deadbyte-mcp 0.15.39 → 0.15.42

package/controller/deadbyte-controller.ps1

@@ -937,6 +937,47 @@ function Assert-PolicyRootsAvailable($Policy, [string]$Plane) {
     return $rootIds
 }
 
+function Get-AuthorityEpochStatus($Cfg, [string]$Plane, [string]$GrantFile, [string]$GrantNonce) {
+    if ([string]::IsNullOrWhiteSpace($GrantNonce) -or $GrantNonce -cnotmatch '^[0-9a-f]{64}$') {
+        return [pscustomobject]@{ Trusted=$false; Reason='epoch-grant-nonce-invalid'; Seq=$null; Action=$null; EventSha256=$null }
+    }
+    try {
+        $verified = Invoke-AuthorityEpochCommand $Cfg $Plane 'status' $GrantFile
+        if (-not $verified.trusted) {
+            return [pscustomobject]@{ Trusted=$false; Reason=[string]$verified.reason; Seq=$verified.seq; Action=$verified.action; EventSha256=$verified.event_sha256 }
+        }
+        return [pscustomobject]@{ Trusted=$true; Reason=[string]$verified.reason; Seq=$verified.seq; Action=$verified.action; EventSha256=$verified.event_sha256 }
+    } catch {
+        return [pscustomobject]@{ Trusted=$false; Reason='authority-epoch-verifier-unavailable'; Seq=$null; Action=$null; EventSha256=$null }
+    }
+}
+
+function Invoke-AuthorityEpochCommand($Cfg, [string]$Plane, [string]$Action, [string]$GrantFile, [string]$UpdateId = '', [string]$ExpectedHead = '') {
+    $cli = Join-Path ([string]$Cfg.CoreRoot) 'src\authority-epoch-cli-r65.mjs'
+    if (-not (Test-Path -LiteralPath $cli -PathType Leaf)) { Fail "authority epoch CLI missing: $cli" }
+    $node = [string]$Cfg.Bridge.FilePath
+    if ([string]::IsNullOrWhiteSpace($node) -or -not (Test-Path -LiteralPath $node -PathType Leaf)) { Fail 'authority epoch Node executable unavailable' }
+    $policyFile = switch ($Plane) {
+        'process' { [string]$Cfg.ProcessPolicyFile }
+        'coding' { [string]$Cfg.CodingPolicyFile }
+        'autonomous' { [string]$Cfg.AutonomousPolicyFile }
+        'desktop' { [string]$Cfg.DesktopPolicyFile }
+        'host' { [string]$Cfg.HostPolicyFile }
+        default { Fail "authority epoch plane invalid: $Plane" }
+    }
+    if ([string]::IsNullOrWhiteSpace($policyFile) -or -not (Test-Path -LiteralPath $policyFile -PathType Leaf)) { Fail "authority epoch policy unavailable for $Plane" }
+    $args = @($cli, $Action, '--plane', $Plane, '--grant-file', $GrantFile, '--policy-file', $policyFile)
+    if ($Action -in @('transaction-revoke','transaction-restore')) {
+        if ([string]::IsNullOrWhiteSpace($UpdateId) -or $ExpectedHead -cnotmatch '^[0-9a-f]{64}$') { Fail 'authority epoch transaction binding invalid' }
+        $args += @('--update-id', $UpdateId, '--expected-head', $ExpectedHead)
+    }
+    $output = @(& $node @args)
+    $exit = $LASTEXITCODE
+    if ($exit -ne 0) { Fail "authority epoch command '$Action' failed for $Plane (exit=$exit)" }
+    try { return (($output -join [Environment]::NewLine) | ConvertFrom-Json) }
+    catch { Fail "authority epoch command '$Action' returned invalid JSON for $Plane" }
+}
+
 function Get-HostPolicyMetadata($Cfg) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.HostPolicyFile)) { Fail 'privileged host plane is not configured' }
     $policyPath = [string]$Cfg.HostPolicyFile
@@ -961,7 +1002,10 @@ function Get-HostArmStatus($Cfg) {
     try { $arm = Get-Content -LiteralPath $meta.ArmFile -Raw -Encoding UTF8 | ConvertFrom-Json } catch { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='invalid-grant' } }
     if ($arm.schema -ne 'deadbyte.host-grant.v2') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='grant-schema' } }
     if ([string]$arm.policy_sha256 -ne [string]$meta.Sha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='policy-digest' } }
-    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant' }
+    if ([string]$arm.instance_nonce -cnotmatch '^[0-9a-f]{64}$') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='nonce-invalid' } }
+    $epoch = Get-AuthorityEpochStatus $Cfg 'host' $meta.ArmFile ([string]$arm.instance_nonce)
+    if (-not $epoch.Trusted) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=[string]$epoch.Reason } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
 function Arm-Host($Cfg) {
@@ -981,15 +1025,23 @@ function Arm-Host($Cfg) {
     $tmp = $meta.ArmFile + '.tmp'
     $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
     Move-Item -LiteralPath $tmp -Destination $meta.ArmFile -Force
+    try { Invoke-AuthorityEpochCommand $Cfg 'host' 'grant' $meta.ArmFile | Out-Null }
+    catch {
+        Remove-Item -LiteralPath $meta.ArmFile -Force -ErrorAction SilentlyContinue
+        throw
+    }
     Write-Host 'PRIVILEGED HOST PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
 function Disarm-Host($Cfg) {
     $meta = Get-HostPolicyMetadata $Cfg
+    $epochError = $null
     if (Test-Path -LiteralPath $meta.ArmFile) {
-        Remove-Item -LiteralPath $meta.ArmFile -Force -ErrorAction Stop
+        try { Invoke-AuthorityEpochCommand $Cfg 'host' 'user-revoke' $meta.ArmFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $meta.ArmFile -Force -ErrorAction SilentlyContinue
     }
     if (Test-Path -LiteralPath $meta.ArmFile) { throw 'Host authority revocation failed: grant remains present' }
+    if ($null -ne $epochError) { throw $epochError }
     Write-Host 'PRIVILEGED HOST PLANE DISARMED'
 }
 
