@receiz/ai-skills 117.0.0 → 118.0.0

package/README.md

@@ -1,10 +1,10 @@
 # Receiz AI Skills
 
-The `117.0.0` package is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
+The `118.0.0` package is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
 
-## V117 artifact authority chain
+## V118 artifact authority chain
 
-V117 carries two established proof-object laws unchanged:
+V118 carries two established proof-object laws unchanged:
 `receiz.native_capture.v1` binds exact bytes from Receiz's dedicated camera
 ceremony, and `receiz.pbi.proof-object-authorship.v1` appends verified PBI
 authorship to an already verified predecessor. Signing is unavailable before
@@ -18,16 +18,16 @@ Exact bytes cross a process only as bytes and require `reverify-exact-bytes`. Ve
 
 The single current MCP artifact inventory contains nine tools: `receiz_artifact_verify`, `receiz_artifact_admit`, `receiz_artifact_append_plan`, `receiz_artifact_transition_seal_and_stage`, `receiz_artifact_transition_commit`, `receiz_artifact_global_resolve`, `receiz_artifact_reconcile_plan`, `receiz_artifact_reconcile_stage`, and `receiz_artifact_reconcile_commit`. The first five are also the explicitly historical v112 compatibility inventory, not a second current surface. A sealed candidate is a proof object but not the accepted head. Stage writes no head and its reference is non-authoritative. Commit resolves and reverifies staged bytes before atomic named-domain acceptance. `COMMIT_DOMAIN_MISMATCH` is distinct from same-domain `IDEMPOTENCY_CONFLICT`; registry-derived effects stay outside the portable transition digest; unknown namespaces remain byte-preserved.
 
-`client.admission.browserStore` is durable admission coordination only: it stores no proof object or sealed artifact bytes and never blocks known-artifact first paint. V117 production reconciliation preserves the provider-neutral `client.coordination` rail and never exposes Supabase mechanics. Receiz-generated files retain declared ownership, while `receiz.extensions.ts` is developer-owned and must never be overwritten.
+`client.admission.browserStore` is durable admission coordination only: it stores no proof object or sealed artifact bytes and never blocks known-artifact first paint. V118 production reconciliation preserves the provider-neutral `client.coordination` rail and never exposes Supabase mechanics. Receiz-generated files retain declared ownership, while `receiz.extensions.ts` is developer-owned and must never be overwritten.
 
 `receiz-build-production-system` remains the constitutional orchestration skill for substantial
 Receiz applications. Fifteen focused constitutional skills supply architecture,
 domain, law, command, authority, replay, offline, causal, artifact, migration,
 performance, observability, testing, and release contracts. The earlier nine
 domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
-describe current v117 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
+describe current v118 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
 proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
-One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. Every current manifest uses package version `117.0.0`, requires SDK/MCP `>=117.0.0 <118.0.0`, and binds ruleset `117.0.0` to registry digest `598ee0fa4dc31b8394fdd2b7b8fe713c8ee8c4b33e6ecdd92101a1a93d8787a8` and operation-matrix digest `ec5829eeec039c1f4885d056b8cd6cf6506d08547cee58daa229ecbd44155420` from SDK source.
+One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. Every current manifest uses package version `118.0.0`, requires SDK/MCP `>=118.0.0 <119.0.0`, and binds ruleset `118.0.0` to registry digest `c284bd39a891c1a828b532523bd548507570819c32e307d79b8043f06d2d3360` and operation-matrix digest `153b2472830567ec3b445c2c1b4102e4c036ed4c45cc374d40d0079096a40f54` from SDK source.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
@@ -47,9 +47,9 @@ Agents may acquire scoped delegated access through the official Receiz Connect/O
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v117 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v118 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
 
-The v117 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
+The v118 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
 
 Stable obsolete-versioned schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
 

package/SKILLS.md

@@ -1,13 +1,13 @@
-# Receiz AI Skills v117
+# Receiz AI Skills v118
 
-V117 preserves sealed proof/object authority and adds
+V118 preserves sealed proof/object authority and adds
 `receiz.native_capture.v1` plus
 `receiz.pbi.proof-object-authorship.v1`. Native Capture binds dedicated camera
 ceremony bytes. PBI authorship requires canonical predecessor verification,
 appends ordered history, settles locally before optional publication, and does
 not transfer ownership.
 
