deadbyte-mcp 0.15.44 → 0.15.45

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/MANIFEST.SHA256 +69 -131
  2. package/PROVENANCE.json +257 -243
  3. package/README.txt +18 -18
  4. package/RELEASE.json +348 -334
  5. package/SBOM.cdx.json +2 -2
  6. package/TEST-MATRIX.json +503 -491
  7. package/bridge/package.json +1 -1
  8. package/controller/deadbyte-controller.ps1 +1857 -1769
  9. package/controller/deadbyte-desktop-policy.json +6 -6
  10. package/controller/deadbyte-process-policy.json +4 -4
  11. package/docs/R68-COMPAT-HOST-EXEC-CANDIDATE.md +63 -0
  12. package/docs/R69-LIVE-OUTCOME-R70-POLICY-TRANSFER.md +136 -0
  13. package/docs/R70-CODING-DIGEST-SUPERVISOR-CHECKPOINT-20261013.md +42 -0
  14. package/docs/R70-FINITE-GRANT-OWNER-BOUNDARY-20261013.md +80 -0
  15. package/docs/R70-OWNER-BOOTSTRAP-CHECKPOINT-20261013.md +60 -0
  16. package/docs/R70-REFERENCE-MECHANISMS.json +95 -0
  17. package/docs/R70-TRUST-GUARD-EXPIRY-CHECKPOINT-20261013.md +47 -0
  18. package/package.json +2 -2
  19. package/scripts/benchmark-l0-r71.mjs +76 -0
  20. package/scripts/gate-windows-r71.ps1 +64 -0
  21. package/scripts/npm-release-r48.mjs +2 -0
  22. package/scripts/npm-release-readiness-r71.mjs +21 -0
  23. package/scripts/verify-r70-full-regression.ps1 +72 -0
  24. package/src/authority-continuity-r65.mjs +28 -8
  25. package/src/autonomous-mcp-tools.mjs +1 -1
  26. package/src/autonomous-output-contracts.mjs +4 -1
  27. package/src/autonomous-policy.mjs +54 -7
  28. package/src/capability-ledger.mjs +1 -1
  29. package/src/capability-resolver.mjs +2 -1
  30. package/src/commander-compat-runtime.mjs +30 -2
  31. package/src/deadbyte-cli.mjs +8 -6
  32. package/src/native-diff-v2.mjs +18 -5
  33. package/src/native-diff.mjs +21 -5
  34. package/src/r70-owner-approval.mjs +78 -0
  35. package/src/remote-live-log.mjs +48 -14
  36. package/src/remote-result-journal.mjs +1 -1
  37. package/src/runtime-update.mjs +2051 -1891
  38. package/src/tool-audit.mjs +2 -0
  39. package/src/version.mjs +1 -1
  40. package/test/autonomous-local-supervisor.test.mjs +2 -1
  41. package/test/autonomous-output-contract.test.mjs +17 -1
  42. package/test/autonomous-supervisor-integration.test.mjs +2 -1
  43. package/test/capability-resolver.test.mjs +17 -0
  44. package/test/codex-autonomous-r44.test.mjs +1 -1
  45. package/test/commander-compat-runtime.test.mjs +42 -0
  46. package/test/controller-policy-preflight-r59.test.mjs +1 -0
  47. package/test/native-diff-topology-r36.test.mjs +35 -2
  48. package/test/native-diff.test.mjs +83 -3
  49. package/test/r59-tool-surface-compat.test.mjs +9 -5
  50. package/test/r65-authority-runtime-epoch.test.mjs +9 -1
  51. package/test/r67-isolated-slot-rollback-restore.test.mjs +2 -1
  52. package/test/r67-npm-publish-gate.test.mjs +4 -2
  53. package/test/r67-release-contract.test.mjs +8 -7
  54. package/test/r69-live-outcome.test.mjs +137 -0
  55. package/test/r70-autonomous-grant-expiry.test.mjs +89 -0
  56. package/test/r70-autonomous-policy-bootstrap.test.mjs +166 -0
  57. package/test/r70-controller-autonomous-root.test.mjs +104 -0
  58. package/test/r70-controller-grant-subset.test.mjs +28 -0
  59. package/test/r70-controller-owner-issue-boundary.test.mjs +80 -0
  60. package/test/r70-controller-policy-snapshot.test.mjs +66 -0
  61. package/test/r70-owner-approval.test.mjs +67 -0
  62. package/test/r71-full-verifier-artifact.test.mjs +28 -0
  63. package/test/r71-isolated-slot-rollback-restore.test.mjs +62 -0
  64. package/test/r71-native-diff-mcp-wire.test.mjs +75 -0
