@vela-science/canopus 0.6.4 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ## Unreleased
 
+## 0.7.0 - 2026-07-25
+
+- Retire long-lived proposal-withdrawal capabilities. Successful runs now
+  destroy the isolated producer key with the rest of the Vela home; `inspect`
+  reports only rooted run state, and the `withdraw` command and capability
+  store are removed. Historical activity records and Vela
+  `proposal.withdrawn` events remain readable, while pending proposals remain
+  canonical review records rather than reasons to retain a private key.
+- Narrow the npm package to the active Canopus product boundary. Historical
+  Build Week records, release ledgers, advisories, and retained Erdős evidence
+  remain immutable in Git and tagged source archives but no longer inflate the
+  installed runtime. Stable README links point to the exact `v0.6.5` archive,
+  while missions, profiles, verifier capsules, schemas, runtime custody
+  fixtures, and current product guidance continue to ship.
+
+## 0.6.5 - 2026-07-25
+
+- Advance the sole runnable Erdős 1056 profile to the adjacent,
+  non-overlapping range `10428801..10429000`. The registration freezes one
+  bounded Mission v1 draft and independently built static Linux ARM64 and
+  x86-64 verifier capsules before any model call. The completed
+  `10428601..10428800` profile remains reproducible from Canopus `0.6.3`, its
+  retained run evidence, and immutable Git history; its binaries are removed
+  from the active package rather than accumulated indefinitely.
+- Complete that registered mission in 73,083 observed tokens. The frozen
+  verifier independently confirms the exhaustive bounded-negative result over
+  all 15 primes in `10428801..10429000`; Vela lands Receipt
+  `sha256:7a7c728516e79da3f25ac1f6c10c30908949b6aba118dc9752f61b90b4a96435`
+  as proposal `vpr_4a9068064a0c441c` through Defer with accepted-event delta
+  zero, and clean-clone reproduction matches. The result is not a universal
+  nonexistence claim and is not scientific acceptance.
+- Publish only the sanitized read-only run projection at
+  `evidence/erdos/run_b3b0cf07-b149-4d53-8258-76ba0e1fc0a5`; the raw worker
+  directory, credentials, unrestricted logs, and withdrawal capability remain
+  outside the package.
 - Compose exactly with released Vela `0.915.1`. The maintenance release changes
   no mission, Receipt, verifier, policy, proposal, or authority contract.
   GitHub CI pins the released macOS, Linux, and Windows archives and binaries by

package/README.md

@@ -16,7 +16,7 @@
 
 <p align="center">
   <a href="https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4">Retained Sidon run</a> ·
-  <a href="BUILD_WEEK.md">Build Week record</a> ·
+  <a href="https://github.com/vela-science/vela-research-harness/blob/v0.6.5/BUILD_WEEK.md">Build Week archive</a> ·
   <a href="docs/MISSIONS.md">Missions</a> ·
   <a href="docs/RUN_RECORD.md">Run records</a> ·
   <a href="https://github.com/vela-science/vela">Vela</a>
@@ -57,15 +57,16 @@ Mission → GPT-5.6 → artifact → verifier → Receipt → Defer.
 **90 seconds — inspect the shipped product:**
 
 ```sh
-bunx @vela-science/canopus@0.6.4 --version
-bunx @vela-science/canopus@0.6.4 profile validate sidon-a24-at-least-7194-gpt56-v3
+bunx @vela-science/canopus@0.7.0 --version
+bunx @vela-science/canopus@0.7.0 profile validate sidon-a24-at-least-7194-gpt56-v3
 ```
 
-**Full workflow — reproduce without rebuilding Canopus:**
+**Retained historical result — reproduce without rebuilding Canopus:**
 
+This Sidon artifact remains bound to the Vela version recorded when it landed.
 Install the provenance-checked prebuilt
 [Vela 0.912.0 release](https://github.com/vela-science/vela/releases/tag/v0.912.0)
-for your platform, then:
+for this replay only, then:
 
 ```sh
 git clone https://github.com/vela-science/sidon-frontier.git
@@ -80,21 +81,24 @@ The first command selects the pending artifact explicitly and runs Vela's
 frozen Sidon verifier. The second is an independent base-3 implementation that
 also rejects a bound collision injection. Neither command accepts the proposal.
 
+For new missions, use Vela `0.915.1`, the version composed with Canopus
+`0.7.0` and enforced by `canopus doctor`.
+
 ## Quickstart
 
 Run the provenance-backed public package with Bun:
 
