deadbyte-mcp 0.15.28 → 0.15.30

package/STABILIZATION-PROGRESS.md

@@ -0,0 +1,60 @@
+# 0.15.30 stabilization checkpoint
+
+Status: NOT YET PROVEN. Version remains 0.15.29 until behavior gates pass.
+
+## Baseline
+
+Candidate extracted from the existing registry tarball into this new directory.
+Tarball SHA-256: f535d7121a384bed106d34bc7525afa9d4048c7e290f270699e25136d1e82eeb.
+Before edits, manifest verification passed: 2086 files; f74eaa1b3d00e6fb5a36b2358efb815e3686c9fe9dbd3b84d25a713ef957748c.
+Production release and previous dirty development tree were not edited.
+
+## Changes and observations
+
+- New SemVer tests: RED 3/3 before implementation; GREEN after strict grammar, BigInt numeric comparison and ASCII identifier ordering.
+- Existing manifest identity checks retained.
+- New environment test exposed loss of custom module paths in the existing helper; fixed helper preserves paths, deduplicates case-insensitively and prioritizes native Windows PowerShell modules.
+- CLI controller and guardian child launches now use the existing normalized environment helper.
+- Read-only child Get-Command A/B: inherited Codex PSModulePath fails to resolve Get-FileHash (exit 1); normalized child succeeds (exit 0). Exact conflicting module/autoload diagnosis and full launcher matrix remain open.
+- Combined focused suites: 50 tests, 50 pass, 0 fail, 0 skip.
+
+## Remaining gates
+
+Stable launcher templates in src/release-slot.mjs still bind CMD and PowerShell state to USERPROFILE/.deadbyte-mcp. Do not run candidate activation/remote/soak until isolated launch is proven; DEADBYTE_STATE_ROOT alone is insufficient.
+Guardian cleanup failure/timeout and PID lifecycle need behavioral RED fixtures before further changes.
+Full regression, Windows gate, adversarial lifecycle testing, local isolated-state acceptance, 4-hour soak, version bump, final manifests, package/registry verification and production rollback/restore have NOT run.
+No publication, deployment, production authority change or production fault injection was performed.
+
+Clean-OS/clean-machine proof was not performed; isolated-state acceptance and soak are still pending.
+
+## State-root checkpoint (observed 2026-09-30 UTC)
+
+Implemented shared state-root resolution, environment-aware updater entrypoints/trust defaults, explicit-root stable CMD/PowerShell launchers, and CLI/doctor/guardian root resolution. Original default remains home/.deadbyte-mcp. Launcher integrity checks are retained. Existing launcher contract test now asserts both default assignment and explicit-root dispatch instead of requiring the old hardcoded combined path.
+
+Behavioral RED: trust selected home instead of explicit root; PS launcher read a fabricated production pointer; CMD failed to dispatch isolated PS1. These cases now pass. Strengthened updater test demonstrates isolated corrupt-pointer rejection rather than inferring isolation from successful empty recovery.
+
+Additional confirmed guardian defect: failed cleanup returned success and deleted ownership evidence. New behavioral RED failed before repair; repair attempts all cleanup commands, retains marker and returns failure on any cleanup failure, checks session identity between cleanup commands, and adds a 30-second per-command timeout. Timeout and PID-reuse acceptance remain pending.
+
+Durable focused run: D:/Projects/deadbyte-mcp/testing/0.15.30/focused-run-1.
+Attempt 1, start 2026-09-30T17:49:19.481Z, end 2026-09-30T17:50:51.074Z.
+Result: 86 tests, 86 pass, 0 fail, 0 skip.
+
+ISOLATION SENTINEL: INCONCLUSIVE, NOT PASS.
+Before/after digest inventory (276 protected files) changed for runtime/process-grant.json, runtime/coding-grant.json, runtime/autonomous-grant.json and runtime/remote-session.json. Attribution is unresolved. This snapshot does not certify the earlier tests run before its capture.
+Read-only live status after the discrepancy: active version remains 0.15.29, release v0.15.29-f74eaa1b3d00e6fb; runtime PARKED; all five authority planes DISARMED. No resume/rearm was performed.
+Stop dependent acceptance/soak/activation pending attribution or an explicitly reconciled, stable production baseline. Do not overwrite the sentinel to erase the discrepancy.
+
+Additional release gate constraint: existing windows-gate-evidence-r52.mjs asserts old R52/version/source/runtime predecessor bindings. A 0.15.30 gate must verify the new exact predecessor and evidence rather than reuse these assertions as release proof.
+
+## Continued after owner restart
+
+Owner explicitly directed continuation after reopening production. Read-only status observed ONLINE; Process/Coding/Autonomous/Desktop/Host all ARMED. Active release and release/generation hashes still match the sealed 0.15.29 baseline. No production grant was changed by this continuation.
+
+New sentinel checkpoint-2 captured 278 protected artifacts, preserving checkpoint-1 and its unresolved discrepancy. Focused-run-2 passed 86/86, fail=0, skip=0; checkpoint-2 verification passed. This establishes only the new observed interval, not attribution of the earlier discrepancy.
+
+Two further behavioral RED cases were reproduced and repaired: explicit updater context root and explicit guardian root failed to override a different inherited parent environment in controller/cleanup child processes. Child environment now carries the selected root directly. The targeted updater/root suites passed 46/46; targeted guardian/updater/root cases passed 7/7.
+
+Focused-run-3 ran after these source mutations, with the new updater child-root test included. Status and output are durably recorded under D:/Projects/deadbyte-mcp/testing/0.15.30/focused-run-3. Check that result and sentinel before dependent gates; no duplicate run was launched.
+
+Production Host/Desktop ARMED is not compliant with the planned live acceptance contract. Do not silently change owner authority. Resolve permission to disarm these two planes before live acceptance; keep Process/Coding/Autonomous unchanged unless the agreed release transition requires revocation.
+Full regression, isolated functional acceptance, Windows release evidence adaptation, uninterrupted 4-hour soak, packaging, publishing and production rollback/restore remain pending. No STABLE/FINAL claim is authorized.

