@sellable/install 0.1.484 → 0.1.485-wip.phase169.20260804195555

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.484
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.485-wip.phase169.20260804195555
 ARG MCP_PACKAGE=@sellable/mcp@0.1.760-wip.phase143.20260727100513
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-muNXHuRnLTfsnW+MQUvK+p0VBZETDKeevr70iRliXyqE3/SLrZQJLL1laJzMo+qiUs9jMXMHdKOQfQqLiwJvtg==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.484" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.485-wip.phase169.20260804195555" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.760-wip.phase143.20260727100513" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.484" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.484' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.485-wip.phase169.20260804195555' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.484', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.485-wip.phase169.20260804195555', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.484` is
+`@sellable/install@0.1.485-wip.phase169.20260804195555` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.484 .
+  --tag sellable-agent-host:0.1.485-wip.phase169.20260804195555 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -81,6 +81,8 @@ COPY fly-admin-image/start-admin-runtime /usr/local/lib/sellable-agent/admin-run
 COPY fly-runtime-identity.mjs /usr/local/lib/sellable-agent/fly-runtime-identity.mjs
 COPY hermes-bridge.mjs /usr/local/lib/sellable-agent/hermes-bridge.mjs
 COPY hermes-memory-snapshot.mjs /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs
+COPY fly-soul-bridge.mjs /usr/local/lib/sellable-agent/fly-soul-bridge.mjs
+COPY soul-artifact-validator.mjs /usr/local/lib/sellable-agent/soul-artifact-validator.mjs
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
 COPY fly-admin-image/rootfs/ /
@@ -89,6 +91,15 @@ RUN node --input-type=module -e \
       'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
+    && install -d -m 0755 /usr/local/share/sellable-agent \
+    && printf '%s\n' \
+      '#!/usr/bin/env node' \
+      'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge.mjs").then(({ runSoulBridgeCli }) => runSoulBridgeCli());' \
+      > /usr/local/bin/sellable-soul-bridge \
+    && chmod 0555 /usr/local/bin/sellable-soul-bridge \
+    && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
+      > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
+    && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 \
       /usr/local/lib/sellable-agent/admin-runtime/admin-runtime.mjs \
@@ -96,6 +107,8 @@ RUN node --input-type=module -e \
       /usr/local/lib/sellable-agent/fly-runtime-identity.mjs \
       /usr/local/lib/sellable-agent/hermes-bridge.mjs \
       /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs \
+      /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
+      /usr/local/lib/sellable-agent/soul-artifact-validator.mjs \
       /opt/sellable/bin/hermes-memory-dirty \
       /etc/s6-overlay/s6-rc.d/admin-runtime/run \
     && chmod 0444 \

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -48,7 +48,9 @@ import {
 import { expectedRuntimeGates } from "../admin-artifact/node_modules/@sellable/install/lib/sellable-agent/runtime-helper.mjs";
 import sodium from "../admin-artifact/node_modules/libsodium-wrappers/dist/modules-esm/libsodium-wrappers.mjs";
 import {
+  claimWithSoulObservation,
   createFlyCustomerControlClient,
+  createSoulClaimObservationTracker,
   dropFlyRuntimePrivileges,
   exchangeFlyAdminIdentity,
   flyRuntimeDigest,
@@ -59,6 +61,12 @@ import {
   renewFlyAdminControlSession,
   signedWorkerAuthorization,
 } from "../fly-runtime-identity.mjs";
+import {
+  executeExternalSoulBridgeOperation,
+  observeProfileSoul,
+  prepareSoulLockRoot,
+  withProfileSoulLock,
+} from "../fly-soul-bridge.mjs";
 import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
@@ -588,88 +596,167 @@ async function materializeAdminProfile({
   const stageRoot = join(PROFILES_ROOT, ".staging", profile);
   const backupRoot = join(PROFILES_ROOT, ".backup", profile);
   privateDirectory(PROFILES_ROOT);
+  const readAuthoritativeSoul = () => {
+    const activeSoulPath = join(profileHome, "SOUL.md");
+    if (!existsSync(activeSoulPath)) return soul;
+    const activeSoul = lstatSync(activeSoulPath);
+    if (activeSoul.isSymbolicLink() || !activeSoul.isFile()) {
+      throw new Error("admin_runtime_live_soul_rejected");
+    }
+    const bytes = readFileSync(activeSoulPath);
+    return {
+      bytes,
+      sha256: sha256(bytes),
+      byteLength: bytes.byteLength,
+    };
+  };
   const layout = adminHomeLayout(profileHome);
   // stageAdminProfile canonicalizes these two paths before staging, so the
   // Admin home working copies must exist before the factory runs.
