@receiz/ai-skills 110.0.0 → 112.0.0

package/receiz-architecture/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v110",
+  "schema": "receiz.ai-skill-contract.v112",
   "name": "receiz-architecture",
-  "version": "110.0.0",
+  "version": "112.0.0",
   "requires": {
-    "sdk": ">=110.0.0 <111.0.0",
-    "mcp": ">=110.0.0 <111.0.0",
-    "ruleset": "110.0.0",
-    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
+    "sdk": ">=112.0.0 <113.0.0",
+    "mcp": ">=112.0.0 <113.0.0",
+    "ruleset": "112.0.0",
+    "registryDigest": "1356f8122d0b5fcbe891d7e6ed1e75faca827f15d63d1ed5d950664e11c146ee"
   },
   "laws": [
     "receiz.truth.stronger-first",
@@ -17,12 +17,37 @@
     "receiz_architecture_inspect",
     "receiz_authority_inspect",
     "receiz_history_trace",
-    "receiz_bypass_scan"
+    "receiz_bypass_scan",
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit"
   ],
   "forbiddenOperations": [
     "direct-state-write",
     "history-rewrite",
-    "authority-bypass"
+    "authority-bypass",
+    "structural-object-as-authority",
+    "caller-verifier-as-history-authority",
+    "parseable-key-as-signing-authority",
+    "terminal-mcp-confirmation-reuse",
+    "historical-runtime-object-as-current-authority",
+    "projection-as-artifact-authority",
+    "runtime-shape-as-v112-authority",
+    "subpayload-hash-as-enclosing-authority",
+    "unaccepted-candidate-as-committed",
+    "staging-reference-without-byte-resolution",
+    "receipt-as-proof-authority",
+    "cross-domain-idempotency-conflict",
+    "external-effects-in-transition-digest",
+    "serialized-sdk-authority",
+    "mcp-property-bag-authority",
+    "generic-constitutional-artifact-mutation",
+    "confirmation-as-proof-authority",
+    "receipt-actor-as-runtime-identity",
+    "browser-proof-object-storage",
+    "known-artifact-first-paint-blocking"
   ],
   "requiredInputs": [
     "repository-root",
@@ -38,7 +63,25 @@
     "replay-equivalence",
     "compatibility",
     "mcp-conformance",
-    "independent-verifier"
+    "independent-verifier",
+    "canonical-exact-byte-readmission",
+    "complete-verifier-context-digest",
+    "independent-proof-history-evidence-roots",
+    "domain-separated-signing-challenge",
+    "distinct-plan-and-attempt-identities",
+    "structured-zero-write-failures",
+    "exact-nine-row-operation-matrix-parity",
+    "exact-five-tool-mcp-parity",
+    "process-boundary-parity",
+    "exact-byte-reverification",
+    "identity-seal-ed25519-p256-signing",
+    "neutral-staging-zero-head-writes",
+    "independent-staged-byte-resolution",
+    "named-domain-atomic-acceptance",
+    "report-only-receipt",
+    "browser-ledger-no-proof-bytes",
+    "generated-file-ownership-preservation",
+    "current-registry-payload-digest-equality"
   ],
   "completionCriteria": [
     "written-implementation-contract",
@@ -53,5 +96,208 @@
     "missing-capability",
     "ambiguous-migration"
   ],
-  "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
+  "maximumAutonomousAuthority": "inspect-plan-scaffold-test",
+  "artifactLawVersion": "112.0.0",
+  "artifactLaws": [
+    "ARTIFACT-001",
+    "ARTIFACT-002",
+    "ARTIFACT-003",
+    "ARTIFACT-004",
+    "ARTIFACT-005",
+    "ARTIFACT-006",
+    "ARTIFACT-007",
+    "ARTIFACT-008",
+    "ARTIFACT-009",
+    "ARTIFACT-010",
+    "ARTIFACT-011",
+    "ARTIFACT-012",
+    "ARTIFACT-013",
+    "ARTIFACT-014",
+    "ARTIFACT-015",
+    "ARTIFACT-016",
+    "ARTIFACT-017",
+    "ARTIFACT-018",
+    "ARTIFACT-019",
+    "ARTIFACT-020",
+    "ARTIFACT-021",
+    "ARTIFACT-022",
+    "ARTIFACT-023",
+    "ARTIFACT-024",
+    "ARTIFACT-025",
+    "ARTIFACT-026",
+    "ARTIFACT-027",
+    "ARTIFACT-028",
+    "ARTIFACT-029",
+    "ARTIFACT-030"
+  ],
+  "operationAuthorityMatrix": [
+    {
+      "operation": "artifact.verify",
+      "authorityProfiles": [],
+      "inputAuthority": "exact-artifact-bytes",
+      "requiredEvidence": [
+        "exact-artifact-bytes",
+        "pinned-verifier-roots"
+      ],
+      "outputAuthority": "verified-artifact-runtime",
+      "processBoundary": "reverify-exact-bytes",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.admit",
+      "authorityProfiles": [],
+      "inputAuthority": "verified-artifact-runtime",
+      "requiredEvidence": [
+        "verified-artifact-runtime",
+        "admission-profile",
+        "current-registry"
+      ],
+      "outputAuthority": "verified-admission-runtime",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.append.plan",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "verified-admission-runtime",
+      "requiredEvidence": [
+        "verified-admission-runtime",
+        "verified-history-runtime",
+        "verified-actor-runtime",
+        "discovered-registry-law-runtime",
+        "commit-domain",
+        "canonical-event",
+        "expected-head",
+        "idempotency-identity"
+      ],
+      "outputAuthority": "sdk-plan-runtime",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "identity.capability.sign",
+      "authorityProfiles": [],
+      "inputAuthority": "identity-key-file",
+      "requiredEvidence": [
+        "identity-key-file",
+        "capability-payload"
+      ],
+      "outputAuthority": "signed-capability-claim-not-yet-verified",
+      "processBoundary": "local-identity-key-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.seal",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "sdk-plan-runtime",
+      "requiredEvidence": [
+        "sdk-plan-runtime",
+        "verified-capability-runtime",
+        "transition-sealer-runtime"
+      ],
+      "outputAuthority": "sealed-candidate-proof-object-not-accepted-head",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.stage",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "sealed-candidate-runtime",
+      "requiredEvidence": [
+        "sealed-candidate-runtime",
+        "conforming-transition-store-runtime",
+        "commit-domain"
+      ],
+      "outputAuthority": "staged-candidate-locator-non-authoritative",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.commit",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "staged-candidate-reference",
+      "requiredEvidence": [
+        "sdk-plan-runtime",
+        "verified-capability-runtime",
+        "staged-candidate-reference",
+        "conforming-transition-store-runtime",
+        "commit-domain"
+      ],
+      "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "admission.command.execute",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared",
+        "projection-only",
+        "simulation-only"
+      ],
+      "inputAuthority": "claimed-command",
+      "requiredEvidence": [
+        "claimed-command",
+        "current-registry",
+        "capability-verifier-runtime",
+        "consequence-projector-runtime",
+        "admission-store"
+      ],
+      "outputAuthority": "admission-receipt-non-authoritative",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "public-proof.projection.locate",
+      "authorityProfiles": [
+        "projection-only"
+      ],
+      "inputAuthority": "projection-only",
+      "requiredEvidence": [
+        "projection-locator"
+      ],
+      "outputAuthority": "exact-artifact-bytes-not-yet-verified",
+      "processBoundary": "projection-only",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    }
+  ],
+  "currentMcpArtifactTools": [
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit"
+  ],
+  "sdkOperations": [
+    "artifact.verify",
+    "artifact.admit",
+    "artifact.append.plan",
+    "identity.capability.sign",
+    "artifact.transition.seal",
+    "artifact.transition.stage",
+    "artifact.transition.commit",
+    "admission.command.execute",
+    "public-proof.projection.locate"
+  ]
 }

