@receiz/ai-skills 121.0.0 → 123.0.0

package/README.md

@@ -1,8 +1,14 @@
 # Receiz AI Skills
 
-The `121.0.0` package is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
+The `123.0.0` package is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, OAuth/OIDC grants, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
 
-## V120 artifact authority chain
+## V123 — Intent Becomes Lawful Action
+
+The object is authority. V123 gives every application the canonical completion rails required to turn object-carried intent into deterministic remote action: live Phi execution through distinct Settlement and Reserve rails; canonical public world planning; authoritative rail scopes; exact-head subject namespaces; and short-lived proof-to-authority exchange after explicit in-application consent without redirecting the person to receiz.com.
+
+The edge verifies and retains the proof object. The server independently gates the requested append or execution. Database state provides projection, sync and recovery beneath admitted proof heads. Phi is moved value; USD is display-only from the canonical deterministic price. Ambiguous execution resolves exactly as committed, zero-write, or unknown before retry.
+
+## Established artifact authority chain
 
 V120 carries two established proof-object laws unchanged:
 `receiz.native_capture.v1` binds exact bytes from Receiz's dedicated camera
@@ -18,7 +24,9 @@ Exact bytes cross a process only as bytes and require `reverify-exact-bytes`. Ve
 
 The single current MCP artifact inventory contains nine tools: `receiz_artifact_verify`, `receiz_artifact_admit`, `receiz_artifact_append_plan`, `receiz_artifact_transition_seal_and_stage`, `receiz_artifact_transition_commit`, `receiz_artifact_global_resolve`, `receiz_artifact_reconcile_plan`, `receiz_artifact_reconcile_stage`, and `receiz_artifact_reconcile_commit`. The first five are also the explicitly historical v112 compatibility inventory, not a second current surface. A sealed candidate is a proof object but not the accepted head. Stage writes no head and its reference is non-authoritative. Commit resolves and reverifies staged bytes before atomic named-domain acceptance. `COMMIT_DOMAIN_MISMATCH` is distinct from same-domain `IDEMPOTENCY_CONFLICT`; registry-derived effects stay outside the portable transition digest; unknown namespaces remain byte-preserved.
 
-The same v120 package carries 37 living-subject MCP tools: subject resolve/state/history/memory/relationships/inventory; subject Twin profile/message/mind export/import planning; mandate get/plan/activate/pause/revoke; world additions/command plan/validate/execute/transaction plan/execute/receipt/replay; subject runtime enqueue/status/cancel; living-subject conformance; proof-brain head/search/resolve/stream; and bearer preview/issue/inspect/claim/cancel/status. Each generated skill map binds those exact names to SDK primitives, strict input/output types, source primitive, registry/reducer digests, zero-write failure, and the non-authority boundary.
+The same package carries 37 inherited living-subject MCP tools: subject resolve/state/history/memory/relationships/inventory; subject Twin profile/message/mind export/import planning; mandate get/plan/activate/pause/revoke; world additions/command plan/validate/execute/transaction plan/execute/receipt/replay; subject runtime enqueue/status/cancel; living-subject conformance; proof-brain head/search/resolve/stream; and bearer preview/issue/inspect/claim/cancel/status. Each generated skill map binds those exact names to SDK primitives, strict input/output types, source primitive, registry/reducer digests, zero-write failure, and the non-authority boundary.
+
+The inherited v122 protocol adds 19 MCP operations for durable remote proof-object admission and authenticated subject state; edge-held proof bundles and append-only public access-key bindings; locally encrypted private/invited world commands; exact validation, execution, outcome recovery, and filtered additions; first-class mandate issue/state/revoke; atomic multi-world planning/execution; and explicit Phi Settlement/Reserve planning. Its stable v122 protocol identifiers remain intentionally unchanged in v123.
 
 `client.admission.browserStore` is durable admission coordination only: it stores no proof object or sealed artifact bytes and never blocks known-artifact first paint. V120 production reconciliation preserves the provider-neutral `client.coordination` rail and never exposes Supabase mechanics. Receiz-generated files retain declared ownership, while `receiz.extensions.ts` is developer-owned and must never be overwritten.
 
