@receiz/ai-skills 124.0.3 → 124.1.0

package/README.md

@@ -1,6 +1,6 @@
 # Receiz AI Skills
 
-The `124.0.3` package at release coordinate `v124.0.3` is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, OAuth/OIDC grants, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
+The `124.1.0` package at release coordinate `v124.1.0` is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, OAuth/OIDC grants, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
 
 ## V124 — Reality Becomes Infrastructure
 
@@ -39,7 +39,7 @@ performance, observability, testing, and release contracts. The earlier nine
 domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
 describe current outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
 proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
-One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. `receiz-value-execution` governs exact live Phi execution and retry recovery; `receiz-proof-authority` governs edge verification, explicit consent, and minimum-scope embedded authority. Every current manifest uses package version `124.0.3`, requires SDK/MCP `>=124.0.0 <125.0.0`, and binds ruleset `124.0.0` to registry digest `d02429151b0bcebdaeb89485792e377afc55130f9a25e07982c1c88221314247` and operation-matrix digest `540d1c1bf39f1b288b257c79a6e020bdcc5e587fc9b7dbf6b7aaa5d082e20ad5` from SDK source.
+One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. `receiz-value-execution` governs exact live Phi execution and retry recovery; `receiz-proof-authority` governs edge verification, explicit consent, and minimum-scope embedded authority. Every current manifest uses package version `124.1.0`, requires SDK/MCP `>=124.0.0 <125.0.0`, and binds ruleset `124.0.0` to registry digest `d02429151b0bcebdaeb89485792e377afc55130f9a25e07982c1c88221314247` and operation-matrix digest `540d1c1bf39f1b288b257c79a6e020bdcc5e587fc9b7dbf6b7aaa5d082e20ad5` from SDK source.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
@@ -52,7 +52,9 @@ A verified proof object is not limited to the platform that created it. Any lawf
 ## SDK, MCP, And Skills
 
 - SDK: `@receiz/sdk` is the universal runtime; `@receiz/sdk/react` is React-only; `@receiz/sdk/compiler` is Node-only; `@receiz/sdk/testing` is browser-safe sandbox and conformance support.
-- MCP: `@receiz/mcp-server` is for agent tool access. Its current nine artifact tools, 37 inherited living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, and 22 V124 production-runtime tools expose transition, reconciliation, proof-brain, Twin, mandate, runtime, world, memory, social, inventory, bearer, remote admission, canonical planning, embedded authority, exact-head namespaces, exact recovery, live Phi execution, authenticated replay/checkpoints, durable orchestration, and privacy-safe resolution through the same SDK authority types.
+- MCP: `@receiz/mcp-server` is for agent tool access. Its current 169-tool registry includes nine artifact tools, 37 inherited living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, and 26 V124 production-runtime tools. The four V124.1 source-carried adapters expose replay-family opening, Receiz-ID conversation-family opening, bounded private epoch-grant planning, and held material-family inspection while exact sources, secrets, locators, and large bytes remain in trusted-host custody.
+
+`skills.json` carries the canonical `v124_1CapabilityInventory`, and each relevant manifest carries its exact `v124_1CapabilityIds`. This binds source-carried replay, unlimited invited-member conversation, exact large-material reconstruction, progressive verified playback, proof-derived memory/Twin response, and portable account continuity across SDK, MCP, and AI instructions without allowing the model layer to invent or outrank proof.
 - Skills: this package is operating doctrine. It tells an AI which Receiz primitive is active, which source of truth wins, which SDK or MCP rail to use, and what must never be assumed.
 
 Agents may acquire scoped delegated access through the official Receiz Connect/OIDC Authorization Code + PKCE flow or through the MCP delegated-agent setup path exposed by `receiz_mcp_login`. That acquired access is permission to call scoped SDK/MCP rails after user consent. It is not proof authority and must never outrank artifact truth.

package/SKILLS.md

@@ -19,7 +19,7 @@ The current 53-operation matrix adds live Kai projection, canonical challenge cr
 
 ## Current MCP inventories
 
-The package maps the nine artifact tools, 37 living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, and 22 V124 production-runtime tools to the canonical SDK. The exact V124 tool/SDK/scope/custody contract is the [universal V124 runtime tool map](receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md).
+The package maps the complete 169-tool registry—including nine artifact tools, 37 living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, and 26 V124 production-runtime tools—to the canonical SDK. The exact V124 tool/SDK/scope/custody contract is the [universal V124 runtime tool map](receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md). The machine-readable `v124_1CapabilityInventory` in `skills.json` and each manifest's `v124_1CapabilityIds` bind all six V124.1 capability families to the exact skills that teach them.
 