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.28",
-  "train": "R51",
+  "version": "0.15.30",
+  "train": "R53",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -11,14 +11,9 @@
   },
   "required": [
     {
-      "id": "r51-focused",
-      "command": "npm run r51:focused:test",
-      "expected": "PASS runtime coherence, command single-flight/result reuse, authority cleanup and live-log optimizer contracts"
-    },
-    {
-      "id": "r51-remote-session",
-      "command": "node --test test/remote-session-cli.test.mjs",
-      "expected": "PASS foreground lifecycle, Desktop/Host fail-closed cleanup, guardian and live timeline"
+      "id": "r53-focused",
+      "command": "npm run r53:focused:test",
+      "expected": "PASS stabilization contracts, runtime coherence, state-root propagation, guardian cleanup, SemVer and PowerShell environment behavior"
     },
     {
       "id": "package-boundary",
@@ -31,122 +26,80 @@
       "expected": "PASS"
     },
     {
-      "id": "capability-authority-truth",
-      "command": "node --test test/capability-resolver.test.mjs",
-      "expected": "PASS authority-state manifest truth"
-    },
-    {
-      "id": "compact-authority-truth",
-      "command": "node --test test/compact-max-catalog-r45.test.mjs",
-      "expected": "PASS real compact stdio authority-state manifest truth"
-    },
-    {
-      "id": "native-windows-observation",
-      "command": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1",
-      "expected": "PASS native Windows observation build/query gate"
-    },
-    {
-      "id": "r49-donor-proof",
-      "command": "node --test test/r49-remote-control-donors.test.mjs",
-      "expected": "PASS six pinned donor decisions"
-    },
-    {
-      "id": "r49-desktop-wait",
-      "command": "node --test test/desktop-runtime-r40.test.mjs test/desktop-mcp-tools-r40.test.mjs test/autonomous-desktop-r40.test.mjs",
-      "expected": "PASS bounded semantic wait and signed evidence"
-    },
-    {
-      "id": "r49-catalog",
-      "command": "npm run r48:catalog:test",
-      "expected": "PASS 117-tool full catalog; compact remains 43"
-    },
-    {
-      "id": "commander-hardening",
-      "command": "npm run r47:hardening:test",
+      "id": "full-regression",
+      "command": "npm run r48:full:test",
       "expected": "PASS"
     },
     {
-      "id": "commander-protocol-adversarial",
-      "command": "node --test test/commander-protocol-adversarial-r48.test.mjs",
-      "expected": "PASS malformed JSON, invalid request, unknown method/tool, duplicate IDs and concurrent correlation"
+      "id": "runtime-update",
+      "command": "node --test test/runtime-self-update.test.mjs",
+      "expected": "PASS"
     },
     {
-      "id": "r48-release",
-      "command": "npm run r48:release:test",
-      "expected": "PASS"
+      "id": "windows-gate",
+      "command": "npm run gate:windows",
+      "expected": "PASS R53 exact 0.15.29 predecessor binding and final 0.15.30 manifest"
     },
     {
-      "id": "full-regression",
-      "command": "npm run r48:full:test",
-      "expected": "PASS"
+      "id": "local-isolated-state-acceptance",
+      "command": "powershell -NoProfile -ExecutionPolicy Bypass -File D:/Projects/deadbyte-mcp/testing/0.15.30/local-isolated-acceptance.ps1",
+      "expected": "PASS with production sentinel unchanged"
     },
     {
-      "id": "runtime-update",
-      "command": "node --test test/runtime-self-update.test.mjs",
-      "expected": "PASS"
+      "id": "four-hour-soak",
+      "command": "owner override",