@@ -27,13 +35,13 @@ Receiz applications. Fifteen focused constitutional skills supply architecture,
 domain, law, command, authority, replay, offline, causal, artifact, migration,
 performance, observability, testing, and release contracts. The earlier nine
 domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
-describe current v121 outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
+describe current outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
 proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
-One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. Every current manifest uses package version `121.0.0`, requires SDK/MCP `>=121.0.0 <122.0.0`, and binds ruleset `121.0.0` to registry digest `29a793a5bcc0195ab41d30614d37ac51df66023af354fa4335460764eb0af413` and operation-matrix digest `208553829ba78a5536524b864577ce59989e2d0a994fad9598d39ae3d557c4f5` from SDK source.
+One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. `receiz-value-execution` governs exact live Phi execution and retry recovery; `receiz-proof-authority` governs edge verification, explicit consent, and minimum-scope embedded authority. Every current manifest uses package version `123.0.0`, requires SDK/MCP `>=123.0.0 <124.0.0`, and binds ruleset `123.0.0` to registry digest `945a581d1fc49c2dc18fbe8c129771ef464b8a58b96188bce561e88ae8b6ceeb` and operation-matrix digest `e08cec3e3ad22c20ddd6c08169ece19f094c366214d6d6b4dc432cd97558e2c5` from SDK source.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
-It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all 39 skills under `node_modules/@receiz/ai-skills`: 33 manifests and 30 OpenAI agent prompts are included for explicit loading by an agent host.
+It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all 42 skills under `node_modules/@receiz/ai-skills`: 36 manifests and 33 OpenAI agent prompts are included for explicit loading by an agent host.
 
 Receiz is a proof-native artifact system. Sealed proof/object truth is strongest: a Receiz object is not a database row, but a proof-carrying artifact whose witnessed history is the truth boundary. The proof object carries continuity; SDK and MCP may verify, extract, append, or project beneath that carried truth. Receiz.com reference behavior comes before SDK, MCP, AI, and other developer rails. Server state, database state, UI state, marketplace state, and model memory are projections only. Old witnessed truth is not stale. If a projection is wrong, rebuild it from object history. If truth is missing, append new truth. Never mutate witnessed truth.
 
@@ -42,16 +50,16 @@ A verified proof object is not limited to the platform that created it. Any lawf
 ## SDK, MCP, And Skills
 
 - SDK: `@receiz/sdk` is the universal runtime; `@receiz/sdk/react` is React-only; `@receiz/sdk/compiler` is Node-only; `@receiz/sdk/testing` is browser-safe sandbox and conformance support.
-- MCP: `@receiz/mcp-server` is for agent tool access. Its current nine artifact tools and 37 living-subject tools expose transition, reconciliation, proof-brain, Twin, mandate, runtime, world, memory, social, inventory, and bearer contracts through the same SDK authority types. Diagnostics, public reads, app-state/public-store actions, previews, and delegated writes remain beneath proof truth.
+- MCP: `@receiz/mcp-server` is for agent tool access. Its current nine artifact tools, 37 inherited living-subject tools, 19 stable v122 protocol tools, and eight v123 completion tools expose transition, reconciliation, proof-brain, Twin, mandate, runtime, world, memory, social, inventory, bearer, remote admission, canonical planning, embedded authority, exact-head namespaces, exact recovery, and live Phi execution through the same SDK authority types.
 - Skills: this package is operating doctrine. It tells an AI which Receiz primitive is active, which source of truth wins, which SDK or MCP rail to use, and what must never be assumed.
 
 Agents may acquire scoped delegated access through the official Receiz Connect/OIDC Authorization Code + PKCE flow or through the MCP delegated-agent setup path exposed by `receiz_mcp_login`. That acquired access is permission to call scoped SDK/MCP rails after user consent. It is not proof authority and must never outrank artifact truth.
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v120 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v123 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
 
-The v120 operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
+The current operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
 
 Stable obsolete-versioned schema names and their head/receipt mechanics remain explicitly historical compatibility, not the active/default profile, bearer, or proof-media contract.
 
