@receiz/ai-skills 124.0.0 → 124.0.2

package/receiz-testing/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-testing",
-  "version": "124.0.0",
+  "version": "124.0.2",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1306,5 +1306,217 @@
     "receiz_v123_auth_granted_scopes"
   ],
   "releaseTheme": "Reality Becomes Infrastructure",
-  "releaseFrame": "The Production Runtime for Verified Civilization"
+  "releaseFrame": "The Production Runtime for Verified Civilization",
+  "currentMcpV124Tools": [
+    "receiz_v124_kai_now",
+    "receiz_v124_proof_authority_challenge_create",
+    "receiz_v124_execution_plan_atomic_operation",
+    "receiz_v124_execution_stage",
+    "receiz_v124_execution_stage_prepared",
+    "receiz_v124_execution_execute",
+    "receiz_v124_execution_resolve",
+    "receiz_v124_execution_resolve_by_idempotency",
+    "receiz_v124_execution_cancel",
+    "receiz_v124_runtime_authority_session_open",
+    "receiz_v124_runtime_authority_session_refresh",
+    "receiz_v124_runtime_authority_session_close",
+    "receiz_v124_runtime_qualify",
+    "receiz_v124_domain_verified_additions",
+    "receiz_v124_domain_verified_replay",
+    "receiz_v124_domain_verified_checkpoint",
+    "receiz_v124_domain_verified_private_additions",
+    "receiz_v124_domain_replay_proof_object_export",
+    "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_v124_subject_namespaces_resolve",
+    "receiz_v124_identity_public_recipient_resolve",
+    "receiz_v124_source_publish_sealed"
+  ],
+  "currentMcpTools": [
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit",
+    "receiz_artifact_global_resolve",
+    "receiz_artifact_reconcile_plan",
+    "receiz_artifact_reconcile_stage",
+    "receiz_artifact_reconcile_commit",
+    "receiz_subject_resolve",
+    "receiz_subject_state",
+    "receiz_subject_history",
+    "receiz_subject_memory_query",
+    "receiz_subject_relationships",
+    "receiz_subject_inventory",
+    "receiz_subject_twin_profile",
+    "receiz_subject_twin_message",
+    "receiz_subject_twin_mind_export",
+    "receiz_subject_twin_mind_import_plan",
+    "receiz_subject_mandate_get",
+    "receiz_subject_mandate_plan",
+    "receiz_subject_mandate_activate",
+    "receiz_subject_mandate_pause",
+    "receiz_subject_mandate_revoke",
+    "receiz_world_additions",
+    "receiz_world_command_plan",
+    "receiz_world_command_validate",
+    "receiz_world_command_execute",
+    "receiz_world_transaction_plan",
+    "receiz_world_transaction_execute",
+    "receiz_world_receipt",
+    "receiz_world_replay",
+    "receiz_subject_runtime_enqueue",
+    "receiz_subject_runtime_status",
+    "receiz_subject_runtime_cancel",
+    "receiz_living_subject_conformance",
+    "receiz_subject_brain_head",
+    "receiz_subject_brain_search",
+    "receiz_subject_brain_resolve",
+    "receiz_subject_brain_stream",
+    "receiz_bearer_transfer_preview",
+    "receiz_bearer_instrument_issue",
+    "receiz_bearer_instrument_inspect",
+    "receiz_bearer_instrument_claim",
+    "receiz_bearer_transfer_cancel",
+    "receiz_bearer_transfer_status",
+    "receiz_v122_subject_admit",
+    "receiz_v122_subject_state",
+    "receiz_v122_subject_export_edge_bundle",
+    "receiz_v122_subject_import_edge_bundle",
+    "receiz_v122_subject_access_binding",
+    "receiz_v122_subject_access_key_publish",
+    "receiz_v122_world_plan_private",
+    "receiz_v122_world_validate_transaction",
+    "receiz_v122_world_execute_transaction",
+    "receiz_v122_world_execution",
+    "receiz_v122_world_execution_by_idempotency",
+    "receiz_v122_world_additions",
+    "receiz_v122_mandate_issue",
+    "receiz_v122_mandate_state",
+    "receiz_v122_mandate_revoke",
+    "receiz_v122_multi_world_plan",
+    "receiz_v122_multi_world_execute",
+    "receiz_v122_value_plan_settlement",
+    "receiz_v122_value_plan_reserve",
+    "receiz_v123_world_plan_command_v122",
+    "receiz_v123_world_plan_transaction_v122",
+    "receiz_v123_value_execute_settlement",
+    "receiz_v123_value_execute_reserve",
+    "receiz_v123_value_execution_by_idempotency",
+    "receiz_v123_subject_resolve_namespaces",
