@receiz/ai-skills 108.0.0 → 110.0.0

package/README.md

@@ -4,10 +4,10 @@
 Receiz applications. Fourteen focused constitutional skills supply architecture,
 domain, law, command, authority, replay, offline, causal, artifact, migration,
 performance, observability, testing, and release contracts. The earlier nine
-domain skill names remain packaged for compatibility. Seven operation skill names first introduced in v107 now
-describe current v108 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
-proof media, cross-app state, and admission evidence. Their retired v107 mechanisms are not active defaults.
-Every current manifest uses schema and version `v108` / `108.0.0`, requires SDK/MCP `>=108.0.0 <109.0.0`, and binds ruleset `108.0.0` to registry digest `126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79`.
+domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
+describe current v110 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
+proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
+Every current manifest uses schema and version `v110` / `110.0.0`, requires SDK/MCP `>=110.0.0 <111.0.0`, and binds ruleset `110.0.0` to registry digest `824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4`.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
@@ -27,11 +27,11 @@ Agents may acquire scoped delegated access through the official Receiz Connect/O
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable v107 wire schemas remain available only through the explicit historical `@receiz/sdk/v107` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a v108 outcome.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains. Its machine-readable manifest requires the exact active signed registry digest, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a v110 outcome.
 
-The v108 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
+The v110 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
 
-Stable v107 schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
+Stable obsolete-versioned schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
 
 Do not invent APIs. Use the SDK and MCP maps inside the skills, then inspect the repo when a requested operation is not listed.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "description": "Authoritative Receiz AI operating skills for proof-native SDK and MCP agents.",
   "type": "module",
   "files": [

package/receiz-app-builder-skill/SKILL.md

@@ -8,7 +8,7 @@ description: Use when starting, integrating, upgrading, diagnosing, or repairing
 Build and upgrade Receiz applications from one typed contract. The compiler is
 integration tooling beneath Receiz proof truth; inspection is not verification.
 
-## Binding v108 artifact law
+## Binding v110 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -39,7 +39,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v110 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -89,6 +89,8 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## When To Use This Skill
@@ -199,3 +201,29 @@ Resources:
 - [Authority boundaries](resources/authority-boundaries.md)
 - [Generated-file repair](resources/generated-file-repair.md)
 - [Upgrade rules](resources/upgrade-rules.md)
+
+## v110 unified admission and recovery
+
+Use `receiz.artifacts.admit(file)` to verify the complete artifact before classification. Verdicts are exactly `canonical-identity`, `bearer-recovery`, `verified-legacy-read`, `foreign-owner`, or `invalid`. Every verified result must report `canRestore`, `canSign`, `canClaimOwnership`, `canPublish`, and `canSettle` without inferring stronger authority from possession.
+
+Use `receiz.artifacts.planRecovery(admission)` for an explicit read-only plan, or `receiz.artifacts.admitAndRecover(file)` for zero-network, read-only verification and recovery planning. Both perform zero writes. The standard proof history, parent links, ownership transitions, terminal events, unknown namespaces, plan digest, and explicit permitted actions must remain intact. Explanation is not authority; the underlying sealed proof object remains authority.
+
+Commit only through `receiz.artifacts.commitRecovery(plan, capability, idempotencyKey, store)`. Raw capability authority is forbidden. MCP JSON must never carry a capability or store object; use runtime-resolved verified capability and a caller-provided local atomic store. The SDK/MCP/AI operation identity must match.
+
+- Never admit a card-only payload as a Receiz artifact.
+- Never treat an explanation as proof authority.
+- Never accept raw capability JSON as recovery authority.
+- Never hide mutation inside `admitAndRecover` or a recovery plan.
+
+Current MCP parity: `receiz_artifact_admit`, `receiz_artifact_recovery_plan`, `receiz_artifact_admit_and_recover`, and `receiz_artifact_recovery_commit`.
+
+Required completion evidence:
+
+```md
+Admission verdict:
+Permitted actions:
+Proof history digest:
+Recovery plan digest:
+Operation identity:
+Atomic commit result:
+```