@@ -81,7 +89,7 @@ When SDK or MCP changes:
 - Generated apps must preserve Receiz proof semantics.
 - Generated apps should not require a traditional database unless the user explicitly asks for one.
 
-## v121 living-subject skills
+## Established living-subject skills
 
 - `receiz-living-subject` governs immutable subject identity, byte-preserved namespaces, ownership continuity, state, history, additions, and portable proof artifacts.
 - `receiz-subject-twin` governs subject-scoped profile, exact-head messaging, complete proof-brain retrieval, portable mind export/import, memory summaries, and the separation between speech, intentions, facts, memories, and performance.
@@ -91,6 +99,6 @@ When SDK or MCP changes:
 - `receiz-event-derived-memory` governs factual memories with admitted event citations and rebuildable AI summaries/projections.
 - `receiz-live-proof-character` governs streamed reply, audio, viseme, gaze, blink, breath, emotion, gesture, proposed intention, and completion events as non-authoritative performance over exact proof context.
 
-Every living-subject skill carries its SDK map, MCP map, authority rules, examples, tests, manifest, OpenAI metadata, and the exact v121 registry and operation-matrix digests. The skills teach the same sequence as the implementation: canonical head → entire proof history → compact indexes → relevant references → exact primary proof objects → reasoning → cited answer. They never authorize a world event, transfer, mandate, or release claim by prose.
+Every living-subject skill carries its SDK map, MCP map, authority rules, examples, tests, manifest, OpenAI metadata, and the exact current v123 registry and operation-matrix digests. The skills teach the same sequence as the implementation: canonical head → entire proof history → compact indexes → relevant references → exact primary proof objects → reasoning → cited answer. They never authorize a world event, transfer, mandate, or release claim by prose.
 
 The updated constitutional skills bind living-subject behavior into app building, command construction, deterministic replay, causal sync, global reconciliation, portable continuity, authority/security, MCP operation, testing, release, constitutional law, and offline-first operation. Their examples cover exact proof-memory speech, absent-owner exploration, mutual relationship formation, bounded trade, atomic battle, cross-device restoration, mandate revocation during a queued action, partition convergence, rejection of an AI-invented event, and cross-application subject continuity.

package/SKILLS.md

@@ -1,52 +1,37 @@
-# Receiz AI Skills v120
+# Receiz AI Skills v123
 
-V120 preserves sealed proof/object authority and adds
-`receiz.native_capture.v1` plus
-`receiz.pbi.proof-object-authorship.v1`. Native Capture binds dedicated camera
-ceremony bytes. PBI authorship requires canonical predecessor verification,
-appends ordered history, settles locally before optional publication, and does
-not transfer ownership.
+## Intent Becomes Lawful Action
 
-This package ships 39 skills, 33 machine-readable manifests, and 30 OpenAI agent prompts. Every current manifest binds registry digest `29a793a5bcc0195ab41d30614d37ac51df66023af354fa4335460764eb0af413` and application-operation-matrix digest `208553829ba78a5536524b864577ce59989e2d0a994fad9598d39ae3d557c4f5` from the v120 SDK source.
+The object is authority. The v123 distribution teaches agents to verify and retain proof at the edge, obtain explicit in-application consent, request minimum scopes, plan canonical bytes through the SDK, execute one exact mutation, and resolve committed, zero-write, or unknown before retry. A server performs scoped execution; a database provides projection, sync and recovery beneath admitted proof truth.
 
-## Current MCP artifact inventory: nine tools
+This package ships 42 skills, 36 machine-readable manifests, and 33 OpenAI agent prompts. Every current manifest binds ruleset `123.0.0`, SDK/MCP range `>=123.0.0 <124.0.0`, registry digest `945a581d1fc49c2dc18fbe8c129771ef464b8a58b96188bce561e88ae8b6ceeb`, and operation-matrix digest `e08cec3e3ad22c20ddd6c08169ece19f094c366214d6d6b4dc432cd97558e2c5`.
 