+    "receiz_v123_identity_exchange_proof_authority",
+    "receiz_v123_auth_granted_scopes",
+    "receiz_v124_kai_now",
+    "receiz_v124_proof_authority_challenge_create",
+    "receiz_v124_execution_plan_atomic_operation",
+    "receiz_v124_execution_stage",
+    "receiz_v124_execution_stage_prepared",
+    "receiz_v124_execution_execute",
+    "receiz_v124_execution_resolve",
+    "receiz_v124_execution_resolve_by_idempotency",
+    "receiz_v124_execution_cancel",
+    "receiz_v124_runtime_authority_session_open",
+    "receiz_v124_runtime_authority_session_refresh",
+    "receiz_v124_runtime_authority_session_close",
+    "receiz_v124_runtime_qualify",
+    "receiz_v124_domain_verified_additions",
+    "receiz_v124_domain_verified_replay",
+    "receiz_v124_domain_verified_checkpoint",
+    "receiz_v124_domain_verified_private_additions",
+    "receiz_v124_domain_replay_proof_object_export",
+    "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_v124_subject_namespaces_resolve",
+    "receiz_v124_identity_public_recipient_resolve",
+    "receiz_v124_source_publish_sealed",
+    "receiz_doctor",
+    "receiz_capabilities",
+    "receiz_required_scopes",
+    "receiz_authorize_url",
+    "receiz_mcp_login",
+    "receiz_ensure_tenant_session",
+    "receiz_app_state_publish",
+    "receiz_app_state_resolve",
+    "receiz_app_state_by_url",
+    "receiz_app_state_by_creator",
+    "receiz_app_state_by_namespace",
+    "receiz_app_state_by_id",
+    "receiz_public_store_publish",
+    "receiz_public_store_resolve",
+    "receiz_inspect_offline_file",
+    "receiz_asset_by_url",
+    "receiz_material_url_open",
+    "receiz_sealed_kai_moment",
+    "receiz_asset_by_id",
+    "receiz_pitch_proof_by_witness_id",
+    "receiz_card_history",
+    "receiz_transfer_preview",
+    "receiz_transfer_requires_confirmation",
+    "receiz_pack_open_preview",
+    "receiz_marketplace_template_generate",
+    "receiz_webhook_events_catalog",
+    "receiz_webhook_register_endpoint",
+    "receiz_webhook_rotate_secret",
+    "receiz_webhook_send_test_event",
+    "receiz_webhook_receiver_scaffold",
+    "receiz_webhook_verify_payload",
+    "receiz_inspect_proof_object",
+    "receiz_wallet_public_ledger",
+    "receiz_action_ledger",
+    "receiz_sports_conformance",
+    "receiz_world_public_snapshot",
+    "receiz_proof_query",
+    "receiz_sandbox_seed_store",
+    "receiz_sandbox_checkout",
+    "receiz_runtime_blueprint",
+    "receiz_project_inspect",
+    "receiz_app_contract_create",
+    "receiz_app_plan",
+    "receiz_app_apply",
+    "receiz_app_check",
+    "receiz_app_upgrade",
+    "receiz_app_explain",
+    "receiz_app_repair",
+    "receiz_proof_trace",
+    "receiz_webhook_replay",
+    "receiz_scope_explain",
+    "receiz_release_qualify",
+    "receiz_architecture_inspect",
+    "receiz_domain_scaffold",
+    "receiz_command_scaffold",
+    "receiz_law_define",
+    "receiz_law_explain",
+    "receiz_law_coverage",
+    "receiz_authority_inspect",
+    "receiz_command_simulate",
+    "receiz_receipt_replay",
+    "receiz_history_trace",
+    "receiz_merge_simulate",
+    "receiz_bypass_scan",
+    "receiz_conformance_run",
+    "receiz_release_verify",
+    "receiz_mcp_execute_command",
+    "receiz_mcp_append_event",
+    "receiz_mcp_verify_receipt",
+    "receiz_mcp_commit_atomic_projection"
+  ],
+  "currentMcpV122Tools": [
+    "receiz_v122_subject_admit",
+    "receiz_v122_subject_state",
+    "receiz_v122_subject_export_edge_bundle",
+    "receiz_v122_subject_import_edge_bundle",
+    "receiz_v122_subject_access_binding",
+    "receiz_v122_subject_access_key_publish",
+    "receiz_v122_world_plan_private",
+    "receiz_v122_world_validate_transaction",
+    "receiz_v122_world_execute_transaction",
+    "receiz_v122_world_execution",
+    "receiz_v122_world_execution_by_idempotency",
+    "receiz_v122_world_additions",
+    "receiz_v122_mandate_issue",
+    "receiz_v122_mandate_state",
+    "receiz_v122_mandate_revoke",
+    "receiz_v122_multi_world_plan",
+    "receiz_v122_multi_world_execute",
+    "receiz_v122_value_plan_settlement",
+    "receiz_v122_value_plan_reserve"
+  ]
 }

