@receiz/ai-skills 108.0.0 → 109.0.0

package/README.md

@@ -4,10 +4,10 @@
 Receiz applications. Fourteen focused constitutional skills supply architecture,
 domain, law, command, authority, replay, offline, causal, artifact, migration,
 performance, observability, testing, and release contracts. The earlier nine
-domain skill names remain packaged for compatibility. Seven operation skill names first introduced in v107 now
-describe current v108 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
-proof media, cross-app state, and admission evidence. Their retired v107 mechanisms are not active defaults.
-Every current manifest uses schema and version `v108` / `108.0.0`, requires SDK/MCP `>=108.0.0 <109.0.0`, and binds ruleset `108.0.0` to registry digest `126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79`.
+domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
+describe current v109 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
+proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
+Every current manifest uses schema and version `v109` / `109.0.0`, requires SDK/MCP `>=109.0.0 <110.0.0`, and binds ruleset `109.0.0` to registry digest `17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70`.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
@@ -27,11 +27,11 @@ Agents may acquire scoped delegated access through the official Receiz Connect/O
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable v107 wire schemas remain available only through the explicit historical `@receiz/sdk/v107` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a v108 outcome.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a v109 outcome.
 
-The v108 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
+The v109 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
 
-Stable v107 schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
+Stable obsolete-versioned schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
 
 Do not invent APIs. Use the SDK and MCP maps inside the skills, then inspect the repo when a requested operation is not listed.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "description": "Authoritative Receiz AI operating skills for proof-native SDK and MCP agents.",
   "type": "module",
   "files": [

package/receiz-app-builder-skill/SKILL.md

@@ -8,7 +8,7 @@ description: Use when starting, integrating, upgrading, diagnosing, or repairing
 Build and upgrade Receiz applications from one typed contract. The compiler is
 integration tooling beneath Receiz proof truth; inspection is not verification.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -39,7 +39,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -89,6 +89,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## When To Use This Skill

package/receiz-app-builder-skill/manifest.json

@@ -1,17 +1,17 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-app-builder-skill",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.artifact.sealed-truth", "receiz.compiler.beneath-proof", "receiz.artifact.verify-before-extract", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_project_inspect", "receiz_app_plan", "receiz_app_apply", "receiz_app_check", "receiz_release_qualify"],
   "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["typecheck", "conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/receiz-architecture/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-architecture",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-authority-security/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-authority-security",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.authority.capability-bound",

package/receiz-bearer-ownership/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-bearer-ownership",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["receiz.ownership.enclosing-proof", "receiz.ownership.carried-continuity", "receiz.artifact.native-record-seal", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["artifacts.verifyAndOpen", "ownership.claimBearerAsset", "artifacts.download"],
   "allowedTools": ["receiz_bearer_asset_claim_plan", "receiz_bearer_asset_claim_execute"],

package/receiz-build-production-system/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-build-production-system",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-causal-sync/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-causal-sync",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.merge.causal",

package/receiz-command-builder/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-command-builder",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.command-only-mutation",

package/receiz-constitutional-laws/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-constitutional-laws",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.registry.digest-alignment",

package/receiz-cross-app-state/SKILL.md

@@ -7,7 +7,7 @@ description: Use when carrying verified namespaced account state between Receiz
 
 Continue the same Receiz identity across applications by restoring portable account truth and appending isolated namespaces. Cross-app continuation is an identity primitive, not session sharing.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,11 +88,13 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Exact SDK operation
 
