@receiz/ai-skills 125.0.0 → 127.0.0

package/README.md

@@ -1,8 +1,11 @@
 # Receiz AI Skills
 
-The `125.0.0` package at release coordinate `v125.0.0` is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, OAuth/OIDC grants, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
+Explore the [public capability directory](https://receiz.com/capabilities) for user outcomes, every public SDK callable, MCP tools, and AI skills. Agents can read the [machine-readable catalog](https://receiz.com/capabilities.json). An inventory entry grants no access and does not imply an MCP execution adapter.
 
-KKSv1.0 is the single temporal authority for proof. New proof coordinates are computed locally from Genesis and the canonical pulse frequency; existing coordinates are carried by the verified sealed object. `createdAt` is descriptive Chronos only and is never proof, ordering, or causal authority. The SDK, MCP tools, all 36 machine manifests, and the shared [KKSv1.0 temporal-authority contract](resources/kks-v1-temporal-authority.md) enforce the same boundary.
+
+The `127.0.0` package at release coordinate `v127.0.0` is a registry-bound operating-contract distribution beneath Receiz proof authority. AI instructions, MCP confirmations, OAuth/OIDC grants, JSON objects, database rows, staging references, and receipts never become proof or runtime authority.
+
+KKSv1.0 is the single temporal authority for proof. New proof coordinates are computed locally from Genesis and the canonical pulse frequency; existing coordinates are carried by the verified sealed object. `createdAt` is descriptive Chronos only and is never proof, ordering, or causal authority. The SDK, MCP tools, all 37 machine manifests, and the shared [KKSv1.0 temporal-authority contract](resources/kks-v1-temporal-authority.md) enforce the same boundary.
 
 ## Highest Cash-Out Frame
 
@@ -12,15 +15,23 @@ Every AI skill is the reader layer beneath those authorities. The manifests
 forbid `reader-as-authority`; an agent may inspect, verify, and project, but it
 may not author, reorder, replace, or outrank the actual sealed proof object.
 
-## V125 — Reality Becomes the Economy
+## V127 — Reality-Grade Infrastructure
+
+V127 aligns the SDK, compiler, MCP and AI packages with complete source custody, first-seal ownership, deterministic coordinates and verified append continuity. The public function catalog covers 678 callable exports across the main, compiler, testing, React, offline sealing, local subject host and offline KaiSigil entry points. MCP capability reporting includes this catalog and the complete 425-method client inventory; 330 explicit tools retain their SDK authority boundaries.
+
+V127 agents can create full KaiSigil proofs locally with packaged resources and use the [source-bound local subject runtime](../packages/receiz-sdk/docs/local-subject-runtime.md). Temporal execution admits complete causal coordinates; bare pulse values, model reports and copied plans cannot advance authority. [Offline file sealing](../packages/receiz-sdk/docs/offline-sealing.md) runs without network after explicit signer enrollment; KaiSigil proving requires no enrollment or network. Portable history retains exact V120 snapshots and full temporal evidence under the enclosing sealed source.
+
+Capability inventory is not a claim that every historical HTTP route exists. Of the 81 newly mapped JSON SDK adapters, 12 compose current routes and 69 require explicit historical HTTP compatibility; older `media.upload`, `media.transform`, and `proof.query` also require that transport. Default calls fail before requests or mutation previews. Agents must follow [historical HTTP compatibility](../packages/receiz-sdk/docs/historical-http.md) and the separate historical subject transport boundary in the local runtime guide. Neither compatibility configuration nor credentials become proof authority.
+
+### Preserved V125 economy contracts
 
 **Sealed Reality Becomes Spendable Value. Economic authority follows proof, not institution.** V125 teaches agents to register a sealed lawful-action law, submit a separately sealed completed action whose causal claims are derived from a reverified portable execution-authority transition, and request deterministic current-Kai Settlement projection without inventing value. The exact micro-Phi law is `(completionKai - startKai + 1) * (valuationKai - completionKai + 1)`. No AI, developer, government, institution, server, database, or model may supply a completion verdict, amount, multiplier, bonus, backfill, or proof exemption.
 