  65. package/test/r71-publish-fence.test.mjs +38 -0
  66. package/test/r71-release-identity.test.mjs +31 -0
  67. package/test/remote-result-journal.test.mjs +12 -0
  68. package/test/remote-session-cli.test.mjs +2 -1
  69. package/test/standing-grants.test.mjs +2 -2
  70. package/test/tool-audit.test.mjs +14 -0
  71. package/bin/appcontainer-stage.obj +0 -0
  72. package/bin/bootstrap-advapi32.obj +0 -0
  73. package/bin/bootstrap-exitcode.obj +0 -0
  74. package/bin/bootstrap-kernel32.obj +0 -0
  75. package/bin/child-control-probe.obj +0 -0
  76. package/bin/child-control-stage.obj +0 -0
  77. package/bin/contained-reverse-worker.obj +0 -0
  78. package/bin/contained-transform-worker.obj +0 -0
  79. package/bin/containment-probe.obj +0 -0
  80. package/bin/deadbyte-contain.obj +0 -0
  81. package/bin/deadbyte-desktop-input-r40.obj +0 -0
  82. package/bin/deadbyte-desktop-observer-r40.obj +0 -0
  83. package/bin/deadbyte-desktop-uia-r40.obj +0 -0
  84. package/bin/deadbyte-exec.obj +0 -0
  85. package/bin/deadbyte-hardware-observer-r45.obj +0 -0
  86. package/bin/deadbyte-native-inspect-r67.obj +0 -0
  87. package/bin/deadbyte-process-host.obj +0 -0
  88. package/bin/deadbyte-tunnel-host.obj +0 -0
  89. package/conpty-input-observer.obj +0 -0
  90. package/miniconpty.obj +0 -0
  91. package/proof/CONTAINMENT-BUILD.txt +0 -163
  92. package/proof/MCP-SMOKE-STATUS.txt +0 -9
  93. package/proof/NODE-SYNTAX.txt +0 -4
  94. package/proof/PROOF.txt +0 -6
  95. package/proof/R34-TASK8-SUPERVISOR-CHECKPOINT.json +0 -29
  96. package/proof/R34-TASK9-MCP-SURFACE-CHECKPOINT.json +0 -28
  97. package/proof/SECRET-SCAN.txt +0 -4
  98. package/proof/SOURCE-GATES.txt +0 -16
  99. package/proof/STATUS.txt +0 -11
  100. package/proof/TARGET-V0313-CONTAINMENT-PASS.sha256 +0 -1
  101. package/proof/TARGET-V0313-CONTAINMENT-PASS.txt +0 -215
  102. package/proof/TARGET-V040-CONTAINED-IPC-FAIL.sha256 +0 -1
  103. package/proof/TARGET-V040-CONTAINED-IPC-FAIL.txt +0 -299
  104. package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  105. package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.txt +0 -311
  106. package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  107. package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.txt +0 -313
  108. package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  109. package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.txt +0 -308
  110. package/proof/TARGET-V044-CONTAINED-PASS.sha256 +0 -1
  111. package/proof/TARGET-V044-CONTAINED-PASS.txt +0 -432
  112. package/proof/TARGET-V045-DUAL-OPERATION-PASS.sha256 +0 -1
  113. package/proof/TARGET-V045-DUAL-OPERATION-PASS.txt +0 -481
  114. package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.sha256 +0 -1
  115. package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.txt +0 -610
  116. package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.sha256 +0 -1
  117. package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.txt +0 -642
  118. package/proof/TARGET-V050-BATCH-GATE-PASS.sha256 +0 -1
  119. package/proof/TARGET-V050-BATCH-GATE-PASS.txt +0 -713
  120. package/proof/TESTS.txt +0 -686
  121. package/proof/TRUST-EPHEMERAL.txt +0 -4
  122. package/proof/V03-FREEZE.txt +0 -27
  123. package/proof/V041-IPC-HOTFIX.txt +0 -16
  124. package/proof/V042-ENV-HOTFIX.txt +0 -15
  125. package/proof/V043-DRIVE-CWD-HOTFIX.txt +0 -14
  126. package/proof/V044-LOCALAPPDATA-HOTFIX.txt +0 -18
  127. package/proof/V045-OPERATION-REGISTRY.txt +0 -7
  128. package/proof/V046-WORKER-REGISTRY.txt +0 -12