-The single current inventory is:
+## V123 completion skills
 
-1. `receiz_artifact_verify`
-2. `receiz_artifact_admit`
-3. `receiz_artifact_append_plan`
-4. `receiz_artifact_transition_seal_and_stage`
-5. `receiz_artifact_transition_commit`
-6. `receiz_artifact_global_resolve`
-7. `receiz_artifact_reconcile_plan`
-8. `receiz_artifact_reconcile_stage`
-9. `receiz_artifact_reconcile_commit`
+- `receiz-value-execution`: live Phi execution on exactly one Settlement or Reserve rail; USD is display-only; exact heads, idempotency, receipts, and lookup-before-retry are mandatory.
+- `receiz-proof-authority`: embedded proof-to-authority exchange after independent edge verification and explicit consent, without redirecting the person to receiz.com; grants are short-lived, non-refreshable, minimum-scope mechanics beneath the identity artifact.
+- `receiz-world-event-runtime`: SDK-owned v122 public planners remain the stable protocol identifiers used by v123 to generate canonical command and transaction bytes.
+- `receiz-living-subject`: resolves named namespaces at one exact authenticated head with pinned registry and reducer digests.
 
-The first five tools are also the historical v112 compatibility inventory. That historical label preserves the v112 contract; it does not define a second current surface.
+## Current MCP inventories
 
-## Current MCP living-subject inventory: 37 tools
+The package maps the nine artifact tools, 37 living-subject tools, 19 stable v122 protocol tools, and eight v123 completion tools to the canonical SDK. The v123 tools are:
 
-The exact v121 living-subject inventory covers `receiz_subject_resolve`, `receiz_subject_state`, `receiz_subject_history`, `receiz_subject_memory_query`, `receiz_subject_relationships`, `receiz_subject_inventory`, `receiz_subject_twin_profile`, `receiz_subject_twin_message`, `receiz_subject_twin_mind_export`, `receiz_subject_twin_mind_import_plan`, `receiz_subject_mandate_get`, `receiz_subject_mandate_plan`, `receiz_subject_mandate_activate`, `receiz_subject_mandate_pause`, `receiz_subject_mandate_revoke`, `receiz_world_additions`, `receiz_world_command_plan`, `receiz_world_command_validate`, `receiz_world_command_execute`, `receiz_world_transaction_plan`, `receiz_world_transaction_execute`, `receiz_world_receipt`, `receiz_world_replay`, `receiz_subject_runtime_enqueue`, `receiz_subject_runtime_status`, `receiz_subject_runtime_cancel`, `receiz_living_subject_conformance`, `receiz_subject_brain_head`, `receiz_subject_brain_search`, `receiz_subject_brain_resolve`, `receiz_subject_brain_stream`, `receiz_bearer_transfer_preview`, `receiz_bearer_instrument_issue`, `receiz_bearer_instrument_inspect`, `receiz_bearer_instrument_claim`, `receiz_bearer_transfer_cancel`, and `receiz_bearer_transfer_status`.
+1. `receiz_v123_world_plan_command_v122`
+2. `receiz_v123_world_plan_transaction_v122`
+3. `receiz_v123_value_execute_settlement`
+4. `receiz_v123_value_execute_reserve`
+5. `receiz_v123_value_execution_by_idempotency`
+6. `receiz_v123_subject_resolve_namespaces`
+7. `receiz_v123_identity_exchange_proof_authority`
+8. `receiz_v123_auth_granted_scopes`
 
-Every tool calls the SDK primitive named by its skill map, returns the source primitive and v120 registry/reducer digests, requires exact plan/permit/instrument confirmation for writes, resolves exact bytes before commit, and returns structured zero-write failure. MCP and skill prose never become authority.
+MCP confirms mutations, redacts bearer material, and never becomes proof, identity, ownership, or settlement authority.
 