-The current 182-tool MCP registry preserves the complete 169-tool v124.1 runtime inventory and adds thirteen v125 adapters: three lawful-action operations plus the complete ten-operation sender/receiver edge lifecycle for planning, inspection, transition-set verification, commit preparation, recovery packaging, Settlement send/receive, and Reserve send/receive. Exact proof, plan, transition, commit, and recovery materials stay in trusted-host or same-runtime custody behind opaque references. The enclosing sealed artifact is verified before payload extraction. One admitted membership belongs to the current owner; transfer moves it without cloning Settlement value or erasing provenance. Reserve remains the legacy funding rail.
+The current 330-tool MCP registry preserves the 169-tool v124.1 runtime inventory, 39 trust adapters, and thirteen v125 economy adapters alongside the new v127 tools. The thirteen economy adapters comprise three lawful-action operations plus the complete ten-operation sender/receiver edge lifecycle for planning, inspection, transition-set verification, commit preparation, recovery packaging, Settlement send/receive, and Reserve send/receive. Exact proof, plan, transition, commit, and recovery materials stay in trusted-host or same-runtime custody behind opaque references. The enclosing sealed artifact is verified before payload extraction. One admitted membership belongs to the current owner; transfer moves it without cloning Settlement value or erasing provenance. Reserve remains the legacy funding rail.
 
-`skills.json` also binds all 363 callable methods on the public `createReceizClient()` surface by exact ordered inventory and digest. The union of the 36 machine manifests must contain every method and all 182 MCP tools; generation and validation fail if either distribution surface drifts. Three retained artifact-recovery methods are explicitly classified under `historicalSdkOperations`, remain callable, and are not mislabeled as v125 defaults. `receiz_capabilities` exposes the same SDK inventory, exact MCP tool inventory, and v125 capability families without turning capability description into proof or transaction authority.
+`skills.json` also binds all 425 callable methods on the public `createReceizClient()` surface by exact ordered inventory and digest. The union of the 37 machine manifests must contain every method and all 330 MCP tools; generation and validation fail if either distribution surface drifts. Three retained artifact-recovery methods are explicitly classified under `historicalSdkOperations`, remain callable, and are not mislabeled as v125 defaults. `receiz_capabilities` exposes the same SDK inventory, exact MCP tool inventory, and v125 capability families without turning capability description into proof or transaction authority.
 
-All 36 current manifests use package/ruleset `125.0.0`, SDK/MCP range `>=125.0.0 <126.0.0`, registry digest `85a24c3a7fe144c8ec03c6b5fae238d1dfda64c1ed3091b24d4264dc3862ff17`, and operation-matrix digest `17c98e99c3f54b7a18dea9f2466a49ea2ac5da4d1cf0a90c723560184a314a6c`.
+All 37 current manifests use package/ruleset `127.0.0`, SDK/MCP range `>=127.0.0 <128.0.0`, registry digest `8d0b5b839d02d9efbd4306cc99410595a183705c2670b76d2567eaaaade99065`, and operation-matrix digest `eadd171a45fcc51e275a1c57de1eb8e67614757a5723d141793641edf7207a10`.
 
 ## Historical V124 — Reality Becomes Infrastructure
 
@@ -59,11 +70,11 @@ performance, observability, testing, and release contracts. The earlier nine
 domain skill names remain packaged for compatibility. Seven operation skill names first introduced in obsolete-versioned now
 describe current outcomes for identity profiles, portable continuity, bearer ownership, offline transport,
 proof media, cross-app state, and admission evidence. Their retired obsolete-versioned mechanisms are not active defaults.
-One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. `receiz-value-execution` governs exact live Phi execution and retry recovery; `receiz-proof-authority` governs edge verification, explicit consent, and minimum-scope embedded authority. The v124 coordinates remain immutable historical evidence; the v125 manifest coordinates above are current.
+One dedicated `receiz-global-reconciliation` skill governs accepted-head resolution, verified offline reconciliation, structural divergence, first paint, indeterminate recovery, and effects. `receiz-value-execution` governs exact live Phi execution and retry recovery; `receiz-proof-authority` governs edge verification, explicit consent, and minimum-scope embedded authority. The v124 coordinates remain immutable historical evidence; the v127 manifest coordinates above are current.
 