-Use the current root SDK identity verifier and complete-artifact custody methods. Do not import the historical v107 continuity client.
+Use the current root SDK identity verifier and complete-artifact custody methods. Do not import the historical obsolete-versioned continuity client.
 
 ```ts
 import { createReceizClient } from "@receiz/sdk";
@@ -148,4 +150,4 @@ Call `receiz_artifact_verify` and `receiz_artifact_extract_verified` for input,
 
 ## Emulator fixture
 
-Run current native artifact round-trip, destination reopen, namespace-preservation, and artifact-substitution rejection contracts. Historical v107 reconcile fixtures are archival evidence only.
+Run current native artifact round-trip, destination reopen, namespace-preservation, and artifact-substitution rejection contracts. Historical obsolete-versioned reconcile fixtures are archival evidence only.

package/receiz-cross-app-state/manifest.json

@@ -1,18 +1,18 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-cross-app-state",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.identity.cross-app-continuity", "receiz.namespace.isolation", "receiz.local-truth.immediate", "receiz.artifact.sealed-truth", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen", "identity.readArtifact", "identity.projectAccount"],
   "allowedTools": ["receiz_artifact_verify", "receiz_artifact_extract_verified", "receiz_artifact_record_seal_plan", "receiz_artifact_record_seal_execute", "receiz_artifact_round_trip_check"],
   "requiredScopes": ["receiz:record", "receiz:seal"],
   "emulatorFixtures": ["identity-artifact-helpers", "native-artifact-round-trip", "namespace-preservation", "artifact-substitution-rejection"],
   "forbiddenOperations": ["cross-namespace-write", "identity-fork", "database-as-account-truth", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "retired-reconcile-prerequisite", "history-rewrite", "authority-bypass"],
-  "requiredEvidence": ["same-account-uid-result", "complete-artifact-verification", "native-record-seal", "emulator-conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["same-account-uid-result", "complete-artifact-verification", "native-record-seal", "emulator-conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "maximumAutonomousAuthority": "inspect-plan-simulate"
 }

package/receiz-deterministic-replay/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-deterministic-replay",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.replay.deterministic",

package/receiz-domain-builder/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-domain-builder",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.command-only-mutation",

package/receiz-identity-profile/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: receiz-identity-profile
-description: Use when checking username availability or updating a Receiz profile through the authenticated same-account v108 operation.
+description: Use when checking username availability or updating a Receiz profile through the authenticated same-account v109 operation.
 ---
 
 # Receiz Identity Profile
@@ -52,7 +52,7 @@ On `username_taken`, keep the same account and request another username. Preserv
 
 ## Result verification
 
-Require `status === "updated"`, an `accountUid` equal to the authenticated actor, the returned profile projection, and a `/u/` profile path. The current v108 outcome has no caller proof-head or receipt prerequisite.
+Require `status === "updated"`, an `accountUid` equal to the authenticated actor, the returned profile projection, and a `/u/` profile path. The current v109 outcome has no caller proof-head or receipt prerequisite.
 
 ## User confirmation
 

package/receiz-identity-profile/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-identity-profile",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["receiz.identity.continuity", "receiz.profile.same-account-uid", "receiz.profile.commit-time-username-uniqueness"],
   "sdkOperations": ["identity.checkUsernameAvailability", "profile.update"],
   "allowedTools": ["receiz_identity_profile_update_plan", "receiz_identity_profile_update_execute"],

package/receiz-mcp-agent-skill/resources/mcp-tool-map.md

@@ -1,6 +1,6 @@
 # MCP Tool Map
 
-## v108 Application Compiler
+## v109 Application Compiler
 
 | Need | Tool | Mutation |
 |---|---|---|
@@ -22,7 +22,7 @@ verification verdict or proof authority.
 
 Source: `packages/receiz-mcp-server/src/index.ts`.
 
-## v108 Current Profile And Ownership Outcomes
+## v109 Current Profile And Ownership Outcomes
 
 | Need | Tool | Mutation |
 |---|---|---|
@@ -37,7 +37,7 @@ The bearer plan verifies the complete sealed artifact with `client.artifacts.ver
 
 A verified proof object is not limited to the platform that created it. Any lawful platform may append authenticated ownership and history only while preserving the same immutable object identity, payload, provenance root, prior history, and unknown namespaces, then returning a complete verified proof object. These MCP tools invoke that same SDK continuity and never create an origin-platform lock or parallel chain.
 
-## v108 Complete Artifact Custody
+## v109 Complete Artifact Custody
 
 | Need | Tool | Boundary |
 |---|---|---|
@@ -50,7 +50,7 @@ A verified proof object is not limited to the platform that created it. Any lawf
 
 These six tools preserve artifact and payload as separate byte domains. They never relabel payload bytes, repack a native artifact, or treat MCP state as proof authority.
 
-Stable v107 operation schemas remain available only through their explicit historical compatibility import. They are not part of this active/default tool inventory.
+Obsolete versioned operation schemas are not shipped as installable compatibility surfaces. Historical sealed artifacts and release evidence remain verifiable without carrying obsolete developer APIs forward.
 
 ## Diagnostics And Setup
 

package/receiz-migrations/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: receiz-migrations
-description: Use when upgrading Receiz schemas, commands, events, projections, rulesets, registries, artifacts, or applications to the active v108 contract.
+description: Use when upgrading Receiz schemas, commands, events, projections, rulesets, registries, artifacts, or applications to the active v109 contract.
 ---
 
 # receiz-migrations
 
 Inventory every write, classify its disposition, preserve historical readers, and fail closed on ambiguous authority. Receiz is a proof-native artifact system; this skill operates beneath sealed proof and verified local history.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Constitutional workflow

package/receiz-migrations/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "Receiz Migrations"
   short_description: "Migrate constitutional applications"
-  default_prompt: "Use $receiz-migrations to migrate v108 artifact workflows without payload fallback, byte repacking, or admitted-history rewrite."
+  default_prompt: "Use $receiz-migrations to migrate v109 artifact workflows without payload fallback, byte repacking, or admitted-history rewrite."

package/receiz-migrations/manifest.json

@@ -1,18 +1,18 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-migrations",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.migration.forward-only", "receiz.history.append-only", "receiz.registry.digest-alignment", "receiz.artifact.sealed-truth", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_architecture_inspect", "receiz_bypass_scan", "receiz_command_simulate", "receiz_history_trace", "receiz_conformance_run"],
   "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "applicable-laws", "authority-boundaries", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "escalationConditions": ["authority-bypass-detected", "registry-digest-mismatch", "artifact-law-version-mismatch", "missing-independent-evidence", "missing-capability", "ambiguous-migration"],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/receiz-observability/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-observability",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.observability.lower-authority",

package/receiz-offline-command/SKILL.md

@@ -9,7 +9,7 @@ Offline intent is durable transport state, not global admission. Verified local
 
 ## Exact SDK operation
 
-Use the current root SDK offline proof queue. Do not import the historical v107 signed-command client.
+Use the current root SDK offline proof queue. Do not import the historical obsolete-versioned signed-command client.
 
