote = {
+  zh: '将完整范围证据与签名控制分离：四类原 S 证明经有界独立通道上传，紧凑权威绑定不可变摘要与字节数；未知上传仅恢复原 GET，保留原路径、上下文、审批、独立 M 写入和全部旧失败记录。',
+  en: 'Separate full scope evidence from signed controls: upload four kinds of original S proof through a bounded data channel and bind immutable hashes and byte counts in compact authorities. Recover uncertain uploads with the original GET only, preserving complete paths, contexts, approvals, separate M writes and prior failures.',
+}

package/release-state.json

@@ -1,21 +1,25 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.71",
-  "digest": "365984167bef91bf1b780eb3c479b0d0fddd6ba79b2df59bc6ae9c8dc4f48e15",
+  "version": "0.1.73",
+  "digest": "06693e8422b76b4037a70c0be657104b918234d74fa4c5dd1e29a394d5c83e0e",
   "files": {
-    "release-source-groups.mjs": "6dc0915b79aa495759e7fd1e8dfebde36ab2b6e50f22a2d716eca14b5f9957f9",
+    "release-source-groups.mjs": "876b8c8bcf459d3b469bf4f2021d4206de5b199add545597a5c8f6dea7385b38",
     "local-scope-build-read.mjs": "361d4b461cfa2c77b4ec22bc59a0a1c78fed2cfb0ea2e05a8da5c2551ecd88ac",
     "local-scope-build-io.mjs": "8af69722738fa094780f9a2dfcddaf12993fc3b936a75c56c4b0d4f90cb20fd1",
     "local-scope-build-facts.mjs": "8b0bd19347d06d1cb66d8cd2d6784103af9d00ea691d7f4acea523d994b874fb",
     "local-scope-build-data.mjs": "b6e272ca4385629326b4517a53408c561272f5f1a01e5b701f17eaa4c5e64b2e",
     "local-scope-build-readset.mjs": "fd1cb1470c54b3902a4612056281746e947cf96d1f5c03a09ea0becbcd79cc45",
-    "scope-context-client.mjs": "dbfec7db0e118f3025a0e45475f3328a171e4cd1dd86e6c8d326d779ce61b459",
+    "scope-evidence-wire.mjs": "d283bbfd002b034e1deb539633b4970b430a97065388288ab3398e2bc0285633",
+    "scope-evidence-local.mjs": "25b22ba2cc5a17978d2422e290ee015299f05d639b4b4b9551001afefab55c0d",
+    "scope-evidence-remote.mjs": "27077bb8238f3d11e6e18453e2ea8a6e096a104bbee5ee43a82b8c099d253c1e",
+    "scope-runner-journal.mjs": "cddb2f20a2812e8bcc3268d8ebdd486c22d0c7f5740e958d0b35cd2cc8819f92",
+    "scope-context-client.mjs": "115d82022f71396bab137e9af06421a6d0aa9671838f0df64e6aa83d9d7fb039",
     "scope-context-observer.mjs": "25a84339512c1e80711aca53baed20da556fa2ae5d84e83fa95d58dcdca7cf7d",
     "scope-context-observation.mjs": "d92f2fca3c923caa6f0c5c9cc60b4f12bdae212071da64da6692e3e99b251969",
-    "scope-context-remote.mjs": "b52cdee03e845edc15eae6bb3ccfaea9c4482c03f2fae7001439e4abcb2acd33",
-    "scope-context-state.mjs": "7bc434620bfc505ee290f1977e64ef22e50f72665d75e7dfd6805deab4e81826",
-    "scope-context-wire.mjs": "a15d0b966615b8293e53e4229edc8fb444fb144cc336dbd6354ac995f33e8cc8",
-    "scope-context-journal.mjs": "753821f546e36185b2e891e8f38758a2d15a591f700f0650d478892c8d958a45",
+    "scope-context-remote.mjs": "cbcef3fb0b9e1cf11b68f877c227ac9b0c617432221dc6e661bce9bc4667b87a",
+    "scope-context-state.mjs": "dc47da57e411ef11677560a767f2e6d50f8a2fae17706b44715d8cd115ffcf8e",
+    "scope-context-wire.mjs": "1aa8c86223e54927a209de59d3514393b4c905ee2fc520d49819aec0f1e97162",
+    "scope-context-journal.mjs": "0d9aa1315204d3600f62075fe9a4b0b958b21a04c3a50a743eb5dce1eb16e18a",
     "scope-context-release.mjs": "3b6f5d3bf7abe25e1a1edd0521053f4c1b1e3487b7f37d5f7c6080d32bc0c044",
     "cloud-locale.mjs": "0627ac75b98b439563b61ab217aacb55a099c1d0c8ed3b118776d2007c52dd70",
     "cloud-locale.d.mts": "aff4bced9bbac140f73fd0de24681287349389be5750d89d96abe0f8a2167664",
@@ -82,7 +86,7 @@
     "runtime/validator-runtime-v7.0.44.d.mts": "7797edbfe2f7de24da370204dce4dfd22822a1bd80df93514fff900b98afe36f",
     "snapshot-retention.mjs": "ca46aeb36b1a5a24fe7e967031a71b9a3d33f40cb715d344402cbe0dc9c425cb",
     "snapshot-cleanup-journal.mjs": "76a9684cc95b4eb076e1298d78a9dff37948b00d9607b8f546c599072d3ed331",
-    "IDE-EXECUTION.md": "26d4f32de1694c7f29ceefc5a5e5f4bba717efc5f91c37a91c399faa1574a191",
+    "IDE-EXECUTION.md": "3da7cbfafc1a4e7d4059c6fe8e69d14dacd2c72e300fe8e056581faea7f23aeb",
     "REUSE-DISCIPLINE.md": "a2452911c2b50c4762b4a1374f1958059eb03efd59f63e1b50e1650c52b0dc98",
     "install-identity.mjs": "41b8c8d8b3e265d2057a07bf7dc98066c34d6b05c65bf7159ca9609c01ee4646",
     "package-archive.mjs": "e06db8d709db8710bead254ee950b78928088be01c58dcea383beaa5eb574e59",
@@ -158,13 +162,13 @@
     "install-cleanup.mjs": "8a8e1a7dfe37427f86cd4d6e317890d0829894a9949d4216674a716b36edbc54",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "85284d4cd5e3314b449e6ae124243f96397bcc274817b5983a79cfdd903d46fd",
-    "SKILL.md": "910bc4b97159582d6faa6e34785d94b8b7cd484b9a39ef4106edcffc767be9d2",
+    "SKILL.md": "1c1509924526711c92df7fd0600e4165353cc602663d83b225e083676501bba3",
     "CAPABILITY-MAP.md": "517809bb20750e5de89b2dab5705c902a27fa68cf4f3f392a5d8cf2f19818888",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "DELIVERY-BOUNDARIES.md": "cb23ce71b2197085c8441ba7c5b6c05fb21f2a954bf66b4d60cfef8b15895b8b",
-    "package.json": "6aeead2f5dd48f4715cf45c0695f8462c362cdc3c2929439565f201b2576bd2f",
+    "package.json": "9a3bb032185a679b7b0146cc6bd1b46ed44e59d16cbab236c5e90fd4f167ad7c",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "a1c8f8a6945687658e43f75892bfcca58dee6c4947dc9ea002f31bee0ab67538",
+    "release.mjs": "c3a5af873db43872e5a6bdc16eb3d859e8d69f6b21bd1c3b754f4a2b6c305360",
     "local-cli.mjs": "058ac9a4653bc12e0d031b72034ebfe6a72b91b9b23353b9fee04881c7d2e098",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "721ed7d29bbe4ce6d088909cd84ffc440978c3c9eb0946c49a4281ee685fe3aa",
@@ -187,7 +191,7 @@
     "local-chain-results.mjs": "0455f72cad574cfef87c2c6c0928d6432bba7e5dbaff521a2b62a9575299ca10",
     "local-approved-plan.mjs": "c2c88ab4085ff35a1811fe43e9a28699cfc9387eda54bfeafae3e7dd9e8cdb19",
     "local-budget-renewal.mjs": "6b436358066fe33b2f6d871fc90d8e7c551edd6255efd73c0d255d0fd35d5ef8",
-    "local-probe.mjs": "9b948db1de1e34c7605c4c454cd4aced66d2b57d2cf4471adbb80bcc76dee635",
+    "local-probe.mjs": "398f5dd4973503ccad280e0224e4f567c9763d21555a0816afdd83c75987d33a",
     "local-budget-grants.mjs": "c5f6542f5d2c3bfe07f3ca5b5bc849bf05d886b06014f720322d530510775d3d",
     "local-budget-handoff.mjs": "85a8f006dad9c0153843c7b7748ee7fcd756fdba159c97c3905d7fe0c4f604af",
     "local-budget-handoff-contracts.mjs": "bb53ebf135ec7ecfbecee858cfb354f03fee9cfb3940fa5d967d45008bf9aac5",
@@ -241,16 +245,16 @@
     "local-scope-state.mjs": "7a6d275d6267a4d0bb55582e1bcc7654c502ecba9221b84b2149a98f0ee7518f",
     "local-scope-workspaces.mjs": "8a75ce7b6639b5682370b5738c5c2a90408e3130729608e008f03053cd50351f",
     "local-task-routing.mjs": "6e2e506b2fb0e2e8d8c5147d7df32849b57a4e94a23634f01a355d45735858e4",
-    "remote-client.mjs": "d30fd61fab3171a9e41546706a57ae372786d20ea9e9c01cad39d9863c156b40",
+    "remote-client.mjs": "6cf62706f8ac5f69368d951cd697f912040b2e58ac480dfb151bddb18b09b20d",
     "cloud-task-client.mjs": "f9085c5e6af6f179282670d2e872b85bfabac2657d3d232b1246dc23f5a6ccdd",
-    "scope-runner-client.mjs": "b85999bca05efd804325f97b6e5704623ac3fcf751c6f9760717a23f40661ad1",
-    "scope-amendment-client.mjs": "64a38deddc2dbfae543fead2cff8c9c78771b576391cc903aa58db925a138ad7",
-    "scope-amendment-state.mjs": "922c4fd5a71101651d40fdb11f94f09c904cc244ff2574ae6b6ee004448aad06",
+    "scope-runner-client.mjs": "cc4fe202d5f777a0ec4c46f9b41a18aaf024c0d2e769a0b26bc6505f2f69f460",
+    "scope-amendment-client.mjs": "022ec88ecf12a98dd6e9e7915158fc9111cdadfda12cf714804948c8027a57d3",
+    "scope-amendment-state.mjs": "9f88cc7029f62eed3b1a0cc1c03b6a98c5713b467a2112278692de90c973b2be",
     "scope-amendment-wire.mjs": "3c4823e23bbdf330616bb675f07f9fcad7423266bd50b92e1134d226060e9b83",
     "scope-amendment-remote.mjs": "15a0b3126248f3101a52e3d7742f9a816dd3d8e58f21bac33e99e810e86cc4fd",
     "scope-amendment-observer.mjs": "de796f2aca2f3bc7f33ae3323b07d98096c0f16b1ffde70e3055610d70d18020",
     "scope-amendment-mutation.mjs": "fa24191df290efad29d41eca3d1a081981fefde02b7dc4a11c75c6118a69106e",
-    "scope-amendment-reference.mjs": "0537e53a1bea4b695f4804c5051261778c88f05b1ae4aff86c709dcfe83aa148",
+    "scope-amendment-reference.mjs": "dc1768131beb7db224dd2ff8522dbf6361f73e01f466c9334cdfa24118720078",
     "native-client.mjs": "6f5575909bae9daba643287f876ffa0f9ff1c53a367b32a40145d740456d6605",
     "native-notification.mjs": "8859a26c6f13d222711f763acf49ed8546b3306cf71f990643ac31a5ccaf1ba1",
     "local-peer-status.mjs": "a971bcc69d60bb32b875ca5bb4297d948631d5d2821b812c279613ea059a8b4f",
@@ -261,7 +265,7 @@
     "task-entry-client.mjs": "940fb068afe28a2a34fe96e285e149afdd9ba79649c0c65cde37ec4ed71ae39d",
     "task-identity.mjs": "e0e6cf1f48bfa5ee3c5cb86a3c21adfce6d66b4220f4a164ca099263c7a09fb4",
     "task-identity.d.mts": "55472e1ffc81b9d5e5c5bd56c0bf1d18ecde03ee5170a58a15ce9caf222d8761",
-    "remote-transport.mjs": "cf0e31a0319518b6c7e1ce2ac99766a98fe9c936d26bbbec05952aaf0c33efb0",
+    "remote-transport.mjs": "e9ecb3b9cd4d3bcc7abe1f7097069a07a15319ca0d5641fee752d094eb039194",
     "local-credential.mjs": "2a302a7f67b5ea8dc73453fc96ab33db349b59ca11fa9456e48ca1d9669d877c",
     "local-invocations.mjs": "f6ac4c41c1a5ec34de358c4cca210ca8e403b3a913150a43bb55ec9be55d9998",
     "local-task-handoff-fence.mjs": "5532a359ee29b885f7ce0cf7178f76dba0fc9245bdd92ef460982275baf0d557",