   deliverAdminSettings(settingsRoot, layout);
   const serverProofs = {};
-  const stage = await stageAdminProfile({
-    mode: slack ? "direct_soul_native_slack" : "direct_soul",
-    lifecycleAuthorized: slack ? true : undefined,
-    ephemeralProductConfig: Boolean(slack),
-    ephemeralSlackSecrets: Boolean(slack),
-    profile,
-    profilesRoot: PROFILES_ROOT,
-    stageRoot,
-    finalProfileRoot: profileHome,
-    rootAuthPath,
-    canonicalAdminConfigPath: layout.configPath,
-    canonicalAdminStatePath: layout.statePath,
-    productConfigPath,
-    model: "gpt-5.6-sol",
-    reasoningEffort: "high",
-    soul,
-    ...(slack
-      ? {
-          slackSecretFile: slack.secretFile,
-          teamId: slack.teamId,
-          primaryChannel: slack.primaryChannel,
-          secondaryReadChannelIds: slack.secondaryReadChannelIds,
-          allowedSlackUserIds: slack.allowedSlackUserIds,
-          slackApp: slack.slackApp,
+  const stageWithAuthority = async (stagedAuthority) => {
+    const stage = await stageAdminProfile({
+      mode: slack ? "direct_soul_native_slack" : "direct_soul",
+      lifecycleAuthorized: slack ? true : undefined,
+      ephemeralProductConfig: Boolean(slack),
+      ephemeralSlackSecrets: Boolean(slack),
+      profile,
+      profilesRoot: PROFILES_ROOT,
+      stageRoot,
+      finalProfileRoot: profileHome,
+      rootAuthPath,
+      canonicalAdminConfigPath: layout.configPath,
+      canonicalAdminStatePath: layout.statePath,
+      productConfigPath,
+      model: "gpt-5.6-sol",
+      reasoningEffort: "high",
+      soul: stagedAuthority,
+      ...(slack
+        ? {
+            slackSecretFile: slack.secretFile,
+            teamId: slack.teamId,
+            primaryChannel: slack.primaryChannel,
+            secondaryReadChannelIds: slack.secondaryReadChannelIds,
+            allowedSlackUserIds: slack.allowedSlackUserIds,
+            slackApp: slack.slackApp,
+          }
+        : {}),
+      skillsRoot: join(ADMIN_INSTALL_ASSET_ROOT, "mcp", "skills"),
+      installRoot: layout.adminRoot,
+      adminHome: layout.adminHome,
+      installAdmin: async () =>
+        profilePackageReceipt(profileContract, "sellable-admin", "mcp", layout),
+      installProduct: async () =>
+        profilePackageReceipt(
+          profileContract,
+          "sellable",
+          "mcp",
+          layout,
+          agentServiceEnv
+        ),
+      verifyMcp: async ({ kind, profileRoot, config }) => {
+        const alias = kind === "admin" ? "sellable-admin" : "sellable";
+        const server = config.mcp_servers[alias];
+        const proof = await inspectMcp({
+          alias,
+          command: server.command,
+          args: server.args,
+          env: {
+            HOME: profileRoot,
+            HERMES_HOME: profileRoot,
+            ...adminToolEnv(layout),
+            ...agentServiceEnv,
+            SELLABLE_CONFIG_PATH: productConfigPath,
+            ...(server.env ?? {}),
+          },
+          packageProof: profileContract.packages[alias].mcp,
+        });
+        if (
+          JSON.stringify(proof.tools) !==
+          JSON.stringify(profileContract.tools[alias])
+        ) {
+          throw new Error("admin_runtime_tool_inventory_mismatch");
         }
-      : {}),
-    skillsRoot: join(ADMIN_INSTALL_ASSET_ROOT, "mcp", "skills"),
-    installRoot: layout.adminRoot,
-    adminHome: layout.adminHome,
-    installAdmin: async () =>
-      profilePackageReceipt(profileContract, "sellable-admin", "mcp", layout),
-    installProduct: async () =>
-      profilePackageReceipt(
-        profileContract,
-        "sellable",
-        "mcp",
-        layout,
-        agentServiceEnv
-      ),
-    verifyMcp: async ({ kind, profileRoot, config }) => {
-      const alias = kind === "admin" ? "sellable-admin" : "sellable";
-      const server = config.mcp_servers[alias];
-      const proof = await inspectMcp({
-        alias,
-        command: server.command,