 ## Skill inventory
 
-The canonical machine-readable index is [skills.json](skills.json). Start with `receiz-build-production-system` for multi-domain work, `receiz-global-reconciliation` for named-domain head resolution and offline reconciliation, or a focused primitive skill for narrower work.
+The canonical machine-readable index is [skills.json](skills.json). Start with `receiz-build-production-system` for multi-domain work, `receiz-global-reconciliation` for named-domain coordination, `receiz-value-execution` for live Phi movement, or `receiz-proof-authority` for embedded consent and scopes.
 
-## Forbidden AI operations
+All current skills forbid last-write-wins, timestamp-as-head authority, connect-token-as-proof authority, projection-as-current-owner, silent divergence resolution, remote reconciliation before first paint, unverified server artifacts, retry-before-lookup, rail collapse, and USD-as-moved-value.
 
-All current skills forbid: `last-write-wins`, `timestamp-as-head-authority`, `connect-token-as-proof-authority`, `local-receipt-as-global-authority`, `projection-as-current-owner`, `silent-divergence-resolution`, `remote-reconciliation-before-first-paint`, `unverified-server-artifact-render`, `environment-player-token-fallback`, `accepted-means-effects-delivered`, and `indeterminate-means-failed`.
-
-These instructions remain beneath exact sealed artifact bytes, independently verified history, verified identity evidence, plan-bound capability authority, and atomic named-domain acceptance.
-
-## v121 living-subject skills
-
-- `receiz-living-subject`: immutable identity, byte-preserved namespaces, ownership continuity, state, history, additions, and portable artifacts.
-- `receiz-subject-twin`: complete exact-head proof retrieval, speech/intention/fact/memory separation, subject mind portability, and provenance.
-- `receiz-autonomous-mandate`: owner-confirmed digest scope, runtime re-verification, expiration, pause, and revocation.
-- `receiz-world-event-runtime`: typed command admission, deterministic receipts, durable ticks, retries, replay, and zero-write failure.
-- `receiz-multi-subject-transaction`: atomic meetings, relationships, battles, gifts, inventory, and trades.
-- `receiz-event-derived-memory`: admitted-event citations and rebuildable projections.
-- `receiz-live-proof-character`: streamed voice and performance cues that never become canonical fact.
+Historical protocol and schema identifiers remain documented only where current compatibility requires them. They do not define a second current authority surface.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "121.0.0",
+  "version": "123.0.0",
   "description": "Registry-bound Receiz AI operating contracts beneath proof authority for SDK and MCP agents.",
   "type": "module",
   "files": [
@@ -46,7 +46,10 @@
     "receiz-world-event-runtime",
     "receiz-multi-subject-transaction",
     "receiz-event-derived-memory",
-    "receiz-live-proof-character"
+    "receiz-live-proof-character",
+    "receiz-value-rails",
+    "receiz-value-execution",
+    "receiz-proof-authority"
   ],
   "keywords": [
     "receiz",