package/release.mjs

@@ -9,10 +9,10 @@ import { fileURLToPath } from 'node:url'
 import { chainReleaseLabels } from './local-chain-release-labels.mjs'
 
 const directory = path.dirname(fileURLToPath(import.meta.url))
-import { swarmSourceFiles, coordination17SourceFiles, preservedMutationSourceFiles, memberContinuationSourceFiles } from './release-source-groups.mjs'
+import { swarmSourceFiles, coordination17SourceFiles, preservedMutationSourceFiles, memberContinuationSourceFiles, scopeEvidenceSourceFiles, scopeEvidenceReleaseNote } from './release-source-groups.mjs'
 const sourceFiles = [
   'release-source-groups.mjs', 'local-scope-build-read.mjs', 'local-scope-build-io.mjs', 'local-scope-build-facts.mjs', 'local-scope-build-data.mjs', 'local-scope-build-readset.mjs',
-  ...SCOPE_CONTEXT_SOURCE_FILES, 'cloud-locale.mjs', 'cloud-locale.d.mts', 'cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs',
+  ...scopeEvidenceSourceFiles, ...SCOPE_CONTEXT_SOURCE_FILES, 'cloud-locale.mjs', 'cloud-locale.d.mts', 'cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs',
   'scope-amendment-retirement.mjs', 'scope-amendment-consumption.mjs', 'mutation-connection-state.mjs', 'mutation-challenge-refresh.mjs',
   'local-scope-font.mjs', 'local-scope-zip.mjs', 'member-producer-repair-authority.mjs',
   'local-mutation-completion-evidence.mjs', 'local-mutation-environment-observation.mjs', 'local-mutation-finder-observation.mjs', 'local-finder-store.mjs', 'local-finder-plist.mjs',
@@ -273,6 +273,7 @@ function releaseNote(changed) {
   if (suppliedZh && suppliedEn) return {
     zh: suppliedZh.replaceAll(/\s+/g, ' '), en: suppliedEn.replaceAll(/\s+/g, ' '),
   }
+  if (changed.some(file => scopeEvidenceSourceFiles.includes(file))) return scopeEvidenceReleaseNote
   if (changed.some(file => SCOPE_CONTEXT_SOURCE_FILES.includes(file))) return scopeContextReleaseNote
   if (changed.some(file => file.startsWith('scope-amendment-'))) return {
     zh: '新增同一任务的精确范围补正：原账号审核文件哈希与写入/只读角色，原S签名真实事实并重评原合同；计划、写入和结算绑定不可变范围修订，改后刷新保留原M消费证据与失败历史。',

package/releases.json

@@ -1,4 +1,16 @@
 [
+  {
+    "version": "0.1.73",
+    "date": "2026-10-20",
+    "zh": "修复通用范围连接在长时间扫描后的签名期限绑定：原 S 证明到期时间不晚于原云端挑战，保留原随机数、完整范围、独立验签和失败历史；已过期挑战仍明确拒绝。",
+    "en": "Bind ordinary scope signatures to their original cloud deadline after long scans. The original S proof expires no later than its challenge, preserving the nonce, complete scope, independent signatures and failure history; expired challenges still reject explicitly."
+  },
+  {
+    "version": "0.1.72",
+    "date": "2026-10-20",
+    "zh": "将完整范围证据与签名控制分离：四类原 S 证明经有界独立通道上传，紧凑权威绑定不可变摘要与字节数；未知上传仅恢复原 GET，保留原路径、上下文、审批、独立 M 写入和全部旧失败记录。",
+    "en": "Separate full scope evidence from signed controls: upload four kinds of original S proof through a bounded data channel and bind immutable hashes and byte counts in compact authorities. Recover uncertain uploads with the original GET only, preserving complete paths, contexts, approvals, separate M writes and prior failures."
+  },
   {
     "version": "0.1.71",
     "date": "2026-10-20",

package/remote-client.mjs

@@ -39,7 +39,7 @@ export function buildInvocation(operation, input) {
     'message-status', 'message-delivery-start', 'message-delivery-report', 'message-resolve', 'message-complete',
     'handoff-prepare', 'handoff-release', 'handoff-claim', 'handoff-status', 'handoff-resume', 'handoff-execution-authority', 'mutation-snapshot-challenge', 'mutation-pass-issue', 'mutation-pass-settle',
     'member-observation-admit', 'member-observation-report', 'member-observation-status',
-    'scope-runner-prepare', 'scope-runner-register', 'scope-runner-challenge', 'scope-runner-attest',
+    'scope-runner-prepare', 'scope-runner-register', 'scope-runner-challenge', 'scope-runner-attest', 'scope-evidence-prepare',
     'scope-runner-context-review', 'scope-runner-context-status', 'scope-runner-context-challenge', 'scope-runner-context-apply',
     'start', 'continue'].includes(operation)) throw new Error('Invalid entrorove operation');
   if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('Input must be a JSON object');

package/remote-transport.mjs

@@ -108,6 +108,20 @@ export async function requestTransport(origin, pathname, options = {}) {
   }
 }
 
+// Evidence is a separate bounded data channel. A persisted upload reservation
+// is attempted once; every uncertain outcome must use its original GET.
+export async function putScopeEvidence(origin, uploadId, body, headers = {}) {
+  if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/.test(uploadId ?? '') || !Buffer.isBuffer(body)
+    || body.length < 1 || body.length > 16_000_000) throw new Error('Invalid Entrorove scope evidence upload');
+  const url = new URL(`/api/skill/evidence/${uploadId}`, trustedOrigin(origin));
+  const response = await attempt(url, { method: 'PUT', body, timeoutMs: 30_000,
+    headers: { ...headers, 'content-type': 'application/json; charset=utf-8', 'content-length': body.length, 'accept-encoding': 'gzip' } });
+  if (response.status >= 300 && response.status < 400) {
+    throw Object.assign(new Error('Entrorove API redirects are refused'), { code: 'ENTROROVE_REDIRECT', established: true });
+  }
+  return { ...response, attempts: 1 };
+}
+
 export function parseTransportResponse(response, label = 'Entrorove') {
   try { return JSON.parse(response.body); }
   catch { throw Object.assign(new Error(`Invalid ${label} response`), { code: 'ENTROROVE_RESPONSE_INVALID' }); }

package/scope-amendment-client.mjs

@@ -9,6 +9,7 @@ import { scopeAmendmentLocation, readScopeAmendmentState, saveScopeAmendmentStat
 import { amendmentRemote, scopeAmendmentStatus } from './scope-amendment-remote.mjs';
 import { observeScopeAmendment } from './scope-amendment-observer.mjs';
 import { retainScopeAmendmentReference } from './scope-amendment-reference.mjs';
+import { saveLocalScopeEvidence, ensureScopeEvidence, validateAppliedEvidence } from './scope-evidence-remote.mjs';
 