  129. package/proof/V047-WORKER-MANIFEST.txt +0 -18
  130. package/proof/V050-BATCH-TRUST-CLOSURE.txt +0 -21
  131. package/proof/V060-ACTIVE-NETWORK-AUTHORITY.txt +0 -29
  132. package/proof/V070-NODE-SYNTAX.txt +0 -36
  133. package/proof/V070-NODE-TESTS.txt +0 -752
  134. package/proof/V070-PACK-DRY-RUN.txt +0 -126
  135. package/proof/V070-SOURCE-GATE.txt +0 -30
  136. package/proof/V070-STATIC-SCAN.txt +0 -4
  137. package/proof/V070-WINDOWS-GATE-PENDING.txt +0 -25
  138. package/proof/V071-NODE-SYNTAX.txt +0 -1
  139. package/proof/V071-NODE-TESTS.txt +0 -796
  140. package/proof/V071-PACK-DRY-RUN.json +0 -656
  141. package/proof/V071-SOURCE-GATE.txt +0 -16
  142. package/proof/V071-WINDOWS-GATE-PENDING.txt +0 -24
  143. package/proof/V073-NODE-SYNTAX.txt +0 -4
  144. package/proof/V073-SOURCE-GATE.txt +0 -21
  145. package/proof/V073-STATIC-SCAN.txt +0 -10
  146. package/proof/V073-WINDOWS-GATE-PENDING.txt +0 -5
  147. package/proof/VERIFY.txt +0 -7
  148. package/proof/WINDOWS-CONTAINED-STATUS.txt +0 -5
  149. package/proof/WINDOWS-CONTAINMENT-STATUS.txt +0 -3
  150. package/proof/commander-closure-20260927/CONTINUATION.json +0 -43
  151. package/proof/commander-closure-20260927/RESULT.json +0 -30
  152. package/proof/commander-closure-20260927/SEARCH-CONTINUATION.json +0 -30
  153. package/proof/commander-closure-20260927/XLS-REFERENCE-PROBE.json +0 -13
  154. package/proof/commander-closure-20260928/DIFFERENTIAL-CHECKPOINT.json +0 -122
  155. package/proof/r59-full-regression-current.json +0 -13
  156. package/proof/r59-full-regression-current.stderr.log +0 -0
  157. package/proof/r59-full-regression-current.stdout.log +0 -1268
@@ -1,481 +0,0 @@
1
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm install
2
-
3
- added 14 packages, and audited 15 packages in 1s
4
-
5
- 2 packages are looking for funding
6
- run `npm fund` for details
7
-
8
- found 0 vulnerabilities
9
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm test
10
-
11
- > deadbyte-mcp@0.4.5 test
12
- > node --test test/*.test.mjs
13
-
14
- ✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (5.6647ms)
15
- ✔ contained executor rejects a launcher-reported truncated stdin import (0.8811ms)
16
- ✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.8135ms)
17
- ✔ AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state (0.9387ms)
18
- ✔ contained launcher reports the exact bootstrap environment policy in runtime evidence (0.8463ms)
19
- ✔ contained execution validator rejects a missing LOCALAPPDATA bootstrap marker (0.7066ms)
20
- ✔ contained execution validator rejects a non-exact worker environment allowlist (0.1752ms)
21
- ✔ contained execution validator rejects a missing drive-current-directory environment entry (0.1329ms)
22
- ✔ contained execution validator accepts the complete fixed-transform invariant set (0.2831ms)
23
- ✔ contained execution validator rejects any granted capability (0.2842ms)
24
- ✔ contained execution validator rejects host workspace mounting (0.2015ms)
25
- ✔ contained execution validator rejects non-atomic Job assignment (0.1331ms)
26
- ✔ contained execution validator rejects normal child payload execution (0.1193ms)
27
- ✔ contained execution validator rejects explicit breakaway payload execution (0.1356ms)
28
- ✔ contained execution validator rejects a non-AppContainer worker (0.077ms)
29
- ✔ contained execution source has a fixed worker and no user executable parameter (3.546ms)
30
- ✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.7525ms)
31
- ✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (0.6872ms)
32
- ✔ native build produces the contained launcher and worker with static runtime (0.626ms)
33
- ✔ receipt and verifier bind contained worker, launcher and independent transform semantics (0.8671ms)
34
- ✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.7049ms)
35
- ✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (25.1599ms)
36
- ✔ contained operation registry accepts lowercase_ascii and rejects unknown operations (0.2598ms)
37
- ✔ native launcher and worker use the same compile-time two-operation allowlist (0.7412ms)
38
- ✔ MCP contained_transform schema is a compile-time operation enum with no executable surface (0.4335ms)
39
- ✔ contained receipt verifies lowercase_ascii semantics and rejects semantic tamper (14.8165ms)
40
- ✔ containment result validator accepts the complete LPAC invariant set (1.3428ms)
41
- ✔ containment result validator accepts the complete regular AppContainer invariant set (0.1731ms)
42
- ✔ containment result validator refuses mode confusion (1.1917ms)
43
- ✔ containment result validator rejects a readable host canary (0.1861ms)
44
- ✔ containment result validator rejects any granted capability (0.1474ms)
45
- ✔ containment result validator rejects child payload execution (0.1029ms)
46
- ✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1154ms)
47
- ✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1268ms)
48
- ✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1642ms)
49
- ✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.3182ms)
50
- ✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1638ms)
51
- ✔ containment result validator rejects LPAC that can read the AAP canary (0.096ms)
52
- ✔ containment result validator rejects missing Job assignment (0.1207ms)
53
- ✔ containment result validator rejects timeout (0.0813ms)
54
- ✔ containment result validator rejects non-atomic Job assignment (0.0895ms)
55
- ✔ containment result validator rejects enabled breakaway (0.1097ms)
56
- ✔ containment result validator rejects the broken token child-policy mechanism (0.0878ms)
57
- ✔ containment result validator rejects breakaway child payload execution (0.0757ms)
58
- ✔ containment result validator rejects a filesystem result channel (0.0473ms)
59
- ✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.3769ms)
60
- ✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.758ms)
61
- ✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5431ms)
62
- ✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.5988ms)
63
- ✔ native probe link contract includes Advapi32 for token inspection APIs (0.62ms)
64
- ✔ native launcher narrows SID text only through explicit ASCII validation (0.4985ms)
65
- ✔ native result channel is an explicitly inherited one-way handle, not a result path grant (1.1055ms)
66
- ✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5778ms)
67
- ✔ containment validator reports the probe invariant before aggregate failed status (0.1481ms)
68
- ✔ containment smoke includes the raw probe measurement on invariant failure (0.6628ms)
69
- ✔ native LPAC probe uses the static MSVC runtime (0.7432ms)
70
- ✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5345ms)
71
- ✔ native launcher preserves symbolic early-loader failure evidence (0.6094ms)
72
- ✔ native bootstrap probes have custom no-CRT entrypoints (0.874ms)
73
- ✔ native build links bootstrap probes without default CRT libraries (0.4801ms)
74
- ✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.6057ms)
75
- ✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.2631ms)