 The V124 adapters cover:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "description": "Registry-bound Receiz AI operating contracts beneath proof authority for SDK and MCP agents.",
   "type": "module",
   "files": [

package/receiz-app-builder-skill/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-app-builder-skill",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1315,6 +1315,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1412,6 +1416,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1506,5 +1514,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-architecture/SKILL.md

@@ -41,6 +41,12 @@ Read [manifest.json](manifest.json) before acting. Its package range, ruleset, a
 - Appending an event without a command admission receipt.
 - Marking the task complete while required evidence is missing.
 
+## Source-carried replay primitive
+
+When a domain already carries exact sealed replay-segment sources, open them with `openReceizSourceCarriedReplayFamilyV124`, then project every root-to-head continuation with `projectReceizSourceCarriedReplayBranchesV124`. The family set digest is deterministic coordination material, not proof authority. Duplicate exact sources are idempotent; conflicting duplicates, missing predecessors, cycles, identity drift, registry drift, and reducer drift fail closed. Preserve sibling branches instead of choosing a latest or timestamp winner.
+
+For MCP, use `receiz_source_carried_replay_open` with trusted-host `sealedSourceArtifactRefs`. The result exposes stable proof-object coordinates, source/head counts, and branch counts only. It never returns or persists exact source bytes.
+
 ## Completion refusal
 
 Refuse completion when any manifest input, law, test, conformance result, independent-verifier result, or release-lock result is absent or failing. Never reduce the evidence list, change a test to bless a visible regression, invent authority, or accept “the AI said it is valid” as evidence.
@@ -51,6 +57,22 @@ Request: Map domains, sources of truth, state machines, dependency direction, an
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
 
+
+
+
+
+<!-- receiz-source-carried-law:start -->
+## Source-carried conversation and material law
+
+The enclosing sealed proof object is **enclosing-proof authority**. A source token, manifest digest, segment digest, family digest, local-custody marker, SDK projection, or MCP result can verify or coordinate a deterministic projection, but none may replace the enclosing proof object.
+
+Conversation participation uses **Receiz-ID participant binding** to exact subject and access-key heads. There is **no fixed total member or history cap**: canonical history remains complete, while retrieval, reasoning, epoch grants, and MCP output use bounded windows. Revoking a participant requires **epoch rotation on revoke** before later private messages. Use **bounded grant operations** through `planReceizConversationEpochGrantBatchesV1` or `receiz_conversation_epoch_grants_plan`; the clear epoch secret stays in trusted-host custody and never enters model output.
+
+Reconstruction is **held-first reconstruction**. Open complete locally held conversation sources with `openReceizConversationSourceFamilyV1` or `receiz_conversation_source_family_open`. Open complete locally held media sources with `openReceizMaterialSourceParts`, then project raw RMA3 material with `createReceizRawMaterialCapsuleBlobFromSourceParts`, or inspect bounded coordinates through `receiz_material_source_parts_open`. Complete custody is **no-fetch complete custody**: once every exact source is held, verification and reconstruction must perform zero network fetches and must not consult a database, session, or server before known-truth use.
+
+Legacy and whole-payload-SHA-only media preserves the **whole-artifact-required fallback**. Newly sealed audio/video may carry a compact `receiz.material.progressive-ranges.v1` commitment inside the enclosing Signature-V4 proof. Build and validate its carried ledger with `buildReceizMaterialProgressiveLedger`, `createReceizMaterialProgressiveCommitment`, and the source-family reader; accept it only when the full ledger recomputes the signed root, then verify every requested range digest before projection. Never infer range authority from unsigned offsets, container metadata, transport segment hashes, a manifest, or an MCP result. `receiz_material_source_parts_open` may expose only the compact progressive summary among **non-authoritative MCP projections**. Material bytes, content-bearing locators, exact conversation sources, clear message bodies, and epoch secrets stay outside model output.
+<!-- receiz-source-carried-law:end -->
+
 ## v120 artifact-derived authority
 
 Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
@@ -60,3 +82,11 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
 Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v121 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+- **receiz-id-conversation.** Compose direct or unlimited invited-member conversations from complete causal history, bounded retrieval windows, encrypted epoch grants, and exact Receiz-ID participant bindings. SDK: `parseReceizConversationParticipantBindingV1`, `createReceizConversationEventV1`, `parseReceizConversationEventV1`, `reduceReceizConversationEventsV1`, `openReceizConversationSourceFamilyV1`, `createReceizConversationEpochSecretV1`, `planReceizConversationEpochGrantBatchesV1`, `openReceizConversationEpochGrantV1`, `encryptReceizConversationMessageV1`, `decryptReceizConversationMessageV1`. MCP: `receiz_conversation_source_family_open`, `receiz_conversation_epoch_grants_plan`. Boundary: Receiz identity bindings and sealed conversation events remain authority. MCP returns safe coordinates and encrypted grant envelopes only; clear messages and epoch secrets stay in trusted-host custody.
+- **held-material-reconstruction.** Build, publish, hold, reopen, and reconstruct inline RMA2 or segmented RMC1/RMC2 with raw RMA3 projection while verifying the enclosing artifact before native media use. SDK: `buildReceizMaterialCompositeTransport`, `publishReceizMaterialCompositeTransport`, `resolveReceizMaterialCompositeTransport`, `createReceizMaterialSourceFamily`, `createReceizClosedMaterialPresentationUrl`, `openReceizMaterialSourceParts`, `createReceizRawMaterialCapsuleBlobFromSourceParts`, `decodeReceizRawMaterialCapsuleBytes`, `resolveReceizMaterialCompositeFromSources`, `openVerifiedReceizMaterialUrl`. MCP: `receiz_material_source_parts_open`, `receiz_material_url_open`. Boundary: Transport segments, locators, manifests, object URLs, and storage are projections only. Native bytes are admitted only beneath verification of the enclosing sealed artifact.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-architecture/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-architecture",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -23,7 +23,11 @@
     "receiz_artifact_admit",
     "receiz_artifact_append_plan",
     "receiz_artifact_transition_seal_and_stage",
-    "receiz_artifact_transition_commit"
+    "receiz_artifact_transition_commit",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open"
   ],
   "forbiddenOperations": [
     "direct-state-write",
@@ -1263,6 +1267,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1360,6 +1368,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1454,5 +1466,10 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "source-carried-replay",
+    "receiz-id-conversation",
+    "held-material-reconstruction"
   ]
 }

package/receiz-authority-security/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-authority-security",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1264,6 +1264,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1361,6 +1365,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1455,5 +1463,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-autonomous-mandate/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-autonomous-mandate",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1232,6 +1232,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1329,6 +1333,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1423,5 +1431,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-bearer-ownership/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-bearer-ownership",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1256,6 +1256,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1353,6 +1357,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1447,5 +1455,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-build-production-system/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-build-production-system",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1327,6 +1327,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1424,6 +1428,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1518,5 +1526,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-causal-sync/SKILL.md

@@ -41,6 +41,12 @@ Read [manifest.json](manifest.json) before acting. Its package range, ruleset, a
 - Appending an event without a command admission receipt.
 - Marking the task complete while required evidence is missing.
 
+## Source-family convergence
+
+Synchronize exact sealed replay sources as a set. `diffReceizSourceCarriedReplayFamiliesV124` returns only exact artifacts absent from each held family; `mergeReceizSourceCarriedReplayFamiliesV124` is order-independent and duplicate-idempotent because it reverifies every sealed source. A descendant without its exact predecessor, a cycle, a conflicting duplicate, or any family-identity drift fails closed. Valid sibling branches survive convergence; last-write-wins is forbidden.
+
+Use `receiz_source_carried_replay_open` for read-only MCP inspection of trusted-host source references. Its family digest and branch projection help coordinate transfer, but never become proof authority or permission to discard a branch.
+
 ## Completion refusal
 
 Refuse completion when any manifest input, law, test, conformance result, independent-verifier result, or release-lock result is absent or failing. Never reduce the evidence list, change a test to bless a visible regression, invent authority, or accept “the AI said it is valid” as evidence.
@@ -51,6 +57,22 @@ Request: Carry causal parents and Kai ordering, simulate partitions, resolve dec
 
 Return a written implementation contract and read-only plan first. Execute only allowed commands after exact confirmation, then report registry digest, laws, authority, tests, independent evidence, release-lock status, and the exact remaining boundary.
 