 const schemaVersion = 'entrorove.scope-amendment-connection/1.0';
 function validateProposal(status, input) {
@@ -17,8 +18,9 @@ function validateProposal(status, input) {
     || !['pending', 'approved', 'declined'].includes(proposal.approval)) amendmentFail('Current account has no matching original scope proposal');
   return proposal;
 }
-function validateApplied(output, state, location) {
-  const effective = output.effectiveAuthority, record = scopeRevisionAuthority(effective?.record, 'entrorove.scope-revision-authority/1.0');
+async function validateApplied(output, state, location) {
+  const effective = output.effectiveAuthority, version = effective?.record?.schemaVersion === 'entrorove.scope-revision-authority/2.0' ? '2.0' : '1.0';
+  const record = scopeRevisionAuthority(effective?.record, `entrorove.scope-revision-authority/${version}`);
   const challenge = scopeAmendmentChallenge(state.challenged.challenge, location, { allowExpired: true }), refresh = challenge.purpose === 'scope-revision-refresh';
   if (output.status !== 'succeeded' || output.grantsExecutionAuthority !== false || output.claimsCompletion !== false
     || output.scopeRevisionDigest !== sha256(canonical(record)) || effective.revisionDigest !== output.scopeRevisionDigest
@@ -30,21 +32,26 @@ function validateApplied(output, state, location) {
     || canonical(record.files.map(file => ({ ...file, sha256: null }))) !== canonical(challenge.files.map(file => ({ ...file, sha256: null })))) {
     amendmentFail('Applied scope amendment lost its signed original authority or exact roles');
   }
-  const fact = refresh ? scopeRevisionAuthority(effective.fact, 'entrorove.scope-revision-facts/1.0') : record;
+  const factVersion = effective?.fact?.schemaVersion === 'entrorove.scope-revision-facts/2.0' ? '2.0' : '1.0';
+  const fact = refresh ? scopeRevisionAuthority(effective.fact, `entrorove.scope-revision-facts/${factVersion}`) : record;
+  const compact = fact.schemaVersion.endsWith('/2.0');
+  const attestation = compact ? await validateAppliedEvidence(fact, state, location, challenge,
+    refresh ? 'scope-refresh' : 'scope-revision') : state.attestation;
   if (refresh && (fact.scopeRevisionDigest !== output.scopeRevisionDigest || fact.factRevision !== challenge.expectedFactRevision
     || ['flowId', 'ownerId', 'taskDigest', 'chainDigest'].some(field => fact[field] !== challenge[field]))
-    || canonical(fact.candidateAttestation) !== canonical(state.attestation)
-    || fact.scope?.attestationDigest !== sha256(canonical(state.attestation.scopeAttestation))
+    || !compact && canonical(fact.candidateAttestation) !== canonical(attestation)
+    || fact.scope?.attestationDigest !== sha256(canonical(attestation.scopeAttestation))
+    || compact && effective.candidateAttestationDigest !== sha256(canonical(attestation))
     || effective.factRevision !== (refresh ? fact.factRevision : 0) || output.factRevision !== effective.factRevision) {
     amendmentFail('Applied scope proof differs from this exact actual signed candidate');
   }
   return { schemaVersion, status: 'succeeded', flowId: challenge.flowId, proposalId: challenge.proposalId,
     proposalDigest: challenge.proposalDigest, scopeRevisionDigest: output.scopeRevisionDigest, revision: output.revision,
     factRevision: effective.factRevision, grantsExecutionAuthority: false, claimsCompletion: false,
-    ...(refresh && state.attestation.memberMutation ? { localAction: {
+    ...(refresh && attestation.memberMutation ? { localAction: {
       command: 'npx @entrorove/skill mutation-settle <absolute repositoryRoot>', input: {
-        flowId: challenge.flowId, taskId: state.attestation.memberMutation.consumptionReceipt.taskId,
-        stepId: state.attestation.memberMutation.consumptionReceipt.stepId, gatePassPath: location.identity.gatePassPath } } } : {}),
+        flowId: challenge.flowId, taskId: attestation.memberMutation.consumptionReceipt.taskId,
+        stepId: attestation.memberMutation.consumptionReceipt.stepId, gatePassPath: location.identity.gatePassPath } } } : {}),
     nextStep: output.nextStep, ...(state.feedback ? { feedback: state.feedback } : {}) };
 }
 async function archiveAttempt(location, state) {
@@ -56,23 +63,28 @@ async function archiveAttempt(location, state) {
   await saveScopeAmendmentState(location, state);
 }
 async function finish(location, state, dependencies) {
-  if (!state.attestation) {
-    state.attestation = await observeScopeAmendment(location, state);
-    state.attestationDigest = sha256(canonical(state.attestation)); await saveScopeAmendmentState(location, state);
+  if (!state.evidenceDescriptor && !state.applied) {
+    const attestation = state.attestation ?? await observeScopeAmendment(location, state);
+    const challenge = scopeAmendmentChallenge(state.challenged.challenge, location, { allowExpired: true });
+    await saveLocalScopeEvidence(attestation, challenge.purpose === 'scope-revision-refresh' ? 'scope-refresh' : 'scope-revision',
+      challenge, state, location, saveScopeAmendmentState);
+  }
+  if (!state.applied) {
+    const attestationRef = await ensureScopeEvidence(state, location, dependencies, state.challenged.challenge, saveScopeAmendmentState);
+    await amendmentRemote('applied', 'workflow-scope-apply', { proposalId: location.identity.proposalId,
+      proposalDigest: location.identity.proposalDigest, attestationRef }, state, location, dependencies);
   }
-  const applied = state.applied ?? await amendmentRemote('applied', 'workflow-scope-apply', {
-    proposalId: location.identity.proposalId, proposalDigest: location.identity.proposalDigest,
-    attestation: state.attestation }, state, location, dependencies);
-  const result = validateApplied(applied, state, location);
+  const applied = state.applied, result = await validateApplied(applied, state, location);
   await retainScopeAmendmentReference(location, applied); return result;
 }
 async function amend(location, dependencies) {
   const state = await readScopeAmendmentState(location);
+  if (state.evidencePending || state.pending?.operation === 'scope-evidence-prepare') return finish(location, state, dependencies);
   if (state.pending) {
     const pending = state.pending;
     await amendmentRemote(pending.stage, pending.input.operation, pending.input.payload, state, location, dependencies);
     if (pending.stage === 'applied') {
-      const result = validateApplied(state.applied, state, location);
+      const result = await validateApplied(state.applied, state, location);
       await retainScopeAmendmentReference(location, state.applied); return result;
     }
     return finish(location, state, dependencies);
@@ -95,7 +107,7 @@ async function amend(location, dependencies) {
   const challenge = scopeAmendmentChallenge(challenged.challenge, location);
   if (status.effective ? challenge.purpose !== 'scope-revision-refresh'
     || challenge.authorityRevisionDigest !== status.effective.revisionDigest || challenge.expectedFactRevision !== status.effective.factRevision + 1
-    || challenge.currentScopeArtifactDigest !== sha256(canonical(status.effective.scope))
+    || challenge.currentScopeArtifactDigest !== (status.effective.scopeArtifactDigest ?? sha256(canonical(status.effective.scope)))
     : challenge.purpose !== 'scope-revision' || challenge.expectedRevision !== proposal.expectedRevision
       || challenge.previousDigest !== proposal.previousDigest) amendmentFail('Scope amendment challenge has a different original authority head');
   return finish(location, state, dependencies);
@@ -115,9 +127,9 @@ export async function runScopeAmend(repositoryRoot, input, dependencies) {
       message: ['ENTROROVE_SCOPE_AMENDMENT_BINDING', 'ENTROROVE_SCOPE_AMENDMENT_STATE', 'ENTROROVE_SCOPE_AMENDMENT_UNKNOWN',
         'ENTROROVE_SCOPE_AMENDMENT_NOT_SENT', 'ENTROROVE_SCOPE_AMENDMENT_MUTATION_PENDING'].includes(error?.code) ? error.message
         : 'Scope amendment stopped; preserve the original proposal, signer, journal and actual evidence.',
-      ...(requestId ? { requestId } : {}), ...(error?.output ? { output: error.output } : {}),
+      ...(requestId ? { requestId } : {}), ...(error?.uploadId ? { uploadId: error.uploadId } : {}), ...(error?.output ? { output: error.output } : {}),
       ...(error?.feedback ? { feedback: error.feedback } : {}),
-      ...(error?.outcomeUnknown ? { outcomeUnknown: true, nextAction: { operation: 'scope-amend', requestId,
+      ...(error?.outcomeUnknown ? { outcomeUnknown: true, nextAction: { operation: 'scope-amend', ...(requestId ? { requestId } : { uploadId: error.uploadId }),
         method: 'GET', reuseOriginalInput: true, repeatPost: false } } : {}) };
   }
 }

package/scope-amendment-reference.mjs

@@ -1,7 +1,10 @@
 import path from 'node:path';
 import { canonical, sha256 } from './local-integrity.mjs';
-import { mutationHome14, privateMutationDirectory14, readMutationJson14, atomicMutationJson14 } from './local-mutation-files.mjs';
+import { mutationHome14, mutationFile14, privateMutationDirectory14, readMutationJson14, atomicMutationJson14 } from './local-mutation-files.mjs';
 import { scopeRevisionAuthority, amendmentFail } from './scope-amendment-wire.mjs';
+import { readScopeEvidence } from './scope-evidence-local.mjs';
+import { evidenceReference } from './scope-evidence-wire.mjs';
+import { trustedOrigin } from './remote-transport.mjs';
 