package/receiz-value-execution/SKILL.md

@@ -16,7 +16,7 @@ Execute an already verified Phi intent through exactly one named rail: Settlemen
 5. Accept only `committed`, `zero-write`, or `unknown` as execution outcomes.
 6. On timeout, crash, or an ambiguous response, perform lookup before retry with `client.value.executionByIdempotencyKey(...)`. Never replan an intent that may already have committed.
 
-Read the [SDK map](references/sdk-map.md) for exact method boundaries.
+Read the [SDK map](references/sdk-map.md) and [MCP map](references/mcp-map.md) for exact method, route-scope, plan-scope, process-local handle, and trusted-host session custody boundaries.
 
 ## Machine contract
 
@@ -27,6 +27,9 @@ The proof object and its admitted append remain authority. The remote execution
 - Settlement execution: `client.value.executeSettlement(intent, authority)`
 - Reserve execution: `client.value.executeReserve(intent, authority)`
 - Recovery: `client.value.executionByIdempotencyKey(key, authority)`
+- Atomic planning: `client.execution.planAtomicOperationV124(input)`
+- Durable staging/execution: `client.execution.stage(...)`, `stagePrepared(...)`, `execute(...)`
+- Durable resolution: `client.execution.resolve(...)`, `resolveByIdempotencyKey(...)`
 - Moved value: Phi micro-units
 - Display only: canonical deterministic USD value
 
@@ -36,6 +39,7 @@ The proof object and its admitted append remain authority. The remote execution
 - Treating Settlement and Reserve as interchangeable rails.
 - Replanning after an ambiguous timeout.
 - Trusting a database row, server response, or UI projection over the verified proof object and receipt.
+- Reconstructing a V124 execution handle or authority session from MCP JSON instead of using a process-local handle and canonically re-verified local/persisted session.
 