@@ -1021,10 +1073,13 @@ function Get-ProcessGrantStatus($Cfg) {
     try { $grant = Get-Content -LiteralPath $meta.GrantFile -Raw -Encoding UTF8 | ConvertFrom-Json } catch { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='invalid-grant' } }
     if ($grant.schema -ne 'deadbyte.process-grant.v1') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='grant-schema' } }
     if ([string]$grant.policy_sha256 -ne [string]$meta.Sha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='policy-digest' } }
+    if ([string]$grant.instance_nonce -cnotmatch '^[0-9a-f]{64}$') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='nonce-invalid' } }
     $profiles = @($grant.profile_ids); $roots = @($grant.root_ids)
     if ($profiles.Count -lt 1 -or @($profiles | Where-Object { $_ -notin $meta.ProfileIds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='profiles-invalid' } }
     if ($roots.Count -lt 1 -or @($roots | Where-Object { $_ -notin $meta.RootIds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='roots-invalid' } }
-    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant' }
+    $epoch = Get-AuthorityEpochStatus $Cfg 'process' $meta.GrantFile ([string]$grant.instance_nonce)
+    if (-not $epoch.Trusted) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=[string]$epoch.Reason } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
 function Arm-Process($Cfg) {
@@ -1045,12 +1100,23 @@ function Arm-Process($Cfg) {
     $tmp = $meta.GrantFile + '.tmp'
     $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
     Move-Item -LiteralPath $tmp -Destination $meta.GrantFile -Force
+    try { Invoke-AuthorityEpochCommand $Cfg 'process' 'grant' $meta.GrantFile | Out-Null }
+    catch {
+        Remove-Item -LiteralPath $meta.GrantFile -Force -ErrorAction SilentlyContinue
+        throw
+    }
     Write-Host 'PROCESS PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
 function Disarm-Process($Cfg) {
     $meta = Get-ProcessPolicyMetadata $Cfg
-    Remove-Item -LiteralPath $meta.GrantFile -Force -ErrorAction SilentlyContinue
+    $epochError = $null
+    if (Test-Path -LiteralPath $meta.GrantFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'process' 'user-revoke' $meta.GrantFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $meta.GrantFile -Force -ErrorAction SilentlyContinue
+    }
+    if (Test-Path -LiteralPath $meta.GrantFile) { throw 'Process authority revocation failed: grant remains present' }
+    if ($null -ne $epochError) { throw $epochError }
     Write-Host 'PROCESS PLANE DISARMED'
 }
 
@@ -1080,9 +1146,12 @@ function Get-CodingLeaseStatus($Cfg) {
     try { $lease = Get-Content -LiteralPath $meta.LeaseFile -Raw -Encoding UTF8 | ConvertFrom-Json } catch { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='invalid-grant' } }
     if ($lease.schema -ne 'deadbyte.coding-grant.v2') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='grant-schema' } }
     if ([string]$lease.policy_sha256 -ne [string]$meta.Sha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='policy-digest' } }
+    if ([string]$lease.instance_nonce -cnotmatch '^[0-9a-f]{64}$') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='nonce-invalid' } }
     $roots = @($lease.root_ids)
     if ($roots.Count -lt 1 -or @($roots | Where-Object { $_ -notin $meta.RootIds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='roots-invalid' } }
-    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant' }
+    $epoch = Get-AuthorityEpochStatus $Cfg 'coding' $meta.LeaseFile ([string]$lease.instance_nonce)
+    if (-not $epoch.Trusted) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=[string]$epoch.Reason } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
 function Arm-Coding($Cfg) {
@@ -1103,13 +1172,27 @@ function Arm-Coding($Cfg) {
     $tmp = $meta.LeaseFile + '.tmp'
     $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
     Move-Item -LiteralPath $tmp -Destination $meta.LeaseFile -Force
+    try { Invoke-AuthorityEpochCommand $Cfg 'coding' 'grant' $meta.LeaseFile | Out-Null }
+    catch {
+        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+        throw
+    }
     Write-Host 'CODING PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
 function Disarm-Coding($Cfg) {
     $meta = Get-CodingPolicyMetadata $Cfg
-    Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
-    try { Disarm-Autonomous $Cfg -Quiet } catch { Write-Warning "autonomous lease cleanup failed after coding revocation: $($_.Exception.Message)" }
+    $epochError = $null
+    if (Test-Path -LiteralPath $meta.LeaseFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'coding' 'user-revoke' $meta.LeaseFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+    }
+    try { Disarm-Autonomous $Cfg -Quiet } catch {
+        if ($null -eq $epochError) { $epochError = $_.Exception }
+        else { Write-Warning "autonomous lease cleanup failed after coding revocation: $($_.Exception.Message)" }
+    }
+    if (Test-Path -LiteralPath $meta.LeaseFile) { throw 'Coding authority revocation failed: grant remains present' }
+    if ($null -ne $epochError) { throw $epochError }
     Write-Host 'CODING PLANE DISARMED; AUTONOMOUS AUTHORITY REVOKED'
 }
 