 async function referenceLocation(root, home, flowId, revisionDigest) {
   const stateRoot = path.join(await mutationHome14(home), '.entrorove');
@@ -11,21 +14,36 @@ async function referenceLocation(root, home, flowId, revisionDigest) {
 export async function retainScopeAmendmentReference(location, output) {
   const effective = output.effectiveAuthority, target = await referenceLocation(location.root, location.home,
     location.identity.flowId, output.scopeRevisionDigest);
-  const value = { schemaVersion: 'entrorove.scope-amendment-reference/1.0', input: {
+  const compact = effective.record.schemaVersion === 'entrorove.scope-revision-authority/2.0';
+  if (compact) await readScopeEvidence(location, evidenceReference(effective.record.candidateAttestationRef, undefined, location));
+  const value = { schemaVersion: compact ? 'entrorove.scope-amendment-reference/2.0' : 'entrorove.scope-amendment-reference/1.0',
+    ...(compact ? { apiOrigin: location.apiOrigin } : {}), input: {
     flowId: location.identity.flowId, proposalId: location.identity.proposalId, proposalDigest: location.identity.proposalDigest }, record: effective.record };
   await privateMutationDirectory14(target.directory, { privateFrom: target.stateRoot });
   try { if (canonical(await readMutationJson14(target.file)) !== canonical(value)) amendmentFail('Scope amendment original authority reference changed'); }
   catch (error) { if (error.code !== 'ENOENT') throw error; await atomicMutationJson14(target.file, value, { privateFrom: target.stateRoot }); }
 }
+async function readReferenceEvidence(reference, input) {
+  const origin = trustedOrigin(reference.apiOrigin), stateRoot = path.join(await mutationHome14(input.home), '.entrorove');
+  const base = path.join(stateRoot, 'scope-runners', sha256(`${origin}:${reference.record.flowId}:${input.repositoryRoot}`));
+  const file = path.join(base, 'identity', 'binding.json'), item = await mutationFile14(file);
+  if (item.stat.size > 1_000_000 || item.stat.nlink !== 1) amendmentFail('Original amendment signer binding is invalid');
+  const binding = await readMutationJson14(file);
+  if (binding.repositoryRoot !== input.repositoryRoot || binding.apiOrigin !== origin || binding.flowId !== reference.record.flowId) amendmentFail('Original amendment signer binding changed');
+  const location = { base, binding };
+  await readScopeEvidence(location, evidenceReference(reference.record.candidateAttestationRef, undefined, location));
+}
 export async function scopeAmendmentRefreshAction(input, pass) {
   if (!pass.scopeRevisionDigest) return undefined;
   try {
     const target = await referenceLocation(input.repositoryRoot, input.home, pass.flowId, pass.scopeRevisionDigest);
     const reference = await readMutationJson14(target.file);
-    const record = scopeRevisionAuthority(reference.record, 'entrorove.scope-revision-authority/1.0');
-    if (reference.schemaVersion !== 'entrorove.scope-amendment-reference/1.0' || sha256(canonical(record)) !== pass.scopeRevisionDigest
+    const compact = reference.schemaVersion === 'entrorove.scope-amendment-reference/2.0';
+    const record = scopeRevisionAuthority(reference.record, `entrorove.scope-revision-authority/${compact ? '2.0' : '1.0'}`);
+    if (!['entrorove.scope-amendment-reference/1.0', 'entrorove.scope-amendment-reference/2.0'].includes(reference.schemaVersion) || sha256(canonical(record)) !== pass.scopeRevisionDigest
       || record.flowId !== pass.flowId || record.taskDigest !== pass.taskDigest || record.scope.keyId !== pass.memberScopeKeyId
       || ['flowId', 'proposalId', 'proposalDigest'].some(field => reference.input[field] !== record[field])) amendmentFail('Stored refresh reference has another original authority');
+    if (compact) await readReferenceEvidence(reference, input);
     return { command: 'npx @entrorove/skill scope-amend <absolute repositoryRoot>',
       input: { ...reference.input, gatePassPath: input.gatePassPath }, resumeOriginalFlow: true, requiredBefore: 'mutation-settle' };
   } catch {

package/scope-amendment-state.mjs

@@ -80,7 +80,7 @@ export async function scopeAmendmentLocation(repositoryRoot, input, dependencies
   const directory = path.join(base, 'amendments', sha256(canonical(input)));
   await privateMutationDirectory14(directory, { privateFrom: stateRoot });
   const contextAuthority = await boundScopeContexts(base, binding, dependencies);
-  return { root, home, stateRoot, directory, file: path.join(directory, 'journal.json'), identity,
+  return { root, home, apiOrigin, base, stateRoot, directory, file: path.join(directory, 'journal.json'), identity,
     binding, key, signerConfigPath, original, contextAuthority };
 }
 export async function readScopeAmendmentState(location) {

package/scope-context-client.mjs

@@ -9,6 +9,7 @@ import { scopeContextLocation, effectiveScopeContexts, retainContextAuthority,
 import { contextRemote } from './scope-context-remote.mjs';
 import { inspectContextEvidence, observeScopeContext, prepareScopeContext } from './scope-context-observer.mjs';
 import { contextJournal, renewContextChallenge } from './scope-context-journal.mjs';
+import { saveLocalScopeEvidence, ensureScopeEvidence, validateAppliedEvidence } from './scope-evidence-remote.mjs';
 
 const schemaVersion = 'entrorove.scope-context-connection/1.0';
 function proposalFor(status, input, location) {
@@ -56,8 +57,10 @@ async function review(location, state, dependencies) {
 async function applied(location, state) {
   const effective = state.applied.contextAuthority;
   const challenge = contextChallenge((state.signingChallenge ?? state.challenged).challenge, location, state.proposal, { allowExpired: true });
+  const compact = effective?.record?.schemaVersion === 'entrorove.scope-context-authority/2.0';
+  if (compact) await validateAppliedEvidence(effective.record, state, location, challenge, 'scope-context');
   if (state.applied.grantsExecutionAuthority !== false || !effective?.record
-    || canonical(effective.record.attestation) !== canonical(state.attestation)
+    || !compact && canonical(effective.record.attestation) !== canonical(state.attestation)
     || ['proposalId', 'proposalDigest', 'ownerId', 'taskDigest', 'chainDigest'].some(field => effective.record[field] !== challenge[field])
     || canonical(effective.record.importContexts) !== canonical(challenge.importContexts)
     || canonical(effective.record.evidence) !== canonical(challenge.evidence)) contextFail('Applied context authority differs from this exact actual candidate');
@@ -76,14 +79,20 @@ async function apply(location, state, dependencies) {
   state.proposal = proposal; await saveContextJournal(location, state);
   if (!state.challenged) await contextRemote('challenged', 'scope-runner-context-challenge', { flowId: location.binding.flowId,
     proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attemptId: state.attemptId }, state, location, dependencies);
-  if (!state.attestation) {
+  if (!state.evidenceDescriptor) {
+    let attestation = state.attestation;
+    if (!attestation) {
     const prepared = await prepareScopeContext(location, state, proposal);
-    state.attestation = await observeScopeContext(location, state, proposal, prepared,
+    attestation = await observeScopeContext(location, state, proposal, prepared,
       () => renewContextChallenge(location, state, proposal, dependencies));
-    await saveContextJournal(location, state);
+    }
+    await saveLocalScopeEvidence(attestation, 'scope-context', (state.signingChallenge ?? state.challenged).challenge,
+      state, location, saveContextJournal);
   }
+  const attestationRef = await ensureScopeEvidence(state, location, dependencies,
+    (state.signingChallenge ?? state.challenged).challenge, saveContextJournal);
   await contextRemote('applied', 'scope-runner-context-apply', { flowId: location.binding.flowId,
-    proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attestation: state.attestation }, state, location, dependencies);
+    proposalId: proposal.proposalId, proposalDigest: proposal.proposalDigest, attestationRef }, state, location, dependencies);
   return applied(location, state);
 }
 async function run(location, input, dependencies) {
@@ -96,7 +105,7 @@ async function run(location, input, dependencies) {
     state.completed = true; await saveContextJournal(location, state);
     return { schemaVersion, ...status, status: 'succeeded', flowId: input.flowId, grantsExecutionAuthority: false, claimsCompletion: false };
   } catch (error) {
-    if (!state.pending) { state.rejection ??= { code: error.code, message: error.message }; await saveContextJournal(location, state); }
+    if (!state.pending && !state.evidencePending) { state.rejection ??= { code: error.code, message: error.message }; await saveContextJournal(location, state); }
     throw error;
   }
 }
@@ -111,8 +120,8 @@ export async function runScopeContext(repositoryRoot, input, dependencies) {
     return { schemaVersion, status: 'blocked', flowId: input?.flowId,
       code: error?.code?.startsWith('ENTROROVE_') ? error.code : 'ENTROROVE_SCOPE_CONTEXT_PREREQUISITE',
       message: error?.code?.startsWith('ENTROROVE_') ? error.message : 'Context recovery stopped; preserve original signer, binding, journal and evidence.',
-      ...(error?.requestId ? { requestId: error.requestId } : {}), ...(error?.output ? { output: error.output } : {}),
+      ...(error?.requestId ? { requestId: error.requestId } : {}), ...(error?.uploadId ? { uploadId: error.uploadId } : {}), ...(error?.output ? { output: error.output } : {}),
       ...(error?.outcomeUnknown ? { outcomeUnknown: true, nextAction: { operation: 'scope-context', method: 'GET',
-        requestId: error.requestId, reuseOriginalInput: true, repeatPost: false } } : {}) };
+        ...(error.requestId ? { requestId: error.requestId } : { uploadId: error.uploadId }), reuseOriginalInput: true, repeatPost: false } } : {}) };
   }
 }

package/scope-context-journal.mjs

@@ -13,16 +13,17 @@ export async function archiveContextAttempt(location, state) {
   catch (error) { if (error.code !== 'ENOENT') throw error; await atomicMutationJson14(file, state, { privateFrom: location.stateRoot }); }
 }
 function reusableSnapshot(state, input) {
-  return input.action === 'apply' && state.snapshot && state.challenged && !state.pending && !state.completed && !state.applied
+  return input.action === 'apply' && state.snapshot && state.challenged && !state.pending && !state.evidencePending && !state.completed && !state.applied
     && state.rejection && !state.rejection.requestId && !state.rejection.output;
 }
 export async function contextJournal(location, input) {
   let state = await readContextJournal(location, input);
   if (!state.previous && reusableSnapshot(state, input)) {
     await archiveContextAttempt(location, state);
-    for (const field of ['rejection', 'checked', 'attestation', 'signingChallenge', 'signingAttemptId']) delete state[field];
+    for (const field of ['rejection', 'checked', 'attestation', 'signingChallenge', 'signingAttemptId',
+      'evidenceDescriptor', 'evidenceSignature', 'evidencePrepared', 'attestationRef', 'evidenceResult']) delete state[field];
     await saveContextJournal(location, state);
-  } else if (state.previous || !state.pending && !state.applied && (state.rejection
+  } else if (state.previous || !state.pending && !state.evidencePending && !state.applied && (state.rejection
     || input.action === 'status' && state.completed || input.action === 'apply' && state.completed)) {
     await archiveContextAttempt(location, state.previous ?? state); state = {};
   }
@@ -33,7 +34,7 @@ export async function contextJournal(location, input) {
   return state;
 }
 export async function renewContextChallenge(location, state, proposal, dependencies) {
-  if (state.pending) contextFail('Recover the original pending request before any challenge renewal');
+  if (state.pending || state.evidencePending) contextFail('Recover the original pending request before any challenge renewal');
   await archiveContextAttempt(location, state);
   delete state.signingChallenge;
   state.signingAttemptId = randomUUID(); await saveContextJournal(location, state);