package/receiz-app-builder-skill/manifest.json

@@ -1,17 +1,130 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-app-builder-skill",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
-  "laws": ["receiz.artifact.sealed-truth", "receiz.compiler.beneath-proof", "receiz.artifact.verify-before-extract", "ownership.cross-platform-proof-object-continuity"],
-  "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen"],
-  "allowedTools": ["receiz_project_inspect", "receiz_app_plan", "receiz_app_apply", "receiz_app_check", "receiz_release_qualify"],
-  "forbiddenOperations": ["direct-state-write", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "history-rewrite", "authority-bypass"],
-  "requiredInputs": ["repository-root", "installed-sdk-version", "active-registry-digest", "artifact-law-version", "labeled-byte-domains", "cross-app-destination"],
-  "requiredEvidence": ["typecheck", "conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "version": "110.0.0",
+  "requires": {
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
+  },
+  "artifactLawVersion": "110.0.0",
+  "artifactLaws": [
+    "ARTIFACT-001",
+    "ARTIFACT-002",
+    "ARTIFACT-003",
+    "ARTIFACT-004",
+    "ARTIFACT-005",
+    "ARTIFACT-006",
+    "ARTIFACT-007",
+    "ARTIFACT-008",
+    "ARTIFACT-009",
+    "ARTIFACT-010",
+    "ARTIFACT-011",
+    "ARTIFACT-012",
+    "ARTIFACT-013",
+    "ARTIFACT-014",
+    "ARTIFACT-015"
+  ],
+  "laws": [
+    "receiz.artifact.sealed-truth",
+    "receiz.compiler.beneath-proof",
+    "receiz.artifact.verify-before-extract",
+    "ownership.cross-platform-proof-object-continuity"
+  ],
+  "sdkOperations": [
+    "assets.createProofObject",
+    "artifacts.download",
+    "artifacts.verifyAndOpen",
+    "artifacts.admit",
+    "artifacts.planRecovery",
+    "artifacts.admitAndRecover",
+    "artifacts.commitRecovery"
+  ],
+  "allowedTools": [
+    "receiz_project_inspect",
+    "receiz_app_plan",
+    "receiz_app_apply",
+    "receiz_app_check",
+    "receiz_release_qualify",
+    "receiz_artifact_admit",
+    "receiz_artifact_recovery_plan",
+    "receiz_artifact_admit_and_recover",
+    "receiz_artifact_recovery_commit"
+  ],
+  "forbiddenOperations": [
+    "direct-state-write",
+    "payload-fallback",
+    "payload-relabel-as-artifact",
+    "artifact-repack",
+    "shape-only-verification",
+    "history-rewrite",
+    "authority-bypass",
+    "hidden-recovery-mutation",
+    "explanation-as-authority",
+    "raw-capability-authority",
+    "card-payload-admission"
+  ],
+  "requiredInputs": [
+    "repository-root",
+    "installed-sdk-version",
+    "active-registry-digest",
+    "artifact-law-version",
+    "labeled-byte-domains",
+    "cross-app-destination"
+  ],
+  "requiredEvidence": [
+    "typecheck",
+    "conformance",
+    "exact-artifact-byte-identity",
+    "artifact-digest-match",
+    "payload-digest-binding",
+    "signature-v4",
+    "owner-claim-binding",
+    "independent-artifact-verification",
+    "cross-platform-round-trip",
+    "legacy-read-compatibility",
+    "release-lock-pass",
+    "zero-network-verification",
+    "local-verifier-result",
+    "unified-admission-verdicts",
+    "explicit-permitted-actions",
+    "verified-proof-history",
+    "zero-network-read-only-coordinator",
+    "atomic-recovery-commit",
+    "operation-identity-parity",
+    "multi-application-convergence"
+  ],
+  "requiredCompletionFields": [
+    "sdk-version",
+    "registry-digest",
+    "artifact-law-version",
+    "artifact-carrier",
+    "signature-version",
+    "artifact-digest",
+    "payload-digest",
+    "owner-and-claim-binding",
+    "independent-verification-result",
+    "cross-platform-round-trip-result",
+    "legacy-compatibility-result",
+    "release-lock-result",
+    "network-calls-during-verification",
+    "local-verifier-result",
+    "admission-verdict",
+    "permitted-actions",
+    "proof-history-digest",
+    "recovery-plan-digest",
+    "operation-identity",
+    "atomic-commit-result"
+  ],
+  "completionCriteria": [
+    "all-required-evidence-pass",
+    "release-lock-pass",
+    "zero-network-verification",
+    "local-verifier-result",
+    "v110-admission-recovery-conformance",
+    "no-hidden-mutation",
+    "explanation-remains-non-authoritative"
+  ],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
 }

package/receiz-architecture/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-architecture",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-authority-security/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-authority-security",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.authority.capability-bound",

package/receiz-bearer-ownership/SKILL.md

@@ -67,3 +67,7 @@ The active MCP path calls `client.artifacts.verifyAndOpen(completeFile)`, then `
 ## Emulator fixture
 