 ```ts
 import { createReceizClient } from "@receiz/sdk";
@@ -67,4 +67,4 @@ There is no current MCP queue mutation authority. Do not invent one and do not c
 
 ## Emulator fixture
 
-Run the current offline proof replay, durable queue, and artifact-substitution rejection contracts. Historical v107 signed-command fixtures remain archival evidence only.
+Run the current offline proof replay, durable queue, and artifact-substitution rejection contracts. Historical obsolete-versioned signed-command fixtures remain archival evidence only.

package/receiz-offline-command/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-offline-command",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["receiz.offline.transport-intent", "receiz.local-truth.immediate", "artifact.verify-before-extract"],
   "sdkOperations": ["offline.createQueue", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_artifact_verify", "receiz_artifact_explain"],

package/receiz-offline-first/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-offline-first",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.offline.verified-local-first",

package/receiz-offline-verifier-skill/SKILL.md

@@ -7,7 +7,7 @@ description: Use when an agent must verify, explain, debug, or build Receiz offl
 
 Offline verification is a Receiz primitive. It verifies artifact truth without requiring the server, database, session, or marketplace to answer first.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## When To Use This Skill

package/receiz-offline-verifier-skill/manifest.json

@@ -1,17 +1,17 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-offline-verifier-skill",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.offline-proof.primitive", "receiz.artifact.verify-before-extract", "receiz.truth.stronger-first", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_inspect_offline_file", "receiz_inspect_proof_object", "receiz_asset_by_id"],
   "forbiddenOperations": ["payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["installed-sdk-version", "active-registry-digest", "artifact-law-version", "labeled-byte-domains", "complete-sealed-artifact", "cross-app-destination"],
-  "requiredEvidence": ["exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "maximumAutonomousAuthority": "inspect-verify-report"
 }

package/receiz-performance/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-performance",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
   "laws": [
     "receiz.performance.known-truth-first",

package/receiz-portable-artifacts/SKILL.md

@@ -7,7 +7,7 @@ description: Use when creating, importing, exporting, inspecting, signing, or ve
 