-This package ships 32 skills, 26 machine-readable manifests, and 23 OpenAI agent prompts. Every current manifest binds registry digest `598ee0fa4dc31b8394fdd2b7b8fe713c8ee8c4b33e6ecdd92101a1a93d8787a8` and application-operation-matrix digest `ec5829eeec039c1f4885d056b8cd6cf6506d08547cee58daa229ecbd44155420` from the v117 SDK source.
+This package ships 32 skills, 26 machine-readable manifests, and 23 OpenAI agent prompts. Every current manifest binds registry digest `c284bd39a891c1a828b532523bd548507570819c32e307d79b8043f06d2d3360` and application-operation-matrix digest `153b2472830567ec3b445c2c1b4102e4c036ed4c45cc374d40d0079096a40f54` from the v118 SDK source.
 
 ## Current MCP artifact inventory: nine tools
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "117.0.0",
+  "version": "118.0.0",
   "description": "Registry-bound Receiz AI operating contracts beneath proof authority for SDK and MCP agents.",
   "type": "module",
   "files": [

package/receiz-app-builder-skill/SKILL.md

@@ -8,7 +8,7 @@ description: Use when starting, integrating, upgrading, diagnosing, or repairing
 Build and upgrade Receiz applications from one typed contract. The compiler is
 integration tooling beneath Receiz proof truth; inspection is not verification.
 
-## Binding v117 artifact law
+## Binding v118 artifact law
 
 A Receiz artifact is the exact byte sequence returned by native Record -> Seal. The inner payload is never an acceptable substitute.
 
@@ -21,7 +21,7 @@ Label every byte sequence generated or consumed by the application:
 
 ## Required SDK artifact workflow
 
-The exact v117 application-operation inventory is `receiz.artifact.verify`, `receiz.artifact.admit`, `receiz.artifact.append.plan`, `receiz.identity.capability.sign`, `receiz.artifact.transition.seal`, `receiz.artifact.transition.stage`, `receiz.artifact.transition.commit`, `receiz.admission.command.execute`, `receiz.public-proof.projection.locate`, `receiz.artifact.global.resolve`, `receiz.artifact.offline.reconcile`, `receiz.profile-showcase.genesis.plan`, `receiz.profile-showcase.append.plan`, `receiz.economy-showcase.genesis.plan`, `receiz.economy-showcase.append.plan`, and `receiz.economy-showcase.merge.plan`. These identifiers describe the application authority matrix; they do not create authority.
+The exact v118 application-operation inventory is `receiz.artifact.verify`, `receiz.artifact.admit`, `receiz.artifact.append.plan`, `receiz.identity.capability.sign`, `receiz.artifact.transition.seal`, `receiz.artifact.transition.stage`, `receiz.artifact.transition.commit`, `receiz.admission.command.execute`, `receiz.public-proof.projection.locate`, `receiz.artifact.global.resolve`, `receiz.artifact.offline.reconcile`, `receiz.profile-showcase.genesis.plan`, `receiz.profile-showcase.append.plan`, `receiz.economy-showcase.genesis.plan`, `receiz.economy-showcase.append.plan`, and `receiz.economy-showcase.merge.plan`. These identifiers describe the application authority matrix; they do not create authority.
 
 ```ts
 const payload = { bytes: applicationPayload, mimeType: applicationMimeType };
@@ -41,7 +41,7 @@ Independently hash the saved bytes and require equality with `sealedArtifact.art
 ## Twelve-step artifact workflow
 
 1. Label the input bytes as `payload`; never call them an artifact.
-2. Load the active canonical v117 registry and `ARTIFACT-001` through `ARTIFACT-030`.
+2. Load the active canonical v118 registry and `ARTIFACT-001` through `ARTIFACT-030`.
 3. Call `receiz.assets.createProofObject` so Receiz.com performs native Record -> Seal.
 4. Require an SDK-issued `receiz.native-record-seal`; failure returns no artifact and no payload fallback.
 5. Require complete enclosing-artifact verification, integrity, Signature V4, owner, claim, verify path, and payload binding.
@@ -207,7 +207,7 @@ Resources:
 - [Generated-file repair](resources/generated-file-repair.md)
 - [Upgrade rules](resources/upgrade-rules.md)
 
-## v117 unified admission and recovery
+## v118 unified admission and recovery
 
 First call `verifyReceizArtifact(file)`. Then call `receiz.artifacts.admit(verification, profileOptions)` in the same runtime. Admission reports profile membership and primitive-specific assessments; it does not authorize an operation. Verified actor evidence exists only after identity-profile admission, never from a caller constraint or structural object.
 
@@ -233,7 +233,7 @@ Operation identity:
 Atomic commit result:
 ```
 