 ```sh
-bunx @vela-science/canopus@0.6.4 --version
+bunx @vela-science/canopus@0.7.0 --version
 ```
 
 Inspect a clean frontier, then run its first ranked producer offer:
 
 ```sh
-bunx @vela-science/canopus@0.6.4 doctor /path/to/frontier
-bunx @vela-science/canopus@0.6.4 run /path/to/frontier --first
-bunx @vela-science/canopus@0.6.4 inspect latest
-bunx @vela-science/canopus@0.6.4 replay /path/to/run.json
+bunx @vela-science/canopus@0.7.0 doctor /path/to/frontier
+bunx @vela-science/canopus@0.7.0 run /path/to/frontier --first
+bunx @vela-science/canopus@0.7.0 inspect latest
+bunx @vela-science/canopus@0.7.0 replay /path/to/run.json
 ```
 
 Export a completed Defer run without publishing or mutating anything:
@@ -113,7 +117,7 @@ standing after verification; historical run v0 records remain inspectable.
 Use `--no-land` for a diagnostic mission that cannot change the source frontier:
 
 ```sh
-bunx @vela-science/canopus@0.6.4 run /path/to/frontier --first --no-land
+bunx @vela-science/canopus@0.7.0 run /path/to/frontier --first --no-land
 ```
 
 `doctor` binds the exact Vela, Codex, Git, frontier, packet, profile, and verifier
@@ -126,7 +130,7 @@ unregistered targets. It never silently skips the first ranked offer.
 | --- | --- | --- |
 | Codex worker | Use tools inside one bounded workspace | Reach the network, host home, human keys, or verifier |
 | Verifier | Read frozen candidate bytes and declared inputs | Write, use the network, or make an authority decision |
-| Canopus | Preserve evidence, replay, land a Receipt, withdraw its own proposal | Sign, accept, reject, or call verifier success acceptance |
+| Canopus | Preserve evidence, replay, and land a Receipt | Sign, accept, reject, retain producer keys, or call verifier success acceptance |
 
 The worker uses macOS Seatbelt or Codex's Bubblewrap sandbox on Linux and WSL2.
 The verifier runs in a separate pinned container with network and writes denied.
@@ -140,17 +144,23 @@ canopus inspect [run.json | latest]
 canopus replay <run.json>
 ```
 
-Advanced profile and withdrawal commands are documented in
-[Missions](docs/MISSIONS.md). Installed profiles are closed,
+Advanced profile commands are documented in [Missions](docs/MISSIONS.md).
+Installed profiles are closed,
 content-addressed contracts that bind the target, packet, objective, artifact
 types, worker, verifier, replay command, budgets, and landing ceiling.
 
+Producer identities are ephemeral. After a successful landing and clean-clone
+reproduction, Canopus destroys the isolated Vela home instead of retaining a
+proposal-scoped private key. A proposal may remain pending until Vela policy or
+a human reviewer decides it; Canopus does not need a second control channel.
+
 ## Retained Build Week evidence
 
 Inspect the retained Mission → worker → artifact → verifier → Receipt → Defer
 chain on the [exact Sidon run](https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4).
 Exact commits, run roots, audit evidence, and nonclaims live in
-[`BUILD_WEEK.md`](BUILD_WEEK.md).
+the retained
+[`v0.6.5` Build Week archive](https://github.com/vela-science/vela-research-harness/blob/v0.6.5/BUILD_WEEK.md).
 
