@receiz/ai-skills 124.0.2 → 124.1.0

package/receiz-domain-builder/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-domain-builder",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1264,6 +1264,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1361,6 +1365,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1455,5 +1463,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-event-derived-memory/SKILL.md

@@ -36,6 +36,12 @@ Read [manifest.json](manifest.json) before acting. Read [SDK map](references/sdk
 - Applying one side of a relationship, trade, gift, battle, or ownership transition.
 - Using latest snapshot wins or deleting unknown namespaces.
 
+## Held memory reconstruction
+
+Treat each exact sealed replay-segment artifact as a source, not as a cache entry or database row. Open the complete held family with `openReceizSourceCarriedReplayFamilyV124` and derive memory separately for every projected root-to-head branch. A bounded reasoning window may select cited additions from one branch, but it must not truncate canonical history or silently erase a sibling continuation.
+
+Use `receiz_source_carried_replay_open` when MCP must inspect a host-held family. Pass only trusted-host `sealedSourceArtifactRefs`; use the returned stable coordinates and counts for planning. Resolve the exact sealed sources outside model context before reading cited event payloads. The MCP family digest and memory projection remain non-authoritative beneath the sealed proof objects.
+
 ## Completion refusal
 
 Refuse completion when exact heads, artifact bytes, authority, event citations, replay equivalence, MCP parity, conformance, or release evidence is absent or failing. A structured failure must report zero writes.
@@ -47,3 +53,23 @@ Restart on another device and remember the exact meeting. Verify the mind artifa
 ## Authority rule
 
 Never treat a database, server, marketplace, UI, model response, cache, proof index, MCP result, or receipt as final authority. The sealed Receiz proof object and admitted append-only history remain stronger truth.
+
+<!-- receiz-source-carried-law:start -->
+## Source-carried conversation and material law
+
+The enclosing sealed proof object is **enclosing-proof authority**. A source token, manifest digest, segment digest, family digest, local-custody marker, SDK projection, or MCP result can verify or coordinate a deterministic projection, but none may replace the enclosing proof object.
+
+Conversation participation uses **Receiz-ID participant binding** to exact subject and access-key heads. There is **no fixed total member or history cap**: canonical history remains complete, while retrieval, reasoning, epoch grants, and MCP output use bounded windows. Revoking a participant requires **epoch rotation on revoke** before later private messages. Use **bounded grant operations** through `planReceizConversationEpochGrantBatchesV1` or `receiz_conversation_epoch_grants_plan`; the clear epoch secret stays in trusted-host custody and never enters model output.
+
+Reconstruction is **held-first reconstruction**. Open complete locally held conversation sources with `openReceizConversationSourceFamilyV1` or `receiz_conversation_source_family_open`. Open complete locally held media sources with `openReceizMaterialSourceParts`, then project raw RMA3 material with `createReceizRawMaterialCapsuleBlobFromSourceParts`, or inspect bounded coordinates through `receiz_material_source_parts_open`. Complete custody is **no-fetch complete custody**: once every exact source is held, verification and reconstruction must perform zero network fetches and must not consult a database, session, or server before known-truth use.
+
+Legacy and whole-payload-SHA-only media preserves the **whole-artifact-required fallback**. Newly sealed audio/video may carry a compact `receiz.material.progressive-ranges.v1` commitment inside the enclosing Signature-V4 proof. Build and validate its carried ledger with `buildReceizMaterialProgressiveLedger`, `createReceizMaterialProgressiveCommitment`, and the source-family reader; accept it only when the full ledger recomputes the signed root, then verify every requested range digest before projection. Never infer range authority from unsigned offsets, container metadata, transport segment hashes, a manifest, or an MCP result. `receiz_material_source_parts_open` may expose only the compact progressive summary among **non-authoritative MCP projections**. Material bytes, content-bearing locators, exact conversation sources, clear message bodies, and epoch secrets stay outside model output.
+<!-- receiz-source-carried-law:end -->
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+- **receiz-id-conversation.** Compose direct or unlimited invited-member conversations from complete causal history, bounded retrieval windows, encrypted epoch grants, and exact Receiz-ID participant bindings. SDK: `parseReceizConversationParticipantBindingV1`, `createReceizConversationEventV1`, `parseReceizConversationEventV1`, `reduceReceizConversationEventsV1`, `openReceizConversationSourceFamilyV1`, `createReceizConversationEpochSecretV1`, `planReceizConversationEpochGrantBatchesV1`, `openReceizConversationEpochGrantV1`, `encryptReceizConversationMessageV1`, `decryptReceizConversationMessageV1`. MCP: `receiz_conversation_source_family_open`, `receiz_conversation_epoch_grants_plan`. Boundary: Receiz identity bindings and sealed conversation events remain authority. MCP returns safe coordinates and encrypted grant envelopes only; clear messages and epoch secrets stay in trusted-host custody.
+- **subject-memory-and-twin.** Resolve complete proof history through bounded cognition windows, cite exact proof objects, and generate local or connected Twin speech without promoting model output into fact or command authority. SDK: `subjects.brain.head`, `subjects.brain.search`, `subjects.brain.resolve`, `subjects.brain.stream`, `subjects.memory.query`, `subjects.memory.project`, `subjects.memory.citations`, `subjects.memory.compact`, `subjects.twin.profile`, `subjects.twin.message`, `subjects.twin.stream`, `subjects.twin.exportMind`, `subjects.twin.importMind`, `subjects.twin.memorySummary`, `subjects.twin.streamPerformance`. MCP: `receiz_subject_memory_query`, `receiz_subject_brain_head`, `receiz_subject_brain_search`, `receiz_subject_brain_resolve`, `receiz_subject_brain_stream`, `receiz_subject_twin_profile`, `receiz_subject_twin_message`, `receiz_subject_twin_mind_export`, `receiz_subject_twin_mind_import_plan`. Boundary: Proof-derived memory cites admitted events and exact primary proof objects. Twin speech, summaries, intent, and performance remain non-authoritative proposals until deterministic command admission accepts a consequential action.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-event-derived-memory/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-event-derived-memory",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -23,7 +23,10 @@
   "allowedTools": [
     "receiz_subject_memory_query",
     "receiz_subject_twin_message",
-    "receiz_subject_twin_mind_export"
+    "receiz_subject_twin_mind_export",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan"
   ],
   "requiredScopes": [
     "receiz:subject_memory.read",
@@ -1223,6 +1226,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1320,6 +1327,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1414,5 +1425,10 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "source-carried-replay",
+    "receiz-id-conversation",
+    "subject-memory-and-twin"
   ]
 }