 Run `generic-bearer-transfer` and `previous-owner-projection-invalidation` across qualifying artifact families. Require the prior ownership reference to come from carried verified proof and the output to be a native sealed artifact.
+
+## v110 recovery authority
+
+Call `artifacts.admit` before recovery planning. A `bearer-recovery` verdict may report `canRestore` or a capability-gated `canClaimOwnership`, but it must report `canSign: false`, `canPublish: false`, and `canSettle: false`. Possession never becomes canonical identity. Commit only an SDK-issued plan through a runtime-verified capability, stable idempotency key, expected head, and atomic local store.

package/receiz-bearer-ownership/manifest.json

@@ -1,14 +1,14 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-bearer-ownership",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
+  "version": "110.0.0",
+  "requires": { "sdk": ">=110.0.0 <111.0.0", "mcp": ">=110.0.0 <111.0.0", "ruleset": "110.0.0", "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4" },
   "laws": ["receiz.ownership.enclosing-proof", "receiz.ownership.carried-continuity", "receiz.artifact.native-record-seal", "ownership.cross-platform-proof-object-continuity"],
-  "sdkOperations": ["artifacts.verifyAndOpen", "ownership.claimBearerAsset", "artifacts.download"],
-  "allowedTools": ["receiz_bearer_asset_claim_plan", "receiz_bearer_asset_claim_execute"],
+  "sdkOperations": ["artifacts.verifyAndOpen", "artifacts.admit", "artifacts.planRecovery", "artifacts.commitRecovery", "ownership.claimBearerAsset", "artifacts.download"],
+  "allowedTools": ["receiz_bearer_asset_claim_plan", "receiz_bearer_asset_claim_execute", "receiz_artifact_admit", "receiz_artifact_recovery_plan", "receiz_artifact_recovery_commit"],
   "requiredScopes": ["receiz:record", "receiz:seal"],
   "emulatorFixtures": ["generic-bearer-transfer", "previous-owner-projection-invalidation"],
-  "forbiddenOperations": ["direct-state-write", "payload-as-claim-input", "caller-owner-substitution", "caller-proof-head-prerequisite", "claim-key-prerequisite", "receipt-authority", "origin-platform-lock", "authority-bypass"],
+  "forbiddenOperations": ["direct-state-write", "payload-as-claim-input", "caller-owner-substitution", "caller-proof-head-prerequisite", "claim-key-prerequisite", "receipt-authority", "origin-platform-lock", "bearer-authority-escalation", "raw-capability-authority", "authority-bypass"],
   "requiredEvidence": ["complete-artifact-verification", "native-record-seal", "emulator-conformance", "release-lock-pass"],
   "maximumAutonomousAuthority": "inspect-plan-simulate"
 }

package/receiz-build-production-system/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-build-production-system",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.truth.stronger-first",

package/receiz-causal-sync/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-causal-sync",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.merge.causal",

package/receiz-command-builder/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-command-builder",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.command-only-mutation",

package/receiz-constitutional-laws/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-constitutional-laws",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.registry.digest-alignment",

package/receiz-cross-app-state/SKILL.md

@@ -7,7 +7,7 @@ description: Use when carrying verified namespaced account state between Receiz
 
 Continue the same Receiz identity across applications by restoring portable account truth and appending isolated namespaces. Cross-app continuation is an identity primitive, not session sharing.
 
-## Binding v108 artifact law
+## Binding v110 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -38,7 +38,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active signed v108 registry and `ARTIFACT-001` through `ARTIFACT-010`.
+2. Load the active signed v110 registry and `ARTIFACT-001` through `ARTIFACT-010`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -88,11 +88,13 @@ Independent verification result:
 Cross-platform round-trip result:
 Legacy compatibility result:
 Release-lock result:
+Network calls during verification: 0
+Local verifier result:
 ```
 
 ## Exact SDK operation
 
-Use the current root SDK identity verifier and complete-artifact custody methods. Do not import the historical v107 continuity client.
+Use the current root SDK identity verifier and complete-artifact custody methods. Do not import the historical obsolete-versioned continuity client.
 
 ```ts
 import { createReceizClient } from "@receiz/sdk";
@@ -148,4 +150,30 @@ Call `receiz_artifact_verify` and `receiz_artifact_extract_verified` for input,
 