 ## Development
 
@@ -168,7 +178,7 @@ bun run pack:check
 
 - [Missions and profiles](docs/MISSIONS.md)
 - [Run records and publication](docs/RUN_RECORD.md)
-- [Release evidence](docs/RELEASES.md)
+- [Historical release evidence](https://github.com/vela-science/vela-research-harness/blob/v0.7.0/docs/RELEASES.md)
 - [Why the harness stays removable](docs/adr/0001-harness-boundary-and-name.md)
 
 ## License

package/SECURITY.md

@@ -5,8 +5,9 @@ Report vulnerabilities privately through GitHub Security Advisories for
 
 Canopus does not accept human signing keys. Do not place a human Vela key,
 provider credential, or unpublished scientific secret inside a run root.
-Successful runs scrub the isolated agent-key home, but operators remain
-responsible for deleting failed diagnostic runs and benchmark output.
+Successful runs scrub the isolated agent-key home and retain no producer
+private key or withdrawal capability. Operators remain responsible for
+deleting failed diagnostic runs and benchmark output.
 
 Agent-authored Git commits and tags must explicitly disable ambient signing
 (`commit.gpgSign=false`, `tag.gpgSign=false`) and verify that the resulting Git

package/dist/src/activity/events.d.ts

@@ -1,6 +1,9 @@
 export declare const ACTIVITY_SCHEMA: "canopus.activity.v0";
-export declare const ACTIVITY_TYPES: readonly ["run.started", "workspace.prepared", "roots.verified", "target.offered", "work.skipped", "work.claimed", "engine.started", "engine.completed", "artifact.frozen", "artifacts.published", "verifier.completed", "candidate.finalized", "receipt.mapped", "landing.observed", "landing.bound", "landing.completed", "withdrawal_capability.retained", "reproduction.completed", "projection.written", "run.completed", "run.failed"];
+export declare const WRITABLE_ACTIVITY_TYPES: readonly ["run.started", "workspace.prepared", "roots.verified", "target.offered", "work.skipped", "work.claimed", "engine.started", "engine.completed", "artifact.frozen", "artifacts.published", "verifier.completed", "candidate.finalized", "receipt.mapped", "landing.observed", "landing.bound", "landing.completed", "reproduction.completed", "projection.written", "run.completed", "run.failed"];
+export declare const HISTORICAL_ACTIVITY_TYPES: readonly ["withdrawal_capability.retained"];
+export declare const ACTIVITY_TYPES: readonly ["run.started", "workspace.prepared", "roots.verified", "target.offered", "work.skipped", "work.claimed", "engine.started", "engine.completed", "artifact.frozen", "artifacts.published", "verifier.completed", "candidate.finalized", "receipt.mapped", "landing.observed", "landing.bound", "landing.completed", "reproduction.completed", "projection.written", "run.completed", "run.failed", "withdrawal_capability.retained"];
 export type ActivityType = (typeof ACTIVITY_TYPES)[number];
+export type WritableActivityType = (typeof WRITABLE_ACTIVITY_TYPES)[number];
 export interface ActivityEventBody {
     schema: typeof ACTIVITY_SCHEMA;
     run_id: string;

package/dist/src/activity/events.js

@@ -1,5 +1,5 @@
 export const ACTIVITY_SCHEMA = "canopus.activity.v0";
-export const ACTIVITY_TYPES = [
+export const WRITABLE_ACTIVITY_TYPES = [
     "run.started",
     "workspace.prepared",
     "roots.verified",
@@ -16,9 +16,15 @@ export const ACTIVITY_TYPES = [
     "landing.observed",
     "landing.bound",
     "landing.completed",
-    "withdrawal_capability.retained",
     "reproduction.completed",
     "projection.written",
     "run.completed",
     "run.failed",
 ];
+export const HISTORICAL_ACTIVITY_TYPES = [
+    "withdrawal_capability.retained",
+];
+export const ACTIVITY_TYPES = [
+    ...WRITABLE_ACTIVITY_TYPES,
+    ...HISTORICAL_ACTIVITY_TYPES,
+];