-## v117 artifact-derived authority
+## v118 artifact-derived authority
 
 Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
 
@@ -241,4 +241,4 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
-Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v117 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v118 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.

package/receiz-app-builder-skill/manifest.json

@@ -1,15 +1,15 @@
 {
-  "schema": "receiz.ai-skill-contract.v117",
+  "schema": "receiz.ai-skill-contract.v118",
   "name": "receiz-app-builder-skill",
-  "version": "117.0.0",
+  "version": "118.0.0",
   "requires": {
-    "sdk": ">=117.0.0 <118.0.0",
-    "mcp": ">=117.0.0 <118.0.0",
-    "ruleset": "117.0.0",
-    "registryDigest": "598ee0fa4dc31b8394fdd2b7b8fe713c8ee8c4b33e6ecdd92101a1a93d8787a8",
-    "operationMatrixDigest": "ec5829eeec039c1f4885d056b8cd6cf6506d08547cee58daa229ecbd44155420"
+    "sdk": ">=118.0.0 <119.0.0",
+    "mcp": ">=118.0.0 <119.0.0",
+    "ruleset": "118.0.0",
+    "registryDigest": "c284bd39a891c1a828b532523bd548507570819c32e307d79b8043f06d2d3360",
+    "operationMatrixDigest": "153b2472830567ec3b445c2c1b4102e4c036ed4c45cc374d40d0079096a40f54"
   },
-  "artifactLawVersion": "113.0.0",
+  "artifactLawVersion": "118.0.0",
   "artifactLaws": [
     "ARTIFACT-001",
     "ARTIFACT-002",
@@ -211,7 +211,7 @@
       "outputAuthority": "verified-artifact-runtime",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.admit",
@@ -225,7 +225,7 @@
       "outputAuthority": "verified-admission-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.append.plan",
@@ -247,7 +247,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "identity.capability.sign",
@@ -260,7 +260,7 @@
       "outputAuthority": "signed-capability-claim-not-yet-verified",
       "processBoundary": "local-identity-key-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.seal",
@@ -277,7 +277,7 @@
       "outputAuthority": "sealed-candidate-proof-object-not-accepted-head",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.stage",
@@ -294,7 +294,7 @@
       "outputAuthority": "staged-candidate-locator-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.commit",
@@ -313,7 +313,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "admission.command.execute",
@@ -334,7 +334,7 @@
       "outputAuthority": "admission-receipt-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "public-proof.projection.locate",
@@ -348,7 +348,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "projection-only",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.global.resolve",
@@ -364,7 +364,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.offline.reconcile",
@@ -387,7 +387,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "profile-showcase.genesis.plan",
@@ -397,8 +397,8 @@
       "inputAuthority": "verified-actor-runtime",
       "requiredEvidence": [
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-genesis-body",
         "unaccepted-head-expectation",
@@ -411,7 +411,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "profile-showcase.append.plan",
@@ -423,8 +423,8 @@
         "verified-admission-runtime",
         "verified-history-runtime",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "canonical-event",
         "expected-head",
         "commit-domain",
@@ -437,7 +437,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.genesis.plan",
@@ -447,8 +447,8 @@
       "inputAuthority": "verified-actor-runtime",
       "requiredEvidence": [
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-genesis-body",
         "unaccepted-head-expectation",
@@ -461,7 +461,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.append.plan",
@@ -473,8 +473,8 @@
         "verified-admission-runtime",
         "verified-history-runtime",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-event",
         "expected-head",
@@ -488,7 +488,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.merge.plan",
@@ -501,8 +501,8 @@
         "verified-history-runtime",
         "verified-sibling-heads",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-event",
         "expected-head",
@@ -516,7 +516,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     }
   ],
   "currentMcpArtifactTools": [