package/receiz-global-reconciliation/SKILL.md

@@ -27,6 +27,12 @@ Use monotonic known-head catch-up. Reject a returned ancestor with `REMOTE_HEAD_
 
 Read [divergence-and-recovery.md](resources/divergence-and-recovery.md) for contention and indeterminate attempt recovery.
 
+## Held source-family reconciliation
+
+When both sides carry sealed replay-segment proof objects, open and verify each held family before remote coordination. Diff exact artifact membership, transfer only missing sealed sources, reopen the union, and preserve every valid head. The deterministic family set digest is a comparison coordinate only; it cannot replace any enclosing artifact, authenticated head, or admitted history.
+
+Use `receiz_source_carried_replay_open` to inspect trusted-host `sealedSourceArtifactRefs` without returning or persisting exact bytes. Missing predecessors, conflicts, cycles, or identity/registry/reducer drift are structural divergence and must fail closed. A server head may append a verified source beneath the held family; it may not erase locally verified truth or delay its first paint.
+
 ## Ownership succession
 
 For portable bearer artifacts, derive current ownership from the latest lawfully admitted `ownership.transition` in verified causal order while retaining every earlier owner. Verify each historical owner-to-successor authorization independently. The final reconciliation capability authorizes submission, not prior handoffs.
@@ -78,3 +84,9 @@ Report the commit domain, exact artifact digest, verified history head, relation
 Use canonical head → entire proof history → bounded index retrieval → exact primary-object resolution → reasoning → provenance. The 96-object window is working context, never history truncation. AI speech and performance remain non-authoritative. Consequential actions require typed deterministic command admission; meetings, relationships, trades, gifts, and battles require atomic multi-subject transactions. Autonomous execution requires a current digest-bound mandate at lease time. Bearer transfer preserves identity, full history, memory policy, inventory disposition, and unknown namespace bytes while immediately revoking former-owner authority.
 
 Concrete v120 evidence must include: a creature speaking from exact long-form proof memory; absent-owner exploration inside a mandate; a mutual relationship; a bounded autonomous trade; an atomic battle; exact device restoration; queued-action revocation; partition convergence without history replacement; rejection of an AI-invented event; and cross-application subject continuity.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-global-reconciliation/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-global-reconciliation",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1189,11 +1189,17 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
   ],
-  "allowedTools": [],
+  "allowedTools": [
+    "receiz_source_carried_replay_open"
+  ],
   "currentMcpTools": [
     "receiz_artifact_verify",
     "receiz_artifact_admit",
@@ -1287,6 +1293,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1381,5 +1391,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "source-carried-replay"
   ]
 }

package/receiz-identity-profile/SKILL.md

@@ -79,3 +79,9 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
 Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v121 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **portable-account-continuity.** Seal, verify, and immediately project complete account truth—including profile, showcase, wallet, market positions/history, media, and proof history—without waiting on a server or database. SDK: `appendReceizIdentityPortableState`, `verifyReceizIdentityPortableStateProof`, `projectReceizIdentityAccount`. MCP: none: private SDK boundary. Boundary: The verified Identity Seal, Identity Record, or Receiz Key carries account truth. Private portable state is not exposed through MCP; server synchronization may append verified additions only after immediate local projection.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-identity-profile/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-identity-profile",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1247,6 +1247,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1344,6 +1348,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1438,5 +1446,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "portable-account-continuity"
   ]
 }

package/receiz-live-proof-character/SKILL.md

@@ -47,3 +47,9 @@ Open a long-form proof object and let the person narrate it. Resolve the exact l
 ## Authority rule
 