package/dist/src/activity/store.d.ts

@@ -1,4 +1,4 @@
-import { type ActivityEvent, type ActivityType } from "./events.js";
+import { type ActivityEvent, type WritableActivityType } from "./events.js";
 export declare function readActivity(file: string): Promise<ActivityEvent[]>;
 export declare class ActivityStore {
     #private;
@@ -6,5 +6,5 @@ export declare class ActivityStore {
     static open(file: string, runId: string): Promise<ActivityStore>;
     get tip(): string | null;
     get events(): readonly ActivityEvent[];
-    append(type: ActivityType, payload: Record<string, unknown>): Promise<ActivityEvent>;
+    append(type: WritableActivityType, payload: Record<string, unknown>): Promise<ActivityEvent>;
 }

package/dist/src/activity/store.js

@@ -3,7 +3,7 @@ import { mkdir, open } from "node:fs/promises";
 import path from "node:path";
 import { canonicalJson, contentDigest } from "../util/canonical.js";
 import { readBoundedRegularFile } from "../util/files.js";
-import { ACTIVITY_SCHEMA, ACTIVITY_TYPES, } from "./events.js";
+import { ACTIVITY_SCHEMA, ACTIVITY_TYPES, WRITABLE_ACTIVITY_TYPES, } from "./events.js";
 const MAX_ACTIVITY_BYTES = 64 * 1024 * 1024;
 const MAX_EVENT_BYTES = 1024 * 1024;
 function parseEvent(value, line) {
@@ -129,8 +129,9 @@ export class ActivityStore {
         });
         this.#queue = this.#queue.then(async () => {
             try {
-                if (!ACTIVITY_TYPES.includes(type))
-                    throw new Error(`unknown activity type ${type}`);
+                if (!WRITABLE_ACTIVITY_TYPES.includes(type)) {
+                    throw new Error(`retired or unknown activity type ${type}`);
+                }
                 const body = {
                     schema: ACTIVITY_SCHEMA,
                     run_id: this.#runId,

package/dist/src/cli.js

@@ -16,7 +16,6 @@ import { buildPublicationBundle } from "./projection/publication.js";
 import { doctorProduct } from "./product/doctor.js";
 import { replayProduct } from "./product/replay.js";
 import { runProduct } from "./product/run.js";
-import { withdrawProduct } from "./product/withdraw.js";
 import { CANOPUS_VERSION } from "./product/version.js";
 import { listProductProfiles, packProductProfile, validateProductProfile, } from "./product/profile-bundle.js";
 import { loadProductProfile } from "./product/profile.js";
@@ -24,7 +23,6 @@ import { runCanopus } from "./run.js";
 import { readBoundedRegularFile } from "./util/files.js";
 import { canonicalJson, contentDigest } from "./util/canonical.js";
 import { VelaClient } from "./vela/cli.js";
-import { withdrawalCapabilityStatus } from "./capability/withdrawal.js";
 function usage() {
     return `Canopus — bounded Vela research harness
 
@@ -39,7 +37,6 @@ Primary workflow:
   canopus publish-run <run.json> --mission <mission.json> \
     --repository <public-url> --output <new-directory>
   canopus replay <run.json>
-  canopus withdraw [frontier] [--run <run.json|latest>] --reason <text>
 
 Mission v1 prepare/validate remains available under advanced help.
 