package/receiz-app-builder-skill/resources/workflow.md

@@ -13,7 +13,7 @@ After every mutation, run the returned verification commands and reinspect.
 The same repository must produce zero changes on the second run.
 Preserve the developer-owned `receiz.extensions.ts` sibling on every run. Finish with `receiz conformance` or `receiz_release_qualify`.
 
-For v117 artifact mutation, use the exact five-tool MCP sequence: `receiz_artifact_verify`, `receiz_artifact_admit`, `receiz_artifact_append_plan`, `receiz_artifact_transition_seal_and_stage`, then `receiz_artifact_transition_commit`. Planning and staging perform zero head writes; commit independently resolves and reverifies staged bytes before atomic named-domain acceptance.
+For v118 artifact mutation, use the exact five-tool MCP sequence: `receiz_artifact_verify`, `receiz_artifact_admit`, `receiz_artifact_append_plan`, `receiz_artifact_transition_seal_and_stage`, then `receiz_artifact_transition_commit`. Planning and staging perform zero head writes; commit independently resolves and reverifies staged bytes before atomic named-domain acceptance.
 
 Do not substitute inspection for verification, publication for settlement, or a
 successful write for proof admission.

package/receiz-architecture/SKILL.md

@@ -10,7 +10,7 @@ Map domains, sources of truth, state machines, dependency direction, and cross-d
 ## Constitutional workflow
 
 1. Inspect the repository and installed SDK version.
-2. Load the active canonical v117 registry and applicable constitutional laws.
+2. Load the active canonical v118 registry and applicable constitutional laws.
 3. Identify every authority boundary affected by the change.
 4. Write the implementation contract before implementation.
 5. Implement canonical changes only through SDK commands.
@@ -51,7 +51,7 @@ Request: Map domains, sources of truth, state machines, dependency direction, an
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
 
-## v117 artifact-derived authority
+## v118 artifact-derived authority
 
 Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
 
@@ -59,4 +59,4 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
-Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v117 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v118 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.