 Never treat a database, server, marketplace, UI, model response, cache, proof index, MCP result, or receipt as final authority. The sealed Receiz proof object and admitted append-only history remain stronger truth.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **subject-memory-and-twin.** Resolve complete proof history through bounded cognition windows, cite exact proof objects, and generate local or connected Twin speech without promoting model output into fact or command authority. SDK: `subjects.brain.head`, `subjects.brain.search`, `subjects.brain.resolve`, `subjects.brain.stream`, `subjects.memory.query`, `subjects.memory.project`, `subjects.memory.citations`, `subjects.memory.compact`, `subjects.twin.profile`, `subjects.twin.message`, `subjects.twin.stream`, `subjects.twin.exportMind`, `subjects.twin.importMind`, `subjects.twin.memorySummary`, `subjects.twin.streamPerformance`. MCP: `receiz_subject_memory_query`, `receiz_subject_brain_head`, `receiz_subject_brain_search`, `receiz_subject_brain_resolve`, `receiz_subject_brain_stream`, `receiz_subject_twin_profile`, `receiz_subject_twin_message`, `receiz_subject_twin_mind_export`, `receiz_subject_twin_mind_import_plan`. Boundary: Proof-derived memory cites admitted events and exact primary proof objects. Twin speech, summaries, intent, and performance remain non-authoritative proposals until deterministic command admission accepts a consequential action.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-live-proof-character/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-live-proof-character",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1224,6 +1224,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1321,6 +1325,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1415,5 +1423,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "subject-memory-and-twin"
   ]
 }

package/receiz-living-subject/SKILL.md

@@ -50,3 +50,9 @@ Capture a creature, verify its creature-card proof object, derive a stable seman
 ## Authority rule
 
 Never treat a database, server, marketplace, UI, model response, cache, proof index, MCP result, or receipt as final authority. The sealed Receiz proof object and admitted append-only history remain stronger truth.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **subject-memory-and-twin.** Resolve complete proof history through bounded cognition windows, cite exact proof objects, and generate local or connected Twin speech without promoting model output into fact or command authority. SDK: `subjects.brain.head`, `subjects.brain.search`, `subjects.brain.resolve`, `subjects.brain.stream`, `subjects.memory.query`, `subjects.memory.project`, `subjects.memory.citations`, `subjects.memory.compact`, `subjects.twin.profile`, `subjects.twin.message`, `subjects.twin.stream`, `subjects.twin.exportMind`, `subjects.twin.importMind`, `subjects.twin.memorySummary`, `subjects.twin.streamPerformance`. MCP: `receiz_subject_memory_query`, `receiz_subject_brain_head`, `receiz_subject_brain_search`, `receiz_subject_brain_resolve`, `receiz_subject_brain_stream`, `receiz_subject_twin_profile`, `receiz_subject_twin_message`, `receiz_subject_twin_mind_export`, `receiz_subject_twin_mind_import_plan`. Boundary: Proof-derived memory cites admitted events and exact primary proof objects. Twin speech, summaries, intent, and performance remain non-authoritative proposals until deterministic command admission accepts a consequential action.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-living-subject/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-living-subject",
-  "version": "124.0.2",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1245,6 +1245,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1342,6 +1346,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1436,5 +1444,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "subject-memory-and-twin"
   ]
 }

package/receiz-mcp-agent-skill/SKILL.md

@@ -103,3 +103,13 @@ Concrete v120 evidence must include: a creature speaking from exact long-form pr
 ## v124 production-runtime contract
 