 ## Emulator fixture
 
-Run current native artifact round-trip, destination reopen, namespace-preservation, and artifact-substitution rejection contracts. Historical v107 reconcile fixtures are archival evidence only.
+Run current native artifact round-trip, destination reopen, namespace-preservation, and artifact-substitution rejection contracts. Historical obsolete-versioned reconcile fixtures are archival evidence only.
+
+## v110 unified admission and recovery
+
+Use `receiz.artifacts.admit(file)` to verify the complete artifact before classification. Verdicts are exactly `canonical-identity`, `bearer-recovery`, `verified-legacy-read`, `foreign-owner`, or `invalid`. Every verified result must report `canRestore`, `canSign`, `canClaimOwnership`, `canPublish`, and `canSettle` without inferring stronger authority from possession.
+
+Use `receiz.artifacts.planRecovery(admission)` for an explicit read-only plan, or `receiz.artifacts.admitAndRecover(file)` for zero-network, read-only verification and recovery planning. Both perform zero writes. The standard proof history, parent links, ownership transitions, terminal events, unknown namespaces, plan digest, and explicit permitted actions must remain intact. Explanation is not authority; the underlying sealed proof object remains authority.
+
+Commit only through `receiz.artifacts.commitRecovery(plan, capability, idempotencyKey, store)`. Raw capability authority is forbidden. MCP JSON must never carry a capability or store object; use runtime-resolved verified capability and a caller-provided local atomic store. The SDK/MCP/AI operation identity must match.
+
+- Never admit a card-only payload as a Receiz artifact.
+- Never treat an explanation as proof authority.
+- Never accept raw capability JSON as recovery authority.
+- Never hide mutation inside `admitAndRecover` or a recovery plan.
+
+Current MCP parity: `receiz_artifact_admit`, `receiz_artifact_recovery_plan`, `receiz_artifact_admit_and_recover`, and `receiz_artifact_recovery_commit`.
+
+Required completion evidence:
+
+```md
+Admission verdict:
+Permitted actions:
+Proof history digest:
+Recovery plan digest:
+Operation identity:
+Atomic commit result:
+```