 Bind payloads to the enclosing sealed artifact, preserve provenance and history, and verify without server authority. Receiz is a proof-native artifact system; this skill operates beneath sealed proof and verified local history.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Constitutional workflow

package/receiz-portable-artifacts/manifest.json

@@ -1,23 +1,23 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-portable-artifacts",
-  "version": "108.0.0",
+  "version": "109.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=109.0.0 <110.0.0",
+    "mcp": ">=109.0.0 <110.0.0",
+    "ruleset": "109.0.0",
+    "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70"
   },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.artifact.sealed-truth", "receiz.portability.offline-verifiable", "receiz.truth.stronger-first", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_architecture_inspect", "receiz_history_trace", "receiz_conformance_run"],
   "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "applicable-laws", "authority-boundaries", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "escalationConditions": ["authority-bypass-detected", "registry-digest-mismatch", "artifact-law-version-mismatch", "missing-independent-evidence", "missing-capability"],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/receiz-portable-continuity/SKILL.md

@@ -11,7 +11,7 @@ The originating platform has no continuing ownership of the proof boundary. Any
 
 ## Exact SDK operation
 
-Use the current root SDK identity verifier and native artifact custody methods. Do not import the historical v107 continuity client.
+Use the current root SDK identity verifier and native artifact custody methods. Do not import the historical obsolete-versioned continuity client.
 
 ```ts
 import { createReceizClient } from "@receiz/sdk";
@@ -67,4 +67,4 @@ Use `receiz_artifact_verify` and `receiz_artifact_extract_verified` for carried
 
 ## Emulator fixture
 
-Run the current identity-artifact helper, native artifact round-trip, and artifact-substitution rejection contracts. Historical v107 reconciliation fixtures are archival evidence only and are not a v108 operation contract.
+Run the current identity-artifact helper, native artifact round-trip, and artifact-substitution rejection contracts. Historical obsolete-versioned reconciliation fixtures are archival evidence only and are not a v109 operation contract.

package/receiz-portable-continuity/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-portable-continuity",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["receiz.identity.portable", "artifact.complete-object-custody", "artifact.verify-before-extract", "receiz.history.append-only", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["identity.readArtifact", "identity.projectAccount", "artifacts.verifyAndOpen", "assets.createProofObject", "artifacts.download"],
   "allowedTools": ["receiz_artifact_verify", "receiz_artifact_extract_verified", "receiz_artifact_record_seal_plan", "receiz_artifact_record_seal_execute", "receiz_artifact_round_trip_check"],

package/receiz-proof-media/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-proof-media",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["receiz.media.enclosing-proof-object", "receiz.artifact.native-record-seal", "receiz.profile.same-account-uid"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "profile.update"],
   "allowedTools": ["receiz_identity_profile_update_plan", "receiz_identity_profile_update_execute"],

package/receiz-proof-skill/SKILL.md

@@ -7,7 +7,7 @@ description: Use when an agent must verify, inspect, explain, or report on Recei
 
 Receiz proof inspection starts from the artifact, manifest, proof bundle, verified append, or admitted local register. Do not start from a database row, marketplace card, UI state, or model memory.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## When To Use This Skill

package/receiz-proof-skill/manifest.json

@@ -1,17 +1,17 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-proof-skill",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.artifact.sealed-truth", "receiz.artifact.verify-before-extract", "receiz.truth.stronger-first", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_inspect_offline_file", "receiz_asset_by_url", "receiz_card_history", "receiz_pitch_proof_by_witness_id"],
   "forbiddenOperations": ["payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["installed-sdk-version", "active-registry-digest", "artifact-law-version", "labeled-byte-domains", "complete-sealed-artifact", "cross-app-destination"],