package/scope-context-remote.mjs

@@ -30,18 +30,18 @@ async function notSent(pending, home) {
     return !rows.length || rows.at(-1).event === 'not-sent';
   } catch (error) { return error.code === 'ENOENT'; }
 }
-export async function contextRemote(stage, operation, input, state, location, dependencies) {
+export async function contextRemote(stage, operation, input, state, location, dependencies, save = saveContextJournal) {
   const requestId = buildInvocation(operation, input).requestId; let response, result;
   if (state.pending) {
     if (state.pending.stage !== stage || state.pending.requestId !== requestId || state.pending.operation !== operation
       || canonical(state.pending.input) !== canonical(input)) contextFail('Recover the original context POST before another operation');
     ({ response, result } = await recover(state.pending, dependencies));
   } else {
-    state.pending = { stage, operation, input, requestId }; await saveContextJournal(location, state);
+    state.pending = { stage, operation, input, requestId }; await save(location, state);
     try { ({ response, result } = await invokeRemoteResult({ operation, input }, dependencies)); }
     catch (error) {
       if (await notSent(state.pending, dependencies.home)) {
-        delete state.pending; await saveContextJournal(location, state);
+        delete state.pending; await save(location, state);
         throw Object.assign(new Error('Context request was not transmitted; repair its prerequisite and reuse the original input'),
           { code: 'ENTROROVE_SCOPE_CONTEXT_NOT_SENT', knownBeforeTransmission: true, requestId });
       }
@@ -51,10 +51,10 @@ export async function contextRemote(stage, operation, input, state, location, de
   if (!result?.output || result.output.requestId !== requestId) throw unknown(requestId);
   if (result.feedback) state.feedback = result.feedback;
   if (!response.ok || !['succeeded', 'needs-input'].includes(result.output.status)) {
-    state.rejection = { requestId, output: result.output }; delete state.pending; await saveContextJournal(location, state);
+    state.rejection = { requestId, output: result.output }; delete state.pending; await save(location, state);
     throw Object.assign(new Error('Original context request was rejected; preserve its exact evidence and history'),
       { code: result.output.code ?? 'ENTROROVE_SCOPE_CONTEXT_REJECTED', requestId, output: result.output });
   }
-  state[stage] = result.output.result ?? result.output; delete state.pending; await saveContextJournal(location, state);
+  state[stage] = result.output.result ?? result.output; delete state.pending; await save(location, state);
   return state[stage];
 }

package/scope-context-state.mjs

@@ -8,6 +8,7 @@ import { mutationHome14, mutationFile14, readMutationJson14, atomicMutationJson1
 import { trustedOrigin } from './remote-transport.mjs';
 import { contextExact, contextFail, contextList, validateContextAuthority } from './scope-context-wire.mjs';
 import { hydrateCloudMutationAuthority, bootstrapCloudMutationAuthority } from './cloud-mutation-authority.mjs';
+import { readScopeEvidence } from './scope-evidence-local.mjs';
 
 export async function contextPrivate(file, final = 'file', maximumBytes = 8_000_000) {
   const item = await mutationFile14(file, { final });
@@ -53,6 +54,7 @@ export async function effectiveScopeContexts(location) {
   for (const name of names) {
     const file = path.join(directory, name); await contextPrivate(file, 'file', 1_000_000);
     const saved = await readMutationJson14(file), checked = validateContextAuthority(saved.record, location, current);
+    if (checked.record.attestationRef) await readScopeEvidence(location, checked.record.attestationRef);
     if (saved.revisionDigest !== checked.revisionDigest || name !== `${String(checked.record.revision).padStart(6, '0')}-${checked.revisionDigest}.json`) contextFail('Context history checksum or order changed');
     current = checked;
   }
@@ -68,6 +70,7 @@ export async function retainContextAuthority(location, effective) {
   const current = await effectiveScopeContexts(location);
   if (current?.revisionDigest === effective?.revisionDigest && canonical(current.record) === canonical(effective.record)) return current;
   const checked = validateContextAuthority(effective?.record, location, current);
+  if (checked.record.attestationRef) await readScopeEvidence(location, checked.record.attestationRef);
   if (effective.revisionDigest !== checked.revisionDigest) contextFail('Applied context authority checksum changed');
   const directory = path.join(location.base, 'context-authority'), file = path.join(directory, `${String(checked.record.revision).padStart(6, '0')}-${checked.revisionDigest}.json`);
   await atomicMutationJson14(file, checked, { privateFrom: location.stateRoot }); return checked;
@@ -77,7 +80,7 @@ export async function readContextJournal(location, input) {
     await contextPrivate(location.file);
     const value = await readMutationJson14(location.file);
     if (value.schemaVersion !== 'entrorove.scope-context-journal/1.0' || value.localBindingDigest !== location.localBindingDigest) contextFail('Context journal cannot replace its original identity');
-    if (value.pending && canonical(value.input) !== canonical(input)) contextFail('Recover the original pending context request before another operation');
+    if ((value.pending || value.evidencePending) && canonical(value.input) !== canonical(input)) contextFail('Recover the original pending context request before another operation');
     return canonical(value.input) === canonical(input) ? value : { previous: value };
   } catch (error) { if (error.code === 'ENOENT') return {}; throw error; }
 }

package/scope-context-wire.mjs

@@ -1,6 +1,7 @@
 import { canonical, sha256 } from './local-integrity.mjs';
 import { scopeFail, scopePath } from './local-scope-files.mjs';
 import { scopeRevisionAuthority } from './scope-amendment-wire.mjs';
+import { evidenceReference } from './scope-evidence-wire.mjs';
 
 const id = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/;
 const hash = /^[a-f0-9]{64}$/;
@@ -51,7 +52,8 @@ export function contextInput(input) {
 export const originalContextDigest = location => sha256(canonical({ localBindingDigest: location.localBindingDigest,
   importContexts: location.binding.importContexts }));
 export function validateContextAuthority(value, location, previous) {
-  const record = scopeRevisionAuthority(value, 'entrorove.scope-context-authority/1.0');
+  const version = value?.schemaVersion === 'entrorove.scope-context-authority/2.0' ? '2.0' : '1.0';
+  const record = scopeRevisionAuthority(value, `entrorove.scope-context-authority/${version}`);
   const expectedRevision = (previous?.record.revision ?? 0) + 1;
   if (['flowId', 'runnerId', 'repositoryId', 'keyId'].some(field => record[field] !== location.binding[field])
     || record.localBindingDigest !== location.localBindingDigest || record.revision !== expectedRevision
@@ -64,6 +66,12 @@ export function validateContextAuthority(value, location, previous) {
   contextEvidence(record.evidence);
   if (previous && ['ownerId', 'taskDigest', 'chainDigest'].some(field => record[field] !== previous.record[field])
     || record.importContexts.some(context => !record.evidence.some(file => file.path === context.configPath))) contextFail('Context authority lost its original task or actual configuration evidence');
+  if (version === '2.0') {
+    const reference = evidenceReference(record.attestationRef, undefined, location);
+    if (reference.kind !== 'scope-context' || Object.hasOwn(record, 'attestation')
+      || ['flowId', 'ownerId', 'taskDigest', 'chainDigest', 'proposalId', 'proposalDigest', 'challengeId'].some(field => record[field] !== reference[field])
+      || !hash.test(record.challengeDigest ?? '')) contextFail('Compact context authority lost its exact evidence binding');
+  }
   return { record, revisionDigest: sha256(canonical(record)) };
 }
 export function contextChallenge(value, location, proposal, { allowExpired = false } = {}) {

package/scope-evidence-local.mjs

@@ -0,0 +1,52 @@
+import { constants, promises as fs } from 'node:fs';
+import path from 'node:path';
+import { mutationFile14, writeMutationFile14 } from './local-mutation-files.mjs';
+import { maximumScopeEvidenceBytes, evidenceFail, verifyEvidenceData } from './scope-evidence-wire.mjs';
+
+function evidencePath(location, descriptor) {
+  if (!/^[a-f0-9]{64}$/.test(descriptor?.sha256 ?? '')) evidenceFail('Scope evidence requires its exact SHA256 derived private data file');
+  return path.join(location.base, 'evidence-data', `${descriptor.sha256}.json`);
+}
+async function privateEvidence(file) {
+  const item = await mutationFile14(file);
+  if (process.getuid && item.stat.uid !== process.getuid() || process.platform !== 'win32' && (item.stat.mode & 0o777) !== 0o600
+    || item.stat.nlink !== 1 || item.stat.size < 1 || item.stat.size > maximumScopeEvidenceBytes) evidenceFail('Scope evidence must remain a bounded private single-link data file');
+  const directory = await mutationFile14(path.dirname(file), { final: 'directory' });
+  if (process.getuid && directory.stat.uid !== process.getuid()
+    || process.platform !== 'win32' && (directory.stat.mode & 0o777) !== 0o700) evidenceFail('Scope evidence directory must remain private');
+  return item;
+}
+export async function readScopeEvidence(location, descriptor) {
+  const file = evidencePath(location, descriptor), before = await privateEvidence(file);
+  const handle = await fs.open(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+  try {
+    const opened = await handle.stat();
+    const changed = stat => ['dev', 'ino', 'size', 'mtimeMs', 'ctimeMs', 'mode', 'nlink', 'uid'].some(field => stat[field] !== before.stat[field]);
+    if (changed(opened) || opened.size !== descriptor.canonicalBytes) evidenceFail('Scope evidence changed before its bounded private read');
+    const buffer = Buffer.alloc(opened.size + 1); let length = 0;
+    while (length < buffer.length) {
+      const chunk = await handle.read(buffer, length, buffer.length - length, length);
+      if (!chunk.bytesRead) break; length += chunk.bytesRead;
+    }
+    const bytes = buffer.subarray(0, length), after = await handle.stat(), latest = await privateEvidence(file);
+    if ([opened, after, latest.stat].some(stat => ['dev', 'ino', 'size', 'mtimeMs', 'ctimeMs', 'mode', 'nlink', 'uid']
+      .some(field => stat[field] !== before.stat[field])) || latest.ancestors.length !== before.ancestors.length
+      || latest.ancestors.some((item, index) => item.path !== before.ancestors[index].path
+        || item.stat.dev !== before.ancestors[index].stat.dev || item.stat.ino !== before.ancestors[index].stat.ino)) evidenceFail('Scope evidence changed during its stable private read');
+    let value;
+    try { value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes)); }
+    catch { evidenceFail('Scope evidence data has invalid UTF8 JSON'); }
+    if (!verifyEvidenceData(value, descriptor, location).equals(bytes)) evidenceFail('Scope evidence data lost its exact canonical bytes');
+    return value;
+  } finally { await handle.close(); }
+}
+export async function retainScopeEvidence(location, descriptor, value) {
+  const bytes = verifyEvidenceData(value, descriptor, location), file = evidencePath(location, descriptor);
+  try { await readScopeEvidence(location, descriptor); }
+  catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+    await writeMutationFile14(file, bytes, { privateFrom: location.stateRoot });
+    await readScopeEvidence(location, descriptor);
+  }
+  return descriptor;
+}