@@ -116,14 +113,6 @@ Creates a sanitized public projection, root manifest, proposal-scoped pending
 commands, and a read-only Vela Observatory import descriptor. It never lands,
 signs, accepts, pushes, or deploys.`;
 }
-function withdrawUsage() {
-    return `Usage:
-  canopus withdraw [frontier] [--run <run.json|latest>] --reason <text>
-
-Uses only the retained proposal-scoped producer capability. The operation runs
-in a disposable exact-head clone, verifies strict and clean-clone replay, then
-fast-forwards the clean source. It never mounts a worker or human key.`;
-}
 function isHelp(value) {
     return value === "--help" || value === "-h" || value === "help";
 }
@@ -445,10 +434,7 @@ async function inspectCommand(value, rest) {
         : schema === "canopus.failure.v0"
             ? projectFailure(parseFailureRecord(raw))
             : projectRun(parseRunRecord(raw));
-    const withdrawal = "proposal_id" in projection
-        ? await withdrawalCapabilityStatus(projection.proposal_id)
-        : { state: "not_applicable", available: false };
-    process.stdout.write(`${JSON.stringify({ ok: true, command: "inspect", run_file: file, projection, withdrawal })}\n`);
+    process.stdout.write(`${JSON.stringify({ ok: true, command: "inspect", run_file: file, projection })}\n`);
 }
 async function replayCommand(file, rest) {
     if (file === undefined || rest.length !== 0)
@@ -514,22 +500,6 @@ async function publishRunCommand(file, rest) {
         authority_effect: "none",
     })}\n`);
 }
-async function withdrawCommand(args) {
-    const parsed = productOptions(args, ["--run", "--reason"], []);
-    if (parsed.positional.length > 1)
-        throw new Error("withdraw accepts at most one frontier");
-    const reason = parsed.values.get("--reason");
-    if (reason === undefined || reason.trim().length === 0)
-        throw new Error("withdraw requires --reason");
-    const runValue = parsed.values.get("--run") ?? "latest";
-    const runFile = runValue === "latest" ? await latestRunFile() : path.resolve(runValue);
-    const result = await withdrawProduct({
-        frontier: path.resolve(parsed.positional[0] ?? "."),
-        runFile,
-        reason,
-    });
-    process.stdout.write(`${JSON.stringify(result)}\n`);
-}
 async function main(argv) {
     const [command, file, ...rest] = argv;
     if (command === undefined || isHelp(command)) {
@@ -557,8 +527,7 @@ async function main(argv) {
                     : command === "replay" ? replayUsage()
                         : command === "public-run" ? publicRunUsage()
                             : command === "publish-run" ? publishRunUsage()
-                                : command === "withdraw" ? withdrawUsage()
-                                    : usage()}\n`);
+                                : usage()}\n`);
         return;
     }
     if (command === "doctor") {
@@ -577,10 +546,6 @@ async function main(argv) {
         await publishRunCommand(file, rest);
         return;
     }
-    if (command === "withdraw") {
-        await withdrawCommand(argv.slice(1));
-        return;
-    }
     if (command === "validate") {
         if (file === undefined)
             throw new Error("validate requires a mission file");

package/dist/src/product/run.js

@@ -11,7 +11,6 @@ import { readBoundedRegularFile } from "../util/files.js";
 import { VelaClient } from "../vela/cli.js";
 import { doctorProduct } from "./doctor.js";
 import { loadProfileDraft, loadProfileResultContract, packagedWorkerProfile, stageProfileCapsule, } from "./profile.js";
-import { retainWithdrawalCapability } from "../capability/withdrawal.js";
 function packageFile(relative) {
     return fileURLToPath(new URL(`../../../${relative}`, import.meta.url));
 }
@@ -220,12 +219,6 @@ export async function runProduct(options) {
             bundleRoot,
             dockerBinary: dockerRuntime.binary,
             verifierRunner: runner,
-            retainWithdrawalCapability: async (context) => {
-                await retainWithdrawalCapability({
-                    ...context,
-                    velaBinary: diagnosis.public.runtimes.vela.binary,
-                });
-            },
         };
         const run = options.noLand === true
             ? await runCanopus({ ...commonRun, noLand: true })

package/dist/src/run.d.ts

@@ -25,13 +25,6 @@ export interface CanopusRunOptions {
     bundleRoot?: string;
     dockerBinary?: string;
     verifierRunner?: CommandRunner;
-    retainWithdrawalCapability?: (context: {
-        velaHome: string;
-        landingRepo: string;
-        mission: Mission;
-        landing: LandResult;
-        finalRoots: MissionRoots;
-    }) => Promise<void>;
     noLand?: false;
 }
 export interface CanopusNoLandOptions extends Omit<CanopusRunOptions, "noLand"> {