 Use only the 22 exact `receiz_v124_*` adapters in the [V124 runtime tool map](resources/v124-runtime-tool-map.md). `handleRef` is a non-authoritative process-local reference. `sessionRef` may resolve a local session or a trusted-host `persistedSessionRef`, but the canonical SDK/server path must re-verify it before use. Execute and cancel require the process-local handle plus the re-verified session. Refresh rotates session custody; close consumes it. Replay export returns an unsealed non-authoritative candidate with `exactBytesB64u`; canonically Record -> Seal those exact bytes before admitting `sealedReplayProofObjectRef` for restore. Exact private additions remain in trusted-host custody under `privateAdditionsRef` and never enter model output. `applicationId` and `audience` are runtime-pinned and never tool inputs. Never reconstruct authority from MCP JSON.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+- **receiz-id-conversation.** Compose direct or unlimited invited-member conversations from complete causal history, bounded retrieval windows, encrypted epoch grants, and exact Receiz-ID participant bindings. SDK: `parseReceizConversationParticipantBindingV1`, `createReceizConversationEventV1`, `parseReceizConversationEventV1`, `reduceReceizConversationEventsV1`, `openReceizConversationSourceFamilyV1`, `createReceizConversationEpochSecretV1`, `planReceizConversationEpochGrantBatchesV1`, `openReceizConversationEpochGrantV1`, `encryptReceizConversationMessageV1`, `decryptReceizConversationMessageV1`. MCP: `receiz_conversation_source_family_open`, `receiz_conversation_epoch_grants_plan`. Boundary: Receiz identity bindings and sealed conversation events remain authority. MCP returns safe coordinates and encrypted grant envelopes only; clear messages and epoch secrets stay in trusted-host custody.
+- **held-material-reconstruction.** Build, publish, hold, reopen, and reconstruct inline RMA2 or segmented RMC1/RMC2 with raw RMA3 projection while verifying the enclosing artifact before native media use. SDK: `buildReceizMaterialCompositeTransport`, `publishReceizMaterialCompositeTransport`, `resolveReceizMaterialCompositeTransport`, `createReceizMaterialSourceFamily`, `createReceizClosedMaterialPresentationUrl`, `openReceizMaterialSourceParts`, `createReceizRawMaterialCapsuleBlobFromSourceParts`, `decodeReceizRawMaterialCapsuleBytes`, `resolveReceizMaterialCompositeFromSources`, `openVerifiedReceizMaterialUrl`. MCP: `receiz_material_source_parts_open`, `receiz_material_url_open`. Boundary: Transport segments, locators, manifests, object URLs, and storage are projections only. Native bytes are admitted only beneath verification of the enclosing sealed artifact.
+- **progressive-range-playback.** Start verified first-frame playback from signed range commitments while remaining ranges settle behind the already playing media. SDK: `buildReceizMaterialProgressiveLedger`, `createReceizMaterialProgressiveCommitment`, `coerceReceizMaterialProgressiveLedger`, `coerceReceizMaterialProgressiveCommitment`, `openReceizMaterialSourceRangeReader`. MCP: `receiz_material_source_parts_open`. Boundary: Only a progressive ledger whose complete root is carried by the enclosing Signature-V4 proof can authorize range projection. Unsigned offsets, container metadata, or transport segments cannot.
+- **subject-memory-and-twin.** Resolve complete proof history through bounded cognition windows, cite exact proof objects, and generate local or connected Twin speech without promoting model output into fact or command authority. SDK: `subjects.brain.head`, `subjects.brain.search`, `subjects.brain.resolve`, `subjects.brain.stream`, `subjects.memory.query`, `subjects.memory.project`, `subjects.memory.citations`, `subjects.memory.compact`, `subjects.twin.profile`, `subjects.twin.message`, `subjects.twin.stream`, `subjects.twin.exportMind`, `subjects.twin.importMind`, `subjects.twin.memorySummary`, `subjects.twin.streamPerformance`. MCP: `receiz_subject_memory_query`, `receiz_subject_brain_head`, `receiz_subject_brain_search`, `receiz_subject_brain_resolve`, `receiz_subject_brain_stream`, `receiz_subject_twin_profile`, `receiz_subject_twin_message`, `receiz_subject_twin_mind_export`, `receiz_subject_twin_mind_import_plan`. Boundary: Proof-derived memory cites admitted events and exact primary proof objects. Twin speech, summaries, intent, and performance remain non-authoritative proposals until deterministic command admission accepts a consequential action.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-mcp-agent-skill/resources/v124-runtime-tool-map.json

