deadbyte-mcp 0.15.44 → 0.15.45

package/proof/TARGET-V044-CONTAINED-PASS.txt

@@ -1,432 +0,0 @@
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm install
-
-added 14 packages, and audited 15 packages in 1s
-
-2 packages are looking for funding
-  run `npm fund` for details
-
-found 0 vulnerabilities
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm test
-
-> deadbyte-mcp@0.4.4 test
-> node --test test/*.test.mjs
-
-✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (6.5412ms)
-✔ contained executor rejects a launcher-reported truncated stdin import (1.1925ms)
-✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.9879ms)
-✔ AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state (1.2469ms)
-✔ contained launcher reports the exact bootstrap environment policy in runtime evidence (1.2251ms)
-✔ contained execution validator rejects a missing LOCALAPPDATA bootstrap marker (0.9059ms)
-✔ contained execution validator rejects a non-exact worker environment allowlist (0.1897ms)
-✔ contained execution validator rejects a missing drive-current-directory environment entry (0.1336ms)
-✔ contained execution validator accepts the complete fixed-transform invariant set (0.2894ms)
-✔ contained execution validator rejects any granted capability (0.2785ms)
-✔ contained execution validator rejects host workspace mounting (0.1679ms)
-✔ contained execution validator rejects non-atomic Job assignment (0.1153ms)
-✔ contained execution validator rejects normal child payload execution (0.0835ms)
-✔ contained execution validator rejects explicit breakaway payload execution (0.0639ms)
-✔ contained execution validator rejects a non-AppContainer worker (0.0649ms)
-✔ contained execution source has a fixed worker and no user executable parameter (5.2536ms)
-✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (1.732ms)
-✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (1.1716ms)
-✔ native build produces the contained launcher and worker with static runtime (0.7569ms)
-✔ receipt and verifier bind contained worker, launcher and independent transform semantics (1.8135ms)
-✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (1.1845ms)
-✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (48.9324ms)
-✔ containment result validator accepts the complete LPAC invariant set (1.7555ms)
-✔ containment result validator accepts the complete regular AppContainer invariant set (0.9923ms)
-✔ containment result validator refuses mode confusion (0.5556ms)
-✔ containment result validator rejects a readable host canary (0.2335ms)
-✔ containment result validator rejects any granted capability (0.2405ms)
-✔ containment result validator rejects child payload execution (0.1817ms)
-✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1955ms)
-✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1597ms)
-✔ containment result validator rejects LPAC when regular AppContainer is expected (0.2615ms)
-✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.3116ms)
-✔ containment result validator requires LPAC-specific token query for LPAC mode (0.2169ms)
-✔ containment result validator rejects LPAC that can read the AAP canary (0.1655ms)
-✔ containment result validator rejects missing Job assignment (0.1723ms)
-✔ containment result validator rejects timeout (0.1223ms)
-✔ containment result validator rejects non-atomic Job assignment (0.1405ms)
-✔ containment result validator rejects enabled breakaway (0.1503ms)
-✔ containment result validator rejects the broken token child-policy mechanism (0.1453ms)
-✔ containment result validator rejects breakaway child payload execution (0.1465ms)
-✔ containment result validator rejects a filesystem result channel (0.1246ms)
-✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (12.2671ms)
-✔ native build script targets Windows 10 and preserves MSVC diagnostics (1.5927ms)
-✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.9758ms)
-✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.8015ms)
-✔ native probe link contract includes Advapi32 for token inspection APIs (1.7023ms)
-✔ native launcher narrows SID text only through explicit ASCII validation (1.5352ms)
-✔ native result channel is an explicitly inherited one-way handle, not a result path grant (1.736ms)
-✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.9396ms)
-✔ containment validator reports the probe invariant before aggregate failed status (0.445ms)
-✔ containment smoke includes the raw probe measurement on invariant failure (1.0002ms)
-✔ native LPAC probe uses the static MSVC runtime (0.7828ms)
-✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.6799ms)