package/dist/src/run.js

@@ -542,20 +542,6 @@ export async function runCanopus(options) {
             roots: reproductionInspection.roots,
             verifier_status: reproductionVerifier.status,
         });
-        if (options.retainWithdrawalCapability !== undefined) {
-            phase = "withdrawal_capability";
-            await options.retainWithdrawalCapability({
-                velaHome: paths.velaHome,
-                landingRepo: paths.landing,
-                mission: options.mission,
-                landing,
-                finalRoots: final.roots,
-            });
-            await activity.append("withdrawal_capability.retained", {
-                proposal_id: landing.proposalId,
-                authority: "producer_withdrawal_only",
-            });
-        }
         await rm(paths.velaHome, { recursive: true, force: true });
         const record = {
             schema: RUN_RECORD_SCHEMA,
@@ -630,7 +616,6 @@ export async function runCanopus(options) {
         if (phase.startsWith("landing_") ||
             phase === "receipt_binding" ||
             phase === "clean_clone_reproduction" ||
-            phase === "withdrawal_capability" ||
             phase === "record_finalization") {
             let observedRoots = null;
             let inspectionError = null;

package/dist/src/vela/cli.d.ts

@@ -44,14 +44,6 @@ export interface VelaLandCommandObservation {
     stdout_digest: string;
     stderr_digest: string;
 }
-export interface VelaWithdrawalResult {
-    proposal_id: string;
-    withdrawal_event_id: string;
-    withdrawn_at: string;
-    state_root_before: string;
-    state_root_after: string;
-    publication_commit: string;
-}
 export declare function strictBaselineFromCheck(check: Record<string, unknown>): StrictBaseline;
 export declare function validateLandResult(mission: Mission, raw: Record<string, unknown>): LandResult;
 export declare class VelaClient {
@@ -64,7 +56,6 @@ export declare class VelaClient {
     next(mission: Mission, repoRoot: string): Promise<VelaCommandResponse>;
     offer(repoRoot: string, frontier: string, roots: MissionRoots, strictBaseline?: StrictBaseline, limit?: number): Promise<VelaCommandResponse>;
     work(mission: Mission, repoRoot: string, target: string, expected: MissionRoots): Promise<VelaCommandResponse>;
-    withdraw(repoRoot: string, frontier: string, proposalId: string, actor: string, reason: string): Promise<VelaWithdrawalResult>;
     landAuthoredCommand(mission: Mission, repoRoot: string, input: AuthoredReceiptInput, _expected: MissionRoots): Promise<VelaLandCommandObservation>;
     parseLandCommand(observation: VelaLandCommandObservation): Record<string, unknown>;
     validateLandResult(mission: Mission, raw: Record<string, unknown>): LandResult;

package/dist/src/vela/cli.js

@@ -509,54 +509,6 @@ export class VelaClient {
         }
         return { ok: true, value };
     }
-    async withdraw(repoRoot, frontier, proposalId, actor, reason) {
-        if (!/^vpr_[0-9a-f]{16}$/u.test(proposalId)) {
-            throw new VelaClientError("malformed_output", "withdrawal requires a full proposal id");
-        }
-        if (!actor.startsWith("agent:") || reason.trim().length === 0) {
-            throw new VelaClientError("malformed_output", "withdrawal requires an agent actor and reason");
-        }
-        const value = await this.#json(["review", "withdraw", frontierPath(frontier), proposalId, "--as", actor, "--reason", reason, "--json"], repoRoot, "vela review withdraw");
-        if (value.ok !== true || value.command !== "review.withdraw") {
-            throw new VelaClientError("malformed_output", "vela review withdraw returned an invalid envelope");
-        }
-        if (value.proposal_id !== proposalId || value.idempotent !== false || value.key_read !== true) {
-            throw new VelaClientError("malformed_output", "vela review withdraw did not bind one new key-backed withdrawal");
-        }
-        const eventId = stringAt(value.withdrawal_event_id, "vela review withdraw.withdrawal_event_id", {
-            max: 20,
-            pattern: /^vev_[0-9a-f]{16}$/u,
-        });
-        const withdrawnAt = stringAt(value.withdrawn_at, "vela review withdraw.withdrawn_at", {
-            min: 20,
-            max: 64,
-        });
-        if (!Number.isFinite(Date.parse(withdrawnAt))) {
-            throw new VelaClientError("malformed_output", "vela review withdraw returned an invalid timestamp");
-        }
-        const stateRootBefore = normalizeSha256(value.state_root_before, "vela review withdraw.state_root_before");
-        const stateRootAfter = normalizeSha256(value.state_root_after, "vela review withdraw.state_root_after");
-        if (stateRootBefore === stateRootAfter) {
-            throw new VelaClientError("malformed_output", "new withdrawal did not change the event-log root");
-        }
-        const publication = fieldObject(value, "publication", "vela review withdraw");
-        const publicationState = stringAt(publication.state, "vela review withdraw.publication.state", {
-            min: 1,
-            max: 32,
-        });
-        if (publicationState !== "committed_local" && publicationState !== "pushed") {
-            throw new VelaClientError("command_failed", `withdrawal publication is ${publicationState}, not committed`);
-        }
-        const publicationCommit = stringAt(publication.commit, "vela review withdraw.publication.commit", { max: 64, pattern: GIT_OBJECT_RE });
-        return {
-            proposal_id: proposalId,
-            withdrawal_event_id: eventId,
-            withdrawn_at: withdrawnAt,
-            state_root_before: stateRootBefore,
-            state_root_after: stateRootAfter,
-            publication_commit: publicationCommit,
-        };
-    }
     async landAuthoredCommand(mission, repoRoot, input, _expected) {
         if ((input.predictedObservable === undefined) === (input.notApplicable === undefined)) {
             throw new VelaClientError("malformed_output", "authored receipt requires exactly one prediction mode");