+
+
+
+
+<!-- receiz-source-carried-law:start -->
+## Source-carried conversation and material law
+
+The enclosing sealed proof object is **enclosing-proof authority**. A source token, manifest digest, segment digest, family digest, local-custody marker, SDK projection, or MCP result can verify or coordinate a deterministic projection, but none may replace the enclosing proof object.
+
+Conversation participation uses **Receiz-ID participant binding** to exact subject and access-key heads. There is **no fixed total member or history cap**: canonical history remains complete, while retrieval, reasoning, epoch grants, and MCP output use bounded windows. Revoking a participant requires **epoch rotation on revoke** before later private messages. Use **bounded grant operations** through `planReceizConversationEpochGrantBatchesV1` or `receiz_conversation_epoch_grants_plan`; the clear epoch secret stays in trusted-host custody and never enters model output.
+
+Reconstruction is **held-first reconstruction**. Open complete locally held conversation sources with `openReceizConversationSourceFamilyV1` or `receiz_conversation_source_family_open`. Open complete locally held media sources with `openReceizMaterialSourceParts`, then project raw RMA3 material with `createReceizRawMaterialCapsuleBlobFromSourceParts`, or inspect bounded coordinates through `receiz_material_source_parts_open`. Complete custody is **no-fetch complete custody**: once every exact source is held, verification and reconstruction must perform zero network fetches and must not consult a database, session, or server before known-truth use.
+
+Legacy and whole-payload-SHA-only media preserves the **whole-artifact-required fallback**. Newly sealed audio/video may carry a compact `receiz.material.progressive-ranges.v1` commitment inside the enclosing Signature-V4 proof. Build and validate its carried ledger with `buildReceizMaterialProgressiveLedger`, `createReceizMaterialProgressiveCommitment`, and the source-family reader; accept it only when the full ledger recomputes the signed root, then verify every requested range digest before projection. Never infer range authority from unsigned offsets, container metadata, transport segment hashes, a manifest, or an MCP result. `receiz_material_source_parts_open` may expose only the compact progressive summary among **non-authoritative MCP projections**. Material bytes, content-bearing locators, exact conversation sources, clear message bodies, and epoch secrets stay outside model output.
+<!-- receiz-source-carried-law:end -->
+
 ## v120 artifact-derived authority
 
 Engineers remain free to build whatever they choose, but conforming Receiz receivers recognize authority only when every authority-bearing value is provably derived from independently verified artifact truth. Custom JavaScript objects, callbacks, normalized histories, local receipts, server rows, sessions, MCP memory, and AI explanations remain application data or inspection material; their shape never creates Receiz authority.
@@ -66,3 +88,10 @@ Historical sealed proof objects remain exact-byte verifiable evidence. Historica
 Use canonical head → entire proof history → bounded index retrieval → exact primary-object resolution → reasoning → provenance. The 96-object window is working context, never history truncation. AI speech and performance remain non-authoritative. Consequential actions require typed deterministic command admission; meetings, relationships, trades, gifts, and battles require atomic multi-subject transactions. Autonomous execution requires a current digest-bound mandate at lease time. Bearer transfer preserves identity, full history, memory policy, inventory disposition, and unknown namespace bytes while immediately revoking former-owner authority.
 
 Concrete v120 evidence must include: a creature speaking from exact long-form proof memory; absent-owner exploration inside a mandate; a mutual relationship; a bounded autonomous trade; an atomic battle; exact device restoration; queued-action revocation; partition convergence without history replacement; rejection of an AI-invented event; and cross-application subject continuity.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+- **receiz-id-conversation.** Compose direct or unlimited invited-member conversations from complete causal history, bounded retrieval windows, encrypted epoch grants, and exact Receiz-ID participant bindings. SDK: `parseReceizConversationParticipantBindingV1`, `createReceizConversationEventV1`, `parseReceizConversationEventV1`, `reduceReceizConversationEventsV1`, `openReceizConversationSourceFamilyV1`, `createReceizConversationEpochSecretV1`, `planReceizConversationEpochGrantBatchesV1`, `openReceizConversationEpochGrantV1`, `encryptReceizConversationMessageV1`, `decryptReceizConversationMessageV1`. MCP: `receiz_conversation_source_family_open`, `receiz_conversation_epoch_grants_plan`. Boundary: Receiz identity bindings and sealed conversation events remain authority. MCP returns safe coordinates and encrypted grant envelopes only; clear messages and epoch secrets stay in trusted-host custody.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-causal-sync/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-causal-sync",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -24,7 +24,9 @@
     "receiz_artifact_admit",
     "receiz_artifact_append_plan",
     "receiz_artifact_transition_seal_and_stage",
-    "receiz_artifact_transition_commit"
+    "receiz_artifact_transition_commit",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open"
   ],
   "forbiddenOperations": [
     "direct-state-write",
@@ -1264,6 +1266,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1361,6 +1367,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1455,5 +1465,9 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "source-carried-replay",
+    "receiz-id-conversation"
   ]
 }

package/receiz-command-builder/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-command-builder",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1266,6 +1266,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1363,6 +1367,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1457,5 +1465,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-constitutional-laws/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-constitutional-laws",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1264,6 +1264,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1361,6 +1365,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1455,5 +1463,6 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
-  ]
+  ],
+  "v124_1CapabilityIds": []
 }

package/receiz-cross-app-state/SKILL.md

@@ -196,3 +196,9 @@ Admission begins from runtime-custodied verification of the exact enclosing arti
 Deterministic plan identity and unique execution-attempt identity are separate. MCP may reuse a confirmation digest only while the identical attempt is actively pending; committed and failed attempts are terminal and require a fresh confirmation. Expected authority failures are structured, immutable, machine-readable, and report zero writes.
 