-✔ native launcher preserves symbolic early-loader failure evidence (0.7975ms)
-✔ native bootstrap probes have custom no-CRT entrypoints (1.1531ms)
-✔ native build links bootstrap probes without default CRT libraries (0.8537ms)
-✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.9652ms)
-✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (2.407ms)
-✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (1.6485ms)
-✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (2.1835ms)
-✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (2.5121ms)
-✔ package exposes separate LPAC and regular AppContainer smoke gates (0.9076ms)
-✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (1.2078ms)
-✔ construction ladder adds containment mechanisms as isolated transitions (1.1421ms)
-✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (1.4112ms)
-✔ construction diagnostic reports the first failing transition without fallback (0.8668ms)
-✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (1.0925ms)
-✔ construction diagnostic refuses to run when native build artifacts are missing (0.7146ms)
-✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.9479ms)
-✔ Job child-control candidate sets active process limit one and never enables breakaway (1.0462ms)
-✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.97ms)
-✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.9399ms)
-✔ native build produces child-control launcher and hostile probe with MSVC (1.0112ms)
-✔ package exposes explicit child-control diagnostic gate (2.6927ms)
-✔ full containment probe verifies normal and explicit breakaway child payload denial (0.9681ms)
-✔ package default containment smoke targets the observed regular AppContainer baseline (0.656ms)
-✔ path traversal is denied (21.3458ms)
-✔ absolute path is denied (11.6942ms)
-✔ symlink escape is denied where symlinks are permitted (8.2463ms)
-✔ proof execution creates deterministic output and signed verifiable receipt (100.8111ms)
-✔ independent verifier process accepts valid signed evidence (145.7989ms)
-✔ input source may change later because receipt preserves exact input snapshot (70.9957ms)
-✔ tampered output fails independent verification (63.7529ms)
-✔ tampered input snapshot fails independent verification (63.6055ms)
-✔ tampered receipt fails its canonical self hash (57.9288ms)
-✔ recomputed self hash cannot forge Ed25519 attestation (59.9649ms)
-✔ wrong public key cannot verify receipt (56.3461ms)
-✔ signing key inside workspace is denied (5.3924ms)
-✔ proof execution refuses to run without a signing key (2.3947ms)
-✔ trust key generation refuses to overwrite an existing keypair (2.0841ms)
-✔ pre-existing output is denied instead of overwritten (4.3392ms)
-✔ output parent symlink escape is denied (3.7001ms)
-✔ distinct output names allow repeated signed proofs without weakening no-overwrite (93.5669ms)
-ℹ tests 93
-ℹ suites 0
-ℹ pass 93
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 881.6871
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run mcp:smoke
-
-> deadbyte-mcp@0.4.4 mcp:smoke
-> node src/mcp-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tools": [
-    "contained_transform",
-    "evidence_verify",
-    "file_read",
-    "proof_execute",
-    "workspace_open"
-  ],
-  "workspace_id": "demo",
-  "output": "mcp-output.fe5b3d4332c90093.txt",
-  "receipt_path": "evidence/2d24bcbdd16f1f5578fd74b1.json",
-  "receipt_sha256": "86ee4109cbece166bc8f93583d7d127f4c44ceed302c4933d96c27be7f8e3a12",
-  "key_id": "c7ae9fa0767d3781e023bbc687981ba4fb471d511f59094ec8223c16ff2269a1",
-  "signature_algorithm": "ed25519",
-  "signature_valid": true,
-  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run containment:build
-
-> deadbyte-mcp@0.4.4 containment:build
-> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
-
-==== launcher ====
-deadbyte-contain.cpp
-==== probe ====
-containment-probe.cpp
-==== bootstrap-kernel32 ====
-bootstrap-kernel32.cpp
-==== bootstrap-advapi32 ====
-bootstrap-advapi32.cpp
-==== construction-launcher ====
-appcontainer-stage.cpp
-==== bootstrap-exitcode ====
-bootstrap-exitcode.cpp
-==== child-control-launcher ====
-child-control-stage.cpp
-==== child-control-probe ====
-child-control-probe.cpp
-==== contained-launcher ====
-deadbyte-exec.cpp
-==== contained-worker ====
-contained-transform-worker.cpp
-==== probe-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4\bin\containment-probe.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-==== contained-launcher-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4\bin\deadbyte-exec.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    USERENV.dll