 ## Completion refusal
 

package/receiz-value-execution/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-value-execution",
-  "version": "124.0.0",
+  "version": "124.0.2",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -12,22 +12,44 @@
   "laws": [
     "receiz.value.object-authority.v123",
     "receiz.value.exactly-once-recovery.v123",
-    "receiz.value.zero-write-failure.v123"
+    "receiz.value.zero-write-failure.v123",
+    "receiz.runtime.proof-object-storage-authority.v124",
+    "receiz.runtime.authenticated-request-bound-response.v124",
+    "receiz.execution.exactly-once-recovery.v124",
+    "receiz.execution.atomic-multi-domain-zero-write.v124"
   ],
   "sdkOperations": [
+    "execution.planAtomicOperationV124",
+    "execution.stage",
+    "execution.stagePrepared",
+    "execution.execute",
+    "execution.resolve",
+    "execution.resolveByIdempotencyKey",
+    "execution.cancel",
     "value.executeSettlement",
     "value.executeReserve",
     "value.executionByIdempotencyKey",
     "auth.grantedScopes"
   ],
   "allowedTools": [
+    "receiz_v124_execution_plan_atomic_operation",
+    "receiz_v124_execution_stage",
+    "receiz_v124_execution_stage_prepared",
+    "receiz_v124_execution_execute",
+    "receiz_v124_execution_resolve",
+    "receiz_v124_execution_resolve_by_idempotency",
+    "receiz_v124_execution_cancel",
     "receiz_v123_value_execute_settlement",
     "receiz_v123_value_execute_reserve",
     "receiz_v123_value_execution_by_idempotency",
     "receiz_v123_auth_granted_scopes"
   ],
   "requiredScopes": [
+    "receiz:domains.read",
+    "receiz:domains.write",
+    "receiz:settlement.read",
     "receiz:settlement.write",
+    "receiz:reserve.read",
     "receiz:reserve.write"
   ],
   "forbiddenOperations": [
@@ -53,7 +75,11 @@
     "verified-enclosing-proof-object",
     "exact-source-and-destination-heads",
     "persisted-canonical-intent",
-    "execution-receipt-or-zero-write-failure"
+    "execution-receipt-or-zero-write-failure",
+    "validated-direct-value-intent",
+    "same-runtime-execution-handle-and-session-custody",
+    "durable-idempotency-recovery",
+    "exact-v124-route-and-plan-scope-containment"
   ],
   "artifactLawVersion": "124.0.0",
   "artifactLaws": [
@@ -1175,5 +1201,217 @@
     "receiz_artifact_transition_commit"
   ],
   "releaseTheme": "Reality Becomes Infrastructure",
-  "releaseFrame": "The Production Runtime for Verified Civilization"
+  "releaseFrame": "The Production Runtime for Verified Civilization",
+  "currentMcpV124Tools": [
+    "receiz_v124_kai_now",
+    "receiz_v124_proof_authority_challenge_create",
+    "receiz_v124_execution_plan_atomic_operation",
+    "receiz_v124_execution_stage",
+    "receiz_v124_execution_stage_prepared",
+    "receiz_v124_execution_execute",
+    "receiz_v124_execution_resolve",
+    "receiz_v124_execution_resolve_by_idempotency",
+    "receiz_v124_execution_cancel",
+    "receiz_v124_runtime_authority_session_open",
+    "receiz_v124_runtime_authority_session_refresh",
+    "receiz_v124_runtime_authority_session_close",
+    "receiz_v124_runtime_qualify",
+    "receiz_v124_domain_verified_additions",
+    "receiz_v124_domain_verified_replay",
+    "receiz_v124_domain_verified_checkpoint",
+    "receiz_v124_domain_verified_private_additions",
+    "receiz_v124_domain_replay_proof_object_export",
+    "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_v124_subject_namespaces_resolve",
+    "receiz_v124_identity_public_recipient_resolve",