package/missions/erdos1056-k15-next/mission.draft.json

@@ -1,15 +1,15 @@
 {
-  "id": "mission_erdos1056_k15_range_10428601_10428800_native2_retry",
+  "id": "mission_erdos1056_k15_range_10428801_10429000_native3",
   "target": "auto",
   "frontier": ".",
   "actor": "agent:canopus-local",
   "role": "producer",
   "claim_type": "computational",
   "replayability": "exact",
-  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428601..10428800. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428601-10428800.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428601; range_end=10428800; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
+  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428801..10429000. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428801-10429000.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428801; range_end=10429000; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
   "completion_condition": "The independent frozen capsule recomputes the full exact range in a separate network-denied and write-denied container and byte-matches the single artifact.",
   "allowed_paths": [
-    "artifacts/erdos1056-k15-range-10428601-10428800.txt"
+    "artifacts/erdos1056-k15-range-10428801-10429000.txt"
   ],
   "budgets": {
     "max_research_wall_time_ms": 1800000,
@@ -26,7 +26,7 @@
   "verifier": {
     "argv": [
       "capsule/verifier",
-      "{artifact:artifacts/erdos1056-k15-range-10428601-10428800.txt}"
+      "{artifact:artifacts/erdos1056-k15-range-10428801-10429000.txt}"
     ],
     "cwd": "site",
     "timeout_ms": 300000,
@@ -34,7 +34,7 @@
     "capsule_path": "capsule/verifier"
   },
   "scientific_chain": {
-    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428601..10428800 and exits zero on the exact candidate bytes.",
-    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428601-10428800.txt"
+    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428801..10429000 and exits zero on the exact candidate bytes.",
+    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428801-10429000.txt"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vela-science/canopus",
-  "version": "0.6.4",
+  "version": "0.7.0",
   "description": "A bounded, replaceable research harness over released Vela interfaces",
   "type": "module",
   "private": false,
@@ -31,7 +31,6 @@
     "dist/src/artifact",
     "dist/src/budget",
     "dist/src/candidate",
-    "dist/src/capability",
     "dist/src/contracts",
     "dist/src/engines",
     "dist/src/evidence",
@@ -53,8 +52,8 @@
     "dist/src/run.js",
     "dist/src/run.d.ts",
     "schemas",
-    "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
-    "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
+    "capsules/erdos1056-k15/bin/linux-arm64/10428801-10429000/verifier",
+    "capsules/erdos1056-k15/bin/linux-x86_64/10428801-10429000/verifier",
     "capsules/formal-erdos-505-test-dim-one/verifier",
     "capsules/quantum-10-1-4/verifier.py",
     "capsules/sidon-a24/bin/linux-arm64/verifier",
@@ -62,18 +61,12 @@
     "missions",
     "profiles",
     "runtime",
-    "advisories",
-    "evidence/build-week",
-    "evidence/erdos",
-    "scripts/run-claim-fidelity-advisory.mjs",
     "scripts/run-hostile-native-custody-fixture.mjs",
     "scripts/run-hostile-verifier-fixture.mjs",
     "tests/fixtures/hostile-verifier",
     "README.md",
-    "BUILD_WEEK.md",
     "THIRD_PARTY.md",
     "docs/MISSIONS.md",
-    "docs/RELEASES.md",
     "docs/RUN_RECORD.md",
     "CHANGELOG.md",
     "SECURITY.md",