package/receiz-app-builder-skill/manifest.json

@@ -1,15 +1,15 @@
 {
-  "schema": "receiz.ai-skill-contract.v121",
+  "schema": "receiz.ai-skill-contract.v123",
   "name": "receiz-app-builder-skill",
-  "version": "121.0.0",
+  "version": "123.0.0",
   "requires": {
-    "sdk": ">=121.0.0 <122.0.0",
-    "mcp": ">=121.0.0 <122.0.0",
-    "ruleset": "121.0.0",
-    "registryDigest": "29a793a5bcc0195ab41d30614d37ac51df66023af354fa4335460764eb0af413",
-    "operationMatrixDigest": "208553829ba78a5536524b864577ce59989e2d0a994fad9598d39ae3d557c4f5"
+    "sdk": ">=123.0.0 <124.0.0",
+    "mcp": ">=123.0.0 <124.0.0",
+    "ruleset": "123.0.0",
+    "registryDigest": "945a581d1fc49c2dc18fbe8c129771ef464b8a58b96188bce561e88ae8b6ceeb",
+    "operationMatrixDigest": "e08cec3e3ad22c20ddd6c08169ece19f094c366214d6d6b4dc432cd97558e2c5"
   },
-  "artifactLawVersion": "121.0.0",
+  "artifactLawVersion": "123.0.0",
   "artifactLaws": [
     "ARTIFACT-001",
     "ARTIFACT-002",
@@ -211,7 +211,7 @@
       "outputAuthority": "verified-artifact-runtime",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.admit",
@@ -225,7 +225,7 @@
       "outputAuthority": "verified-admission-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.append.plan",
@@ -247,7 +247,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "identity.capability.sign",
@@ -260,7 +260,7 @@
       "outputAuthority": "signed-capability-claim-not-yet-verified",
       "processBoundary": "local-identity-key-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.transition.seal",
@@ -277,7 +277,7 @@
       "outputAuthority": "sealed-candidate-proof-object-not-accepted-head",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.transition.stage",
@@ -294,7 +294,7 @@
       "outputAuthority": "staged-candidate-locator-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.transition.commit",
@@ -313,7 +313,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "admission.command.execute",
@@ -334,7 +334,7 @@
       "outputAuthority": "admission-receipt-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "public-proof.projection.locate",
@@ -348,7 +348,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "projection-only",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.global.resolve",
@@ -364,7 +364,7 @@
       "outputAuthority": "exact-artifact-bytes-not-yet-verified",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "artifact.offline.reconcile",
@@ -387,7 +387,7 @@
       "outputAuthority": "accepted-artifact-history-with-report-only-receipt",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "profile-showcase.genesis.plan",
@@ -411,7 +411,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "profile-showcase.append.plan",
@@ -437,7 +437,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "economy-showcase.genesis.plan",
@@ -461,7 +461,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "economy-showcase.append.plan",
@@ -488,7 +488,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "economy-showcase.merge.plan",
@@ -516,7 +516,7 @@
       "outputAuthority": "sdk-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.resolve",
@@ -536,7 +536,7 @@
       "outputAuthority": "verified-subject-runtime",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.brain.retrieve",
@@ -556,7 +556,7 @@
       "outputAuthority": "proof-context-non-authoritative",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.twin.message",
@@ -574,7 +574,7 @@
       "outputAuthority": "model-intent-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.mandate.activate",
@@ -593,7 +593,7 @@
       "outputAuthority": "active-mandate-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "world.command.plan",
@@ -613,7 +613,7 @@
       "outputAuthority": "world-command-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "world.command.execute",
@@ -634,7 +634,7 @@
       "outputAuthority": "accepted-world-event-with-report-only-receipt",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "world.transaction.plan",
@@ -653,7 +653,7 @@
       "outputAuthority": "world-transaction-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "world.transaction.execute",
@@ -674,7 +674,7 @@
       "outputAuthority": "accepted-world-event-with-report-only-receipt",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.runtime.enqueue",
@@ -693,7 +693,7 @@
       "outputAuthority": "runtime-job-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "not-applicable",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "subject.memory.project",
@@ -711,7 +711,7 @@
       "outputAuthority": "event-memory-projection-non-authoritative",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "bearer.transfer.plan",
@@ -730,7 +730,7 @@
       "outputAuthority": "bearer-transfer-plan-runtime",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "bearer.instrument.issue",
@@ -749,7 +749,7 @@