package/receiz-authority-security/SKILL.md

@@ -10,7 +10,7 @@ Audit actors, tenants, capabilities, proof domains, confused-deputy paths, escal
 ## Constitutional workflow
 
 1. Inspect the repository and installed SDK version.
-2. Load the active signed registry and applicable constitutional laws.
+2. Load the active canonical v112 registry and applicable constitutional laws.
 3. Identify every authority boundary affected by the change.
 4. Write the implementation contract before implementation.
 5. Implement canonical changes only through SDK commands.
@@ -51,3 +51,12 @@ Request: Audit actors, tenants, capabilities, proof domains, confused-deputy pat
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
 
+## v112 artifact-derived authority
+
+Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
+
+Admission begins from runtime-custodied verification of the exact enclosing artifact bytes under the complete frozen verifier context. Verified history and actor evidence remain same-runtime objects and fail closed on divergence or structural reconstruction. Identity Seal signing uses a locally held Ed25519 or P-256 key and emits a signed capability claim; only current verification of that claim against the exact plan produces capability authority.
+
+Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
+
+Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v112 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.

package/receiz-authority-security/manifest.json

@@ -1,12 +1,12 @@
 {
-  "schema": "receiz.ai-skill-contract.v110",
+  "schema": "receiz.ai-skill-contract.v112",
   "name": "receiz-authority-security",
-  "version": "110.0.0",
+  "version": "112.0.0",
   "requires": {
-    "sdk": ">=110.0.0 <111.0.0",
-    "mcp": ">=110.0.0 <111.0.0",
-    "ruleset": "110.0.0",
-    "registryDigest": "824aa4af849c4840ba94535798eab36e45d514703b6ae0cd30d4aa53f3c896e4"
+    "sdk": ">=112.0.0 <113.0.0",
+    "mcp": ">=112.0.0 <113.0.0",
+    "ruleset": "112.0.0",
+    "registryDigest": "1356f8122d0b5fcbe891d7e6ed1e75faca827f15d63d1ed5d950664e11c146ee"
   },
   "laws": [
     "receiz.authority.capability-bound",
@@ -18,12 +18,37 @@
     "receiz_authority_inspect",
     "receiz_bypass_scan",
     "receiz_command_simulate",
-    "receiz_law_explain"
+    "receiz_law_explain",
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit"
   ],
   "forbiddenOperations": [
     "direct-state-write",
     "history-rewrite",
-    "authority-bypass"
+    "authority-bypass",
+    "structural-object-as-authority",
+    "caller-verifier-as-history-authority",
+    "parseable-key-as-signing-authority",
+    "terminal-mcp-confirmation-reuse",
+    "historical-runtime-object-as-current-authority",
+    "projection-as-artifact-authority",
+    "runtime-shape-as-v112-authority",
+    "subpayload-hash-as-enclosing-authority",
+    "unaccepted-candidate-as-committed",
+    "staging-reference-without-byte-resolution",
+    "receipt-as-proof-authority",
+    "cross-domain-idempotency-conflict",
+    "external-effects-in-transition-digest",
+    "serialized-sdk-authority",
+    "mcp-property-bag-authority",
+    "generic-constitutional-artifact-mutation",
+    "confirmation-as-proof-authority",
+    "receipt-actor-as-runtime-identity",
+    "browser-proof-object-storage",
+    "known-artifact-first-paint-blocking"
   ],
   "requiredInputs": [
     "repository-root",
@@ -39,7 +64,25 @@
     "replay-equivalence",
     "compatibility",
     "mcp-conformance",
-    "independent-verifier"
+    "independent-verifier",
+    "canonical-exact-byte-readmission",
+    "complete-verifier-context-digest",
+    "independent-proof-history-evidence-roots",
+    "domain-separated-signing-challenge",
+    "distinct-plan-and-attempt-identities",
+    "structured-zero-write-failures",
+    "exact-nine-row-operation-matrix-parity",
+    "exact-five-tool-mcp-parity",
+    "process-boundary-parity",
+    "exact-byte-reverification",
+    "identity-seal-ed25519-p256-signing",
+    "neutral-staging-zero-head-writes",
+    "independent-staged-byte-resolution",
+    "named-domain-atomic-acceptance",
+    "report-only-receipt",
+    "browser-ledger-no-proof-bytes",
+    "generated-file-ownership-preservation",
+    "current-registry-payload-digest-equality"
   ],
   "completionCriteria": [
     "written-implementation-contract",
@@ -54,5 +97,208 @@
     "missing-capability",
     "ambiguous-migration"
   ],
-  "maximumAutonomousAuthority": "inspect-plan-scaffold-test"
+  "maximumAutonomousAuthority": "inspect-plan-scaffold-test",
+  "artifactLawVersion": "112.0.0",
+  "artifactLaws": [
+    "ARTIFACT-001",
+    "ARTIFACT-002",
+    "ARTIFACT-003",