@@ -23,7 +23,11 @@
     "restore-accepts-only-sealedReplayProofObjectRef",
     "private-additions-remain-in-trusted-host-custody-behind-privateAdditionsRef",
     "private-additions-exact-result-is-never-returned-to-the-model",
-    "mcp-never-reconstructs-sdk-authority-from-json"
+    "source-carried-replay-exact-sources-stay-in-trusted-host-custody",
+    "mcp-never-reconstructs-sdk-authority-from-json",
+    "conversation-source-exact-sources-stay-in-trusted-host-custody",
+    "conversation-epoch-secret-never-enters-model-output",
+    "material-source-locators-and-bytes-stay-in-trusted-host-custody"
   ],
   "tools": [
     {
@@ -323,6 +327,59 @@
       "actionClass": "local-custody-restore",
       "custody": "Accepts only sealedReplayProofObjectRef, resolves the exact sealed artifact in trusted host custody, and requires canonical SDK verification before restoring replay custody."
     },
+    {
+      "name": "receiz_source_carried_replay_open",
+      "sdkMethod": "openReceizSourceCarriedReplayFamilyV124 + projectReceizSourceCarriedReplayBranchesV124",
+      "scopeMode": "none",
+      "fixedScopes": [],
+      "conditionalScopes": [],
+      "inputRefs": [
+        "sealedSourceArtifactRefs"
+      ],
+      "outputRefs": [],
+      "actionClass": "local-held-read-only",
+      "custody": "Resolves exact sealed replay sources through trusted-host references, preserves every valid branch, and returns only stable coordinates and counts. Exact source bytes are never returned or persisted by MCP."
+    },
+    {
+      "name": "receiz_conversation_source_family_open",
+      "sdkMethod": "openReceizConversationSourceFamilyV1",
+      "scopeMode": "none",
+      "fixedScopes": [],
+      "conditionalScopes": [],
+      "inputRefs": [
+        "sealedSourceArtifactRefs"
+      ],
+      "outputRefs": [],
+      "actionClass": "local-held-read-only",
+      "custody": "Resolves exact sealed conversation replay sources through trusted-host references, preserves every valid sibling branch, and returns member, epoch, message-digest, and head coordinates only. Exact sources and clear message bodies never enter model output."
+    },
+    {
+      "name": "receiz_conversation_epoch_grants_plan",
+      "sdkMethod": "planReceizConversationEpochGrantBatchesV1",
+      "scopeMode": "none",
+      "fixedScopes": [],
+      "conditionalScopes": [],
+      "inputRefs": [
+        "epochSecretRef",
+        "recipientSetRef"
+      ],
+      "outputRefs": [],
+      "actionClass": "local-bounded-private-plan",
+      "custody": "Resolves the exact epoch secret and complete recipient binding set through trusted-host references, emits at most 128 encrypted recipient grants per call, and returns no clear epoch secret. Repeat nextRecipientOffset without a total membership cap."
+    },
+    {
+      "name": "receiz_material_source_parts_open",
+      "sdkMethod": "openReceizMaterialSourceParts",
+      "scopeMode": "none",
+      "fixedScopes": [],
+      "conditionalScopes": [],
+      "inputRefs": [
+        "materialSourceFamilyRef"
+      ],
+      "outputRefs": [],
+      "actionClass": "local-held-read-only",
+      "custody": "Resolves and verifies the complete held material source family, then returns at most 256 segment coordinates per call. Exact material bytes and content-bearing locators never enter model output."
+    },
     {
       "name": "receiz_v124_subject_namespaces_resolve",
       "sdkMethod": "client.subjects.resolveNamespacesV124",

package/receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md

@@ -1,59 +1,83 @@
 # V124 Runtime MCP Tool Map
 
-This is the exact universal V124 MCP adapter surface. It is not application-specific. Each tool calls the named SDK primitive and must not reimplement SDK verification, authority, clock, replay, or execution law. The machine-readable companion is [v124-runtime-tool-map.json](v124-runtime-tool-map.json).
+This is the exact universal V124 MCP adapter surface. It is not application-specific. Each tool calls the named SDK primitive and must not reimplement SDK verification, authority, clock, replay, conversation, material, or execution law. The machine-readable companion is [v124-runtime-tool-map.json](v124-runtime-tool-map.json).
 
 ## Authority hierarchy
 
-- The sealed Receiz proof object remains proof authority.
-- The Receiz identity artifact remains identity authority.
-- A grant, challenge, bearer, authority session, handle, MCP reference, server response, or database row is not proof or identity authority.
-- The database supports durable coordination, synchronization, and recovery beneath proof-object continuity.
-- UTC supplies elapsed duration to the genesis-derived Kai bridge; UTC is not Kai authority.
+- The enclosing sealed Receiz proof object remains proof authority.
+- The Receiz identity artifact remains identity authority and every conversation participant is bound by Receiz ID to exact subject/access heads.
+- A grant, challenge, bearer, authority session, handle, source-family digest, MCP reference, server response, or database row is not proof or identity authority.
+- The database supports synchronization and recovery beneath proof-object continuity; complete trusted-host custody reconstructs with no fetch.
 
 ## Exact tools, SDK methods, and scopes
 
-`Fixed scopes` means every listed scope is required by that route. `Conditional scopes` means the exact challenge/session scope set or the one scope selected by the sealed source kind; it never means all scopes may be inferred.
-
 `applicationId` and `audience` are pinned by the authenticated MCP runtime. They are never model-supplied tool inputs.
 
