@receiz/ai-skills 106.0.0 → 107.0.0

package/README.md

@@ -1,14 +1,17 @@
 # Receiz AI Skills
 
-`receiz-build-production-system` is the v106 orchestration skill for substantial
+`receiz-build-production-system` remains the constitutional orchestration skill for substantial
 Receiz applications. Fourteen focused constitutional skills supply architecture,
 domain, law, command, authority, replay, offline, causal, artifact, migration,
 performance, observability, testing, and release contracts. The earlier nine
-domain skills remain packaged for compatibility.
+domain skills remain packaged for compatibility. v107 adds seven executable
+operation skills for identity profiles, portable continuity, generic bearer
+ownership, offline commands, proof media, cross-app state, and receipt admission.
+Every current manifest requires SDK/MCP `>=107.0.0 <108.0.0`, ruleset `107.0.0`, and registry digest `4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6`.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
-It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all twenty-four skill directories under `node_modules/@receiz/ai-skills` for explicit loading by an agent host.
+It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all thirty-one skill directories under `node_modules/@receiz/ai-skills` for explicit loading by an agent host.
 
 Receiz is a proof-native artifact system. A Receiz object is not a database row. It is a proof-carrying artifact. The artifact's witnessed history is the truth boundary. Server state, database state, UI state, marketplace state, and model memory are projections only. Old witnessed truth is not stale. If a projection is wrong, rebuild it from object history. If truth is missing, append new truth. Never mutate witnessed truth.
 
@@ -22,7 +25,12 @@ Agents may acquire scoped delegated access through the official Receiz Connect/O
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused v106 skill for narrower production work. The compatibility router `receiz-skill-bundle` and proof/domain skills remain available for earlier workflows.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused v107 operation skill for SDK/MCP implementation and a constitutional skill for broader system law. The compatibility router `receiz-skill-bundle` and proof/domain skills remain available for earlier workflows.
+
+The v107 operation skills are executable contracts. Each binds exact SDK calls,
+MCP plan/execute tools, delegated scopes, proof heads, idempotency, offline and
+conflict behavior, receipt verification, confirmation boundaries, and deterministic
+emulator fixtures. They never grant autonomous mutation authority.
 
 Do not invent APIs. Use the SDK and MCP maps inside the skills, then inspect the repo when a requested operation is not listed.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "106.0.0",
+  "version": "107.0.0",
   "description": "Authoritative Receiz AI operating skills for proof-native SDK and MCP agents.",
   "type": "module",
   "files": [
@@ -28,7 +28,14 @@
     "receiz-observability",
     "receiz-testing",
     "receiz-release",
-    "receiz-build-production-system"
+    "receiz-build-production-system",
+    "receiz-identity-profile",
+    "receiz-portable-continuity",
+    "receiz-bearer-ownership",
+    "receiz-offline-command",
+    "receiz-proof-media",
+    "receiz-cross-app-state",
+    "receiz-receipt-admission"
   ],
   "keywords": [
     "receiz",

package/receiz-architecture/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-architecture",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-authority-security/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-authority-security",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.authority.capability-bound",