-        args: server.args,
-        env: {
-          HOME: profileRoot,
-          HERMES_HOME: profileRoot,
-          ...adminToolEnv(layout),
-          ...agentServiceEnv,
-          SELLABLE_CONFIG_PATH: productConfigPath,
-          ...(server.env ?? {}),
-        },
-        packageProof: profileContract.packages[alias].mcp,
-      });
-      if (
-        JSON.stringify(proof.tools) !==
-        JSON.stringify(profileContract.tools[alias])
-      ) {
-        throw new Error("admin_runtime_tool_inventory_mismatch");
-      }
-      serverProofs[alias] = proof;
-      return { ok: true, ...proof };
-    },
-  });
-  mergeHermesState(profileHome, stageRoot);
-  installAdminHermesMemoryHook(stageRoot);
-  stageAdminRuntimeTree(stageRoot);
-  const promotion = await promoteAdminProfileAtomically({
-    profile,
-    currentRoot: profileHome,
-    stagedRoot: stageRoot,
-    backupRoot,
+        serverProofs[alias] = proof;
+        return { ok: true, ...proof };
+      },
+    });
+    mergeHermesState(profileHome, stageRoot);
+    installAdminHermesMemoryHook(stageRoot);
+    stageAdminRuntimeTree(stageRoot);
+    return stage;
+  };
+
+  let stagedAuthority = withProfileSoulLock(profile, readAuthoritativeSoul, {
+    dataRoot: DATA_ROOT,
   });
-  // The installer bakes absolute paths into every generated wrapper, so the
-  // bin/ tree is generated once the promoted Admin home is at its final path.
+  let stage = null;
+  let promoted = null;
+  for (let attempt = 0; attempt < 2 && !promoted; attempt += 1) {
+    stage = await stageWithAuthority(stagedAuthority);
+    const committed = await withProfileSoulLock(
+      profile,
+      async () => {
+        const finalAuthority = readAuthoritativeSoul();
+        if (
+          finalAuthority.sha256 !== stagedAuthority.sha256 ||
+          !finalAuthority.bytes.equals(stagedAuthority.bytes)
+        ) {
+          rmSync(stageRoot, { recursive: true, force: true });
+          return { status: "RESTAGE", stagedAuthority: finalAuthority };
+        }
+        const stagedSoulPath = join(stageRoot, "SOUL.md");
+        const stagedSoul = lstatSync(stagedSoulPath);
+        const stagedSoulBytes = readFileSync(stagedSoulPath);
+        if (
+          stagedSoul.isSymbolicLink() ||
+          !stagedSoul.isFile() ||
+          !stagedSoulBytes.equals(finalAuthority.bytes)
+        ) {
+          throw new Error("admin_runtime_staged_soul_rejected");
+        }
+        const promotion = await promoteAdminProfileAtomically({
+          profile,
+          currentRoot: profileHome,
+          stagedRoot: stageRoot,
+          backupRoot,
+        });
+        const finalSoulPath = join(profileHome, "SOUL.md");
+        const finalSoul = lstatSync(finalSoulPath);
+        const finalSoulBytes = readFileSync(finalSoulPath);
+        if (
+          finalSoul.isSymbolicLink() ||
+          !finalSoul.isFile() ||
+          finalSoul.uid !== (process.getuid?.() ?? finalSoul.uid) ||
+          finalSoul.gid !== (process.getgid?.() ?? finalSoul.gid) ||
+          !finalSoulBytes.equals(finalAuthority.bytes)
+        ) {
+          throw new Error("admin_runtime_live_soul_readback_rejected");
+        }
+        chmodSync(finalSoulPath, 0o600);
+        if ((lstatSync(finalSoulPath).mode & 0o777) !== 0o600) {
+          throw new Error("admin_runtime_live_soul_mode_rejected");
+        }
+        return {
+          status: "PROMOTED",
+          promotion,
+          observedSoulRawSha256: sha256(finalSoulBytes),
+        };
+      },
+      { dataRoot: DATA_ROOT }
+    );
+    if (committed.status === "PROMOTED") {
+      promoted = committed;
+    } else {
+      stagedAuthority = committed.stagedAuthority;
+    }
+  }
+  if (!promoted || !stage) {
+    throw new Error("admin_runtime_live_soul_retry_required");
+  }
+  // The installer bakes absolute paths into every generated wrapper, so bin/
+  // is generated once the promoted Admin home is at its final path.