@@ -1145,9 +1228,12 @@ function Get-AutonomousLeaseStatus($Cfg) {
     if ($lease.schema -ne 'deadbyte.autonomous-grant.v2') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='grant-schema' } }
     if ([string]$lease.policy_sha256 -ne [string]$meta.Sha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='policy-digest' } }
     if ([string]$lease.coding_policy_sha256 -ne [string]$meta.CodingPolicySha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='coding-policy-digest' } }
+    if ([string]$lease.instance_nonce -cnotmatch '^[0-9a-f]{64}$') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='nonce-invalid' } }
     $roots = @($lease.root_ids)
     if ($roots.Count -lt 1 -or @($roots | Where-Object { $_ -notin $meta.RootIds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='roots-invalid' } }
-    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant' }
+    $epoch = Get-AuthorityEpochStatus $Cfg 'autonomous' $meta.LeaseFile ([string]$lease.instance_nonce)
+    if (-not $epoch.Trusted) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=[string]$epoch.Reason } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
 function Arm-Autonomous($Cfg) {
@@ -1164,13 +1250,24 @@ function Arm-Autonomous($Cfg) {
     $tmp = $meta.LeaseFile + '.tmp'
     $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
     Move-Item -LiteralPath $tmp -Destination $meta.LeaseFile -Force
+    try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'grant' $meta.LeaseFile | Out-Null }
+    catch {
+        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+        throw
+    }
     Write-Host 'AUTONOMOUS PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
 function Disarm-Autonomous($Cfg, [switch]$Quiet) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) { return }
     $meta = Get-AutonomousPolicyMetadata $Cfg
-    Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+    $epochError = $null
+    if (Test-Path -LiteralPath $meta.LeaseFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'user-revoke' $meta.LeaseFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+    }
+    if (Test-Path -LiteralPath $meta.LeaseFile) { throw 'Autonomous authority revocation failed: grant remains present' }
+    if ($null -ne $epochError) { throw $epochError }
     if (-not $Quiet) { Write-Host 'AUTONOMOUS PLANE DISARMED' }
 }
 
@@ -1244,7 +1341,9 @@ function Get-DesktopGrantStatus($Cfg) {
     $unique = @($actions | Sort-Object -Unique)
     if ($actions.Count -lt 1 -or $actions.Count -ne $unique.Count) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='actions-invalid'; ActionKinds=@() } }
     if (@($actions | Where-Object { $_ -notin $meta.ActionKinds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='actions-outside-policy'; ActionKinds=@() } }
-    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; ActionKinds=$actions }
+    $epoch = Get-AuthorityEpochStatus $Cfg 'desktop' $meta.GrantFile ([string]$grant.instance_nonce)
+    if (-not $epoch.Trusted) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=[string]$epoch.Reason; ActionKinds=$actions } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; ActionKinds=$actions; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
 function Arm-Desktop($Cfg) {
@@ -1265,13 +1364,24 @@ function Arm-Desktop($Cfg) {
     $tmp = $meta.GrantFile + '.tmp'
     $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
     Move-Item -LiteralPath $tmp -Destination $meta.GrantFile -Force
+    try { Invoke-AuthorityEpochCommand $Cfg 'desktop' 'grant' $meta.GrantFile | Out-Null }
+    catch {
+        Remove-Item -LiteralPath $meta.GrantFile -Force -ErrorAction SilentlyContinue
+        throw
+    }
     Write-Host ("DESKTOP PLANE ENABLED UNTIL EXPLICIT REVOKE [{0}]" -f ($meta.ActionKinds -join ','))
 }
 
 function Disarm-Desktop($Cfg, [switch]$Quiet) {
     $grantFile = Get-DesktopGrantFileForRevoke $Cfg
     if ([string]::IsNullOrWhiteSpace([string]$grantFile)) { return }
-    Remove-Item -LiteralPath $grantFile -Force -ErrorAction SilentlyContinue
+    $epochError = $null
+    if (Test-Path -LiteralPath $grantFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'desktop' 'user-revoke' $grantFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $grantFile -Force -ErrorAction SilentlyContinue
+    }
+    if (Test-Path -LiteralPath $grantFile) { throw 'Desktop authority revocation failed: grant remains present' }
+    if ($null -ne $epochError) { throw $epochError }
     if (-not $Quiet) { Write-Host 'DESKTOP PLANE DISARMED' }
 }
 