package/receiz-bearer-ownership/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: receiz-bearer-ownership
+description: Use when claiming ownership of any qualifying Receiz bearer artifact and invalidating its previous active owner projection.
+---
+
+# Receiz Bearer Ownership
+
+Claim the generic enclosing artifact, not a card-specific or subpayload-specific invention. Verify the stronger proof object before projecting its embedded payload.
+
+## Exact SDK operation
+
+Use `proofHead.get`, `ownership.claimBearerAsset`, and `receipts.verify` for every supported artifact type.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const expectedOwnershipHead = await receiz.proofHead.get({ aggregateId: `ownership:${artifactId}` });
+const result = await receiz.ownership.claimBearerAsset({
+  artifactBytes: new Uint8Array(await artifactFile.arrayBuffer()),
+  filename: artifactFile.name,
+  mimeType: artifactFile.type || "application/octet-stream",
+  claimantKeyId,
+  expectedOwnershipHead,
+  idempotencyKey: `claim:${artifactId}:${claimantKeyId}:${expectedOwnershipHead.digest}`,
+});
+if (!await receiz.receipts.verify(result.receipt)) throw new Error("receipt_invalid");
+if (result.previousOwnerProjection.active || !result.owner.active) throw new Error("custody_conflict");
+```
+
+## Required authority
+
+Require the claimant Receiz identity plus delegated `receiz:record` and `receiz:seal` scopes or the corresponding signed-in session. The enclosing sealed artifact remains ownership authority.
+
+## Required proof head
+
+Read `ownership:${artifactId}` immediately before planning. Pass that exact head; never use a subpayload hash as the ownership boundary.
+
+## Idempotency
+
+Bind the key to artifact identity, claimant identity, artifact bytes, and expected ownership head. Exact replay returns the original admitted artifact; changed input with the same key is a conflict.
+
+## Offline behavior
+
+Offline work may verify the artifact and queue signed claim intent, but cannot report global ownership. Display `queued`, preserve the original artifact, and admit only after reconnect.
+
+## Conflict behavior
+
+On `ownership_head_stale` or `custody_conflict`, fetch the canonical ownership head and show the current owner/custody chain. Never overwrite, silently retry against a new owner, or revive the previous active projection.
+
+## Receipt verification
+
+Verify the returned canonical receipt and confirm `previousOwnerProjection.active === false`, `owner.active === true`, and ownership-head continuity before reporting ownership.
+
+## User confirmation
+
+Show artifact ID/type, claimant key ID, prior owner, expected head, irreversible custody consequence, and idempotency key. Require explicit confirmation.
+
+## MCP parity
+
+Call `receiz_proof_head_get`, then `receiz_bearer_asset_claim_plan`. Require the exact digest, call `receiz_bearer_asset_claim_execute`, then call `receiz_receipt_verify`. MCP planning and subpayload hashes are not proof authority.
+
+## Emulator fixture
+
+Run `generic-bearer-transfer` and `previous-owner-projection-invalidation` across all supported artifact families.

package/receiz-bearer-ownership/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Bearer Ownership"
+  short_description: "Claim generic bearer proof artifacts"
+  default_prompt: "Use $receiz-bearer-ownership to claim a qualifying bearer artifact through its enclosing proof."

package/receiz-bearer-ownership/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-bearer-ownership",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.ownership.enclosing-proof", "receiz.custody.single-active-owner", "receiz.receipt.verify"],
+  "sdkOperations": ["ownership.claimBearerAsset", "proofHead.get", "receipts.verify"],
+  "allowedTools": ["receiz_bearer_asset_claim_plan", "receiz_bearer_asset_claim_execute", "receiz_proof_head_get", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:record", "receiz:seal"],
+  "emulatorFixtures": ["generic-bearer-transfer", "previous-owner-projection-invalidation"],
+  "forbiddenOperations": ["direct-state-write", "subpayload-authority", "previous-owner-reactivation", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-build-production-system/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-build-production-system",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-causal-sync/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-causal-sync",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.merge.causal",

package/receiz-command-builder/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-command-builder",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.command-only-mutation",

package/receiz-constitutional-laws/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-constitutional-laws",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.registry.digest-alignment",

package/receiz-cross-app-state/SKILL.md

@@ -0,0 +1,69 @@
+---
+name: receiz-cross-app-state
+description: Use when carrying verified namespaced account state between Receiz applications without a shared app database or identity fork.
+---
+
+# Receiz Cross-App State
+
+Continue the same Receiz identity across applications by restoring portable account truth and appending isolated namespaces. Cross-app continuation is an identity primitive, not session sharing.
+
+## Exact SDK operation
+
+Use `identity.restoreAccount`, `identity.appendAccountState`, `continuity.reconcile`, and `continuity.commit`.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const account = await receiz.identity.restoreAccount(identityRecord, { artifactKind: "identity-record" });
+const appended = await receiz.identity.appendAccountState(account, {
+  expectedHead: account.head,
+  idempotencyKey: `app:${appNamespace}:${account.head.digest}`,
+  allowedNamespaces: [appNamespace],
+  additions: { appState: { [appNamespace]: verifiedAppState } },
+});
+const plan = await receiz.continuity.reconcile({ priorOwnerScope, idempotencyKey: `continue:${appended.head.digest}` });
+if (plan.status !== "ready") throw new Error("continuity_conflict");
+await receiz.continuity.commit({
+  priorOwnerScope,
+  receizKeyId: appended.identity.keyId,
+  idempotencyKey: `continue:${appended.head.digest}`,
+  planDigest: plan.receipt.planDigest,
+});
+```
+
+## Required authority
+
+The verified Record, Seal, Key, or Vault supplies local identity authority. Reconciliation requires `receiz:record`. An application may append only explicitly allowed namespaces.
+
+## Required proof head
+
+Append against the restored identity-account head. Commit only the exact reconciliation plan digest built from that account and owner scope.
+
+## Idempotency
+
+Bind keys to application namespace, state digest, restored head, and owner scope. A new application state append always gets a new key; history is immutable.
+
+## Offline behavior
+
+Project verified portable state immediately in the destination app. Offline additions remain local appends; background work may synchronize later without remounting or downgrading the settled surface.
+
+## Conflict behavior
+
+Reject unauthorized or previously occupied namespaces. On global conflict, preserve both verified histories, stop the affected namespace/owner lane, and require a declared append resolution.
+
+## Receipt verification
+
+Verify the re-exported artifact after local append. Verify canonical receipts for globally admitted additions; the reconciliation plan receipt itself is not admission.
+
+## User confirmation
+
+Show origin identity key, destination app namespace, data categories, expected head, prior owner scope, and plan digest. Require confirmation before export mutation or global commit.
+
+## MCP parity
+
+Call `receiz_continuity_sync_plan`, require exact digest confirmation, call `receiz_continuity_sync_execute`, and call `receiz_receipt_verify` for returned canonical append receipts. MCP cannot read or rewrite another app namespace directly.
+
+## Emulator fixture
+
+Run `portable-restore-cross-app-continuation` and `namespace-isolation`.