   const adminHome = installAdminHome({ settingsRoot, layout });
   const memoryCron = await ensureHermesSnapshotCron({
     profileId: profile,
@@ -680,10 +767,11 @@ async function materializeAdminProfile({
   if (!memoryCron.ok) throw new Error(memoryCron.code);
   return {
     stage,
-    promotion,
+    promotion: promoted.promotion,
     profile,
     profileHome,
     adminHome,
+    observedSoulRawSha256: promoted.observedSoulRawSha256,
     servers: [serverProofs.sellable, serverProofs["sellable-admin"]].map(
       ({ tools: _tools, ...proof }) => proof
     ),
@@ -1716,6 +1804,9 @@ function completionReceipt({
   const routeGenerationDigest = flyRuntimeDigest(
     claim.revision?.manifest?.slack ?? null
   );
+  const observedProfileDigest = sha256(
+    `${operation.profileContract.digest}\n${profile.observedSoulRawSha256}`
+  );
   const adminRuntimeProof = {
     schemaVersion: "sellable-agent-admin-runtime-proof/v1",
     authenticatedKind: "ADMIN",
@@ -1726,7 +1817,7 @@ function completionReceipt({
     adminImageDigest: claim.adminRuntimeGeneration.adminImageDigest,
     profile: {
       factory: "stageAdminProfile",
-      digest: operation.profileContract.digest,
+      digest: observedProfileDigest,
       aliases: ["sellable", "sellable-admin"],
       routeGenerationDigest,
     },
@@ -1748,7 +1839,7 @@ function completionReceipt({
   const runtimeHashes = {
     package: sha256(JSON.stringify(packageSpecs())),
     config: operation.profileContract.digest,
-    content: operation.profileContract.digest,
+    content: observedProfileDigest,
     process: sha256(
       JSON.stringify({ servers: profile.servers, modelAuth, runtimeGates })
     ),
@@ -1780,6 +1871,7 @@ function completionReceipt({
     errorClass: "NONE",
     auditIds: [
       `fly-admin-${claim.operation.id}`,
+      `soul-raw-${profile.observedSoulRawSha256}`,
       `hermes-memory-${
         memorySnapshot.ok ? memorySnapshot.status : memorySnapshot.code
       }`.toLowerCase(),
@@ -1943,7 +2035,12 @@ export async function runAdminCanary() {
     throw new Error("admin_canary_recovery_secret_file_rejected");
   }
   if (process.getuid?.() === 0) {
-    dropFlyRuntimePrivileges({ user: "hermes", group: "hermes" });
+    dropFlyRuntimePrivileges({
+      user: "hermes",
+      group: "hermes",
+      beforeSetuid: ({ gid }) =>
+        prepareSoulLockRoot({ dataRoot: DATA_ROOT, gid }),
+    });
   }
   const runtimeUid = process.getuid?.() ?? 0;
   const runtimeGid = process.getgid?.() ?? 0;
@@ -2207,6 +2304,13 @@ export async function runAdminCanary() {
     },
     agentServiceEnv: agentServiceEnvironment,
   });
+  const soulProof = observeProfileSoul(profile.profile, {
+    dataRoot: DATA_ROOT,
+  });
+  if (soulProof.ok !== true) {
+    throw new Error("admin_runtime_live_soul_loader_proof_rejected");
+  }
+  profile.observedSoulRawSha256 = soulProof.rawFileSha256;
   const modelAuth = proveAdminModelAuth(profile);
   const attachmentHandoff = proveAdminAttachmentHandoff(profile);
   const observedSettings = settingsProof(
@@ -2318,10 +2422,12 @@ async function runAdminProduction() {
     dropFlyRuntimePrivileges({
       user: "hermes",
       group: "hermes",
-      beforeSetuid:
-        process.env.SELLABLE_AGENT_ALLOW_TEST_OIDC === "1"
-          ? undefined
-          : ({ gid }) => handoffFlyOidcSocket({ gid }),
+      beforeSetuid: ({ gid }) => {
+        prepareSoulLockRoot({ dataRoot: DATA_ROOT, gid });
+        if (process.env.SELLABLE_AGENT_ALLOW_TEST_OIDC !== "1") {
+          handoffFlyOidcSocket({ gid });
+        }
+      },
     });
   } else if ((process.getuid?.() ?? 0) < 1 || (process.getgid?.() ?? 0) < 1) {
     throw new Error("admin_runtime_privilege_rejected");
@@ -2387,12 +2493,25 @@ async function runAdminProduction() {
   process.once("SIGINT", stop);
   process.once("SIGTERM", stop);