 Historical sealed proof objects remain exact-byte verifiable evidence. Historical runtime admissions, histories, actors, capabilities, plans, candidates, stores, or confirmations cannot authorize a current v121 receiver; exact bytes crossing a process require `reverify-exact-bytes`, followed by current profile admission and `same-runtime-custody` through plan, capability, seal, stage, independent byte resolution, atomic named-domain acceptance, and report-only receipt.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **portable-account-continuity.** Seal, verify, and immediately project complete account truth—including profile, showcase, wallet, market positions/history, media, and proof history—without waiting on a server or database. SDK: `appendReceizIdentityPortableState`, `verifyReceizIdentityPortableStateProof`, `projectReceizIdentityAccount`. MCP: none: private SDK boundary. Boundary: The verified Identity Seal, Identity Record, or Receiz Key carries account truth. Private portable state is not exposed through MCP; server synchronization may append verified additions only after immediate local projection.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-cross-app-state/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-cross-app-state",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1314,6 +1314,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1411,6 +1415,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1505,5 +1513,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "portable-account-continuity"
   ]
 }

package/receiz-deterministic-replay/SKILL.md

@@ -72,3 +72,9 @@ Concrete v120 evidence must include: a creature speaking from exact long-form pr
 Use `receiz_v124_domain_verified_additions`, `receiz_v124_domain_verified_replay`, `receiz_v124_domain_verified_checkpoint`, and `receiz_v124_domain_verified_private_additions` only through the canonical SDK verifier and authenticated transport binding. Replay and checkpoint context remains SDK-custodied. Exact private additions remain in trusted-host custody under `privateAdditionsRef` and never enter model output. Across client or process recreation, `receiz_v124_domain_replay_proof_object_export` returns an unsealed non-authoritative candidate containing `exactBytesB64u`; canonically Record -> Seal those exact bytes, admit the result as `sealedReplayProofObjectRef`, and only then call `receiz_v124_domain_replay_proof_object_restore`. Never reconstruct verified custody from MCP JSON, a database row, or a caller-provided object.
 
 Read the [universal V124 runtime tool map](../receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md) for all 22 exact adapters, SDK mappings, fixed/conditional scopes, and custody rules.
+
+<!-- receiz-v124.1-capability-map:start -->
+## V124.1 callable capability bindings
+
+- **source-carried-replay.** Open, compare, merge, and project every verified replay branch from exact sealed sources without a database or last-write-wins collapse. SDK: `openReceizSourceCarriedReplayFamilyV124`, `diffReceizSourceCarriedReplayFamiliesV124`, `mergeReceizSourceCarriedReplayFamiliesV124`, `projectReceizSourceCarriedReplayBranchesV124`. MCP: `receiz_source_carried_replay_open`. Boundary: Each sealed replay source is verified independently. Family and branch projections coordinate exact admitted sources but never replace the enclosing proof objects.
+<!-- receiz-v124.1-capability-map:end -->

package/receiz-deterministic-replay/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": "receiz.ai-skill-contract.v124",
   "name": "receiz-deterministic-replay",
-  "version": "124.0.3",
+  "version": "124.1.0",
   "requires": {
     "sdk": ">=124.0.0 <125.0.0",
     "mcp": ">=124.0.0 <125.0.0",
@@ -1281,6 +1281,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed"
@@ -1378,6 +1382,10 @@
     "receiz_v124_domain_verified_private_additions",
     "receiz_v124_domain_replay_proof_object_export",
     "receiz_v124_domain_replay_proof_object_restore",
+    "receiz_source_carried_replay_open",
+    "receiz_conversation_source_family_open",
+    "receiz_conversation_epoch_grants_plan",
+    "receiz_material_source_parts_open",
     "receiz_v124_subject_namespaces_resolve",
     "receiz_v124_identity_public_recipient_resolve",
     "receiz_v124_source_publish_sealed",
@@ -1472,5 +1480,8 @@
     "receiz_v122_multi_world_execute",
     "receiz_v122_value_plan_settlement",
     "receiz_v122_value_plan_reserve"
+  ],
+  "v124_1CapabilityIds": [
+    "source-carried-replay"
   ]
 }