package/receiz-cross-app-state/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Cross-App State"
+  short_description: "Continue verified state across apps"
+  default_prompt: "Use $receiz-cross-app-state to carry verified account state across Receiz applications."

package/receiz-cross-app-state/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-cross-app-state",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.identity.cross-app-continuity", "receiz.namespace.isolation", "receiz.local-truth.immediate"],
+  "sdkOperations": ["identity.restoreAccount", "identity.appendAccountState", "continuity.reconcile", "continuity.commit"],
+  "allowedTools": ["receiz_continuity_sync_plan", "receiz_continuity_sync_execute", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:record"],
+  "emulatorFixtures": ["portable-restore-cross-app-continuation", "namespace-isolation"],
+  "forbiddenOperations": ["cross-namespace-write", "identity-fork", "database-as-account-truth", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-deterministic-replay/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-deterministic-replay",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.replay.deterministic",

package/receiz-domain-builder/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-domain-builder",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.command-only-mutation",

package/receiz-identity-profile/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: receiz-identity-profile
+description: Use when reading or updating a Receiz identity profile, checking or changing a username, or attaching raw or prepublished proof media.
+---
+
+# Receiz Identity Profile
+
+Preserve one Receiz identity while appending profile truth. A rename releases the prior username globally; the replacement username is appended to the same original identity.
+
+## Exact SDK operation
+
+Use `identity.getProfile`, `identity.checkUsernameAvailability`, and `identity.updateProfile` from `createReceizClient`. `avatar` accepts either a raw `File` or a previously returned media proof reference.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const current = await receiz.identity.getProfile();
+const availability = await receiz.identity.checkUsernameAvailability(nextUsername);
+if (!availability.available && !availability.isCurrent) throw new Error("username_taken");
+const result = await receiz.identity.updateProfile({
+  identity: current.identity,
+  expectedHead: current.head,
+  idempotencyKey: `profile:${current.head.digest}:${nextUsername}`,
+  profile: { username: nextUsername, displayName, avatar: avatarFileOrMediaReference },
+});
+if (!await receiz.receipts.verify(result.receipt)) throw new Error("receipt_invalid");
+```
+
+## Required authority
+
+Require the signed-in identity session or delegated `profile` scope. Availability is advisory and never reserves a username. The identity proof, not the username, is the continuity root.
+
+## Required proof head
+
+Pass the exact `head` returned by `identity.getProfile`. Never synthesize it or replace it with DB, session, or UI state.
+
+## Idempotency
+
+Derive one stable key from the intended patch and expected head. Reuse it only for byte-for-byte equivalent intent; changed intent requires a new key.
+
+## Offline behavior
+
+Queue the identity-signed proposal and show `queued` as local intent, never as global completion. A queued rename does not reserve the username.
+
+## Conflict behavior
+
+On `stale_proof_head`, reread the canonical head, show the verified additions, and request confirmation for a rebased append. On `username_taken`, keep the same identity and choose another available username. Never restore the released name by rewriting history.
+
+## Receipt verification
+
+Report `committed` only after `receipts.verify(result.receipt)` returns true and the returned head follows the expected head.
+
+## User confirmation
+
+Show the current and next username, released prior username, profile fields, media identity, expected head, and idempotency key. Require explicit confirmation before mutation.
+
+## MCP parity
+
+Call `receiz_identity_profile_get`, then `receiz_username_check`, then `receiz_identity_profile_update_plan`. Show its consequences and require the exact `confirmationDigest`; call `receiz_identity_profile_update_execute` with identical `planDigest` and `confirmation`, then independently call `receiz_receipt_verify`.
+
+## Emulator fixture
+
+Run `username-race`, `rename-stale-head`, and `offline-rename-global-conflict`. Emulator evidence is simulation evidence, never production verification.