-    ADVAPI32.dll
-    ole32.dll
-    KERNEL32.dll
-
-  Summary
-
-        3000 .data
-        1000 .fptable
-        3000 .pdata
-       15000 .rdata
-        1000 .reloc
-       34000 .text
-==== contained-worker-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4\bin\contained-transform-worker.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-{
-    "status":  "built",
-    "compiler":  "msvc-x64",
-    "target":  "windows-10-or-newer",
-    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\proof\\CONTAINMENT-BUILD.txt",
-    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\deadbyte-contain.exe",
-    "launcher_sha256":  "793596c3bed558599bc1b165a0f1fa9a2602faa898599c01c2e16ad1be0e474d",
-    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\containment-probe.exe",
-    "probe_sha256":  "2591817bb4422f853522fba8a7a3ba96187a2c991eaa8b36e9400c28353b9744",
-    "probe_runtime":  "static-crt",
-    "probe_dynamic_crt_dependencies":  [
-
-                                       ],
-    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\bootstrap-kernel32.exe",
-    "bootstrap_kernel32_sha256":  "7e8af8a47d3ada5d8e7f97f31dee5323553a12316c3b7801cc678d7527cc25e4",
-    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\bootstrap-advapi32.exe",
-    "bootstrap_advapi32_sha256":  "714d14f1d20e68e7d6e34d3bf0c5401300f053a66ec95ec4a8db77264d1a096a",
-    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\appcontainer-stage.exe",
-    "construction_launcher_sha256":  "3eb9573bb7ab2afc049337e2eeecdf606a765d17a9b623d91d7449b4a0b9dc84",
-    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\bootstrap-exitcode.exe",
-    "bootstrap_exitcode_sha256":  "ca53bd1e4a1d6663012d26ba359ed0cdd371858299a19e77d9e25726236521b5",
-    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\child-control-stage.exe",
-    "child_control_launcher_sha256":  "75f8ce5ea9c2097f0a95039cd5c5e43f7933106b1deb1afd09ac622e418db160",
-    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\child-control-probe.exe",
-    "child_control_probe_sha256":  "1e8089b22a4c3fdae3837fe462c0ccbc32cdda1222e899fdbec085cf08311dff",
-    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\deadbyte-exec.exe",
-    "contained_launcher_sha256":  "c8dbda94fcc58ca83ba6e40f9eb72977c3dbb37e7d545afde969bf37ab9768a9",
-    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.4\\bin\\contained-transform-worker.exe",
-    "contained_worker_sha256":  "aefac33eef8ec666022fdbfc402468fabc84bb6d15a16d85b753a4feb5f61220"
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run containment:smoke
-
-> deadbyte-mcp@0.4.4 containment:smoke
-> node src/containment-smoke.mjs appcontainer
-
-{
-  "status": "passed",
-  "ok": true,
-  "backend": "windows-appcontainer",
-  "mode": "appcontainer",
-  "appcontainer_sid": "S-1-15-2-2454422981-370969798-612458006-4060630694-2911102509-381268819-815055358",
-  "lpac": false,
-  "lpac_token_query_available": false,
-  "aap_mode_evidence_ok": true,
-  "network_capabilities": 0,
-  "result_channel": "inherited-handle",
-  "outside_read_denied": true,
-  "child_process_denied": true,
-  "normal_child_execution_denied": true,
-  "breakaway_child_execution_denied": true,
-  "child_control": "job-active-process-limit",
-  "job_assignment": "atomic-attribute",
-  "job_breakaway_enabled": false,
-  "active_process_limit": 1,
-  "process_memory_limit_bytes": 134217728,
-  "profile_cleanup_ok": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run contained:smoke
-
-> deadbyte-mcp@0.4.4 contained:smoke
-> node src/contained-smoke.mjs
-
-{
-  "status": "passed",
-  "operation": "uppercase_ascii",
-  "output": "contained-smoke.f23da24f4b920290.txt",
-  "receipt_path": "evidence/223d430c72a9dd693742acae.json",
-  "receipt_sha256": "c84fcf22f5e26d4341e1b8f2b729ee01fa323556eaa823d7807ce8acadd46b37",
-  "worker_id": "contained-transform-v1",
-  "worker_sha256": "aefac33eef8ec666022fdbfc402468fabc84bb6d15a16d85b753a4feb5f61220",
-  "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-  "containment": {
-    "backend": "windows-appcontainer",
-    "mode": "appcontainer",
-    "operation": "uppercase_ascii",
-    "appcontainer_sid": "S-1-15-2-2968720222-1786879361-642688360-715908920-2362156883-519278774-4154022759",
-    "network_capabilities": 0,
-    "job_assignment": "atomic-attribute",
-    "job_breakaway_enabled": false,
-    "active_process_limit": 1,
-    "process_memory_limit_bytes": 134217728,
-    "child_control": "job-active-process-limit",
-    "import_transport": "host-stdin-to-profile-copy",
-    "export_transport": "profile-copy-to-host-json",