+    "ARTIFACT-004",
+    "ARTIFACT-005",
+    "ARTIFACT-006",
+    "ARTIFACT-007",
+    "ARTIFACT-008",
+    "ARTIFACT-009",
+    "ARTIFACT-010",
+    "ARTIFACT-011",
+    "ARTIFACT-012",
+    "ARTIFACT-013",
+    "ARTIFACT-014",
+    "ARTIFACT-015",
+    "ARTIFACT-016",
+    "ARTIFACT-017",
+    "ARTIFACT-018",
+    "ARTIFACT-019",
+    "ARTIFACT-020",
+    "ARTIFACT-021",
+    "ARTIFACT-022",
+    "ARTIFACT-023",
+    "ARTIFACT-024",
+    "ARTIFACT-025",
+    "ARTIFACT-026",
+    "ARTIFACT-027",
+    "ARTIFACT-028",
+    "ARTIFACT-029",
+    "ARTIFACT-030"
+  ],
+  "operationAuthorityMatrix": [
+    {
+      "operation": "artifact.verify",
+      "authorityProfiles": [],
+      "inputAuthority": "exact-artifact-bytes",
+      "requiredEvidence": [
+        "exact-artifact-bytes",
+        "pinned-verifier-roots"
+      ],
+      "outputAuthority": "verified-artifact-runtime",
+      "processBoundary": "reverify-exact-bytes",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.admit",
+      "authorityProfiles": [],
+      "inputAuthority": "verified-artifact-runtime",
+      "requiredEvidence": [
+        "verified-artifact-runtime",
+        "admission-profile",
+        "current-registry"
+      ],
+      "outputAuthority": "verified-admission-runtime",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.append.plan",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "verified-admission-runtime",
+      "requiredEvidence": [
+        "verified-admission-runtime",
+        "verified-history-runtime",
+        "verified-actor-runtime",
+        "discovered-registry-law-runtime",
+        "commit-domain",
+        "canonical-event",
+        "expected-head",
+        "idempotency-identity"
+      ],
+      "outputAuthority": "sdk-plan-runtime",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "identity.capability.sign",
+      "authorityProfiles": [],
+      "inputAuthority": "identity-key-file",
+      "requiredEvidence": [
+        "identity-key-file",
+        "capability-payload"
+      ],
+      "outputAuthority": "signed-capability-claim-not-yet-verified",
+      "processBoundary": "local-identity-key-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.seal",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "sdk-plan-runtime",
+      "requiredEvidence": [
+        "sdk-plan-runtime",
+        "verified-capability-runtime",
+        "transition-sealer-runtime"
+      ],
+      "outputAuthority": "sealed-candidate-proof-object-not-accepted-head",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.stage",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "sealed-candidate-runtime",
+      "requiredEvidence": [
+        "sealed-candidate-runtime",
+        "conforming-transition-store-runtime",
+        "commit-domain"
+      ],
+      "outputAuthority": "staged-candidate-locator-non-authoritative",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "artifact.transition.commit",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "staged-candidate-reference",
+      "requiredEvidence": [
+        "sdk-plan-runtime",
+        "verified-capability-runtime",
+        "staged-candidate-reference",
+        "conforming-transition-store-runtime",
+        "commit-domain"
+      ],
+      "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "admission.command.execute",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared",
+        "projection-only",
+        "simulation-only"
+      ],
+      "inputAuthority": "claimed-command",
+      "requiredEvidence": [
+        "claimed-command",
+        "current-registry",
+        "capability-verifier-runtime",
+        "consequence-projector-runtime",
+        "admission-store"
+      ],
+      "outputAuthority": "admission-receipt-non-authoritative",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    },
+    {
+      "operation": "public-proof.projection.locate",
+      "authorityProfiles": [
+        "projection-only"
+      ],
+      "inputAuthority": "projection-only",
+      "requiredEvidence": [
+        "projection-locator"
+      ],
+      "outputAuthority": "exact-artifact-bytes-not-yet-verified",
+      "processBoundary": "projection-only",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=112.0.0 <113.0.0"
+    }
+  ],
+  "currentMcpArtifactTools": [
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit"
+  ],
+  "sdkOperations": [
+    "artifact.verify",
+    "artifact.admit",
+    "artifact.append.plan",
+    "identity.capability.sign",
+    "artifact.transition.seal",
+    "artifact.transition.stage",
+    "artifact.transition.commit",
+    "admission.command.execute",
+    "public-proof.projection.locate"
+  ]
 }