76
- ✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.6573ms)
77
- ✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.7462ms)
78
- ✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.7017ms)
79
- ✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5118ms)
80
- ✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.5081ms)
81
- ✔ construction ladder adds containment mechanisms as isolated transitions (0.4625ms)
82
- ✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.756ms)
83
- ✔ construction diagnostic reports the first failing transition without fallback (0.5524ms)
84
- ✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.8091ms)
85
- ✔ construction diagnostic refuses to run when native build artifacts are missing (0.4889ms)
86
- ✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.5907ms)
87
- ✔ Job child-control candidate sets active process limit one and never enables breakaway (0.4147ms)
88
- ✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4692ms)
89
- ✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.4622ms)
90
- ✔ native build produces child-control launcher and hostile probe with MSVC (0.5346ms)
91
- ✔ package exposes explicit child-control diagnostic gate (1.1672ms)
92
- ✔ full containment probe verifies normal and explicit breakaway child payload denial (0.4332ms)
93
- ✔ package default containment smoke targets the observed regular AppContainer baseline (0.36ms)
94
- ✔ path traversal is denied (11.1637ms)
95
- ✔ absolute path is denied (4.2646ms)
96
- ✔ symlink escape is denied where symlinks are permitted (5.6863ms)
97
- ✔ proof execution creates deterministic output and signed verifiable receipt (60.4084ms)
98
- ✔ independent verifier process accepts valid signed evidence (113.5709ms)
99
- ✔ input source may change later because receipt preserves exact input snapshot (49.7535ms)
100
- ✔ tampered output fails independent verification (55.9481ms)
101
- ✔ tampered input snapshot fails independent verification (47.3218ms)
102
- ✔ tampered receipt fails its canonical self hash (53.1951ms)
103
- ✔ recomputed self hash cannot forge Ed25519 attestation (57.4145ms)
104
- ✔ wrong public key cannot verify receipt (59.144ms)
105
- ✔ signing key inside workspace is denied (5.8897ms)
106
- ✔ proof execution refuses to run without a signing key (3.7971ms)
107
- ✔ trust key generation refuses to overwrite an existing keypair (2.4143ms)
108
- ✔ pre-existing output is denied instead of overwritten (5.7058ms)
109
- ✔ output parent symlink escape is denied (4.1625ms)
110
- ✔ distinct output names allow repeated signed proofs without weakening no-overwrite (108.1438ms)
111
- ℹ tests 97
112
- ℹ suites 0
113
- ℹ pass 97
114
- ℹ fail 0
115
- ℹ cancelled 0
116
- ℹ skipped 0
117
- ℹ todo 0
118
- ℹ duration_ms 736.3223
119
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm run mcp:smoke
120
-
121
- > deadbyte-mcp@0.4.5 mcp:smoke
122
- > node src/mcp-smoke-client.mjs
123
-
124
- {
125
- "status": "passed",
126
- "protocol_revision": "2026-07-28",
127
- "protocol_era": "modern",
128
- "tools": [
129
- "contained_transform",
130
- "evidence_verify",
131
- "file_read",
132
- "proof_execute",
133
- "workspace_open"
134
- ],
135
- "workspace_id": "demo",
136
- "output": "mcp-output.23eb3cd3bd5cf94c.txt",
137
- "receipt_path": "evidence/46901fc03a433a19c25f6adf.json",
138
- "receipt_sha256": "412e380b91caf9896407ad94af3cb28e993ffe69704534c9d2a059146fafc708",
139
- "key_id": "b2b1096fc1345be9053f4c39079fc6c8fab12be60fa319899841c563e5ff1302",
140