@@ -1346,7 +1456,17 @@ function Convert-OwnedObservation($Owned) {
 }
 
 function Convert-AuthorityObservation($Authority) {
-    [ordered]@{ configured=[bool]$Authority.Configured; armed=[bool]$Authority.Armed; reason=(Get-BoundedObservationReason $Authority.Reason) }
+    $out = [ordered]@{ configured=[bool]$Authority.Configured; armed=[bool]$Authority.Armed; reason=(Get-BoundedObservationReason $Authority.Reason) }
+    $seqProp = $Authority.PSObject.Properties['EpochSeq']
+    $shaProp = $Authority.PSObject.Properties['EpochSha256']
+    if ($null -ne $seqProp -or $null -ne $shaProp) {
+        if ($null -eq $seqProp -or $null -eq $shaProp -or [int64]$seqProp.Value -lt 1 -or [string]$shaProp.Value -cnotmatch '^[0-9a-f]{64}$') {
+            Fail 'authority epoch observation incomplete or invalid'
+        }
+        $out['epoch_seq'] = [int64]$seqProp.Value
+        $out['epoch_sha256'] = [string]$shaProp.Value
+    }
+    return $out
 }
 
 function Get-DownstreamCoreObservation($Cfg, $Bridge) {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R64-EVIDENCE.json

@@ -0,0 +1,95 @@
+{
+  "schema": "deadbyte.r64-evidence.v1",
+  "source_predecessor_manifest_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
+  "red": {
+    "command": "node --test test/r64-machine-fs-large-read.test.mjs",
+    "tests": 2,
+    "failed": 2,
+    "raw_reproduction": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\predecessor-red-reproduced.log",
+    "raw_reproduction_note": "Fresh post-change re-execution against immutable R63 predecessor; original pre-edit console RED was observed but its raw output was not persisted",
+    "observed_boundaries": [
+      "Full machine_fs_read schema rejected offset=4194306",
+      "Runtime rejected page-two next_offset=4194306 with machine fs read offset must be in [-4194304, 4194304]"
+    ]
+  },
+  "green": {
+    "command": "node --test test/r64-machine-fs-large-read.test.mjs",
+    "tests": 8,
+    "passed": 8,
+    "raw_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-behavior-green.log",
+    "focused_command": "npm run r64:focused:test",
+    "focused_tests": 42,
+    "focused_passed": 42
+  },
+  "inherited_failures_repaired_in_r64_only": [
+    "R63 source included a 0.15.39 npm tarball; R64 copy moved to testing evidence without changing R63",
+    "R63 process policy remained bound to R62 path; R64 copy repinned to its own root",
+    "R63 README still advertised 0.15.39; R64 package documentation now identifies 0.15.41",
+    "Historical R59 tool surface expected no schema changes; R64 test now requires only the authorized machine_fs input change",
+    "Historical R62 contract asserted current package=0.15.39 even on R63; version-scoped historical contract retained"
+  ],
+  "full_regression_pre_final_seal": {
+    "command": "npm test",
+    "tests": 1272,
+    "passed": 1232,
+    "skipped": 40,
+    "failed": 0,
+    "log_path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\full-regression-1.log",
+    "log_sha256": "c45f4295f745b5c6674aa8f742268d35c5c922bf5a3a2dafa4bbde48ed729871"
+  },
+  "benchmark_pre_final_seal": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\read-benchmark-v2.json",
+    "sha256": "ba5455687e2233ebfe4516ca50f8c319e70c6393b8b6258fd95d154b79518614",
+    "alternating_rounds": 7,
+    "read_ops_per_round": 400,
+    "errors": 0,
+    "median_before_ops_per_second": 3059.36,
+    "median_after_ops_per_second": 3173.65,
+    "median_before_p95_ms": 1.9078,
+    "median_after_p95_ms": 1.9296,
+    "median_before_control_p95_ms": 0.6386,
+    "median_after_control_p95_ms": 0.6086,
+    "limitation": "direct runtime and governor with local scratch I/O, not full public MCP transport; per-round variation remains"
+  },
+  "benchmark_cross_boundary": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\read-benchmark-after-cancel.json",
+    "rounds": 7,
+    "r63_page_two": "rejected in every round",
+    "r64_page_two": "passed in every round at offset 4259840",
+    "median_before_small_page_ops_per_second": 2632.13,
+    "median_after_small_page_ops_per_second": 2624.96,
+    "median_before_small_page_p95_ms": 2.35,
+    "median_after_small_page_p95_ms": 2.32,
+    "control_probe_limitation": "local governor read/hash probe, not actual public machine_ping or machine_status",
+    "hash_file_cancellation": "R64 read timeout now aborts the default SHA-256 stream; focused source invariant and injected-worker timeout GREEN"
+  },
+  "real_control_under_bulk_benchmark": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\real-control-after-cancel.json",
+    "rounds": 7,
+    "calls_per_round": 400,
+    "median_r63_control_p95_ms": 3.96,
+    "median_r64_control_p95_ms": 3.85,
+    "limitation": "signed machine runtime ping/status under concurrent local bulk reads; not public MCP transport"
+  },
+  "hash_file_cancellation_red_green": {
+    "red_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-red-2.log",
+    "red": "default createReadStream lacked an abort signal",
+    "green_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-behavior-green.log",
+    "green": "8/8 focused tests pass; injected default hash stream observed abort on timeout"
+  },
+  "production_mutation": false,
+  "publish_or_activate": false,
+  "windows_preflight_repair": {
+    "red": "npm run gate:windows exited 1 because inherited Windows PowerShell environment did not resolve Get-FileHash at R64 source manifest check",
+    "change": "Compute SHA-256 with built-in .NET cryptography without PowerShell module discovery",
+    "green": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r64-prepublish.ps1 -Stage preflight exited 0 and verified exact R63 source manifest"
+  },
+  "windows_gate": {
+    "status": "PASS_PREPACKAGE",
+    "log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\windows-gate-final-2.log",
+    "focused": "40/40",
+    "full_regression": "1233 pass / 40 documented skip / 0 fail",
+    "doctor": "PASS with isolated empty state; production foreground process identity observation was inaccessible and production was not modified"
+  },
+  "package_verify_only": "PENDING"
+}