package/scope-evidence-remote.mjs

@@ -0,0 +1,78 @@
+import { canonical, sha256 } from './local-integrity.mjs';
+import { contextRemote } from './scope-context-remote.mjs';
+import { readScopeEvidence, retainScopeEvidence } from './scope-evidence-local.mjs';
+import { describeScopeEvidence, evidenceBytes, evidenceFail, evidenceUpload, evidenceReference } from './scope-evidence-wire.mjs';
+import { requestTransport, putScopeEvidence, parseTransportResponse } from './remote-transport.mjs';
+import { ideClientHeaders } from './ide-presentation.mjs';
+
+const unknown = uploadId => Object.assign(new Error('Scope evidence upload outcome is unknown; recover the original reservation with GET only'),
+  { code: 'ENTROROVE_SCOPE_EVIDENCE_UNKNOWN', outcomeUnknown: true, uploadId });
+export async function saveLocalScopeEvidence(value, kind, challenge, state, location, save) {
+  const described = describeScopeEvidence(kind, value, challenge, location);
+  await retainScopeEvidence(location, described.descriptor, value);
+  state.evidenceDescriptor = described.descriptor; state.evidenceSignature = described.signature;
+  state.attestationDigest = described.descriptor.sha256;
+  delete state.attestation;
+  await save(location, state);
+}
+function resultReference(value, upload, descriptor, location) {
+  if (value?.schemaVersion !== 'entrorove.scope-evidence-upload-status/1.0' || value.uploadId !== upload.uploadId
+    || value.grantsExecutionAuthority !== false || value.expiresAt !== upload.expiresAt
+    || !['reserved', 'receiving', 'stored', 'rejected'].includes(value.status)) throw unknown(upload.uploadId);
+  if (value.status !== 'stored') return null;
+  const reference = evidenceReference(value.evidenceReference, descriptor, location);
+  if (['ownerId', 'taskDigest', 'chainDigest'].some(field => reference[field] !== upload[field])) evidenceFail('Stored scope evidence replaced its original account or task');
+  return reference;
+}
+async function acceptResult(response, upload, state, location, save) {
+  let value;
+  try { value = parseTransportResponse(response, 'scope evidence upload'); }
+  catch { throw unknown(upload.uploadId); }
+  const reference = resultReference(value, upload, state.evidenceDescriptor, location);
+  if (reference) {
+    state.attestationRef = reference; state.evidenceResult = value; delete state.evidencePending;
+    await save(location, state); return reference;
+  }
+  if (value.status === 'rejected' && /^ENTROROVE_EVIDENCE_[A-Z_]+$/.test(value.code ?? '')) {
+    state.evidenceResult = value; state.rejection = { uploadId: upload.uploadId, output: value };
+    delete state.evidencePending; await save(location, state);
+    throw Object.assign(new Error('The original evidence reservation was rejected; preserve it before another signed attempt'),
+      { code: value.code, uploadId: upload.uploadId, output: value });
+  }
+  throw unknown(upload.uploadId);
+}
+export async function ensureScopeEvidence(state, location, dependencies, challenge, save) {
+  const descriptor = state.evidenceDescriptor;
+  if (!descriptor || !state.evidenceSignature) evidenceFail('Original signed evidence descriptor is unavailable');
+  const value = await readScopeEvidence(location, descriptor);
+  if (state.attestationRef) return evidenceReference(state.attestationRef, descriptor, location);
+  if (!state.evidencePrepared) await contextRemote('evidencePrepared', 'scope-evidence-prepare', {
+    flowId: descriptor.flowId, descriptor, signature: state.evidenceSignature }, state, location, dependencies, save);
+  const upload = evidenceUpload(state.evidencePrepared.upload, descriptor, location, challenge);
+  const token = await dependencies.readCredential(dependencies.home), headers = { authorization: `Bearer ${token}`, ...ideClientHeaders() };
+  const origin = dependencies.apiOrigin();
+  if (state.evidencePending) {
+    if (state.evidencePending.uploadId !== upload.uploadId || state.evidencePending.sha256 !== descriptor.sha256
+      || state.evidencePending.canonicalBytes !== descriptor.canonicalBytes) evidenceFail('Recover the exact original evidence reservation first');
+    let response;
+    try { response = await requestTransport(origin, `/api/skill/evidence/${upload.uploadId}`, { headers }); }
+    catch { throw unknown(upload.uploadId); }
+    return acceptResult(response, upload, state, location, save);
+  }
+  state.evidencePending = { uploadId: upload.uploadId, sha256: descriptor.sha256, canonicalBytes: descriptor.canonicalBytes };
+  await save(location, state);
+  let response;
+  try {
+    if (Date.parse(upload.expiresAt) <= Date.now()) response = await requestTransport(origin, `/api/skill/evidence/${upload.uploadId}`, { headers });
+    else response = await putScopeEvidence(origin, upload.uploadId, evidenceBytes(value), headers);
+  } catch { throw unknown(upload.uploadId); }
+  return acceptResult(response, upload, state, location, save);
+}
+export async function validateAppliedEvidence(record, state, location, challenge, kind) {
+  const reference = evidenceReference(kind === 'scope-context' ? record.attestationRef : record.candidateAttestationRef,
+    state.evidenceDescriptor, location);
+  if (reference.kind !== kind || canonical(reference) !== canonical(state.attestationRef)
+    || record.challengeId !== challenge.challengeId || record.challengeDigest !== sha256(canonical(challenge))
+    || ['ownerId', 'taskDigest', 'chainDigest'].some(field => reference[field] !== challenge[field])) evidenceFail('Applied authority differs from its original uploaded S evidence');
+  return readScopeEvidence(location, reference);
+}