-  "requiredEvidence": ["exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "maximumAutonomousAuthority": "inspect-verify-report"
 }

package/receiz-proof-skill/resources/sdk-reference.md

@@ -1,6 +1,6 @@
 # SDK Reference For Proof Work
 
-The v108 app compiler APIs (`defineReceizApp`, `compileReceizAppContract`, and
+The v109 app compiler APIs (`defineReceizApp`, `compileReceizAppContract`, and
 repository planning/checking functions) inspect and integrate applications.
 They do not verify proof bytes. Use the SDK artifact-custody workflow for
 construction, exact-byte download, enclosing verification, and extraction.
@@ -78,7 +78,7 @@ The exact native Record -> Seal byte sequence is the artifact. The payload is a
 
 In the workflow above, `file` is the complete sealed artifact selected for verification, never the source payload.
 
-## v108 Native Profile, Artifact, And Ownership Outcomes
+## v109 Native Profile, Artifact, And Ownership Outcomes
 
 - `receiz.profile.update(profile)` applies the patch to the authenticated session/OIDC actor and returns that same account's `accountUid`, profile projection, and public path.
 - `receiz.identity.checkUsernameAvailability(username)` is advisory only; commit-time uniqueness decides the update.
@@ -93,7 +93,7 @@ Bearer ownership accepts only the sealed-artifact handle produced by complete ve
 
 A verified proof object is not limited to the platform that created it. Any lawful platform may append authenticated ownership and history only while preserving the same immutable object identity, payload, provenance root, prior history, and unknown namespaces, then returning a complete verified proof object. SDK verification and append operations preserve that one continuity chain without granting authority to the origin platform.
 
-Stable v107 schemas remain historical compatibility imports. Do not teach their key/head/receipt mechanics as the active v108 profile or bearer outcome.
+Stable obsolete-versioned schemas remain historical compatibility imports. Do not teach their key/head/receipt mechanics as the active v109 profile or bearer outcome.
 
 ## Identity Proof Helpers
 

package/receiz-receipt-admission/SKILL.md

@@ -5,7 +5,7 @@ description: Use when inspecting admission evidence while preserving the rule th
 
 # Receiz Receipt Admission
 
-Current admission evidence begins with the complete verified proof object. Historical receipts may remain immutable witnesses of the law and digest they recorded, but they do not authorize or qualify a current v108 outcome.
+Current admission evidence begins with the complete verified proof object. Historical receipts may remain immutable witnesses of the law and digest they recorded, but they do not authorize or qualify a current v109 outcome.
 
 ## Exact SDK operation
 
@@ -54,7 +54,7 @@ Read-only verification requires no confirmation. Any mutation that creates a new
 
 ## MCP parity
 
-Use `receiz_artifact_verify`, `receiz_artifact_round_trip_check`, and `receiz_artifact_explain`. They share the current SDK verifier and cannot authorize mutation. Do not call retired proof-head or receipt tools for a v108 outcome.
+Use `receiz_artifact_verify`, `receiz_artifact_round_trip_check`, and `receiz_artifact_explain`. They share the current SDK verifier and cannot authorize mutation. Do not call retired proof-head or receipt tools for a v109 outcome.
 
 ## Emulator fixture
 

package/receiz-receipt-admission/manifest.json

@@ -1,8 +1,8 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-receipt-admission",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
   "laws": ["artifact.complete-object-custody", "artifact.verify-before-extract", "developer-evidence.additive-only", "receiz.stronger-truth.sealed-artifact"],
   "sdkOperations": ["artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_artifact_verify", "receiz_artifact_round_trip_check", "receiz_artifact_explain"],

package/receiz-release/SKILL.md

@@ -7,7 +7,7 @@ description: Use when qualifying, locking, packaging, attesting, or preparing pu
 
 Require package, registry, verifier, migration, conformance, security, performance, documentation, and attestation parity. Receiz is a proof-native artifact system; this skill operates beneath sealed proof and verified local history.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -33,12 +33,12 @@ if (opened.sealedArtifact.artifactSha256 !== sealedArtifact.artifactSha256) thro
 if (opened.verifiedPayload.sha256 !== sealedArtifact.payloadSha256) throw new Error("payload_binding_mismatch");
 ```
 