package/docs/R64-REFERENCE-GAP-MATRIX.json

@@ -0,0 +1,98 @@
+{
+  "schema": "deadbyte.reference-gap-matrix.v1",
+  "train": "R64",
+  "method": "Local read-only source comparison; ideas only, no donor source bytes copied",
+  "references": [
+    {
+      "reference": "better-remote-commander",
+      "subsystem": "remote transport",
+      "behavior": "Correlates calls and results by ID, replaces stale device sockets, and uses heartbeat supervision",
+      "evidence_paths": ["better-remote-commander/packages/relay/src/device-hub.ts"],
+      "deadbyte_equivalent": ["bridge/src/remote-dispatch-r60.mjs", "bridge/src/reconnect-delay-r60.mjs", "src/remote-result-journal.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Relay socket identity alone would weaken durable mutation claim semantics",
+      "performance_implications": "No demonstrated R64 hot-path gain",
+      "license_attribution": "README declares MIT, but no bytes copied",
+      "proposed_action": "KEEP-OURS: retain durable claim and no-blind-replay behavior",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "cua",
+      "subsystem": "desktop lifecycle",
+      "behavior": "Separates session lifecycle from authority and requires fresh observation after actuation",
+      "evidence_paths": ["cua/rfcs/3007-cua-driver-lifecycle-sessions.md", "cua/rfcs/3682-typed-native-window-sdk.md"],
+      "deadbyte_equivalent": ["src/desktop-runtime-r40.mjs", "src/desktop-contract.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Public session labels must not become authority; no desktop expansion in R64",
+      "performance_implications": "Not on the selected file-read path",
+      "license_attribution": "Component-specific licenses; architecture only, no bytes copied",
+      "proposed_action": "KEEP-OURS: retain snapshot-bound actuation and independent verification",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "desktop-commander",
+      "subsystem": "bounded presentation history",
+      "behavior": "Caps stored output per entry and on-disk history size",
+      "evidence_paths": ["desktop-commander/dist/utils/toolHistory.js"],
+      "deadbyte_equivalent": ["src/workload-substrate.mjs", "src/remote-result-journal.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Presentation retention cannot replace signed evidence",
+      "performance_implications": "Bounded memory is already enforced in current stream and journal primitives",
+      "license_attribution": "Root LICENSE is MIT; no bytes copied",
+      "proposed_action": "KEEP-OURS: preserve separate bounded presentation and durable evidence",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "open-remote-mcp",
+      "subsystem": "authority",
+      "behavior": "Relay policy can narrow but cannot widen local device authority",
+      "evidence_paths": ["open-remote-mcp/docs/ARCHITECTURE.md", "open-remote-mcp/apps/server/src/lib/security.ts"],
+      "deadbyte_equivalent": ["src/coding-plane.mjs", "bridge/src/remote-dispatch-r60.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Local policy remains the final enforcement authority",
+      "performance_implications": "No read-path optimization",
+      "license_attribution": "README declares MIT; NOTICE.md retained in reference; no bytes copied",
+      "proposed_action": "KEEP-OURS: no relay-created root or grant",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "remcp",
+      "subsystem": "large-file reading",
+      "behavior": "read_binary accepts offsets beyond one chunk and returns a next byte offset",
+      "evidence_paths": ["remcp/packages/runtime/src/tools/files.mjs:readBinaryTool", "remcp/packages/runtime/src/catalog.mjs"],
+      "deadbyte_equivalent": ["src/machine-fs.mjs:readRange", "src/machine-fs-mcp-tools.mjs", "src/compact-gateway-mcp-tools.mjs"],
+      "deadbyte_state": "weaker",
+      "security_implications": "Widen only positional offset; keep per-call byte cap, root and authority enforcement",
+      "performance_implications": "Enables bounded paging of files over 4 MiB without whole-file buffering",
+      "license_attribution": "Runtime LICENSE is MIT; behavior reimplemented independently",
+      "proposed_action": "ADAPT: allow safe positive next_offset while preserving the existing read schema shape",
+      "priority": "P0"
+    },
+    {
+      "reference": "secure-host-mcp",
+      "subsystem": "workspace and process",
+      "behavior": "Bounds workspace reads and command output; tracks cancelable jobs",
+      "evidence_paths": ["secure-host-mcp/src/workspace.ts", "secure-host-mcp/src/executor.ts", "secure-host-mcp/test/workspace.test.ts"],
+      "deadbyte_equivalent": ["src/machine-fs.mjs", "src/process-runtime.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Generic command strings and caller environment would widen DEADBYTE authority",
+      "performance_implications": "Current read/output limits already bound retained bytes",
+      "license_attribution": "README displays MIT badge, root license file absent in local corpus; no bytes copied",
+      "proposed_action": "KEEP-OURS: retain policy-pinned commands and separate process authority",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "winremote-mcp",
+      "subsystem": "Windows privilege tiers",
+      "behavior": "Requires authenticated remote transport before exposing high-risk tier-3 controls",
+      "evidence_paths": ["winremote-mcp/src/winremote/tiers.py", "winremote-mcp/tests/test_security_hardening.py"],
+      "deadbyte_equivalent": ["src/desktop-policy-r40.mjs", "src/coding-plane.mjs", "bridge/src/remote-dispatch-r60.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Broad tier-3 shell/file authority would weaken independently revocable planes",
+      "performance_implications": "Not on selected read path",
+      "license_attribution": "README declares MIT, root license file absent in local corpus; no bytes copied",
+      "proposed_action": "KEEP-OURS: retain fine-grained local planes, not broad capability tiers",
+      "priority": "SKIP"
+    }
+  ]
+}