   let operationHeartbeat = null;
+  let soulClaimTracker = null;
   let failures = 0;
   while (!controller.signal.aborted) {
     try {
       let claim;
       try {
-        claim = await client.claim(60);
+        claim =
+          activeLaunch?.profile?.profile && soulClaimTracker
+            ? await claimWithSoulObservation({
+                client,
+                tracker: soulClaimTracker,
+                readSoul: (request) =>
+                  executeExternalSoulBridgeOperation(request, {
+                    dataRoot: DATA_ROOT,
+                    callerProfileId: activeLaunch.profile.profile,
+                  }),
+                leaseSeconds: 60,
+              })
+            : await client.claim(60);
       } catch (error) {
         if (!isFlyCustomerEnrollmentRenewalError(error)) throw error;
         const renewed = await renewFlyAdminControlSession({
@@ -2567,6 +2686,13 @@ async function runAdminProduction() {
         slack: nativeSlackProfileInput(claim, installed),
         agentServiceEnv: adminAgentServiceEnvironment(claim),
       });
+      const soulProof = observeProfileSoul(profile.profile, {
+        dataRoot: DATA_ROOT,
+      });
+      if (soulProof.ok !== true) {
+        throw new Error("admin_runtime_live_soul_loader_proof_rejected");
+      }
+      profile.observedSoulRawSha256 = soulProof.rawFileSha256;
       const modelAuth = proveAdminModelAuth(profile);
       const memorySnapshot = await flushHermesSnapshot({
         client,
@@ -2621,8 +2747,13 @@ async function runAdminProduction() {
         if (candidateLaunch && candidateGateway) {
           activeLaunch = candidateLaunch;
           activeGateway = candidateGateway;
+          soulClaimTracker = createSoulClaimObservationTracker({
+            runtimeId: RUNTIME_ID,
+            profileId: candidateLaunch.profile.profile,
+          });
           candidateGateway = null;
         } else {
+          soulClaimTracker = null;
           clearRuntimeSecrets();
         }
       } finally {

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -3,9 +3,9 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.805
-ARG MCP_INTEGRITY=sha512-ULMGwWalb14SaMgxLeeiOWjavXpnONhdD8kAkvp7rJFdiL7s30VwXX+1j/aNwijiWXqqNQ1wcsXUPqk4eWpslg==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.484
+ARG MCP_PACKAGE=@sellable/mcp@0.1.806-wip.phase169.20260804195555
+ARG MCP_INTEGRITY=sha512-g0FHlsG8TenNpdxBoJWsuveCD3uTUrBPR9Xk1WfEliOmy2sbLNtCCe/nCJMcj/hJdfKV0aOisyMbAx7xkwr9Bg==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.485-wip.phase169.20260804195555
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG HERMES_VERSION=0.20.0
 ARG MCP_TRUST_ROOT_B64
@@ -56,7 +56,7 @@ RUN test -n "${MCP_TRUST_ROOT_B64}" \
              /etc/cont-init.d/02-reconcile-profiles \
     && npm cache clean --force
 
-COPY mcp-context-proxy.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs \
+COPY mcp-context-proxy.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs soul-artifact-validator.mjs \
   /usr/local/lib/sellable-agent/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
@@ -68,6 +68,14 @@ RUN node --input-type=module -e \
       'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
+    && printf '%s\n' \
+      '#!/usr/bin/env node' \
+      'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge.mjs").then(({ runSoulBridgeCli }) => runSoulBridgeCli());' \
+      > /usr/local/bin/sellable-soul-bridge \
+    && chmod 0555 /usr/local/bin/sellable-soul-bridge \
+    && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
+      > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
+    && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
     && chmod 0555 /usr/local/lib/sellable-agent/*.mjs \
     && chmod 0555 /opt/sellable/bin/hermes-memory-dirty \
     && chmod 0444 /opt/sellable/share/hermes-memory-reconcile.sh \