package/receiz-architecture/manifest.json

@@ -1,13 +1,13 @@
 {
-  "schema": "receiz.ai-skill-contract.v117",
+  "schema": "receiz.ai-skill-contract.v118",
   "name": "receiz-architecture",
-  "version": "117.0.0",
+  "version": "118.0.0",
   "requires": {
-    "sdk": ">=117.0.0 <118.0.0",
-    "mcp": ">=117.0.0 <118.0.0",
-    "ruleset": "117.0.0",
-    "registryDigest": "598ee0fa4dc31b8394fdd2b7b8fe713c8ee8c4b33e6ecdd92101a1a93d8787a8",
-    "operationMatrixDigest": "ec5829eeec039c1f4885d056b8cd6cf6506d08547cee58daa229ecbd44155420"
+    "sdk": ">=118.0.0 <119.0.0",
+    "mcp": ">=118.0.0 <119.0.0",
+    "ruleset": "118.0.0",
+    "registryDigest": "c284bd39a891c1a828b532523bd548507570819c32e307d79b8043f06d2d3360",
+    "operationMatrixDigest": "153b2472830567ec3b445c2c1b4102e4c036ed4c45cc374d40d0079096a40f54"
   },
   "laws": [
     "receiz.truth.stronger-first",
@@ -109,7 +109,7 @@
     "ambiguous-migration"
   ],
   "maximumAutonomousAuthority": "inspect-plan-scaffold-test",
-  "artifactLawVersion": "113.0.0",
+  "artifactLawVersion": "118.0.0",
   "artifactLaws": [
     "ARTIFACT-001",
     "ARTIFACT-002",
@@ -154,7 +154,7 @@
       "outputAuthority": "verified-artifact-runtime",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.admit",
@@ -168,7 +168,7 @@
       "outputAuthority": "verified-admission-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.append.plan",
@@ -190,7 +190,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "identity.capability.sign",
@@ -203,7 +203,7 @@
       "outputAuthority": "signed-capability-claim-not-yet-verified",
       "processBoundary": "local-identity-key-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.seal",
@@ -220,7 +220,7 @@
       "outputAuthority": "sealed-candidate-proof-object-not-accepted-head",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.stage",
@@ -237,7 +237,7 @@
       "outputAuthority": "staged-candidate-locator-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.transition.commit",
@@ -256,7 +256,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "admission.command.execute",
@@ -277,7 +277,7 @@
       "outputAuthority": "admission-receipt-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "public-proof.projection.locate",
@@ -291,7 +291,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "projection-only",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.global.resolve",
@@ -307,7 +307,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "artifact.offline.reconcile",
@@ -330,7 +330,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "profile-showcase.genesis.plan",
@@ -340,8 +340,8 @@
       "inputAuthority": "verified-actor-runtime",
       "requiredEvidence": [
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-genesis-body",
         "unaccepted-head-expectation",
@@ -354,7 +354,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "profile-showcase.append.plan",
@@ -366,8 +366,8 @@
         "verified-admission-runtime",
         "verified-history-runtime",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "canonical-event",
         "expected-head",
         "commit-domain",
@@ -380,7 +380,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.genesis.plan",
@@ -390,8 +390,8 @@
       "inputAuthority": "verified-actor-runtime",
       "requiredEvidence": [
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-genesis-body",
         "unaccepted-head-expectation",
@@ -404,7 +404,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.append.plan",
@@ -416,8 +416,8 @@
         "verified-admission-runtime",
         "verified-history-runtime",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-event",
         "expected-head",
@@ -431,7 +431,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     },
     {
       "operation": "economy-showcase.merge.plan",
@@ -444,8 +444,8 @@
         "verified-history-runtime",
         "verified-sibling-heads",
         "verified-actor-runtime",
-        "v117-registry-runtime",
-        "v117-operation-matrix-runtime",
+        "v114-registry-runtime",
+        "v114-operation-matrix-runtime",
         "literal-artifact-identity",
         "canonical-event",
         "expected-head",
@@ -459,7 +459,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=117.0.0 <118.0.0"
+      "compatibleSdkRange": ">=118.0.0 <119.0.0"
     }
   ],
   "currentMcpArtifactTools": [

package/receiz-authority-security/SKILL.md

@@ -10,7 +10,7 @@ Audit actors, tenants, capabilities, proof domains, confused-deputy paths, escal
 ## Constitutional workflow
 
 1. Inspect the repository and installed SDK version.
-2. Load the active canonical v117 registry and applicable constitutional laws.
+2. Load the active canonical v118 registry and applicable constitutional laws.
 3. Identify every authority boundary affected by the change.
 4. Write the implementation contract before implementation.
 5. Implement canonical changes only through SDK commands.
@@ -51,7 +51,7 @@ Request: Audit actors, tenants, capabilities, proof domains, confused-deputy pat
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
 
-## v117 artifact-derived authority
+## v118 artifact-derived authority
 
 Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
 
@@ -59,4 +59,4 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
-Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v117 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v118 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.