package/docs/R64-SCOPE.json

@@ -0,0 +1,41 @@
+{
+  "schema": "deadbyte.r64-scope.v1",
+  "task_id": "deadbyte-r64-large-file-read",
+  "version_target": "0.15.41",
+  "train": "R64",
+  "source_predecessor": {
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.40-r63",
+    "version": "0.15.40",
+    "manifest_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
+    "manifest_file_count": 2227,
+    "release_status": "not proven published or activated"
+  },
+  "runtime_predecessor": {
+    "release_id": "v0.15.39-3cda3b1c65b7b7c5",
+    "manifest_sha256": "3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de",
+    "generation_manifest_sha256": "f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab"
+  },
+  "selected_work": [
+    "Permit machine_fs_read positive offsets through Number.MAX_SAFE_INTEGER, subject to actual file size",
+    "Apply the same numeric-bound widening in full and compact inputs without changing tool names, field names or per-call max_bytes",
+    "Document that independent pages are not an atomic whole-file snapshot",
+    "Abort default hash_file streaming when a bounded read times out; retain existing timeout and authority semantics"
+  ],
+  "rejected_work": [
+    "New file-transfer tool or chunked mutation protocol: out of scope and new authority surface",
+    "Generic remote shell, broad privilege tiers and donor subsystem ports: weaker authority model",
+    "Changing negative tail offset bounds or read length caps: unnecessary for the reproduced defect"
+  ],
+  "acceptance_criteria": [
+    "RED test proves both schema and runtime reject page two solely because offset exceeds 4 MiB",
+    "GREEN test reads page two using returned next_offset while per-call length remains capped",
+    "Invalid/unsafe offsets, out-of-file offsets, denied roots and changed-file pages are handled explicitly",
+    "Focused, full regression, Windows gate, manifest, doctor, benchmark and verify-only package gates pass on exact R64 bytes",
+    "Hashing on the default read path receives an abort signal bound to timeout"
+  ],
+  "public_surface_delta": "0 new tools; same compact 43-tool names; existing read offset numeric maximum widens only",
+  "authority_delta": "none",
+  "assurance_mode": "MATERIAL",
+  "acceptance_environment": "local production Windows host; isolated candidate and scratch files; production runtime untouched",
+  "stop_condition": "RELEASE_READY only after every prepublish gate; never publish or activate"
+}