       "outputAuthority": "bearer-instrument-not-ownership",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "bearer.instrument.claim",
@@ -769,7 +769,7 @@
       "outputAuthority": "ownership-transition-with-sealed-artifact",
       "processBoundary": "reverify-exact-bytes",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     },
     {
       "operation": "bearer.transfer.cancel",
@@ -787,7 +787,117 @@
       "outputAuthority": "ownership-transition-with-sealed-artifact",
       "processBoundary": "same-runtime-custody",
       "namespacePolicy": "preserve-all-non-target",
-      "compatibleSdkRange": ">=121.0.0 <122.0.0"
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "identity.proof-authority.exchange",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "proof-authority-challenge",
+      "requiredEvidence": [
+        "exact-artifact-bytes",
+        "pinned-verifier-roots",
+        "application-bound-challenge",
+        "explicit-consent",
+        "minimum-scope-set"
+      ],
+      "outputAuthority": "scoped-proof-capability-not-proof-authority",
+      "processBoundary": "reverify-exact-bytes",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "authorization.scopes.introspect",
+      "authorityProfiles": [
+        "projection-only"
+      ],
+      "inputAuthority": "rail-scope-query",
+      "requiredEvidence": [
+        "minimum-scope-set"
+      ],
+      "outputAuthority": "granted-scope-projection-non-authoritative",
+      "processBoundary": "projection-only",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "subject.namespaces.resolve",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared",
+        "projection-only"
+      ],
+      "inputAuthority": "subject-proof-reference",
+      "requiredEvidence": [
+        "exact-subject-head",
+        "exact-subject-artifact-bytes",
+        "registry-digest",
+        "reducer-digest",
+        "byte-exact-namespaces"
+      ],
+      "outputAuthority": "exact-head-namespace-projection-non-authoritative",
+      "processBoundary": "reverify-exact-bytes",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "value.settlement.execute",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "value-intent-runtime",
+      "requiredEvidence": [
+        "exact-subject-head",
+        "owner-capability",
+        "rail-identity",
+        "amount-phi-micro",
+        "persisted-canonical-intent",
+        "idempotency-identity"
+      ],
+      "outputAuthority": "accepted-phi-movement-with-report-only-receipt",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "value.reserve.execute",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared"
+      ],
+      "inputAuthority": "value-intent-runtime",
+      "requiredEvidence": [
+        "exact-subject-head",
+        "owner-capability",
+        "rail-identity",
+        "amount-phi-micro",
+        "persisted-canonical-intent",
+        "idempotency-identity"
+      ],
+      "outputAuthority": "accepted-phi-movement-with-report-only-receipt",
+      "processBoundary": "same-runtime-custody",
+      "namespacePolicy": "preserve-all-non-target",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
+    },
+    {
+      "operation": "value.execution.resolve",
+      "authorityProfiles": [
+        "artifact-local",
+        "global-shared",
+        "projection-only"
+      ],
+      "inputAuthority": "value-intent-runtime",
+      "requiredEvidence": [
+        "idempotency-identity",
+        "exact-execution-outcome"
+      ],
+      "outputAuthority": "execution-outcome-projection-non-authoritative",
+      "processBoundary": "projection-only",
+      "namespacePolicy": "not-applicable",
+      "compatibleSdkRange": ">=123.0.0 <124.0.0"
     }
   ],
   "currentMcpArtifactTools": [
@@ -846,5 +956,15 @@
     "receiz_bearer_instrument_claim",
     "receiz_bearer_transfer_cancel",
     "receiz_bearer_transfer_status"
+  ],
+  "currentMcpV123Tools": [
+    "receiz_v123_world_plan_command_v122",
+    "receiz_v123_world_plan_transaction_v122",
+    "receiz_v123_value_execute_settlement",
+    "receiz_v123_value_execute_reserve",
+    "receiz_v123_value_execution_by_idempotency",
+    "receiz_v123_subject_resolve_namespaces",
+    "receiz_v123_identity_exchange_proof_authority",
+    "receiz_v123_auth_granted_scopes"
   ]
 }

package/receiz-architecture/SKILL.md

@@ -10,7 +10,7 @@ Map domains, sources of truth, state machines, dependency direction, and cross-d
 ## Constitutional workflow
 
 1. Inspect the repository and installed SDK version.
-2. Load the active canonical v121 registry and applicable constitutional laws.
+2. Load the active canonical v123 registry and applicable constitutional laws.
 3. Identify every authority boundary affected by the change.
 4. Write the implementation contract before implementation.
 5. Implement canonical changes only through SDK commands.