- "signature_algorithm": "ed25519",
141
- "signature_valid": true,
142
- "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
143
- "independent_verify": true
144
- }
145
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm run containment:build
146
-
147
- > deadbyte-mcp@0.4.5 containment:build
148
- > powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
149
-
150
- ==== launcher ====
151
- deadbyte-contain.cpp
152
- ==== probe ====
153
- containment-probe.cpp
154
- ==== bootstrap-kernel32 ====
155
- bootstrap-kernel32.cpp
156
- ==== bootstrap-advapi32 ====
157
- bootstrap-advapi32.cpp
158
- ==== construction-launcher ====
159
- appcontainer-stage.cpp
160
- ==== bootstrap-exitcode ====
161
- bootstrap-exitcode.cpp
162
- ==== child-control-launcher ====
163
- child-control-stage.cpp
164
- ==== child-control-probe ====
165
- child-control-probe.cpp
166
- ==== contained-launcher ====
167
- deadbyte-exec.cpp
168
- ==== contained-worker ====
169
- contained-transform-worker.cpp
170
- ==== probe-dependencies ====
171
-
172
- Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5\bin\containment-probe.exe
173
-
174
- File Type: EXECUTABLE IMAGE
175
-
176
- Image has the following dependencies:
177
-
178
- ADVAPI32.dll
179
- KERNEL32.dll
180
-
181
- Summary
182
-
183
- 2000 .data
184
- 1000 .fptable
185
- 2000 .pdata
186
- E000 .rdata
187
- 1000 .reloc
188
- 19000 .text
189
- ==== contained-launcher-dependencies ====
190
-
191
- Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5\bin\deadbyte-exec.exe
192
-
193
- File Type: EXECUTABLE IMAGE
194
-
195
- Image has the following dependencies:
196
-
197
- USERENV.dll
198
- ADVAPI32.dll
199
- ole32.dll
200
- KERNEL32.dll
201
-
202
- Summary
203
-
204
- 3000 .data
205
- 1000 .fptable
206
- 3000 .pdata
207
- 15000 .rdata
208
- 1000 .reloc
209
- 34000 .text
210
- ==== contained-worker-dependencies ====
211
-
212
- Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5\bin\contained-transform-worker.exe
213
-
214
- File Type: EXECUTABLE IMAGE
215
-
216
- Image has the following dependencies:
217
-
218
- ADVAPI32.dll
219
- KERNEL32.dll
220
-
221
- Summary
222
-
223
- 2000 .data
224
- 1000 .fptable
225
- 2000 .pdata
226
- E000 .rdata
227
- 1000 .reloc
228
- 19000 .text
229
- {
230
- "status": "built",
231
- "compiler": "msvc-x64",
232
- "target": "windows-10-or-newer",
233
- "diagnostics": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\proof\\CONTAINMENT-BUILD.txt",
234
- "launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\deadbyte-contain.exe",
235
- "launcher_sha256": "4252bf36b4d1e2f184d507f1edbf2d02a49ef1a3aa4d0697944433783e6bd074",
236
- "probe": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\containment-probe.exe",
237
- "probe_sha256": "ae323c532246ad594d1a993d06f0015c6663c1cc3a6959344b42c8d0bc2aff07",
238
- "probe_runtime": "static-crt",
239
- "probe_dynamic_crt_dependencies": [
240
-
241
- ],
242
- "bootstrap_kernel32": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\bootstrap-kernel32.exe",
243
- "bootstrap_kernel32_sha256": "78c42394fccc05e04993273619fc8ed124c35810e8d7de0716143a159509efd4",
244
- "bootstrap_advapi32": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\bootstrap-advapi32.exe",
245
- "bootstrap_advapi32_sha256": "6993e5c170bb38b5308613368a91aa2deb3d37e0a0ad0638fb951f6ac98fefc6",
246
- "construction_launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\appcontainer-stage.exe",
247
- "construction_launcher_sha256": "b2f2258fc9f2426af9b2d62007d079051d6fdafa7ae57a3c3473b89696d98286",
248