package/receiz-identity-profile/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Identity Profile"
+  short_description: "Operate identity profile proof safely"
+  default_prompt: "Use $receiz-identity-profile to update a Receiz identity profile with exact proof-head and receipt checks."

package/receiz-identity-profile/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-identity-profile",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.identity.continuity", "receiz.history.append-only", "receiz.receipt.verify"],
+  "sdkOperations": ["identity.getProfile", "identity.checkUsernameAvailability", "identity.updateProfile"],
+  "allowedTools": ["receiz_identity_profile_get", "receiz_username_check", "receiz_identity_profile_update_plan", "receiz_identity_profile_update_execute", "receiz_receipt_verify"],
+  "requiredScopes": ["profile"],
+  "emulatorFixtures": ["username-race", "rename-stale-head", "offline-rename-global-conflict"],
+  "forbiddenOperations": ["direct-state-write", "identity-replacement", "username-reservation-assumption", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-mcp-agent-skill/resources/mcp-tool-map.md

@@ -1,6 +1,6 @@
 # MCP Tool Map
 
-## v105 Application Compiler And Semantic Operations
+## v107 Application Compiler And Semantic Operations
 
 | Need | Tool | Mutation |
 |---|---|---|
@@ -22,6 +22,25 @@ verification verdict or proof authority.
 
 Source: `packages/receiz-mcp-server/src/index.ts`.
 
+## v107 Unified Operations
+
+| Need | Tool | Mutation |
+|---|---|---|
+| Read identity/profile proof state | `receiz_identity_profile_get` | Read-only |
+| Check username availability | `receiz_username_check` | Advisory read-only result |
+| Plan identity/profile update | `receiz_identity_profile_update_plan` | Read-only digest-bound plan |
+| Execute identity/profile update | `receiz_identity_profile_update_execute` | Exact plan confirmation and verified receipt required |
+| Plan proof-media publication | `receiz_media_publish_plan` | Read-only digest-bound plan |
+| Execute proof-media publication | `receiz_media_publish_execute` | Exact plan confirmation and verified receipt required |
+| Plan generic bearer claim | `receiz_bearer_asset_claim_plan` | Read-only digest-bound plan |
+| Execute generic bearer claim | `receiz_bearer_asset_claim_execute` | Enclosing artifact verification, exact confirmation, and verified receipt required |
+| Plan continuity synchronization | `receiz_continuity_sync_plan` | Read-only digest-bound plan |
+| Execute continuity synchronization | `receiz_continuity_sync_execute` | Exact plan confirmation and verified receipt required |
+| Read proof head | `receiz_proof_head_get` | Read-only |
+| Verify canonical receipt | `receiz_receipt_verify` | Read-only verification |
+
+Portable artifact restore, namespaced account-state append, and offline command signing remain local SDK operations because the developer-held artifact and key are the stronger source of truth. MCP never upgrades a queued proposal into committed state without canonical admission and receipt verification.
+
 ## Diagnostics And Setup
 
 - `receiz_doctor`: SDK doctor for app/tenant diagnostics.

package/receiz-migrations/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: receiz-migrations
-description: Use when upgrading Receiz schemas, commands, events, projections, rulesets, registries, or v105 applications.
+description: Use when upgrading Receiz schemas, commands, events, projections, rulesets, registries, or applications to v107.
 ---
 
 # receiz-migrations
@@ -50,4 +50,3 @@ Refuse completion when any manifest input, law, test, conformance result, indepe
 Request: Inventory every write, classify its disposition, preserve historical readers, and fail closed on ambiguous authority.
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
-

package/receiz-migrations/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-migrations",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.migration.forward-only",

package/receiz-observability/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-observability",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.observability.lower-authority",