+      "expected": "NOT_COMPLETED_OPERATOR_BYPASS"
     },
     {
       "id": "audit",
       "command": "npm audit --omit=dev",
       "expected": "0 vulnerabilities"
     },
+    {
+      "id": "package-verify",
+      "command": "node scripts/npm-release-r48.mjs --verify-only",
+      "expected": "PASS manifest, package surface, isolated unpack version and doctor"
+    },
     {
       "id": "activation",
-      "command": "npx -y deadbyte-mcp@0.15.28 remote",
-      "expected": "active runtime auto-synchronizes to exact 0.15.28 package manifest before foreground readiness; no VERSION SKEW reuse"
+      "command": "npx --yes deadbyte-mcp@0.15.30 remote",
+      "expected": "active runtime synchronizes from exact sealed 0.15.29 to exact 0.15.30 package manifest"
     },
     {
       "id": "machine-truth",
       "command": "signed machine_ping",
-      "expected": "release_id and manifests bind activated 0.15.28 generation"
+      "expected": "release_id and manifests bind activated 0.15.30 generation"
     },
     {
       "id": "rollback-restore",
       "command": "immutable slot rollback/restore",
-      "expected": "0.15.28 -> exact 0.15.27 -> exact 0.15.28"
+      "expected": "0.15.30 -> exact 0.15.29 -> same exact 0.15.30"
     }
   ],
-  "focused_proof": {
-    "raw_mcp_protocol": {
-      "tests": 3,
-      "pass": 3,
-      "fail": 0
-    },
-    "commander_hardening": {
-      "tests": 139,
-      "pass": 139,
-      "fail": 0,
+  "observed_pre_release_evidence": {
+    "focused_before_version_finalize": {
+      "status": "PASS",
       "skip": 0
     },
-    "npm_audit_production_vulnerabilities": 0,
-    "r51_behavioral": {
-      "tests": 56,
-      "pass": 56,
-      "fail": 0,
-      "components": [
-        "release-contract",
-        "runtime-coherence",
-        "live-log-polling",
-        "coding-runtime",
-        "remote-live-log",
-        "remote-session-cli"
-      ]
+    "full_regression_before_version_finalize": {
+      "status": "PASS",
+      "batches": 8,
+      "test_files": 226,
+      "source_unchanged": true
+    },
+    "local_isolated_state_acceptance": {
+      "status": "PASS",
+      "production_sentinel_changed": 0,
+      "isolated_final_state": "OFFLINE",
+      "durable_task_verified": true,
+      "action_receipts_verified": 2
     }
   },
-  "predecessor_r48_full_regression_partition_proof": {
-    "files": 211,
-    "batches": 8,
-    "fail": 0,
-    "elapsed_ms": 196997.218,
-    "coding_task_id": "a1a10fff1520b37ac674f1861cd9e53e64e350d5a0766639036aefe5e096e235",
-    "task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
-    "action_receipt_sha256": "095c5eb4d959b9105a769649aa196a1d33f5097b899031dd16997e5ba1b352e6",
-    "not_valid_as_r50_proof": true
+  "operator_override": {
+    "four_hour_soak": "NOT_COMPLETED",
+    "stable_final_claim": false
   },
   "performance": {
-    "fresh_cross_reference_status": "PASS_PINNED_REFERENCE_RUNTIME",
-    "reason": "A test-only copy of the byte-pinned 0.2.51 reference was installed with scripts, audit, and dev dependencies disabled; production has no reference dependency.",
-    "historical_sample_only": false,
     "r51": {
       "coding_command_singleflight": true,
       "completed_result_cache": {
@@ -157,6 +110,11 @@
       "live_log_discovery_interval_ms": 1000,
       "max_audit_segments_polled": 2,
       "audit_json_parse_per_line": 1
+    },
+    "r52": {
+      "offline_predecessor_host_revoke_before_capture": true,
+      "status_reread_required": true,
+      "fail_closed_if_host_remains_armed": true
     }
   },
   "non_win32": {