 This package teaches AI agents how to understand, verify, build with, and operate Receiz from the existing repository surfaces.
 
-It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all 42 skills under `node_modules/@receiz/ai-skills`: 36 manifests and 33 OpenAI agent prompts are included for explicit loading by an agent host.
+It is published as `@receiz/ai-skills` and is an exact-version dependency of both `@receiz/sdk` and `@receiz/mcp-server`. Installing either package places all 43 skills under `node_modules/@receiz/ai-skills`: 37 manifests and 34 OpenAI agent prompts are included for explicit loading by an agent host.
 
 Receiz is a proof-native artifact system. Sealed proof/object truth is strongest: a Receiz object is not a database row, but a proof-carrying artifact whose witnessed history is the truth boundary. The proof object carries continuity; SDK and MCP may verify, extract, append, or project beneath that carried truth. Receiz.com reference behavior comes before SDK, MCP, AI, and other developer rails. Server state, database state, UI state, marketplace state, and model memory are projections only. Old witnessed truth is not stale. If a projection is wrong, rebuild it from object history. If truth is missing, append new truth. Never mutate witnessed truth.
 
@@ -72,7 +83,7 @@ A verified proof object is not limited to the platform that created it. Any lawf
 ## SDK, MCP, And Skills
 
 - SDK: `@receiz/sdk` is the universal runtime; `@receiz/sdk/react` is React-only; `@receiz/sdk/compiler` is Node-only; `@receiz/sdk/testing` is browser-safe sandbox and conformance support.
-- MCP: `@receiz/mcp-server` is for agent tool access. Its current 182-tool registry includes the complete 169-tool v124.1 inventory plus thirteen v125 lawful-action and edge-value tools. The four V124.1 source-carried adapters remain unchanged and expose replay-family opening, Receiz-ID conversation-family opening, bounded private epoch-grant planning, and held material-family inspection while exact sources, secrets, locators, and large bytes remain in trusted-host custody.
+- MCP: `@receiz/mcp-server` is for agent tool access. Its current 330-tool registry preserves the 169-tool v124.1 inventory, thirteen v125 lawful-action and edge-value tools, and 39 trust adapters alongside the v127 tools. The four V124.1 source-carried adapters remain unchanged and expose replay-family opening, Receiz-ID conversation-family opening, bounded private epoch-grant planning, and held material-family inspection while exact sources, secrets, locators, and large bytes remain in trusted-host custody.
 
 `skills.json` carries the canonical `v124_1CapabilityInventory`, and each relevant manifest carries its exact `v124_1CapabilityIds`. This binds source-carried replay, unlimited invited-member conversation, exact large-material reconstruction, progressive verified playback, proof-derived memory/Twin response, and portable account continuity across SDK, MCP, and AI instructions without allowing the model layer to invent or outrank proof.
 - Skills: this package is operating doctrine. It tells an AI which Receiz primitive is active, which source of truth wins, which SDK or MCP rail to use, and what must never be assumed.
@@ -81,7 +92,7 @@ Agents may acquire scoped delegated access through the official Receiz Connect/O
 
 ## How Agents Should Use This Package
 
-Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v125 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
+Start with `receiz-build-production-system` when work spans multiple constitutional domains and `receiz-global-reconciliation` for named-domain coordination. Machine-readable manifests require the exact active canonical v127 registry and operation-matrix digests, command-only mutation, independent verification, MCP conformance, and a passing release lock. Use a focused operation skill for SDK/MCP implementation and a constitutional skill for broader system law. Stable obsolete-versioned wire schemas remain available only through the explicit historical `@receiz/sdk/obsolete-versioned` package entry; current skills never teach their key, head, receipt, reconcile, or signed-command mechanics as a current outcome.
 