package/scope-evidence-wire.mjs

@@ -0,0 +1,120 @@
+import { createPublicKey, sign, verify } from 'node:crypto';
+import { canonical, sha256 } from './local-integrity.mjs';
+import { scopeRevisionAuthority } from './scope-amendment-wire.mjs';
+
+export const maximumScopeEvidenceBytes = 16_000_000;
+const hash = /^[a-f0-9]{64}$/, id = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/;
+const common = ['kind', 'flowId', 'challengeId', 'runnerId', 'repositoryId', 'keyId', 'sha256', 'canonicalBytes'];
+export const evidenceFail = message => { throw Object.assign(new Error(message), { code: 'ENTROROVE_SCOPE_EVIDENCE_BINDING' }); };
+function exact(value, fields) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)
+    || Object.keys(value).sort().join('\0') !== [...fields].sort().join('\0')) evidenceFail('Scope evidence fields are invalid');
+}
+function validString(value) {
+  if (value.includes('\0') || Buffer.byteLength(value) > maximumScopeEvidenceBytes) evidenceFail('Scope evidence string exceeds its valid bounded UTF8 representation');
+  for (let index = 0; index < value.length; index++) {
+    const code = value.charCodeAt(index);
+    if (code >= 0xd800 && code <= 0xdbff) {
+      const next = value.charCodeAt(++index);
+      if (!(next >= 0xdc00 && next <= 0xdfff)) evidenceFail('Scope evidence contains an invalid Unicode surrogate');
+    } else if (code >= 0xdc00 && code <= 0xdfff) evidenceFail('Scope evidence contains an invalid Unicode surrogate');
+  }
+}
+export function evidenceBytes(value) {
+  const stack = [[value, 0, false]], ancestors = new Set(); let nodes = 0;
+  while (stack.length) {
+    const [item, depth, leaving] = stack.pop();
+    if (leaving) { ancestors.delete(item); continue; }
+    if (++nodes > 250_000 || depth > 64) evidenceFail('Scope evidence exceeds its bounded structure');
+    if (typeof item === 'string') { validString(item); continue; }
+    if (item === null || typeof item === 'boolean') continue;
+    if (typeof item === 'number' && Number.isFinite(item)) continue;
+    if (!item || typeof item !== 'object' || ancestors.has(item)
+      || !Array.isArray(item) && ![Object.prototype, null].includes(Object.getPrototypeOf(item))) evidenceFail('Scope evidence requires finite acyclic JSON');
+    ancestors.add(item); stack.push([item, depth, true]);
+    const fields = Object.getOwnPropertyDescriptors(item), keys = Reflect.ownKeys(fields);
+    if (Array.isArray(item) ? item.length > 100_000 : keys.length > 1024) evidenceFail('Scope evidence collection exceeds its bounded structure');
+    for (const key of keys) {
+      if (Array.isArray(item) && key === 'length') continue;
+      const field = fields[key];
+      if (typeof key !== 'string' || !Object.hasOwn(field, 'value') || !field.enumerable) evidenceFail('Scope evidence refuses accessors and non-JSON properties');
+      validString(key);
+      stack.push([field.value, depth + 1, false]);
+    }
+  }
+  const bytes = Buffer.from(canonical(value));
+  if (!bytes.length || bytes.length > maximumScopeEvidenceBytes) evidenceFail('Scope evidence exceeds its separate sixteen million byte data limit');
+  return bytes;
+}
+export function evidenceFields(value) {
+  if (!['scope-context', 'scope-revision', 'scope-refresh', 'scope-observation'].includes(value?.kind)) evidenceFail('Scope evidence kind is invalid');
+  return [...common, ...(value.kind === 'scope-observation' ? ['stepId'] : ['proposalId', 'proposalDigest'])];
+}
+export function validateEvidenceIdentity(value, expected, location) {
+  for (const field of evidenceFields(value)) {
+    if (field === 'canonicalBytes') {
+      if (!Number.isSafeInteger(value[field]) || value[field] < 1 || value[field] > maximumScopeEvidenceBytes) evidenceFail('Scope evidence byte length is invalid');
+    } else if (!(['sha256', 'keyId', 'proposalDigest'].includes(field) ? hash : id).test(value[field] ?? '')) evidenceFail('Scope evidence identity is invalid');
+    if (expected && value[field] !== expected[field]) evidenceFail('Scope evidence reference replaced its exact original data identity');
+  }
+  if (location && ['flowId', 'runnerId', 'repositoryId', 'keyId'].some(field => value[field] !== location.binding[field])) {
+    evidenceFail('Scope evidence replaced its original local signer binding');
+  }
+  return value;
+}
+function signature(value, key) {
+  const { signature: encoded, ...core } = value ?? {};
+  if (typeof encoded !== 'string' || !/^[A-Za-z0-9_-]{86}$/.test(encoded)
+    || Buffer.from(encoded, 'base64url').toString('base64url') !== encoded
+    || !verify(null, Buffer.from(canonical(core)), key, Buffer.from(encoded, 'base64url'))) evidenceFail('Original scope evidence S signature changed');
+}
+export function verifyEvidenceData(value, descriptor, location) {
+  validateEvidenceIdentity(descriptor, undefined, location);
+  const bytes = evidenceBytes(value);
+  if (sha256(bytes) !== descriptor.sha256 || bytes.length !== descriptor.canonicalBytes) evidenceFail('Scope evidence hash or canonical UTF8 length changed');
+  const key = createPublicKey({ key: Buffer.from(location.binding.publicKey, 'base64'), type: 'spki', format: 'der' });
+  if (sha256(key.export({ type: 'spki', format: 'der' })) !== descriptor.keyId) evidenceFail('Scope evidence original public key changed');
+  signature(value, key);
+  const observation = descriptor.kind === 'scope-observation', inner = observation ? value : value.scopeAttestation;
+  if (!observation) signature(inner, key);
+  if (inner?.schemaVersion !== 'entrorove.scope-facts/1.0'
+    || ['flowId', 'repositoryId', 'keyId'].some(field => inner[field] !== descriptor[field])
+    || observation && (inner.challenge !== descriptor.challengeId || inner.stepId !== descriptor.stepId)
+    || !observation && value.proposalDigest !== descriptor.proposalDigest
+    || descriptor.kind === 'scope-context' && (value.schemaVersion !== 'entrorove.scope-context-attestation/1.0' || value.challengeId !== descriptor.challengeId)
+    || ['scope-revision', 'scope-refresh'].includes(descriptor.kind) && (value.schemaVersion !== 'entrorove.scope-revision-attestation/1.0'
+      || value.proposalId !== descriptor.proposalId || value.purpose !== (descriptor.kind === 'scope-refresh' ? 'scope-revision-refresh' : 'scope-revision'))
+    || ['ownerId', 'taskDigest', 'chainDigest'].some(field => descriptor[field] !== undefined && inner[field] !== descriptor[field])) {
+    evidenceFail('Scope evidence has another original kind, task or challenge');
+  }
+  return bytes;
+}
+export function describeScopeEvidence(kind, value, challenge, location) {
+  const bytes = evidenceBytes(value), observation = kind === 'scope-observation';
+  const descriptor = { schemaVersion: 'entrorove.scope-evidence-descriptor/1.0', kind, flowId: challenge.flowId,
+    ...(observation ? { stepId: challenge.stepId } : { proposalId: challenge.proposalId, proposalDigest: challenge.proposalDigest }),
+    challengeId: observation ? challenge.challenge : challenge.challengeId, runnerId: location.binding.runnerId,
+    repositoryId: location.binding.repositoryId, keyId: location.binding.keyId, sha256: sha256(bytes), canonicalBytes: bytes.length };
+  verifyEvidenceData(value, descriptor, location);
+  const inner = observation ? value : value.scopeAttestation;
+  if (['flowId', 'ownerId', 'taskDigest', 'chainDigest', 'repositoryId', 'stepId', 'challenge'].some(field => inner[field] !== challenge[field])
+    || Date.parse(inner.expiresAt) > Date.parse(challenge.expiresAt)) evidenceFail('Scope evidence differs from its exact original challenge');
+  return { descriptor, signature: sign(null, Buffer.from(canonical(descriptor)), location.key).toString('base64url') };
+}
+export function evidenceReference(value, expected, location) {
+  exact(value, ['schemaVersion', 'evidenceId', ...evidenceFields(value), 'ownerId', 'taskDigest', 'chainDigest']);
+  if (value.schemaVersion !== 'entrorove.scope-evidence-reference/1.0' || !id.test(value.evidenceId ?? '')
+    || !id.test(value.ownerId ?? '') || !hash.test(value.taskDigest ?? '') || !hash.test(value.chainDigest ?? '')) evidenceFail('Scope evidence reference is invalid');
+  return validateEvidenceIdentity(value, expected, location);
+}
+export function evidenceUpload(value, descriptor, location, challenge) {
+  const upload = scopeRevisionAuthority(value, 'entrorove.scope-evidence-upload/1.0');
+  exact(upload, ['schemaVersion', ...evidenceFields(upload), 'uploadId', 'ownerId', 'taskDigest', 'chainDigest', 'issuedAt', 'expiresAt', 'grantsExecutionAuthority', 'authorityReceipt']);
+  validateEvidenceIdentity(upload, descriptor, location);
+  const issued = Date.parse(upload.issuedAt), expires = Date.parse(upload.expiresAt);
+  if (!id.test(upload.uploadId ?? '') || upload.grantsExecutionAuthority !== false
+    || ['ownerId', 'taskDigest', 'chainDigest'].some(field => upload[field] !== challenge[field])
+    || !Number.isFinite(issued) || !Number.isFinite(expires) || expires <= issued || expires - issued > 90_000
+    || expires > Date.parse(challenge.expiresAt)) evidenceFail('Scope evidence upload replaced its original challenge or authority');
+  return upload;
+}

package/scope-runner-client.mjs

@@ -6,7 +6,9 @@ import { scopeFail, scopePath, scopeRoot, scopeTarget } from './local-scope-file
 import { withStateLock } from './local-state-lock.mjs';
 import { snapshotPlan, snapshotVerify } from './local-execution.mjs';
 import { probe } from './local-probe.mjs';
-import { invokeRemoteResult } from './remote-client.mjs';
+import { contextRemote } from './scope-context-remote.mjs';
+import { scopeRunnerJournal, saveScopeRunnerJournal } from './scope-runner-journal.mjs';
+import { saveLocalScopeEvidence, ensureScopeEvidence } from './scope-evidence-remote.mjs';
 import { boundScopeContexts } from './scope-context-state.mjs';
 