package/receiz-offline-command/SKILL.md

@@ -0,0 +1,72 @@
+---
+name: receiz-offline-command
+description: Use when executing or durably queuing identity-signed Receiz commands while preserving local truth, proof-head order, and conflict isolation.
+---
+
+# Receiz Offline Command
+
+Offline intent is signed and durable but is not global admission. Preserve FIFO order inside each proof-object lane and allow independent lanes to resume in parallel.
+
+## Exact SDK operation
+
+Use `offline.createCommandQueue`, `offline.executeOrQueue`, and `receipts.verify`.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const queue = receiz.offline.createCommandQueue({
+  storage,
+  connected: () => navigator.onLine,
+  execute: sendSignedEnvelope,
+  verifyReceipt: (receipt) => receiz.receipts.verify(receipt),
+  projectLocal: projectVerifiedLocalIntent,
+});
+const result = await queue.executeOrQueue({
+  command: { operation, proofObjectId: expectedHead.aggregateId, payload },
+  identity: deviceIdentity,
+  expectedHead,
+  idempotencyKey,
+});
+if (result.status === "committed" && !await receiz.receipts.verify(result.receipt)) {
+  throw new Error("receipt_invalid");
+}
+```
+
+The one-shot equivalent is `offline.executeOrQueue(input, dependencies)`.
+
+## Required authority
+
+Require the carried Receiz device identity and the operation's delegated scope; generic queue inspection uses `receiz:record`. A signed command is intent, not global admission.
+
+## Required proof head
+
+The command `proofObjectId` must equal `expectedHead.aggregateId`. Use verified local/artifact truth immediately; never refetch weaker state before projecting it.
+
+## Idempotency
+
+The SDK derives a deterministic command ID from operation, payload, proof-object ID, expected head, and idempotency key. Reuse is valid only for the identical command.
+
+## Offline behavior
+
+`queued` means `globallyCommitted: false` and has no receipt. Persist it, project only lawful local intent, and resume on reconnect. Do not display fake global completion.
+
+## Conflict behavior
+
+A conflict stops only its proof-object lane; independent lanes continue. Present the canonical head and require a new confirmed command to rebase. Never mutate an existing envelope.
+
+## Receipt verification
+
+The queue verifies every committed receipt before persisting `committed`. Treat missing, mismatched, or invalid receipts as `receipt_invalid`.
+
+## User confirmation
+
+Require confirmation before enqueue or execution. Show operation, payload consequences, proof-object ID, expected head, idempotency key, and whether the device is offline.
+
+## MCP parity
+
+MCP has no second offline authority or store. Use `receiz_proof_head_get` before the operation-specific plan/execute tools and `receiz_receipt_verify` after admission. A service worker may request resume/status only.
+
+## Emulator fixture
+
+Run `offline-rename-global-conflict` and `interrupted-sync-deterministic-resume` to prove ordering and lane isolation.

package/receiz-offline-command/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Offline Command"
+  short_description: "Queue signed proof-native commands"
+  default_prompt: "Use $receiz-offline-command to execute or queue an identity-signed Receiz command safely."

package/receiz-offline-command/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-offline-command",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.offline.signed-intent", "receiz.local-truth.immediate", "receiz.receipt.verify"],
+  "sdkOperations": ["offline.createCommandQueue", "offline.executeOrQueue", "receipts.verify"],
+  "allowedTools": ["receiz_proof_head_get", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:record"],
+  "emulatorFixtures": ["offline-rename-global-conflict", "interrupted-sync-deterministic-resume"],
+  "forbiddenOperations": ["queued-as-committed", "unsigned-command", "cross-lane-blocking", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-offline-first/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-offline-first",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.offline.verified-local-first",

package/receiz-performance/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-performance",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.performance.known-truth-first",

package/receiz-portable-artifacts/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-portable-artifacts",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.artifact.sealed-truth",