+    "receiz_v124_source_publish_sealed"
+  ],
+  "currentMcpTools": [
+    "receiz_artifact_verify",
+    "receiz_artifact_admit",
+    "receiz_artifact_append_plan",
+    "receiz_artifact_transition_seal_and_stage",
+    "receiz_artifact_transition_commit",
+    "receiz_artifact_global_resolve",
+    "receiz_artifact_reconcile_plan",
+    "receiz_artifact_reconcile_stage",
+    "receiz_artifact_reconcile_commit",
+    "receiz_subject_resolve",
+    "receiz_subject_state",
+    "receiz_subject_history",
+    "receiz_subject_memory_query",
+    "receiz_subject_relationships",
+    "receiz_subject_inventory",
+    "receiz_subject_twin_profile",
+    "receiz_subject_twin_message",
+    "receiz_subject_twin_mind_export",
+    "receiz_subject_twin_mind_import_plan",
+    "receiz_subject_mandate_get",
+    "receiz_subject_mandate_plan",
+    "receiz_subject_mandate_activate",
+    "receiz_subject_mandate_pause",
+    "receiz_subject_mandate_revoke",
+    "receiz_world_additions",
+    "receiz_world_command_plan",
+    "receiz_world_command_validate",
+    "receiz_world_command_execute",
+    "receiz_world_transaction_plan",
+    "receiz_world_transaction_execute",
+    "receiz_world_receipt",
+    "receiz_world_replay",
+    "receiz_subject_runtime_enqueue",
+    "receiz_subject_runtime_status",
+    "receiz_subject_runtime_cancel",
+    "receiz_living_subject_conformance",
+    "receiz_subject_brain_head",
+    "receiz_subject_brain_search",
+    "receiz_subject_brain_resolve",
+    "receiz_subject_brain_stream",
+    "receiz_bearer_transfer_preview",
+    "receiz_bearer_instrument_issue",
+    "receiz_bearer_instrument_inspect",
+    "receiz_bearer_instrument_claim",
+    "receiz_bearer_transfer_cancel",
+    "receiz_bearer_transfer_status",
+    "receiz_v122_subject_admit",
+    "receiz_v122_subject_state",
+    "receiz_v122_subject_export_edge_bundle",
+    "receiz_v122_subject_import_edge_bundle",
+    "receiz_v122_subject_access_binding",
+    "receiz_v122_subject_access_key_publish",
+    "receiz_v122_world_plan_private",
+    "receiz_v122_world_validate_transaction",
+    "receiz_v122_world_execute_transaction",
+    "receiz_v122_world_execution",
+    "receiz_v122_world_execution_by_idempotency",
+    "receiz_v122_world_additions",
+    "receiz_v122_mandate_issue",
+    "receiz_v122_mandate_state",
+    "receiz_v122_mandate_revoke",
+    "receiz_v122_multi_world_plan",
+    "receiz_v122_multi_world_execute",
+    "receiz_v122_value_plan_settlement",
+    "receiz_v122_value_plan_reserve",
+    "receiz_v123_world_plan_command_v122",
+    "receiz_v123_world_plan_transaction_v122",
+    "receiz_v123_value_execute_settlement",
+    "receiz_v123_value_execute_reserve",
+    "receiz_v123_value_execution_by_idempotency",
+    "receiz_v123_subject_resolve_namespaces",
+    "receiz_v123_identity_exchange_proof_authority",
+    "receiz_v123_auth_granted_scopes",
+    "receiz_v124_kai_now",
+    "receiz_v124_proof_authority_challenge_create",
+    "receiz_v124_execution_plan_atomic_operation",
+    "receiz_v124_execution_stage",
+    "receiz_v124_execution_stage_prepared",
+    "receiz_v124_execution_execute",
+    "receiz_v124_execution_resolve",
+    "receiz_v124_execution_resolve_by_idempotency",
+    "receiz_v124_execution_cancel",
+    "receiz_v124_runtime_authority_session_open",
+    "receiz_v124_runtime_authority_session_refresh",
+    "receiz_v124_runtime_authority_session_close",
+    "receiz_v124_runtime_qualify",