package/receiz-bearer-ownership/SKILL.md

@@ -68,6 +68,16 @@ The active MCP path calls `client.artifacts.verifyAndOpen(completeFile)`, then `
 
 Run `generic-bearer-transfer` and `previous-owner-projection-invalidation` across qualifying artifact families. Require the prior ownership reference to come from carried verified proof and the output to be a native sealed artifact.
 
-## v110 recovery authority
+## v112 recovery authority
 
-Call `artifacts.admit` before recovery planning. A `bearer-recovery` verdict may report `canRestore` or a capability-gated `canClaimOwnership`, but it must report `canSign: false`, `canPublish: false`, and `canSettle: false`. Possession never becomes canonical identity. Commit only an SDK-issued plan through a runtime-verified capability, stable idempotency key, expected head, and atomic local store.
+Verify exact bytes, then request the `portable-state` admission profile before append planning. Admission proves eligibility only; possession never becomes identity or operation authority. Ownership transition requires verified history and actor evidence, registry-derived effects, the exact named-domain plan, a plan-bound verified capability, sealed and durably staged bytes, and atomic acceptance after independent byte resolution.
+
+## v112 artifact-derived authority
+
+Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
+
+Admission begins from runtime-custodied verification of the exact enclosing artifact bytes under the complete frozen verifier context. Verified history and actor evidence remain same-runtime objects and fail closed on divergence or structural reconstruction. Identity Seal signing uses a locally held Ed25519 or P-256 key and emits a signed capability claim; only current verification of that claim against the exact plan produces capability authority.
+
+Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
+
+Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v112 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.