-| MCP tool | Canonical SDK method | Fixed and conditional scopes | Input refs | Output refs |
+| MCP tool | Canonical SDK method | Scopes | Input refs | Output refs |
 |---|---|---|---|---|
 | `receiz_v124_kai_now` | `receizKaiNow` | none | none | none |
-| `receiz_v124_proof_authority_challenge_create` | `createReceizProofAuthorityChallenge` | exact requested scopes within the registered application grant | none | none |
+| `receiz_v124_proof_authority_challenge_create` | `createReceizProofAuthorityChallenge` | conditional `exact-requested-scopes-within-registered-application-grant` | none | none |
 | `receiz_v124_execution_plan_atomic_operation` | `client.execution.planAtomicOperationV124` | none | none | `planRef` |
 | `receiz_v124_execution_stage` | `client.execution.stage` | fixed `receiz:domains.write` | `planRef` | `handleRef` |
 | `receiz_v124_execution_stage_prepared` | `client.execution.stagePrepared` | fixed `receiz:domains.write` | `planRef`, `transitionSetRef` | `handleRef` |
-| `receiz_v124_execution_execute` | `client.execution.execute` | fixed `receiz:domains.write`; exact stored grant; Settlement/Reserve rail grant when that category is executed | `handleRef`, `sessionRef` | `planRef` only for an unknown outcome retained for recovery |
-| `receiz_v124_execution_resolve` | `client.execution.resolve` | fixed `receiz:domains.read` | none | `planRef` only for an unknown outcome retained for recovery |
-| `receiz_v124_execution_resolve_by_idempotency` | `client.execution.resolveByIdempotencyKey` | fixed `receiz:domains.read` | none | `planRef` only for an unknown outcome retained for recovery |
-| `receiz_v124_execution_cancel` | `client.execution.cancel` | fixed `receiz:domains.write`; exact stored grant; Settlement/Reserve rail grant when that category is cancelled | `handleRef`, `sessionRef` | `planRef` only for an unknown outcome retained for recovery |
-| `receiz_v124_runtime_authority_session_open` | `client.runtime.openAuthoritySessionV124` | exact signed-challenge scopes plus `receiz:<requested-rail>.write` for every requested rail | `identityArtifactRef`, `subjectSourceArtifactRef`, `signedChallengeRef` | `sessionRef`; optional `persistedSessionRef` |
-| `receiz_v124_runtime_authority_session_refresh` | `client.runtime.refreshAuthoritySessionV124` | exact signed-challenge and stored-session scopes plus `receiz:<requested-rail>.write` | `sessionRef`, `identityArtifactRef`, `signedChallengeRef` | rotated `sessionRef`; optional `persistedSessionRef` |
-| `receiz_v124_runtime_authority_session_close` | `client.runtime.closeAuthoritySessionV124` | exact stored session grant | `sessionRef` | none |
-| `receiz_v124_runtime_qualify` | `client.runtime.qualifyV124` | application-bound bearer | none | none |
+| `receiz_v124_execution_execute` | `client.execution.execute` | fixed `receiz:domains.write`; conditional `exact-stored-granted-scopes`; conditional `settlement-or-reserve-granted-rail-when-operation-category-requires-it` | `handleRef`, `sessionRef` | `planRef` |
+| `receiz_v124_execution_resolve` | `client.execution.resolve` | fixed `receiz:domains.read` | none | `planRef` |
+| `receiz_v124_execution_resolve_by_idempotency` | `client.execution.resolveByIdempotencyKey` | fixed `receiz:domains.read` | none | `planRef` |
+| `receiz_v124_execution_cancel` | `client.execution.cancel` | fixed `receiz:domains.write`; conditional `exact-stored-granted-scopes`; conditional `settlement-or-reserve-granted-rail-when-operation-category-requires-it` | `handleRef`, `sessionRef` | `planRef` |
+| `receiz_v124_runtime_authority_session_open` | `client.runtime.openAuthoritySessionV124` | conditional `exact-signed-challenge-scopes`; conditional `receiz:<requested-rail>.write` | `identityArtifactRef`, `subjectSourceArtifactRef`, `signedChallengeRef` | `sessionRef`, `persistedSessionRef` |