+    "receiz_v124_domain_verified_additions",
+    "receiz_v124_domain_verified_replay",
+    "receiz_v124_domain_verified_checkpoint",
+    "receiz_v124_domain_verified_private_additions",
+    "receiz_v124_domain_replay_proof_object_export",
+    "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_v124_subject_namespaces_resolve",
+    "receiz_v124_identity_public_recipient_resolve",
+    "receiz_v124_source_publish_sealed",
+    "receiz_doctor",
+    "receiz_capabilities",
+    "receiz_required_scopes",
+    "receiz_authorize_url",
+    "receiz_mcp_login",
+    "receiz_ensure_tenant_session",
+    "receiz_app_state_publish",
+    "receiz_app_state_resolve",
+    "receiz_app_state_by_url",
+    "receiz_app_state_by_creator",
+    "receiz_app_state_by_namespace",
+    "receiz_app_state_by_id",
+    "receiz_public_store_publish",
+    "receiz_public_store_resolve",
+    "receiz_inspect_offline_file",
+    "receiz_asset_by_url",
+    "receiz_material_url_open",
+    "receiz_sealed_kai_moment",
+    "receiz_asset_by_id",
+    "receiz_pitch_proof_by_witness_id",
+    "receiz_card_history",
+    "receiz_transfer_preview",
+    "receiz_transfer_requires_confirmation",
+    "receiz_pack_open_preview",
+    "receiz_marketplace_template_generate",
+    "receiz_webhook_events_catalog",
+    "receiz_webhook_register_endpoint",
+    "receiz_webhook_rotate_secret",
+    "receiz_webhook_send_test_event",
+    "receiz_webhook_receiver_scaffold",
+    "receiz_webhook_verify_payload",
+    "receiz_inspect_proof_object",
+    "receiz_wallet_public_ledger",
+    "receiz_action_ledger",
+    "receiz_sports_conformance",
+    "receiz_world_public_snapshot",
+    "receiz_proof_query",
+    "receiz_sandbox_seed_store",
+    "receiz_sandbox_checkout",
+    "receiz_runtime_blueprint",
+    "receiz_project_inspect",
+    "receiz_app_contract_create",
+    "receiz_app_plan",
+    "receiz_app_apply",
+    "receiz_app_check",
+    "receiz_app_upgrade",
+    "receiz_app_explain",
+    "receiz_app_repair",
+    "receiz_proof_trace",
+    "receiz_webhook_replay",
+    "receiz_scope_explain",
+    "receiz_release_qualify",
+    "receiz_architecture_inspect",
+    "receiz_domain_scaffold",
+    "receiz_command_scaffold",
+    "receiz_law_define",
+    "receiz_law_explain",
+    "receiz_law_coverage",
+    "receiz_authority_inspect",
+    "receiz_command_simulate",
+    "receiz_receipt_replay",
+    "receiz_history_trace",
+    "receiz_merge_simulate",
+    "receiz_bypass_scan",
+    "receiz_conformance_run",
+    "receiz_release_verify",
+    "receiz_mcp_execute_command",
+    "receiz_mcp_append_event",
+    "receiz_mcp_verify_receipt",
+    "receiz_mcp_commit_atomic_projection"
+  ],
+  "currentMcpV122Tools": [
+    "receiz_v122_subject_admit",
+    "receiz_v122_subject_state",
+    "receiz_v122_subject_export_edge_bundle",
+    "receiz_v122_subject_import_edge_bundle",
+    "receiz_v122_subject_access_binding",
+    "receiz_v122_subject_access_key_publish",
+    "receiz_v122_world_plan_private",
+    "receiz_v122_world_validate_transaction",
+    "receiz_v122_world_execute_transaction",
+    "receiz_v122_world_execution",
+    "receiz_v122_world_execution_by_idempotency",
+    "receiz_v122_world_additions",
+    "receiz_v122_mandate_issue",
+    "receiz_v122_mandate_state",
+    "receiz_v122_mandate_revoke",
+    "receiz_v122_multi_world_plan",
+    "receiz_v122_multi_world_execute",
+    "receiz_v122_value_plan_settlement",
+    "receiz_v122_value_plan_reserve"
+  ]
 }