package/receiz-portable-continuity/SKILL.md

@@ -0,0 +1,69 @@
+---
+name: receiz-portable-continuity
+description: Use when restoring Record, Seal, Key, or Vault account truth, appending namespaced local state, or reconciling verified additions across devices.
+---
+
+# Receiz Portable Continuity
+
+Treat the verified portable artifact as the account source of truth. Server reconciliation may append verified additions beneath it; it may not replace it.
+
+## Exact SDK operation
+
+Use `identity.restoreAccount`, `identity.appendAccountState`, `continuity.reconcile`, and `continuity.commit`.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const account = await receiz.identity.restoreAccount(artifactFile, { artifactKind: "receiz-key" });
+const local = await receiz.identity.appendAccountState(account, {
+  expectedHead: account.head,
+  idempotencyKey: `state:${account.head.digest}:calendar`,
+  allowedNamespaces: ["calendar"],
+  additions: { appState: { calendar: verifiedCalendarAddition } },
+});
+const plan = await receiz.continuity.reconcile({ priorOwnerScope, idempotencyKey: `sync:${local.head.digest}` });
+if (plan.status === "conflict") throw new Error("continuity_conflict");
+const committed = await receiz.continuity.commit({
+  priorOwnerScope,
+  receizKeyId: local.identity.keyId,
+  idempotencyKey: `sync:${local.head.digest}`,
+  planDigest: plan.receipt.planDigest,
+});
+```
+
+## Required authority
+
+Local restore authority comes from the verified enclosing artifact. Online reconcile/commit requires a signed-in identity session or delegated `receiz:record` scope. Neither MCP nor server state outranks the artifact.
+
+## Required proof head
+
+Use the restored `account.head` for local appends and the reconciliation plan basis for commit. Reject any head from a different identity-account aggregate.
+
+## Idempotency
+
+Bind the local append key to namespace, additions, and expected head. Bind synchronization to the restored head and prior owner scope. Never reuse a key with changed bytes or scope.
+
+## Offline behavior
+
+Restore and namespaced append work from verified local artifact truth. Online reconciliation waits; it must not make the local signed-in experience half-restored.
+
+## Conflict behavior
+
+On stale head, preserve the restored artifact, inspect verified additions, and append a new resolution. Namespace collisions and owner-scope conflicts stop that lane without erasing other state.
+
+## Receipt verification
+
+Local append evidence is the re-exported verified artifact and new local head. Global synchronization is complete only after the canonical commit result and its verified append evidence; never treat the plan receipt as admission.
+
+## User confirmation
+
+Require confirmation before appending a namespace or committing an owner-scope transition. Show artifact kind, key ID, namespaces, prior scope, head, plan digest, and exact consequences.
+
+## MCP parity
+
+Call `receiz_continuity_sync_plan`, show `writesPerformed: 0`, require the exact confirmation digest, call `receiz_continuity_sync_execute`, and then call `receiz_receipt_verify` for any canonical receipt returned by the committed additions.
+
+## Emulator fixture
+
+Run `interrupted-sync-deterministic-resume` and `portable-restore-cross-app-continuation`.

package/receiz-portable-continuity/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Portable Continuity"
+  short_description: "Restore and reconcile portable identity"
+  default_prompt: "Use $receiz-portable-continuity to restore portable account truth and reconcile verified additions."

package/receiz-portable-continuity/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-portable-continuity",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.identity.portable", "receiz.local-truth.stronger", "receiz.history.append-only"],
+  "sdkOperations": ["identity.restoreAccount", "identity.appendAccountState", "continuity.reconcile", "continuity.commit"],
+  "allowedTools": ["receiz_continuity_sync_plan", "receiz_continuity_sync_execute", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:record"],
+  "emulatorFixtures": ["interrupted-sync-deterministic-resume", "portable-restore-cross-app-continuation"],
+  "forbiddenOperations": ["direct-state-write", "artifact-truth-replacement", "namespace-rewrite", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-proof-media/SKILL.md

@@ -0,0 +1,69 @@
+---
+name: receiz-proof-media
+description: Use when publishing identity-owned avatar or banner proof media or atomically attaching raw or prepublished media to a profile.
+---
+
+# Receiz Proof Media
+
+Media is a proof-bearing identity attachment. Preserve source/transformed digests, media proof identity, owner identity, and verification route.
+
+## Exact SDK operation
+
+Use `media.publishIdentityImage`, `identity.updateProfile`, and `receipts.verify`. Raw `File` input must go directly through the atomic profile update; separately publish only when a reusable proof reference is intended.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const published = await receiz.media.publishIdentityImage({
+  file: avatarFile,
+  kind: "avatar",
+  identityKeyId: current.identity.keyId,
+});
+if (!await receiz.receipts.verify(published.receipt)) throw new Error("receipt_invalid");
+const result = await receiz.identity.updateProfile({
+  identity: current.identity,
+  expectedHead: current.head,
+  idempotencyKey: `avatar:${current.head.digest}:${published.reference.mediaProofId}`,
+  profile: { avatar: published.reference },
+});
+if (!await receiz.receipts.verify(result.receipt)) throw new Error("receipt_invalid");
+```
+
+For one atomic raw upload, pass `profile: { avatar: avatarFile }` to `identity.updateProfile` and skip independent publication.
+
+## Required authority
+
+Independent publication requires `receiz:media.write`; profile attachment requires `profile`. The media owner identity must match the profile identity.
+
+## Required proof head
+
+Independent media publication creates its media proof head. Profile attachment must use the exact current identity/profile head and the full validated media proof reference.
+
+## Idempotency
+
+Bind publication to source bytes, kind, and owner key. Bind attachment to media proof ID and profile head. Never substitute a URL while reusing the same key.
+
+## Offline behavior
+
+Stage raw bytes locally without claiming publication. A known verified media reference may render immediately. Queue attachment intent only with its complete reference and expected profile head.
+
+## Conflict behavior
+
+On media rejection or profile failure, the raw atomic operation rolls back the entire profile mutation. For prepublished media, keep the independently verified media object and rebase only the profile attachment.
+
+## Receipt verification
+
+Verify the publication receipt before reuse and the profile receipt after attachment. Check owner identity and all digests; a URL alone is not proof media.
+
+## User confirmation
+
+Show kind, owner identity, source file, transformed dimensions, verification URL, expected profile head, and whether the operation is atomic raw upload or two-step reusable publication.
+
+## MCP parity
+
+For reusable media, call `receiz_media_publish_plan`, confirm its digest, call `receiz_media_publish_execute`, and call `receiz_receipt_verify`. Then call `receiz_identity_profile_update_plan`, confirm, call `receiz_identity_profile_update_execute`, and verify again.
+
+## Emulator fixture
+
+Run `profile-media-atomic-rollback` and require no partial profile or media attachment after injected failure.