package/controller/deadbyte-controller.ps1

@@ -920,7 +920,10 @@ function Arm-Host($Cfg) {
 
 function Disarm-Host($Cfg) {
     $meta = Get-HostPolicyMetadata $Cfg
-    Remove-Item -LiteralPath $meta.ArmFile -Force -ErrorAction SilentlyContinue
+    if (Test-Path -LiteralPath $meta.ArmFile) {
+        Remove-Item -LiteralPath $meta.ArmFile -Force -ErrorAction Stop
+    }
+    if (Test-Path -LiteralPath $meta.ArmFile) { throw 'Host authority revocation failed: grant remains present' }
     Write-Host 'PRIVILEGED HOST PLANE DISARMED'
 }
 

package/controller/deadbyte-desktop-policy.json

@@ -1,19 +1,19 @@
 {
     "schema":  "deadbyte.desktop-policy.v1",
     "enabled":  true,
-    "grant_file":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\controller\\runtime\\desktop-grant.json",
-    "evidence_dir":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\controller\\runtime\\desktop-evidence",
+    "grant_file":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\desktop-grant.json",
+    "evidence_dir":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\desktop-evidence",
     "observer":  {
-                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\bin\\deadbyte-desktop-observer-r40.exe",
+                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-observer-r40.exe",
                      "sha256":  "32671ef2b7decd68c25fcabfe064086e4b3f83a8e9d3558b9d6de3a2510c6dab",
                      "backend":  "gdi-bitblt-fallback"
                  },
     "input":  {
-                  "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\bin\\deadbyte-desktop-input-r40.exe",
+                  "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-input-r40.exe",
                   "sha256":  "0b967fd0ef599cbb9882b96ea16db7261f086dbcccae631b56f1bc2445a8ab5b"
               },
     "grounder":  {
-                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\bin\\deadbyte-desktop-uia-r40.exe",
+                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-uia-r40.exe",
                      "sha256":  "19ff558218fe8437dc04f50a8848756a8a83a84f73f464057562d77c7e19fb75"
                  },
     "allowed_input_desktops":  [

package/controller/deadbyte-host-policy.json

@@ -0,0 +1,170 @@
+{
+    "schema":  "deadbyte.host-policy.v2",
+    "enabled":  true,
+    "arm_file":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\host-arm.json",
+    "max_read_bytes":  262144,
+    "max_write_bytes":  1048576,
+    "roots":  {
+                  "core":  {
+                               "path":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization",
+                               "read":  true,
+                               "write":  true,
+                               "exec":  true
+                           },
+                  "bridge":  {
+                                 "path":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-chatgpt-bridge",
+                                 "read":  true,
+                                 "write":  true,
+                                 "exec":  true
+                             },
+                  "downloads":  {
+                                    "path":  "C:\\Users\\DEADBYTE\\Downloads",
+                                    "read":  true,
+                                    "write":  true,
+                                    "exec":  true
+                                },
+                  "projects":  {
+                                   "path":  "D:\\Projects",
+                                   "read":  true,
+                                   "write":  true,
+                                   "exec":  true
+                               }
+              },
+    "commands":  {
+                     "powershell_script":  {
+                                               "kind":  "script",
+                                               "executable":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+                                               "executable_sha256":  "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+                                               "root_ids":  [
+                                                                "core",
+                                                                "bridge",
+                                                                "downloads",
+                                                                "projects"
+                                                            ],
+                                               "prefix_args":  [
+                                                                   "-NoLogo",
+                                                                   "-NoProfile",
+                                                                   "-ExecutionPolicy",
+                                                                   "Bypass",
+                                                                   "-File"
+                                                               ],
+                                               "extensions":  [
+                                                                  ".ps1"
+                                                              ],
+                                               "timeout_ms":  120000,
+                                               "max_output_bytes":  1048576
+                                           },
+                     "cmd_script":  {
+                                        "kind":  "script",
+                                        "executable":  "C:\\WINDOWS\\system32\\cmd.exe",
+                                        "executable_sha256":  "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
+                                        "root_ids":  [
+                                                         "core",
+                                                         "bridge",
+                                                         "downloads",
+                                                         "projects"
+                                                     ],
+                                        "prefix_args":  [
+                                                            "/D",
+                                                            "/S",
+                                                            "/C"
+                                                        ],
+                                        "extensions":  [
+                                                           ".cmd",
+                                                           ".bat"
+                                                       ],
+                                        "timeout_ms":  120000,
+                                        "max_output_bytes":  1048576
+                                    },
+                     "node_script":  {
+                                         "kind":  "script",
+                                         "executable":  "C:\\Program Files\\nodejs\\node.exe",
+                                         "executable_sha256":  "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
+                                         "root_ids":  [
+                                                          "core",
+                                                          "bridge",
+                                                          "downloads",
+                                                          "projects"
+                                                      ],
+                                         "prefix_args":  [
+
+                                                         ],
+                                         "extensions":  [
+                                                            ".mjs",
+                                                            ".js"
+                                                        ],
+                                         "timeout_ms":  120000,
+                                         "max_output_bytes":  1048576
+                                     },
+                     "powershell_inline":  {
+                                               "kind":  "inline",
+                                               "executable":  "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+                                               "executable_sha256":  "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+                                               "root_ids":  [
+                                                                "core",
+                                                                "bridge",
+                                                                "downloads",
+                                                                "projects"
+                                                            ],
+                                               "prefix_args":  [
+                                                                   "-NoLogo",
+                                                                   "-NoProfile",
+                                                                   "-ExecutionPolicy",
+                                                                   "Bypass",
+                                                                   "-Command"
+                                                               ],
+                                               "timeout_ms":  120000,
+                                               "max_output_bytes":  1048576,
+                                               "max_command_chars":  32768
+                                           },
+                     "cmd_inline":  {
+                                        "kind":  "inline",
+                                        "executable":  "C:\\WINDOWS\\system32\\cmd.exe",
+                                        "executable_sha256":  "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
+                                        "root_ids":  [
+                                                         "core",
+                                                         "bridge",
+                                                         "downloads",
+                                                         "projects"
+                                                     ],
+                                        "prefix_args":  [
+                                                            "/D",
+                                                            "/S",
+                                                            "/C"
+                                                        ],
+                                        "timeout_ms":  120000,
+                                        "max_output_bytes":  1048576,
+                                        "max_command_chars":  32768
+                                    },
+                     "node_inline":  {
+                                         "kind":  "inline",
+                                         "executable":  "C:\\Program Files\\nodejs\\node.exe",
+                                         "executable_sha256":  "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
+                                         "root_ids":  [
+                                                          "core",
+                                                          "bridge",
+                                                          "downloads",
+                                                          "projects"
+                                                      ],
+                                         "prefix_args":  [
+                                                             "-e"
+                                                         ],
+                                         "timeout_ms":  120000,
+                                         "max_output_bytes":  1048576,
+                                         "max_command_chars":  32768
+                                     }
+                 },
+    "native_exec":  {
+                        "enabled":  true,
+                        "root_ids":  [
+                                         "core",
+                                         "bridge",
+                                         "downloads",
+                                         "projects"
+                                     ],
+                        "timeout_ms":  120000,
+                        "max_output_bytes":  1048576,
+                        "max_args":  64,
+                        "max_arg_chars":  8192
+                    }
+}