package/receiz-value-execution/references/mcp-map.md

@@ -0,0 +1,17 @@
+# V124 value-execution MCP map
+
+The generic V124 execution adapters can coordinate exact atomic domain plans that include Settlement or Reserve value intents. They do not replace the existing direct V123 rail tools.
+
+| Tool | SDK method | Fixed route scopes | Custody boundary |
+|---|---|---|---|
+| `receiz_v124_execution_plan_atomic_operation` | `client.execution.planAtomicOperationV124` | none | Read-only deterministic plan; the plan is not proof or commit authority. |
+| `receiz_v124_execution_stage` | `client.execution.stage` | `receiz:domains.write` | Confirmed mutation; returns only a process-local non-authoritative `handleRef`. |
+| `receiz_v124_execution_stage_prepared` | `client.execution.stagePrepared` | `receiz:domains.write` | Confirmed mutation; returns only a process-local non-authoritative `handleRef`. |
+| `receiz_v124_execution_execute` | `client.execution.execute` | `receiz:domains.write`, exact stored grant, and Settlement/Reserve grant when the operation category requires it | Requires the process-local exact handle and a local or trusted-host-persisted session re-verified by the canonical SDK/server path. |
+| `receiz_v124_execution_resolve` | `client.execution.resolve` | `receiz:domains.read` | Read-only durable authenticated resolution. |
+| `receiz_v124_execution_resolve_by_idempotency` | `client.execution.resolveByIdempotencyKey` | `receiz:domains.read` | Required recovery lookup for ambiguous delivery before any retry or replacement plan. |
+| `receiz_v124_execution_cancel` | `client.execution.cancel` | `receiz:domains.write`, exact stored grant, and Settlement/Reserve grant when the operation category requires it | Confirmed mutation requiring the process-local exact handle and re-verified local/persisted session, including terminal retries. |
+
+The authority session must also carry the exact value rail scopes required by the plan: Settlement uses `receiz:settlement.read` and `receiz:settlement.write`; Reserve uses `receiz:reserve.read` and `receiz:reserve.write`; wallet projection/transfer uses `receiz:wallet.read` and `receiz:wallet.transfer`. Fixed route scopes and exact plan scopes are separate requirements.
+
+The complete 22-tool surface is the [universal V124 runtime tool map](../../receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md).

package/receiz-value-execution/references/sdk-map.md

@@ -1,8 +1,16 @@
 # SDK map
 
+- `client.execution.planAtomicOperationV124(input)` validates and binds one canonical multi-domain plan before mutation, including direct value intents.
+- `client.execution.stage(plan)` and `client.execution.stagePrepared(plan, transitionSet)` durably stage the exact canonical plan beneath authenticated proof authority.
+- `client.execution.execute(handle, authoritySession)` performs the staged plan exactly once. Both SDK objects remain same-runtime-custodied.
+- `client.execution.resolve(input)` reads the authenticated durable outcome.
+- `client.execution.resolveByIdempotencyKey(input)` recovers the exact durable outcome by semantic idempotency coordinate after ambiguous delivery.
+- `client.execution.cancel(handle, authoritySession)` authenticates both active and terminal cancellation attempts against the issuing authority.
 - `client.value.executeSettlement(intent, authority)` executes a Settlement intent once.
 - `client.value.executeReserve(intent, authority)` executes a Reserve intent once.
 - `client.value.executionByIdempotencyKey(key, authority)` recovers the exact `committed`, `zero-write`, or `unknown` outcome.
 - `client.auth.grantedScopes(authority)` returns the granted OAuth/OIDC scope set.
 
 Persist the canonical intent before execution. After an ambiguous response, look up the idempotency key before any retry and never manufacture a replacement plan.
+
+V124 execution routes require `receiz:domains.write` for stage, execute, and cancel, and `receiz:domains.read` for resolution. The authenticated authority session must additionally carry the exact rail scopes used by the plan. A route scope, bearer, handle, session, outcome, or database row never outranks the verified proof object, authenticated heads, or receipt.