-Independently hash the saved bytes and require equality with `sealedArtifact.artifactSha256`. Require `verification.ok`, `integrity.ok`, carrier `native-record-seal`, Signature V4, owner, claim, and verify-path agreement. Reopen the exact saved file with `verifyAndOpen`, then prove a different Receiz application preserves identity, cards, history, receipts, and unknown namespaces. Require SDK, MCP, and AI packages to report the same v108 registry digest and artifact-law version before release qualification.
+Independently hash the saved bytes and require equality with `sealedArtifact.artifactSha256`. Require `verification.ok`, `integrity.ok`, carrier `native-record-seal`, Signature V4, owner, claim, and verify-path agreement. Reopen the exact saved file with `verifyAndOpen`, then prove a different Receiz application preserves identity, cards, history, receipts, and unknown namespaces. Require SDK, MCP, and AI packages to report the same v109 registry digest and artifact-law version before release qualification.
 
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Constitutional workflow

package/receiz-release/manifest.json

@@ -1,18 +1,18 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-release",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.release.locked-digest", "receiz.registry.digest-alignment", "receiz.testing.independent-evidence", "receiz.artifact.sealed-truth", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_architecture_inspect", "receiz_law_coverage", "receiz_bypass_scan", "receiz_conformance_run", "receiz_release_verify"],
   "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "applicable-laws", "authority-boundaries", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "escalationConditions": ["authority-bypass-detected", "registry-digest-mismatch", "artifact-law-version-mismatch", "missing-independent-evidence", "missing-capability"],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/receiz-testing/SKILL.md

@@ -7,7 +7,7 @@ description: Use when designing or running Receiz conformance, law, mutation, re
 
 Build positive and negative fixtures that independently prove laws, atomicity, replay, compatibility, and bypass refusal. Receiz is a proof-native artifact system; this skill operates beneath sealed proof and verified local history.
 
-## Binding v108 artifact law
+## Binding v109 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v109 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,6 +88,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Constitutional workflow

package/receiz-testing/manifest.json

@@ -1,18 +1,18 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v109",
   "name": "receiz-testing",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
+  "version": "109.0.0",
+  "requires": { "sdk": ">=109.0.0 <110.0.0", "mcp": ">=109.0.0 <110.0.0", "ruleset": "109.0.0", "registryDigest": "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70" },
+  "artifactLawVersion": "109.0.0",
+  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010", "ARTIFACT-011"],
   "laws": ["receiz.testing.independent-evidence", "receiz.replay.deterministic", "receiz.command-only-mutation", "receiz.artifact.sealed-truth", "ownership.cross-platform-proof-object-continuity"],
   "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
   "allowedTools": ["receiz_law_coverage", "receiz_command_simulate", "receiz_receipt_replay", "receiz_merge_simulate", "receiz_bypass_scan", "receiz_conformance_run"],
   "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
   "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "applicable-laws", "authority-boundaries", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass"],
+  "requiredEvidence": ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance", "independent-verifier", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
+  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result", "network-calls-during-verification", "local-verifier-result"],
+  "completionCriteria": ["written-implementation-contract", "constitutional-context-digest-match", "all-required-evidence-pass", "release-lock-pass", "zero-network-verification", "local-verifier-result"],
   "escalationConditions": ["authority-bypass-detected", "registry-digest-mismatch", "artifact-law-version-mismatch", "missing-independent-evidence", "missing-capability"],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/scripts/validate-skills.ts

@@ -151,23 +151,25 @@ const artifactSkills = [
   "receiz-release",
 ] as const;
 