package/receiz-proof-media/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Proof Media"
+  short_description: "Publish identity-owned proof media"
+  default_prompt: "Use $receiz-proof-media to publish and attach identity-owned proof media atomically."

package/receiz-proof-media/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-proof-media",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.media.proof-reference", "receiz.profile.atomic-media", "receiz.receipt.verify"],
+  "sdkOperations": ["media.publishIdentityImage", "identity.updateProfile", "receipts.verify"],
+  "allowedTools": ["receiz_media_publish_plan", "receiz_media_publish_execute", "receiz_identity_profile_update_plan", "receiz_identity_profile_update_execute", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:media.write", "profile"],
+  "emulatorFixtures": ["profile-media-atomic-rollback"],
+  "forbiddenOperations": ["url-as-proof", "partial-profile-media-commit", "owner-substitution", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-proof-skill/resources/sdk-reference.md

@@ -1,6 +1,6 @@
 # SDK Reference For Proof Work
 
-The v105 app compiler APIs (`defineReceizApp`, `compileReceizAppContract`, and
+The v107 app compiler APIs (`defineReceizApp`, `compileReceizAppContract`, and
 repository planning/checking functions) inspect and integrate applications.
 They do not verify proof bytes. Continue to use `verification.verifyArtifact`
 for the indivisible integrity, owner, namespace, and continuity verdict.
@@ -62,6 +62,23 @@ Use proof memory as admitted truth. It is not cache.
 - `receiz.sports.resolveCardMemory(...)`
 - `receiz.sports.resolvePitchDayProof(...)`
 
+## v107 Unified Operations
+
+- `receiz.identity.getProfile()`
+- `receiz.identity.checkUsernameAvailability(...)`
+- `receiz.identity.updateProfile(...)`
+- `receiz.identity.restoreAccount(...)`
+- `receiz.identity.appendAccountState(...)`
+- `receiz.media.publishIdentityImage(...)`
+- `receiz.ownership.claimBearerAsset(...)`
+- `receiz.continuity.reconcile(...)`
+- `receiz.continuity.commit(...)`
+- `receiz.proofHeads.get(...)`
+- `receiz.receipts.verify(...)`
+- `receiz.offline.executeOrQueue(...)`
+
+Mutations require the canonical expected head and idempotency key. Project committed state only after canonical receipt verification; queued offline proposals are not global commitment.
+
 ## Identity Proof Helpers
 