package/receiz-cross-app-state/manifest.json

@@ -1,18 +1,140 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-cross-app-state",
-  "version": "108.0.0",
-  "requires": { "sdk": ">=108.0.0 <109.0.0", "mcp": ">=108.0.0 <109.0.0", "ruleset": "108.0.0", "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79" },
-  "artifactLawVersion": "108.0.0",
-  "artifactLaws": ["ARTIFACT-001", "ARTIFACT-002", "ARTIFACT-003", "ARTIFACT-004", "ARTIFACT-005", "ARTIFACT-006", "ARTIFACT-007", "ARTIFACT-008", "ARTIFACT-009", "ARTIFACT-010"],
-  "laws": ["receiz.identity.cross-app-continuity", "receiz.namespace.isolation", "receiz.local-truth.immediate", "receiz.artifact.sealed-truth", "ownership.cross-platform-proof-object-continuity"],
-  "sdkOperations": ["assets.createProofObject", "artifacts.download", "artifacts.verifyAndOpen", "identity.readArtifact", "identity.projectAccount"],
-  "allowedTools": ["receiz_artifact_verify", "receiz_artifact_extract_verified", "receiz_artifact_record_seal_plan", "receiz_artifact_record_seal_execute", "receiz_artifact_round_trip_check"],
-  "requiredScopes": ["receiz:record", "receiz:seal"],
-  "emulatorFixtures": ["identity-artifact-helpers", "native-artifact-round-trip", "namespace-preservation", "artifact-substitution-rejection"],
-  "forbiddenOperations": ["cross-namespace-write", "identity-fork", "database-as-account-truth", "payload-fallback", "payload-relabel-as-artifact", "artifact-repack", "shape-only-verification", "retired-reconcile-prerequisite", "history-rewrite", "authority-bypass"],
-  "requiredEvidence": ["same-account-uid-result", "complete-artifact-verification", "native-record-seal", "emulator-conformance", "exact-artifact-byte-identity", "artifact-digest-match", "payload-digest-binding", "signature-v4", "owner-claim-binding", "independent-artifact-verification", "cross-platform-round-trip", "legacy-read-compatibility", "release-lock-pass"],
-  "requiredCompletionFields": ["sdk-version", "registry-digest", "artifact-law-version", "artifact-carrier", "signature-version", "artifact-digest", "payload-digest", "owner-and-claim-binding", "independent-verification-result", "cross-platform-round-trip-result", "legacy-compatibility-result", "release-lock-result"],
-  "completionCriteria": ["all-required-evidence-pass", "release-lock-pass"],
+  "version": "110.0.0",
+  "requires": {
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
+  },
+  "artifactLawVersion": "110.0.0",
+  "artifactLaws": [
+    "ARTIFACT-001",
+    "ARTIFACT-002",
+    "ARTIFACT-003",
+    "ARTIFACT-004",
+    "ARTIFACT-005",
+    "ARTIFACT-006",
+    "ARTIFACT-007",
+    "ARTIFACT-008",
+    "ARTIFACT-009",
+    "ARTIFACT-010",
+    "ARTIFACT-011",
+    "ARTIFACT-012",
+    "ARTIFACT-013",
+    "ARTIFACT-014",
+    "ARTIFACT-015"
+  ],
+  "laws": [
+    "receiz.identity.cross-app-continuity",
+    "receiz.namespace.isolation",
+    "receiz.local-truth.immediate",
+    "receiz.artifact.sealed-truth",
+    "ownership.cross-platform-proof-object-continuity"
+  ],
+  "sdkOperations": [
+    "assets.createProofObject",
+    "artifacts.download",
+    "artifacts.verifyAndOpen",
+    "identity.readArtifact",
+    "identity.projectAccount",
+    "artifacts.admit",
+    "artifacts.planRecovery",
+    "artifacts.admitAndRecover",
+    "artifacts.commitRecovery"
+  ],
+  "allowedTools": [
+    "receiz_artifact_verify",
+    "receiz_artifact_extract_verified",
+    "receiz_artifact_record_seal_plan",
+    "receiz_artifact_record_seal_execute",
+    "receiz_artifact_round_trip_check",
+    "receiz_artifact_admit",
+    "receiz_artifact_recovery_plan",
+    "receiz_artifact_admit_and_recover",
+    "receiz_artifact_recovery_commit"
+  ],
+  "requiredScopes": [
+    "receiz:record",
+    "receiz:seal"
+  ],
+  "emulatorFixtures": [
+    "identity-artifact-helpers",
+    "native-artifact-round-trip",
+    "namespace-preservation",
+    "artifact-substitution-rejection"
+  ],
+  "forbiddenOperations": [
+    "cross-namespace-write",
+    "identity-fork",
+    "database-as-account-truth",
+    "payload-fallback",
+    "payload-relabel-as-artifact",
+    "artifact-repack",
+    "shape-only-verification",
+    "retired-reconcile-prerequisite",
+    "history-rewrite",
+    "authority-bypass",
+    "hidden-recovery-mutation",
+    "explanation-as-authority",
+    "raw-capability-authority",
+    "card-payload-admission"
+  ],
+  "requiredEvidence": [
+    "same-account-uid-result",
+    "complete-artifact-verification",
+    "native-record-seal",
+    "emulator-conformance",
+    "exact-artifact-byte-identity",
+    "artifact-digest-match",
+    "payload-digest-binding",
+    "signature-v4",
+    "owner-claim-binding",
+    "independent-artifact-verification",
+    "cross-platform-round-trip",
+    "legacy-read-compatibility",
+    "release-lock-pass",
+    "zero-network-verification",
+    "local-verifier-result",
+    "unified-admission-verdicts",
+    "explicit-permitted-actions",
+    "verified-proof-history",
+    "zero-network-read-only-coordinator",
+    "atomic-recovery-commit",
+    "operation-identity-parity",
+    "multi-application-convergence"
+  ],
+  "requiredCompletionFields": [
+    "sdk-version",
+    "registry-digest",
+    "artifact-law-version",
+    "artifact-carrier",
+    "signature-version",
+    "artifact-digest",
+    "payload-digest",
+    "owner-and-claim-binding",
+    "independent-verification-result",
+    "cross-platform-round-trip-result",
+    "legacy-compatibility-result",
+    "release-lock-result",
+    "network-calls-during-verification",
+    "local-verifier-result",
+    "admission-verdict",
+    "permitted-actions",
+    "proof-history-digest",
+    "recovery-plan-digest",
+    "operation-identity",
+    "atomic-commit-result"
+  ],
+  "completionCriteria": [
+    "all-required-evidence-pass",
+    "release-lock-pass",
+    "zero-network-verification",
+    "local-verifier-result",
+    "v110-admission-recovery-conformance",
+    "no-hidden-mutation",
+    "explanation-remains-non-authoritative"
+  ],
   "maximumAutonomousAuthority": "inspect-plan-simulate"
 }

package/receiz-deterministic-replay/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v108",
+  "schema": "receiz.ai-skill-contract.v110",
   "name": "receiz-deterministic-replay",
-  "version": "108.0.0",
+  "version": "110.0.0",
   "requires": {
-    "sdk": ">=108.0.0 <109.0.0",
-    "mcp": ">=108.0.0 <109.0.0",
-    "ruleset": "108.0.0",
-    "registryDigest": "126ca9283fee4ef4c398dbcb958e861cbea191724fdab8eb08df55ff0c14bb79"
+    "sdk": ">=110.0.0 <111.0.0",
+    "mcp": ">=110.0.0 <111.0.0",
+    "ruleset": "110.0.0",
+    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
   },
   "laws": [
     "receiz.replay.deterministic",