+| `receiz_v124_runtime_authority_session_refresh` | `client.runtime.refreshAuthoritySessionV124` | conditional `exact-signed-challenge-scopes`; conditional `exact-stored-session-scopes`; conditional `receiz:<requested-rail>.write` | `sessionRef`, `identityArtifactRef`, `signedChallengeRef` | `sessionRef`, `persistedSessionRef` |
+| `receiz_v124_runtime_authority_session_close` | `client.runtime.closeAuthoritySessionV124` | conditional `exact-stored-session-scopes` | `sessionRef` | none |
+| `receiz_v124_runtime_qualify` | `client.runtime.qualifyV124` | conditional `application-bound-bearer` | none | none |
 | `receiz_v124_domain_verified_additions` | `client.domains.verifiedAdditionsV124` | fixed `receiz:domains.read` | none | none |
 | `receiz_v124_domain_verified_replay` | `client.domains.verifiedReplayV124` | fixed `receiz:domains.read` | none | none |
 | `receiz_v124_domain_verified_checkpoint` | `client.domains.verifiedCheckpointV124` | fixed `receiz:domains.read` | none | none |
-| `receiz_v124_domain_verified_private_additions` | `client.domains.verifiedPrivateAdditionsV124` | fixed `receiz:world.private` plus exact stored grant | `sessionRef` | trusted-host `privateAdditionsRef` only |
-| `receiz_v124_domain_replay_proof_object_export` | `client.domains.exportVerifiedReplayProofObjectV124` | none | none | none; returns an unsealed candidate with `exactBytesB64u` |
+| `receiz_v124_domain_verified_private_additions` | `client.domains.verifiedPrivateAdditionsV124` | fixed `receiz:world.private`; conditional `exact-stored-granted-scopes` | `sessionRef` | `privateAdditionsRef` |
+| `receiz_v124_domain_replay_proof_object_export` | `client.domains.exportVerifiedReplayProofObjectV124` | none | none | none |
 | `receiz_v124_domain_replay_proof_object_restore` | `client.domains.restoreVerifiedReplayProofObjectV124` | none | `sealedReplayProofObjectRef` | none |
+| `receiz_source_carried_replay_open` | `openReceizSourceCarriedReplayFamilyV124 + projectReceizSourceCarriedReplayBranchesV124` | none | `sealedSourceArtifactRefs` | none |
+| `receiz_conversation_source_family_open` | `openReceizConversationSourceFamilyV1` | none | `sealedSourceArtifactRefs` | none |
+| `receiz_conversation_epoch_grants_plan` | `planReceizConversationEpochGrantBatchesV1` | none | `epochSecretRef`, `recipientSetRef` | none |
+| `receiz_material_source_parts_open` | `openReceizMaterialSourceParts` | none | `materialSourceFamilyRef` | none |
 | `receiz_v124_subject_namespaces_resolve` | `client.subjects.resolveNamespacesV124` | fixed `receiz:subjects.read` | none | none |
-| `receiz_v124_identity_public_recipient_resolve` | `client.identity.resolvePublicRecipientV124` | fixed `receiz:subjects.read` plus exact stored grant | `sessionRef` | none |
-| `receiz_v124_source_publish_sealed` | `client.sources.publishSealedSourceV124` | subject: `receiz:subjects.write`, no session; replay/checkpoint: `receiz:domains.write` plus exact stored grant | `sealedSourceArtifactRef`; `sessionRef` for replay/checkpoint | none |
+| `receiz_v124_identity_public_recipient_resolve` | `client.identity.resolvePublicRecipientV124` | fixed `receiz:subjects.read`; conditional `exact-stored-granted-scopes` | `sessionRef` | none |
+| `receiz_v124_source_publish_sealed` | `client.sources.publishSealedSourceV124` | conditional `subject:receiz:subjects.write:no-session`; conditional `replay-segment:receiz:domains.write:exact-stored-granted-scopes`; conditional `checkpoint:receiz:domains.write:exact-stored-granted-scopes` | `sealedSourceArtifactRef`, `sessionRef` | none |
 