-const artifactRegistryDigest = "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79";
-const artifactLaws = Array.from({ length: 10 }, (_, index) => `ARTIFACT-${String(index + 1).padStart(3, "0")}`);
+const artifactRegistryDigest = "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70";
+const artifactLaws = Array.from({ length: 11 }, (_, index) => `ARTIFACT-${String(index + 1).padStart(3, "0")}`);
 const artifactSdkOperations = ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"] as const;
 const artifactEvidence = [
   "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4",
   "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip",
-  "legacy-read-compatibility", "release-lock-pass",
+  "legacy-read-compatibility", "release-lock-pass", "zero-network-verification", "local-verifier-result",
 ] as const;
 const artifactCompletionFields = [
   "sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version",
   "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result",
   "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result",
+  "network-calls-during-verification", "local-verifier-result",
 ] as const;
 const artifactCompletionLabels = [
   "SDK version:", "Registry digest:", "Artifact law version:", "Artifact carrier:", "Signature version:",
   "Artifact digest:", "Payload digest:", "Owner and claim binding:", "Independent verification result:",
   "Cross-platform round-trip result:", "Legacy compatibility result:", "Release-lock result:",
+  "Network calls during verification: 0", "Local verifier result:",
 ] as const;
 const artifactProhibitions = [
   "Never download an unsealed payload fallback.",
@@ -332,13 +334,13 @@ function assertConstitutionalSkill(name: (typeof constitutionalSkills)[number]):
   for (const section of ["## Constitutional workflow", "## Machine contract", "## Quick reference", "## Common mistakes", "## Completion refusal", "## Example"]) {
     if (!text.includes(section)) fail(`${name}/SKILL.md missing section ${section}`);
   }
-  if (manifest.schema !== "receiz.ai-skill-contract.v108" || manifest.name !== name || manifest.version !== "108.0.0") {
+  if (manifest.schema !== "receiz.ai-skill-contract.v109" || manifest.name !== name || manifest.version !== "109.0.0") {
     fail(`${name}/manifest.json has invalid schema or name`);
   }
   const serialized = JSON.stringify(manifest);
   for (const required of [
-    ">=108.0.0 <109.0.0",
-    "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79",
+    ">=109.0.0 <110.0.0",
+    "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70",
     "direct-state-write",
     "history-rewrite",
     "authority-bypass",
@@ -369,14 +371,14 @@ function assertOperationSkill(name: (typeof operationSkills)[number]): void {
     if (!text.includes(section)) fail(`${name}/SKILL.md missing section ${section}`);
   }
   if (!/```ts[\s\S]*createReceizClient[\s\S]*```/.test(text)) fail(`${name}/SKILL.md missing copy-paste TypeScript`);
-  if (manifest.schema !== "receiz.ai-skill-contract.v108" || manifest.name !== name || manifest.version !== "108.0.0") {
+  if (manifest.schema !== "receiz.ai-skill-contract.v109" || manifest.name !== name || manifest.version !== "109.0.0") {
     fail(`${name}/manifest.json has invalid schema, name, or version`);
   }
   const serialized = JSON.stringify(manifest);
   for (const required of [
-    ">=108.0.0 <109.0.0",
-    "108.0.0",
-    "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79",
+    ">=109.0.0 <110.0.0",
+    "109.0.0",
+    "17f76b37c9fcd46f710239b5c1660b03cc34ec64bed30d1cc45c18d5d40eab70",
     "emulator-conformance",
     "release-lock-pass",
     "inspect-plan-simulate",
@@ -394,10 +396,10 @@ function assertOperationSkill(name: (typeof operationSkills)[number]): void {
       if (!serialized.includes(required)) fail(`${name}/manifest.json missing ${required}`);
     }
     if (/identity\.getProfile|identity\.restoreAccount|identity\.appendAccountState|continuity\.reconcile|continuity\.commit|offline\.createCommandQueue|offline\.executeOrQueue|proofHead\.get|receipts\.verify|identityKeyId|expectedOwnershipHead|claimantKeyId|receiz_proof_head_get|receiz_receipt_verify|receiz_continuity_sync_plan|receiz_continuity_sync_execute|media\.publishIdentityImage/.test(text + serialized)) {
-      fail(`${name} retains a retired v107 prerequisite in the active v108 outcome`);
+      fail(`${name} retains a retired obsolete-versioned prerequisite in the active v109 outcome`);
     }
     if (/## Required proof head|## Receipt verification/.test(text)) {
-      fail(`${name}/SKILL.md retains a retired v107 current-outcome section`);
+      fail(`${name}/SKILL.md retains a retired obsolete-versioned current-outcome section`);
     }
   } else if (!serialized.includes("receipt-verification")) {
     fail(`${name}/manifest.json missing receipt-verification compatibility evidence`);
@@ -432,13 +434,13 @@ function assertArtifactSkill(name: (typeof artifactSkills)[number]): void {
     fail(`${name}/SKILL.md must refuse production-ready completion without evidence`);
   }
 
-  if (manifest.schema !== "receiz.ai-skill-contract.v108" || manifest.name !== name || manifest.version !== "108.0.0") {
-    fail(`${name}/manifest.json has invalid v108 schema, name, or version`);
+  if (manifest.schema !== "receiz.ai-skill-contract.v109" || manifest.name !== name || manifest.version !== "109.0.0") {
+    fail(`${name}/manifest.json has invalid v109 schema, name, or version`);
   }
-  if (requires?.ruleset !== "108.0.0" || requires.registryDigest !== artifactRegistryDigest) {
+  if (requires?.ruleset !== "109.0.0" || requires.registryDigest !== artifactRegistryDigest) {
     fail(`${name}/manifest.json has artifact registry or ruleset skew`);
   }
-  if (manifest.artifactLawVersion !== "108.0.0" || JSON.stringify(manifest.artifactLaws) !== JSON.stringify(artifactLaws)) {
+  if (manifest.artifactLawVersion !== "109.0.0" || JSON.stringify(manifest.artifactLaws) !== JSON.stringify(artifactLaws)) {
     fail(`${name}/manifest.json has artifact law version or law-set skew`);
   }
   const sdkOperations = Array.isArray(manifest.sdkOperations) ? manifest.sdkOperations : [];