 The current operation skills are executable contracts. Current profile work uses the neutral authenticated same-UID profile operation. Current bearer ownership accepts a complete verified artifact, derives prior ownership from carried proof, and returns a native Record -> Seal artifact. Proof media uses the same native artifact custody and projects only a verified URL beneath it. These outcomes have no active identity-key, caller-head, claim-key, or receipt prerequisite. MCP calls the same SDK outcomes and never creates a parallel authority.
 
@@ -124,6 +135,6 @@ When SDK or MCP changes:
 - `receiz-event-derived-memory` governs factual memories with admitted event citations and rebuildable AI summaries/projections.
 - `receiz-live-proof-character` governs streamed reply, audio, viseme, gaze, blink, breath, emotion, gesture, proposed intention, and completion events as non-authoritative performance over exact proof context.
 
-Every living-subject skill carries its SDK map, MCP map, authority rules, examples, tests, manifest, OpenAI metadata, and the exact current v125 registry and operation-matrix digests. The skills teach the same sequence as the implementation: canonical head → entire proof history → compact indexes → relevant references → exact primary proof objects → reasoning → cited answer. They never authorize a world event, transfer, mandate, or release claim by prose.
+Every living-subject skill carries its SDK map, MCP map, authority rules, examples, tests, manifest, OpenAI metadata, and the exact current v127 registry and operation-matrix digests. The skills teach the same sequence as the implementation: canonical head → entire proof history → compact indexes → relevant references → exact primary proof objects → reasoning → cited answer. They never authorize a world event, transfer, mandate, or release claim by prose.
 
 The updated constitutional skills bind living-subject behavior into app building, command construction, deterministic replay, causal sync, global reconciliation, portable continuity, authority/security, MCP operation, testing, release, constitutional law, and offline-first operation. Their examples cover exact proof-memory speech, absent-owner exploration, mutual relationship formation, bounded trade, atomic battle, cross-device restoration, mandate revocation during a queued action, partition convergence, rejection of an AI-invented event, and cross-application subject continuity.

package/SKILLS.md

@@ -4,7 +4,7 @@
 
 **Sealed Reality Becomes Spendable Value. Economic authority follows proof, not institution.** The v125 distribution teaches agents to derive Settlement from sealed lawful actions and to move explicit Settlement or Reserve between sender and receiver edges while servers and databases perform additive global sync only.
 
-This package ships 42 skills, 36 machine-readable manifests, and 33 OpenAI agent prompts. Every current manifest binds ruleset `125.0.0`, SDK/MCP range `>=125.0.0 <126.0.0`, registry digest `85a24c3a7fe144c8ec03c6b5fae238d1dfda64c1ed3091b24d4264dc3862ff17`, and operation-matrix digest `17c98e99c3f54b7a18dea9f2466a49ea2ac5da4d1cf0a90c723560184a314a6c`.
+This package ships 43 skills, 37 machine-readable manifests, and 34 OpenAI agent prompts. Every current manifest binds ruleset `126.0.0`, SDK/MCP range `>=126.0.0 <127.0.0`, registry digest `80137c2e6f294050ef36ff75e4daac15c7790b7f04d9a91fab9d1970fa3c0b09`, and operation-matrix digest `42c7f0924df91b4ba11c1b891fee2b92abb509430a86b030735c23d055e67949`.
 
 Every manifest also carries the identical KKSv1.0 temporal-authority contract and forbids `created-at-as-proof-authority`. New proof coordinates come from the local Genesis/frequency computation; existing proof coordinates come from verified sealed objects; Chronos timestamps are descriptive projection only. Read the shared [KKSv1.0 contract](resources/kks-v1-temporal-authority.md).
 