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev\\bin\\deadbyte-process-host.exe",
-    "sha256": "59ea2026c39a1266c0d645a4cf39d7955ac2cf905f7cda812f546dfc9de636fb"
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-process-host.exe",
+    "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R51-PROVENANCE.json

@@ -0,0 +1,18 @@
+{
+  "schema": "deadbyte.provenance.v1",
+  "version": "0.15.28",
+  "builder": "deadbyte-r51-runtime-coherence-singleflight-livelog-hardening",
+  "source_model": "immutable published 0.15.27 parent -> registry SHA-1/local tarball byte identity -> VERSION SKEW RED -> runtime/package auto-coherence -> coding command single-flight/result dedup -> Desktop/Host foreground fail-closed cleanup -> bounded single-parse live logs -> focused GREEN -> full R51 regression -> MANIFEST.SHA256 -> isolated npm artifact -> immutable release slot -> signed machine truth",
+  "signing": "ed25519",
+  "parent_release_id": "v0.15.27-1b1dbe24b45ad06a",
+  "parent_manifest_sha256": "1b1dbe24b45ad06a62771d15f510662952f3d7c3e5aa08053c6c61511c523e47",
+  "parent_generation_manifest_sha256": "f87a1637b3c55ba050d079d8a5e0862a2244b306be7e985880708e0d8ded3db0",
+  "source_predecessor_version": "0.15.27",
+  "source_predecessor_tarball_sha256": "e728031d097d8678dfef80f8648cce65e72a96611052c31969c80f884506d1d7",
+  "source_predecessor_manifest_file_sha256": "1b1dbe24b45ad06a62771d15f510662952f3d7c3e5aa08053c6c61511c523e47",
+  "commander_reference_version": "0.2.51",
+  "commander_reference_server_sha256": "dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305",
+  "commander_reference_schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140",
+  "predecessor_r48_full_regression_task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
+  "reproducibility": "candidate source bound to exact immutable published 0.15.27 predecessor; R51 focused coherence/single-flight/livelog proofs plus fresh full regression, manifest, package isolation, registry round-trip and activation machine truth are mandatory before release"
+}