-    "workspace_mounted": false,
-    "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-    "worker_localappdata_present": true,
-    "worker_environment_allowlist_exact": true,
-    "worker_drive_current_directory_set": true,
-    "input_bytes": 33,
-    "output_bytes": 33,
-    "profile_cleanup_ok": true,
-    "proof": {
-      "token_is_appcontainer": true,
-      "capability_count": 0,
-      "aap_mode_evidence_ok": true,
-      "outside_read_denied": true,
-      "inside_write_ok": true,
-      "in_job": true,
-      "normal_child_execution_denied": true,
-      "breakaway_child_execution_denied": true,
-      "transform_ok": true
-    }
-  },
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run mcp:contained:smoke
-
-> deadbyte-mcp@0.4.4 mcp:contained:smoke
-> node src/mcp-contained-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tool": "contained_transform",
-  "operation": "uppercase_ascii",
-  "output": "mcp-contained.fa67665e76992600.txt",
-  "receipt_path": "evidence/203d4f3a3742b2378c9d3bdc.json",
-  "receipt_sha256": "940e0ef8faf91f8f5a1e79f3dcda30819c4d5a1420f593b18841a900bada5f53",
-  "worker_id": "contained-transform-v1",
-  "worker_sha256": "aefac33eef8ec666022fdbfc402468fabc84bb6d15a16d85b753a4feb5f61220",
-  "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-  "containment": {
-    "backend": "windows-appcontainer",
-    "mode": "appcontainer",
-    "operation": "uppercase_ascii",
-    "appcontainer_sid": "S-1-15-2-759231743-3303717888-3801592907-3060139956-2712318088-1653501756-2296220973",
-    "network_capabilities": 0,
-    "job_assignment": "atomic-attribute",
-    "job_breakaway_enabled": false,
-    "active_process_limit": 1,
-    "process_memory_limit_bytes": 134217728,
-    "child_control": "job-active-process-limit",
-    "import_transport": "host-stdin-to-profile-copy",
-    "export_transport": "profile-copy-to-host-json",
-    "workspace_mounted": false,
-    "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-    "worker_localappdata_present": true,
-    "worker_environment_allowlist_exact": true,
-    "worker_drive_current_directory_set": true,
-    "input_bytes": 33,
-    "output_bytes": 33,
-    "profile_cleanup_ok": true,
-    "proof": {
-      "token_is_appcontainer": true,
-      "capability_count": 0,
-      "aap_mode_evidence_ok": true,
-      "outside_read_denied": true,
-      "inside_write_ok": true,
-      "in_job": true,
-      "normal_child_execution_denied": true,
-      "breakaway_child_execution_denied": true,
-      "transform_ok": true
-    }
-  },
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4> npm run contained:smoke
-
-> deadbyte-mcp@0.4.4 contained:smoke
-> node src/contained-smoke.mjs
-
-{
-  "status": "passed",
-  "operation": "uppercase_ascii",
-  "output": "contained-smoke.944124e3b359e2d1.txt",
-  "receipt_path": "evidence/c6f6719e5310295b29b3d854.json",
-  "receipt_sha256": "43ebc129e2bbe3b7f32d3d40d16169a6e34a4870fc646625af2acbf0e7207e7d",
-  "worker_id": "contained-transform-v1",
-  "worker_sha256": "aefac33eef8ec666022fdbfc402468fabc84bb6d15a16d85b753a4feb5f61220",
-  "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-  "containment": {
-    "backend": "windows-appcontainer",
-    "mode": "appcontainer",
-    "operation": "uppercase_ascii",
-    "appcontainer_sid": "S-1-15-2-3876622647-3540426634-14564128-170252253-2534655728-3109299771-1294206250",
-    "network_capabilities": 0,
-    "job_assignment": "atomic-attribute",
-    "job_breakaway_enabled": false,
-    "active_process_limit": 1,
-    "process_memory_limit_bytes": 134217728,
-    "child_control": "job-active-process-limit",
-    "import_transport": "host-stdin-to-profile-copy",
-    "export_transport": "profile-copy-to-host-json",
-    "workspace_mounted": false,
-    "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-    "worker_localappdata_present": true,
-    "worker_environment_allowlist_exact": true,
-    "worker_drive_current_directory_set": true,
-    "input_bytes": 33,
-    "output_bytes": 33,
-    "profile_cleanup_ok": true,
-    "proof": {
-      "token_is_appcontainer": true,
-      "capability_count": 0,
-      "aap_mode_evidence_ok": true,
-      "outside_read_denied": true,
-      "inside_write_ok": true,
-      "in_job": true,
-      "normal_child_execution_denied": true,
-      "breakaway_child_execution_denied": true,
-      "transform_ok": true
-    }
-  },
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.4>

package/proof/TARGET-V045-DUAL-OPERATION-PASS.sha256

@@ -1 +0,0 @@
-bdcdfec0a6cf3bc32f6581adf8be62b8205ff3aabb13e9943870b447ee0bb3b6  TARGET-V045-DUAL-OPERATION-PASS.txt