package/profiles/{erdos1056-k15-10428601-10428800.json → erdos1056-k15-10428801-10429000.json}

@@ -1,15 +1,15 @@
 {
   "schema": "canopus.profile.v2",
-  "name": "erdos1056-k15-10428601-10428800",
+  "name": "erdos1056-k15-10428801-10429000",
   "target": "erdos:1056",
   "target_packet_schema": "erdos-frontier.problem-work.v1",
   "draft": "missions/erdos1056-k15-next/mission.draft.json",
-  "draft_sha256": "sha256:31f0d178472b2eb904d081be09a78fdeb2f65091389e4b09650064e71f31c91f",
-  "objective_sha256": "sha256:b70c05cfe940c96610386c1abf51507e3282c2f96f3c6ef8ae85b1216a2f4b0a",
+  "draft_sha256": "sha256:bcf426097f93fef79e2743e1591940f0d2e13a899f6b81b5e58e697213ddfd9e",
+  "objective_sha256": "sha256:cc5ec511b6b66a5d4e99047aba59a8b2e89dff5c8f496a759183355547f968a5",
   "completion_condition_sha256": "sha256:4a4a06e2c867867a191af27900e96c23e677db2775783f1829c31e4867a7f270",
-  "allowed_artifacts_sha256": "sha256:11c82c9b03ba9cb220187160fac0923a38a533a5d7f05cc6749eaadfafa98d90",
+  "allowed_artifacts_sha256": "sha256:f0f5f096175d80648c9d0463c726ebdf2811ed25511b1640e7151ab3eb622bd3",
   "budgets_sha256": "sha256:5457a393d492978d8f191aca42fde0bf95261d74d701ce7ecd1b99f6e0dcbc0c",
-  "replay_argv_sha256": "sha256:d39c48fc7f6fe2d052e15d3454fecbd7db81b6eb764b01fd3d80dc96393c146c",
+  "replay_argv_sha256": "sha256:5442bf3648b752afc9898cfec9197cb47021bde71caa48028700ede7367a9176",
   "landing": {
     "expected_routes": ["defer"],
     "max_accepted_delta": 0
@@ -18,15 +18,15 @@
     "darwin-arm64": {
       "worker_profile": "runtime/native-worker/config.toml",
       "worker_profile_sha256": "sha256:12b58762819481ad101e7a172a296224b6050a8a07a7431272e521a4102908da",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
-      "verifier_capsule_sha256": "sha256:875a28177ef9b29d2480a8fe7906eddc3e809824190083abc885609555f8e52d",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428801-10429000/verifier",
+      "verifier_capsule_sha256": "sha256:c9533a8650ca2a76f37c4d482e5467849eb6df4e11d18759207abd94739293f3",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     },
     "linux-x86_64": {
       "worker_profile": "runtime/native-worker/config-linux.toml",
       "worker_profile_sha256": "sha256:fddecc4b7458b91f6d55ae16b666d297ae7bcd1a2f5deeb6650dcea60fc0242c",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
-      "verifier_capsule_sha256": "sha256:51fc4e682d7a7f8f30f5e0dc2584e17fe94a037d246ff402fbe5d5ca6b820dc8",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428801-10429000/verifier",
+      "verifier_capsule_sha256": "sha256:f9c33462ce457cf465aa95ae7e557a33c3c3988f5a9b7891b2accedb0eabee9e",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     }
   }