 - `createReceizIdIdentity`

package/receiz-receipt-admission/SKILL.md

@@ -0,0 +1,60 @@
+---
+name: receiz-receipt-admission
+description: Use when verifying a v107 canonical admission receipt, checking proof-head continuity, or refusing tampered and mismatched outcomes.
+---
+
+# Receiz Receipt Admission
+
+A canonical receipt proves admitted append evidence but remains beneath the sealed proof object. Never treat a plan, MCP response, self-hash, or UI success state as admission.
+
+## Exact SDK operation
+
+Use `proofHead.get` and `receipts.verify` after the canonical mutation returns its receipt.
+
+```ts
+import { createReceizClient } from "@receiz/sdk";
+
+const receiz = createReceizClient({ accessToken });
+const before = await receiz.proofHead.get({ aggregateId });
+const result = await executeConfirmedOperation(before);
+if (!await receiz.receipts.verify(result.receipt)) throw new Error("receipt_invalid");
+if (result.receipt.head.aggregateId !== aggregateId) throw new Error("receipt_invalid");
+const after = await receiz.proofHead.get({ aggregateId });
+if (after.digest !== result.receipt.head.digest) throw new Error("stale_proof_head");
+```
+
+## Required authority
+
+Proof-head reads require `receiz:record`. Verification is local cryptographic/structural evidence; it does not grant mutation authority or outrank the sealed artifact.
+
+## Required proof head
+
+Record the aggregate's verified head before mutation. The receipt must bind the same aggregate and its admission head digest; compare the returned canonical head after admission.
+
+## Idempotency
+
+An exact duplicate request must reproduce the original admitted outcome and receipt. Reusing the key with different intent must fail `idempotency_conflict`.
+
+## Offline behavior
+
+Verify carried receipts locally when all verification material is present. A queued command has no canonical receipt and must remain `globallyCommitted: false`.
+
+## Conflict behavior
+
+Reject tampering, aggregate mismatch, prior-head mismatch, invalid digest, and stale head. Preserve the last verified head and require a new confirmed plan; never repair a receipt in place.
+
+## Receipt verification
+
+Require exact canonical schema, admission receipt, receipt digest, head/admission digest equality, and `receipts.verify(...) === true`. Then compare operation, aggregate, and expected transition.
+
+## User confirmation
+
+Receipt verification is read-only. The mutation producing it still requires confirmation of operation, authority, expected head, consequences, and idempotency key. Do not ask users to confirm a receipt after the fact as a substitute for verification.
+
+## MCP parity
+
+Call `receiz_proof_head_get` before planning. After the operation-specific execute tool returns, call `receiz_receipt_verify` independently. The plan digest confirms user intent; the canonical receipt verifies admission; neither replaces the proof object.
+
+## Emulator fixture
+
+Run `duplicate-idempotency-and-conflicting-reuse` and `canonical-receipt-tampering-rejection`.

package/receiz-receipt-admission/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Receiz Receipt Admission"
+  short_description: "Verify admission receipts and heads"
+  default_prompt: "Use $receiz-receipt-admission to verify canonical receipts against the expected proof head."

package/receiz-receipt-admission/manifest.json

@@ -0,0 +1,14 @@
+{
+  "schema": "receiz.ai-skill-contract.v107",
+  "name": "receiz-receipt-admission",
+  "version": "107.0.0",
+  "requires": { "sdk": ">=107.0.0 <108.0.0", "mcp": ">=107.0.0 <108.0.0", "ruleset": "107.0.0", "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6" },
+  "laws": ["receiz.receipt.verify", "receiz.proof-head.continuity", "receiz.stronger-truth.sealed-artifact"],
+  "sdkOperations": ["proofHead.get", "receipts.verify"],
+  "allowedTools": ["receiz_proof_head_get", "receiz_receipt_verify"],
+  "requiredScopes": ["receiz:record"],
+  "emulatorFixtures": ["duplicate-idempotency-and-conflicting-reuse", "canonical-receipt-tampering-rejection"],
+  "forbiddenOperations": ["plan-as-admission", "receipt-repair", "queued-as-committed", "authority-bypass"],
+  "requiredEvidence": ["receipt-verification", "emulator-conformance", "release-lock-pass"],
+  "maximumAutonomousAuthority": "inspect-plan-simulate"
+}

package/receiz-release/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-release",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.release.locked-digest",

package/receiz-testing/manifest.json

@@ -2,10 +2,10 @@
   "schema": "receiz.ai-skill-contract.v106",
   "name": "receiz-testing",
   "requires": {
-    "sdk": ">=106.0.0 <107.0.0",
-    "mcp": ">=106.0.0 <107.0.0",
-    "ruleset": "106.0.0",
-    "registryDigest": "bf851c209e807309672c0f466411baa5607ce6b3195fe4eb16755edfeb7f5a1a"
+    "sdk": ">=107.0.0 <108.0.0",
+    "mcp": ">=107.0.0 <108.0.0",
+    "ruleset": "107.0.0",
+    "registryDigest": "4d0caa6172a69c3bf5817c1c35db5630e555b5d6d824091d45a90fb426b86ef6"
   },
   "laws": [
     "receiz.testing.independent-evidence",