package/docs/R65-AUTHORITY-CONTINUITY-DESIGN.json

@@ -0,0 +1,27 @@
+{
+  "schema": "deadbyte.r65-authority-continuity-design.v1",
+  "status": "PARTIAL_IMPLEMENTATION",
+  "authority": "Current R65 candidate source and read-only R64 generation policies; production remains immutable.",
+  "observed_contracts": {
+    "controller": "controller/deadbyte-controller.ps1 Get-*GrantStatus checks schema and policy_sha256; Process/Coding/Autonomous/Desktop additionally carry scope and instance_nonce; Host carries nonce but no explicit scope.",
+    "process": "src/process-policy.mjs rechecks policy hash, nonce, profile_ids and root_ids; grant schema deadbyte.process-grant.v1.",
+    "coding": "src/coding-plane.mjs rechecks policy hash, nonce and root_ids; standing grant schema deadbyte.coding-grant.v2.",
+    "autonomous": "controller/deadbyte-controller.ps1 requires a Coding grant, coding_policy_sha256 and root_ids; grant schema deadbyte.autonomous-grant.v2.",
+    "desktop": "src/desktop-policy-r40.mjs and controller validate policy hash, nonce and action_kinds; grant schema deadbyte.desktop-grant.v1.",
+    "host": "controller/deadbyte-controller.ps1 validates policy hash; grant schema deadbyte.host-grant.v2 includes instance_nonce and granted_at_utc but no scoped IDs.",
+    "revocation": "R64 controller arm/disarm replace/delete grant files but expose no durable monotonic per-plane revocation epoch or transaction-owned temporary revoke. An absent grant after temporary revoke cannot prove no independent user revoke occurred."
+  },
+  "selected_method": {
+    "policy_envelope": "Derive canonical authority-bearing fields from each known policy schema; omit only operational grant/evidence storage paths and presentation descriptions. Unknown fields fail closed. Raw policy SHA remains evidence, not the sole ceiling comparator.",
+    "comparison": "EQUAL, NARROWER, WIDER, UNVERIFIED. Added capabilities, relaxed deny rules and larger ceilings are WIDER. Changed executable/native pins or disjoint roots are UNVERIFIED. Both deny automatic restoration.",
+    "r64_predecessor_continuity": "Because R64 has no durable revocation epoch, an armed predecessor cannot receive automatic cross-generation restoration. Outcome must be REAUTH_REQUIRED and disarmed unless a later explicit user grant is observed.",
+    "updater_boundary": "One restoration engine is required. The current inner updater's Process/Coding/Autonomous re-arm must be disabled or constrained by a verified continuity plan before any R65 activation with standing authority is permitted.",
+    "current_safety_guard": "scripts/deploy-r48.mjs --preflight returns AUTHORITY_POLICY_UNVERIFIED for armed vectors before opening an update transaction. This guard must not be removed until continuity integration is proven."
+  },
+  "acceptance_open": [
+    "Read-only capture of exact grant bytes and scope, bound to predecessor release/generation and candidate manifest.",
+    "Durable transaction-owned revocation epoch with crash-safe exclusion of external revocation/replacement.",
+    "Single restoration decision path across updater and deploy; separate runtime and authority outcomes.",
+    "Isolated end-to-end activation, interruption, rollback and independent receipt verification."
+  ]
+}