 async function privateDirectory(directory) {
@@ -54,38 +56,7 @@ async function signer(directory, identity, dependencies) {
   }
   return { binding, key, signerConfigPath: path.join(controls, 'signer.json'), contextAuthority };
 }
-async function remote(operation, input, dependencies) {
-  const { response, result } = await invokeRemoteResult({ operation, input }, dependencies);
-  if (!response.ok || result.output.status !== 'succeeded') {
-    throw Object.assign(new Error(result.output.message ?? `Scope connection blocked at ${operation}`),
-      { code: result.output.code ?? 'ENTROROVE_SCOPE_BLOCKED', output: result.output });
-  }
-  return result.output;
-}
-async function connect(identity, directory, dependencies) {
-  const { binding, key, signerConfigPath, contextAuthority } = await signer(directory, identity, dependencies);
-  const prepared = await remote('scope-runner-prepare', { flowId: identity.flowId, attemptId: randomUUID(), runnerId: binding.runnerId,
-    repositoryId: binding.repositoryId, publicKey: binding.publicKey, targetPaths: identity.targetPaths }, dependencies);
-  const enrollment = prepared.enrollment;
-  if (enrollment.flowId !== identity.flowId || enrollment.runnerId !== binding.runnerId || enrollment.keyId !== binding.keyId
-    || canonical(enrollment.targetPaths) !== canonical(identity.targetPaths)) scopeFail('ENTROROVE_SCOPE_BINDING', 'Cloud enrollment differs from the original local task signer');
-  await remote('scope-runner-register', { flowId: identity.flowId, enrollmentId: enrollment.enrollmentId,
-    signature: sign(null, Buffer.from(canonical(enrollment)), key).toString('base64url') }, dependencies);
-  const issued = await remote('scope-runner-challenge', { flowId: identity.flowId, receiverId: binding.runnerId, attemptId: randomUUID() }, dependencies);
-  const challenge = issued.challenge;
-  if (challenge.flowId !== identity.flowId || challenge.ownerId !== enrollment.ownerId || challenge.runnerId !== binding.runnerId
-    || challenge.repositoryId !== binding.repositoryId || challenge.taskDigest !== enrollment.taskDigest
-    || challenge.chainDigest !== enrollment.chainDigest || canonical(challenge.targetPaths) !== canonical(identity.targetPaths)) {
-    scopeFail('ENTROROVE_SCOPE_BINDING', 'Cloud scope challenge differs from the original account and accepted task');
-  }
-  const input = { repositoryRoot: identity.repositoryRoot, home: dependencies.home, flowId: identity.flowId,
-    stepId: challenge.stepId, paths: identity.targetPaths, snapshotId: `snapshot-${randomUUID()}`, importContexts: identity.importContexts,
-    ...(contextAuthority ? { contextRevisionDigest: contextAuthority.revisionDigest, contextEvidence: contextAuthority.record.evidence } : {}) };
-  const planned = await snapshotPlan(input), verified = await snapshotVerify(input);
-  if (verified.verified !== true || verified.receipt.snapshotDigest !== planned.snapshotDigest) scopeFail('ENTROROVE_SCOPE_SNAPSHOT', 'Actual copied snapshot did not verify');
-  const observed = await probe({ ...input, ownerId: challenge.ownerId, task: challenge.task, taskDigest: challenge.taskDigest,
-    chainDigest: challenge.chainDigest, repositoryId: challenge.repositoryId, challenge: challenge.challenge, signerConfigPath });
-  const accepted = await remote('scope-runner-attest', { flowId: identity.flowId, attestation: observed.attestation }, dependencies);
+async function scopeConnectionResult(identity, binding, accepted) {
   const next = accepted.nextStep ?? { operation: 'workflow-gate', payload: { targetFiles: [...identity.targetPaths] } };
   if (next.localOperation === 'scope-connect') return { schemaVersion: 'entrorove.scope-connection/1.0', status: 'succeeded',
     flowId: identity.flowId, runnerId: binding.runnerId, scopeEvidence: accepted.scopeEvidence, grantsExecutionAuthority: false,
@@ -97,6 +68,63 @@ async function connect(identity, directory, dependencies) {
     runnerId: binding.runnerId, scopeEvidence: accepted.scopeEvidence, grantsExecutionAuthority: false,
     nextOperation: next.operation, ...(resumeOriginalRequest ? { resumeOriginalRequest: true } : { nextInput }), nextStep: next };
 }
+async function observeConnection(identity, location, state, challenge, contextAuthority, dependencies) {
+  if (state.evidenceDescriptor) return;
+  const input = { repositoryRoot: identity.repositoryRoot, home: dependencies.home, flowId: identity.flowId,
+    stepId: challenge.stepId, paths: identity.targetPaths, snapshotId: state.snapshotId, importContexts: identity.importContexts,
+    ...(contextAuthority ? { contextRevisionDigest: contextAuthority.revisionDigest, contextEvidence: contextAuthority.record.evidence } : {}) };
+  if (!state.snapshotStarted) {
+    state.snapshotStarted = true; await saveScopeRunnerJournal(location, state);
+    try { await snapshotPlan(input); }
+    catch (error) { delete state.snapshotStarted; await saveScopeRunnerJournal(location, state); throw error; }
+  }
+  const verified = await snapshotVerify(input);
+  if (verified.verified !== true) scopeFail('ENTROROVE_SCOPE_SNAPSHOT', 'Actual copied snapshot did not verify');
+  const observed = await probe({ ...input, ownerId: challenge.ownerId, task: challenge.task, taskDigest: challenge.taskDigest,
+    chainDigest: challenge.chainDigest, repositoryId: challenge.repositoryId, challenge: challenge.challenge, signerConfigPath: location.signerConfigPath },
+  { maximumExpiresAt: Date.parse(challenge.expiresAt) });
+  if (observed.attestation.snapshotDigest !== verified.receipt.snapshotDigest) scopeFail('ENTROROVE_SCOPE_SNAPSHOT', 'Actual S proof replaced its original verified snapshot');
+  await saveLocalScopeEvidence(observed.attestation, 'scope-observation', challenge, state, location, saveScopeRunnerJournal);
+}
+async function connect(identity, directory, dependencies) {
+  const local = await signer(directory, identity, dependencies), { binding, key, contextAuthority } = local;
+  const location = { ...local, root: identity.repositoryRoot, home: dependencies.home, base: directory,
+    stateRoot: path.join(dependencies.home, '.entrorove'), directory: path.join(directory, 'scope-connection'),
+    file: path.join(directory, 'scope-connection', 'journal.json') };
+  const state = await scopeRunnerJournal(location, identity);
+  const remote = (stage, operation, input) => contextRemote(stage, operation, input, state, location, dependencies, saveScopeRunnerJournal);
+  try {
+    if (state.pending) await remote(state.pending.stage, state.pending.operation, state.pending.input);
+    const prepared = state.prepared ?? await remote('prepared', 'scope-runner-prepare', { flowId: identity.flowId,
+      attemptId: state.attemptId, runnerId: binding.runnerId, repositoryId: binding.repositoryId, publicKey: binding.publicKey, targetPaths: identity.targetPaths });
+    const enrollment = prepared.enrollment;
+    if (enrollment.flowId !== identity.flowId || enrollment.runnerId !== binding.runnerId || enrollment.keyId !== binding.keyId
+      || canonical(enrollment.targetPaths) !== canonical(identity.targetPaths)) scopeFail('ENTROROVE_SCOPE_BINDING', 'Cloud enrollment differs from the original local task signer');
+    if (!state.registered) await remote('registered', 'scope-runner-register', { flowId: identity.flowId, enrollmentId: enrollment.enrollmentId,
+      signature: sign(null, Buffer.from(canonical(enrollment)), key).toString('base64url') });
+    const issued = state.challenged ?? await remote('challenged', 'scope-runner-challenge', { flowId: identity.flowId,
+      receiverId: binding.runnerId, attemptId: state.attemptId });
+    const challenge = issued.challenge;
+    if (challenge.flowId !== identity.flowId || challenge.ownerId !== enrollment.ownerId || challenge.runnerId !== binding.runnerId
+      || challenge.repositoryId !== binding.repositoryId || challenge.taskDigest !== enrollment.taskDigest
+      || challenge.chainDigest !== enrollment.chainDigest || canonical(challenge.targetPaths) !== canonical(identity.targetPaths)) {
+      scopeFail('ENTROROVE_SCOPE_BINDING', 'Cloud scope challenge differs from the original account and accepted task');
+    }
+    if (!state.snapshotId) { state.snapshotId = `snapshot-${randomUUID()}`; await saveScopeRunnerJournal(location, state); }
+    if (!state.accepted) {
+      await observeConnection(identity, location, state, challenge, contextAuthority, dependencies);
+      const attestationRef = await ensureScopeEvidence(state, location, dependencies, challenge, saveScopeRunnerJournal);
+      await remote('accepted', 'scope-runner-attest', { flowId: identity.flowId, attestationRef });
+    }
+    state.completed = true; await saveScopeRunnerJournal(location, state);
+    return scopeConnectionResult(identity, binding, state.accepted);
+  } catch (error) {
+    if (!state.pending && !state.evidencePending) {
+      state.rejection ??= { code: error.code, message: error.message }; await saveScopeRunnerJournal(location, state);
+    }
+    throw error;
+  }
+}
 export async function connectScopeRunner(repositoryRoot, input, dependencies) {
   if (!input || Object.keys(input).some(field => !['flowId', 'paths', 'importContexts'].includes(field))
     || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(input.flowId ?? '') || !Array.isArray(input.paths) || !input.paths.length) {
@@ -129,8 +157,10 @@ export async function runScopeConnect(repositoryRoot, input, dependencies) {
   if (!await dependencies.agreementAccepted(dependencies.home)) return dependencies.agreementRequired(dependencies.home);
   try { return await connectScopeRunner(repositoryRoot, input, dependencies); }
   catch (error) {
-    if (error.outcomeUnknown || !error.code?.startsWith('ENTROROVE_')) throw error;
+    if (!error.code?.startsWith('ENTROROVE_')) throw error;
     return { schemaVersion: 'entrorove.scope-connection/1.0', status: 'blocked', flowId: input?.flowId,
-      code: error.code, message: error.message, ...(error.output ? { output: error.output } : {}) };
+      code: error.code, message: error.message, ...(error.output ? { output: error.output } : {}),
+      ...(error.outcomeUnknown ? { outcomeUnknown: true, nextAction: { method: 'GET', operation: 'scope-connect',
+        ...(error.requestId ? { requestId: error.requestId } : { uploadId: error.uploadId }), reuseOriginalInput: true, repeatPost: false } } : {}) };
   }
 }

package/scope-runner-journal.mjs

@@ -0,0 +1,32 @@
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { canonical, sha256 } from './local-integrity.mjs';
+import { readMutationJson14, atomicMutationJson14, mutationFile14 } from './local-mutation-files.mjs';
+import { evidenceFail } from './scope-evidence-wire.mjs';
+
+export async function saveScopeRunnerJournal(location, state) {
+  if (Buffer.byteLength(canonical(state)) + 1 > 8_000_000) evidenceFail('Scope connection journal exceeds its unchanged bounded control limit');
+  await atomicMutationJson14(location.file, state, { privateFrom: location.stateRoot, replace: true });
+}
+export async function scopeRunnerJournal(location, identity) {
+  let state;
+  try {
+    const item = await mutationFile14(location.file);
+    if (item.stat.size > 8_000_000 || item.stat.nlink !== 1) evidenceFail('Scope connection journal is invalid');
+    state = await readMutationJson14(location.file);
+    if (state.schemaVersion !== 'entrorove.scope-connection-journal/1.0' || canonical(state.identity) !== canonical(identity)) {
+      evidenceFail('Scope connection journal replaced its original task, repository or complete input');
+    }
+  } catch (error) { if (error.code !== 'ENOENT') throw error; }
+  if (state && !state.pending && !state.evidencePending && (state.completed || state.rejection)) {
+    const archive = path.join(location.directory, `${state.attemptId}-${sha256(canonical(state))}.json`);
+    try { if (canonical(await readMutationJson14(archive)) !== canonical(state)) evidenceFail('Scope connection history changed'); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; await atomicMutationJson14(archive, state, { privateFrom: location.stateRoot }); }
+    state = undefined;
+  }
+  if (!state) {
+    state = { schemaVersion: 'entrorove.scope-connection-journal/1.0', identity, attemptId: randomUUID() };
+    await saveScopeRunnerJournal(location, state);
+  }
+  return state;
+}