@@ -17,7 +17,7 @@ Every skill is a reader beneath these authorities and forbids
 
 ## V125 complete capability synchronization
 
-The machine index carries all 363 callable methods on the public SDK client, their exact digest, both v125 capability families, and the exact 182-tool MCP inventory. The union of the manifests binds every public SDK client method and every MCP tool. Three retained artifact-recovery methods remain in the explicit historical field instead of being relabeled current. The ten v125 edge-value tools mirror every `client.value.edge` method; `receiz_v124_execution_execute` also returns a recovery reference when the canonical SDK outcome carries committed transition custody. MCP references remain custody mechanics, never authority.
+The machine index carries all 421 callable methods on the public SDK client, their exact digest, the complete capability families, and the exact 221-tool MCP inventory. The union of the manifests binds every public SDK client method and every MCP tool. Three retained artifact-recovery methods remain in the explicit historical field instead of being relabeled current. The ten v125 edge-value tools mirror every `client.value.edge` method; `receiz_v124_execution_execute` also returns a recovery reference when the canonical SDK outcome carries committed transition custody. MCP references remain custody mechanics, never authority.
 
 ## Historical V124 production-runtime composition
 
@@ -32,7 +32,7 @@ The inherited 53-operation matrix adds live Kai projection, canonical challenge
 
 ## Current MCP inventories
 
-The package maps the complete 182-tool registry—including nine artifact tools, 37 living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, 26 V124 production-runtime tools, and thirteen v125 economy tools—to the canonical SDK. The exact V124 tool/SDK/scope/custody contract remains in the [universal V124 runtime tool map](receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md). The machine-readable `v124_1CapabilityInventory` and `v125CapabilityInventory` bind every declared capability family to the exact SDK methods, MCP tools, and AI skills that teach it.
+The package maps the complete 221-tool registry—including nine artifact tools, 37 living-subject tools, 19 stable v122 protocol tools, eight v123 completion tools, 26 V124 production-runtime tools, thirteen v125 economy tools, and 39 trust tools—to the canonical SDK. The exact V124 tool/SDK/scope/custody contract remains in the [universal V124 runtime tool map](receiz-mcp-agent-skill/resources/v124-runtime-tool-map.md). The machine-readable `v124_1CapabilityInventory` and `v125CapabilityInventory` bind every declared capability family to the exact SDK methods, MCP tools, and AI skills that teach it.
 
 The V124 adapters cover:
 
@@ -62,3 +62,7 @@ The canonical machine-readable index is [skills.json](skills.json). Start with `
 All current skills forbid last-write-wins, timestamp-as-head authority, created-at-as-proof authority, connect-token-as-proof authority, projection-as-current-owner, silent divergence resolution, remote reconciliation before first paint, unverified server artifacts, retry-before-lookup, rail collapse, and USD-as-moved-value.
 
 Historical protocol and schema identifiers remain documented only where current compatibility requires them. They do not define a second current authority surface.
+
+## v126 complete SDK reference
+
+Read [all public SDK function signatures](resources/sdk-public-functions.json) and [the entry-point index](resources/sdk-public-functions.md), including compiler, testing, and React exports. Client capabilities and executable MCP adapters remain separately identified; inventory membership never substitutes for an implemented adapter or SDK proof admission.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@receiz/ai-skills",
-  "version": "125.0.0",
+  "version": "127.0.0",
   "description": "Registry-bound Receiz AI operating contracts beneath proof authority for SDK and MCP agents.",
   "type": "module",
   "files": [
@@ -50,7 +50,8 @@
     "receiz-live-proof-character",
     "receiz-value-rails",
     "receiz-value-execution",
-    "receiz-proof-authority"
+    "receiz-proof-authority",
+    "receiz-attestation-lifecycle"
   ],
   "keywords": [
     "receiz",