 ## Reference and trusted-host custody
 
-- `planRef`, `transitionSetRef`, identity/source artifact references, signed-challenge references, sealed-source references, and sealed replay references resolve only through application-bound trusted-host custody. The model never supplies the underlying material.
-- `handleRef` is always process-local and non-authoritative. `receiz_v124_execution_stage` and `receiz_v124_execution_stage_prepared` keep the exact SDK handle in the MCP client runtime.
-- `sessionRef` may name a local held session or a trusted-host-persisted session. A returned `persistedSessionRef` is supplied to a later tool as its `sessionRef` value. The canonical SDK/server path re-verifies the persisted session before use; the reference and persisted projection are not authority.
-- Execute and cancel require the process-local held handle and a re-verified held/persisted authority session. Never reconstruct either object from JSON.
-- Refresh rotates session custody and invalidates the prior local reference. Close consumes the authenticated session.
-- Private additions remain entirely in trusted-host custody under `privateAdditionsRef`. The model receives only authenticated safe coordinates, counts, and event digests—not the exact encrypted additions or recipient material.
-- Replay export returns an unsealed, non-authoritative candidate containing `exactBytesB64u`. It is not a sealed proof object. Canonically Record -> Seal those exact bytes, admit the result into trusted-host custody as `sealedReplayProofObjectRef`, and only then call restore.
-- Restore accepts only `sealedReplayProofObjectRef`; the SDK verifies the exact sealed proof object before restoring replay custody. Caller-constructed replay JSON is forbidden.
+- `receiz_v124_kai_now`: No authority object is created; the SDK returns the genesis-derived Kai pulse coordinate.
+- `receiz_v124_proof_authority_challenge_create`: The canonical signable challenge is not identity authority and must remain exact through local artifact signing.
+- `receiz_v124_execution_plan_atomic_operation`: The SDK plan is a deterministic execution projection, not proof or commit authority.
+- `receiz_v124_execution_stage`: The MCP runtime holds the exact SDK handle and returns only a process-local non-authoritative handleRef.
+- `receiz_v124_execution_stage_prepared`: The MCP runtime holds the exact SDK handle and returns only a process-local non-authoritative handleRef.
+- `receiz_v124_execution_execute`: Requires the process-local exact handle plus a local or trusted-host-persisted authority session; the canonical SDK/server path re-verifies the session and JSON reconstruction is rejected.
+- `receiz_v124_execution_resolve`: Reads the durable authenticated execution projection through the SDK; the projection does not become proof authority.
+- `receiz_v124_execution_resolve_by_idempotency`: Resolves the durable semantic idempotency coordinate without manufacturing or replaying a replacement plan.
+- `receiz_v124_execution_cancel`: Requires the process-local exact handle plus a local or trusted-host-persisted authority session; the canonical SDK/server path re-verifies terminal authorization.
+- `receiz_v124_runtime_authority_session_open`: Returns a non-authoritative local sessionRef and, when configured, a trusted-host persistedSessionRef; every later use is re-verified by the canonical SDK/server path.
+- `receiz_v124_runtime_authority_session_refresh`: Refresh re-verifies a local sessionRef or trusted-host persistedSessionRef supplied as sessionRef, rotates custody, and returns new local and optional persisted references.
+- `receiz_v124_runtime_authority_session_close`: Close re-verifies a local or trusted-host-persisted session reference and consumes the active session custody.
+- `receiz_v124_runtime_qualify`: Capability descriptors report operational dependencies but cannot establish proof, identity, or execution authority.
+- `receiz_v124_domain_verified_additions`: The SDK authenticates transport and verifies additions against the exact predecessor before admission into its replay context.
+- `receiz_v124_domain_verified_replay`: Verified replay custody belongs to the canonical SDK client runtime, never to an MCP property bag.
+- `receiz_v124_domain_verified_checkpoint`: Checkpoint creation consumes SDK-held verified replay custody and binds the authenticated exact head.
+- `receiz_v124_domain_verified_private_additions`: The exact authenticated private-additions result remains in trusted host custody behind privateAdditionsRef; the model receives only safe coordinates, counts, and digests.
+- `receiz_v124_domain_replay_proof_object_export`: Returns an unsealed non-authoritative candidate containing exactBytesB64u. It must pass the canonical Record -> Seal ceremony before admission as sealedReplayProofObjectRef.
+- `receiz_v124_domain_replay_proof_object_restore`: Accepts only sealedReplayProofObjectRef, resolves the exact sealed artifact in trusted host custody, and requires canonical SDK verification before restoring replay custody.
+- `receiz_source_carried_replay_open`: Resolves exact sealed replay sources through trusted-host references, preserves every valid branch, and returns only stable coordinates and counts. Exact source bytes are never returned or persisted by MCP.
+- `receiz_conversation_source_family_open`: Resolves exact sealed conversation replay sources through trusted-host references, preserves every valid sibling branch, and returns member, epoch, message-digest, and head coordinates only. Exact sources and clear message bodies never enter model output.
+- `receiz_conversation_epoch_grants_plan`: Resolves the exact epoch secret and complete recipient binding set through trusted-host references, emits at most 128 encrypted recipient grants per call, and returns no clear epoch secret. Repeat nextRecipientOffset without a total membership cap.
+- `receiz_material_source_parts_open`: Resolves and verifies the complete held material source family, then returns at most 256 segment coordinates per call. Exact material bytes and content-bearing locators never enter model output.
+- `receiz_v124_subject_namespaces_resolve`: Returns authenticated namespace projections bound to exact heads; projections cannot replace sealed subject truth.
+- `receiz_v124_identity_public_recipient_resolve`: Returns only the privacy-safe public recipient projection needed for transfer planning; it is not identity authority.
+- `receiz_v124_source_publish_sealed`: The exact sealedSourceArtifactRef stays in trusted host custody. Subject publication needs no session; replay-segment/checkpoint publication re-verifies a local or persisted session's exact stored grant.
 
-## Mutation and recovery law
+## Source-carried boundaries
 
-Challenge creation, stage, execute, cancel, authority-session open/refresh/close, and sealed-source publication require the exact MCP confirmation digest before mutation. A confirmation digest authorizes only the exact pending request and never becomes proof, identity, session, or execution authority. Recovery reads use the durable semantic idempotency coordinate before any replacement plan is created.
+- `receiz_conversation_source_family_open` verifies exact sealed sources and returns branch coordinates only; clear bodies remain outside model context.
+- `receiz_conversation_epoch_grants_plan` is a bounded encrypted plan. The epoch secret remains host-custodied, revocation requires epoch rotation, and repeated windows support any total invited membership.
+- `receiz_material_source_parts_open` verifies complete custody and pages coordinates only. It never serializes content-bearing locators or large bytes into MCP JSON.
+- Legacy and whole-SHA media stays whole-artifact-required. Signed progressive media uses a compact enclosing commitment plus a carried ledger that must recompute its root; unsigned byte ranges, segment offsets, manifests, or container indexes cannot become range authority.
+
+## Mutation and recovery law
 
-All tool output remains a subordinate projection. Secret-bearing values and private proof material must not be echoed by the MCP adapter.
+Confirmed mutation tools require the exact MCP confirmation digest. A confirmation digest authorizes only the exact pending request and never becomes proof, identity, session, or execution authority. All MCP outputs are non-authoritative projections beneath sealed proof-object truth.