package/docs/R65-REFERENCE-GAP-MATRIX.json

@@ -0,0 +1,22 @@
+{
+  "schema": "deadbyte.r65-reference-gap-matrix.v1",
+  "purpose": "Release/control-plane mechanisms only; donor source is read-only and no donor bytes are copied.",
+  "license_review": {
+    "better-remote-commander": "package.json declares MIT; no source bytes copied",
+    "cua": "pyproject.toml declares MIT; no source bytes copied",
+    "desktop-commander": "root LICENSE declares MIT; no source bytes copied",
+    "open-remote-mcp": "no root LICENSE or package declaration confirmed in this pass; architecture principle only, no source bytes copied",
+    "remcp": "package.json declares MIT; no source bytes copied",
+    "secure-host-mcp": "package.json declares MIT; no source bytes copied",
+    "winremote-mcp": "pyproject.toml declares MIT; no source bytes copied"
+  },
+  "decisions": [
+    {"reference":"better-remote-commander","evidence_path":"packages/agent/src/transport/ws-client.ts","mechanism":"bounded exponential reconnect and explicit unauthorized branch","deadbyte_comparison":"R64 has remote guardian and recovery, but npm visibility after accepted publish was not reconciled","decision":"ADAPT","r65_action":"bounded registry availability polling and terminal/unknown classification; no relay or multi-device import"},
+    {"reference":"cua","evidence_path":"rfcs/3007-cua-driver-lifecycle-sessions.md","mechanism":"idempotent lifecycle cleanup and host-held resume identity","deadbyte_comparison":"DEADBYTE has owned supervisor and signed transaction evidence; deterministic precondition failures still need terminality","decision":"ADAPT","r65_action":"preflight/transaction boundary tests and exact ownership preservation; no desktop redesign"},
+    {"reference":"desktop-commander","evidence_path":"dist/utils/toolHistory.js","mechanism":"bounded presentation history and trim target","deadbyte_comparison":"DEADBYTE evidence durability and bounded LIVELOG are stronger for authoritative release receipts","decision":"KEEP-OURS","r65_action":"do not batch or trim authoritative transaction journals"},
+    {"reference":"open-remote-mcp","evidence_path":"docs/ARCHITECTURE.md","mechanism":"relay policy may narrow but local device remains final enforcement","deadbyte_comparison":"DEADBYTE already enforces local authority planes; activation restore must preserve exact vector","decision":"KEEP-OURS","r65_action":"regress no-widening during activation orchestration"},
+    {"reference":"remcp","evidence_path":"packages/client/test/cli-update-runtime.test.mjs","mechanism":"separate client/runtime update and coherence checks","deadbyte_comparison":"DEADBYTE has immutable slots and version binding; exact-version npm invocation needs reproducible tests","decision":"ADAPT","r65_action":"CLI/package resolution matrix and isolated install test without runtime dependency"},
+    {"reference":"secure-host-mcp","evidence_path":"src/runtime.ts","mechanism":"explicit bounded runtime state vocabulary","deadbyte_comparison":"DEADBYTE has verified identities but activation preflight was not a separate read-only state classification","decision":"ADAPT","r65_action":"typed preflight classification; reject dirty/unknown state before mutation"},
+    {"reference":"winremote-mcp","evidence_path":"src/winremote/process_mgr.py","mechanism":"Windows process enumeration with stale-process handling","deadbyte_comparison":"DEADBYTE ledger binds PID to creation identity and hash, stronger than PID/name kill paths","decision":"SKIP","r65_action":"retain verified ownership; never adopt caller-selected PID/name termination"}
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.39",
+  "version": "0.15.42",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -8,7 +8,7 @@
     "node": ">=22"
   },
   "scripts": {
-    "test": "node --test test/*.test.mjs",
+    "test": "node --test --test-concurrency=4 test/*.test.mjs",
     "manifest:write": "node scripts/release-manifest.mjs write",
     "manifest:verify": "node scripts/release-manifest.mjs verify",
     "r41:parent:verify": "node scripts/verify-r41-parent.mjs",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r62-prepublish.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r65-prepublish.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -87,7 +87,10 @@
     "r60:focused:test": "node --test --test-concurrency=1 test/r60-authority-coherence.test.mjs test/r60-authority-enforcement.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-clock-discipline.test.mjs test/r60-live-timeline.test.mjs test/r60-reconnect-errors.test.mjs test/r60-reconnect-jitter.test.mjs test/r60-remote-call-recovery.test.mjs test/r60-windows-log-decode.test.mjs test/r60-release-contract.test.mjs",
     "r60:full:test": "node scripts/full-regression-r60.mjs",
     "r61:focused:test": "node --test --test-concurrency=1 test/r61-release-contract.test.mjs test/r61-release-bridge-binding.test.mjs test/r61-control-lane.test.mjs test/r61-live-timeline-bounds.test.mjs test/r61-npm-artifact-identity.test.mjs test/remote-live-log-r37.test.mjs test/bridge-runtime-r59.test.mjs test/commander-schema-differential-r48.test.mjs test/package-boundary.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-authority-enforcement.test.mjs",
-    "r62:focused:test": "node --test --test-concurrency=1 test/r62-release-contract.test.mjs test/r62-doctor-transactions-reconcile.test.mjs test/r62-doctor-receipt-semantics.test.mjs test/r62-rollback-failure-receipt.test.mjs test/r58-doctor-transactions.test.mjs test/r58-completed-update-receipt.test.mjs test/runtime-self-update.test.mjs test/r56-rollback-launcher-restore.test.mjs"
+    "r62:focused:test": "node --test --test-concurrency=1 test/r62-release-contract.test.mjs test/r62-doctor-transactions-reconcile.test.mjs test/r62-doctor-receipt-semantics.test.mjs test/r62-rollback-failure-receipt.test.mjs test/r58-doctor-transactions.test.mjs test/r58-completed-update-receipt.test.mjs test/runtime-self-update.test.mjs test/r56-rollback-launcher-restore.test.mjs",
+    "r63:focused:test": "node --test --test-concurrency=1 test/r63-release-contract.test.mjs test/r63-one-shot-coherence.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
+    "r64:focused:test": "node --test --test-concurrency=1 test/r64-release-contract.test.mjs test/r64-machine-fs-large-read.test.mjs test/machine-fs-runtime.test.mjs test/compact-gateway-r36.test.mjs test/r61-control-lane.test.mjs test/r60-bridge-dispatch.test.mjs",
+    "r65:focused:test": "node scripts/r65-focused.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",