- "bootstrap_exitcode": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\bootstrap-exitcode.exe",
249
- "bootstrap_exitcode_sha256": "11313565b7e335bf0f3819b60a4b15a7052fc832f467bff53f860f59e5ab9a7f",
250
- "child_control_launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\child-control-stage.exe",
251
- "child_control_launcher_sha256": "b14a6495b524caa2f39ad4fb5d10385c6302ed9605d56ca7fff83e5bf53d2ce9",
252
- "child_control_probe": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\child-control-probe.exe",
253
- "child_control_probe_sha256": "4ac79f4685bfeddeba12ae16518d4c55b35934fda2c443e623f1049adcf6086a",
254
- "contained_launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\deadbyte-exec.exe",
255
- "contained_launcher_sha256": "0dd21cf4b336838477f74d369dd00e1da4360959ff59841efd6a140265929af9",
256
- "contained_worker": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.5\\bin\\contained-transform-worker.exe",
257
- "contained_worker_sha256": "4c582e4ab61b3f67e74af4d59c92119639c12d402eaec9314e51e52dbe6b60f3"
258
- }
259
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm run containment:smoke
260
-
261
- > deadbyte-mcp@0.4.5 containment:smoke
262
- > node src/containment-smoke.mjs appcontainer
263
-
264
- {
265
- "status": "passed",
266
- "ok": true,
267
- "backend": "windows-appcontainer",
268
- "mode": "appcontainer",
269
- "appcontainer_sid": "S-1-15-2-1856854098-2859125160-3337324312-4184761507-724572945-4025347243-2221494964",
270
- "lpac": false,
271
- "lpac_token_query_available": false,
272
- "aap_mode_evidence_ok": true,
273
- "network_capabilities": 0,
274
- "result_channel": "inherited-handle",
275
- "outside_read_denied": true,
276
- "child_process_denied": true,
277
- "normal_child_execution_denied": true,
278
- "breakaway_child_execution_denied": true,
279
- "child_control": "job-active-process-limit",
280
- "job_assignment": "atomic-attribute",
281
- "job_breakaway_enabled": false,
282
- "active_process_limit": 1,
283
- "process_memory_limit_bytes": 134217728,
284
- "profile_cleanup_ok": true
285
- }
286
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm run contained:smoke
287
-
288
- > deadbyte-mcp@0.4.5 contained:smoke
289
- > node src/contained-smoke.mjs
290
-
291
- {
292
- "status": "passed",
293
- "operations": [
294
- {
295
- "operation": "uppercase_ascii",
296
- "output": "contained-smoke.uppercase_ascii.6a6fb43a391c80ff.txt",
297
- "receipt_path": "evidence/6a8ac75d5b27a239dbb7aa8b.json",
298
- "receipt_sha256": "dfdd0436e637754548c9fb97bfe4a066c93bab5509dac57da9535c1b19b479c9",
299
- "worker_id": "contained-transform-v1",
300
- "worker_sha256": "4c582e4ab61b3f67e74af4d59c92119639c12d402eaec9314e51e52dbe6b60f3",
301
- "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
302
- "containment": {
303
- "backend": "windows-appcontainer",
304
- "mode": "appcontainer",
305
- "operation": "uppercase_ascii",
306
- "appcontainer_sid": "S-1-15-2-3610056200-593226597-4079513946-3008098806-3165113512-341744792-3972716862",
307
- "network_capabilities": 0,
308
- "job_assignment": "atomic-attribute",
309
- "job_breakaway_enabled": false,
310
- "active_process_limit": 1,
311
- "process_memory_limit_bytes": 134217728,
312
- "child_control": "job-active-process-limit",
313
- "import_transport": "host-stdin-to-profile-copy",
314
- "export_transport": "profile-copy-to-host-json",
315
- "workspace_mounted": false,
316
- "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
317
- "worker_localappdata_present": true,
318
- "worker_environment_allowlist_exact": true,
319
- "worker_drive_current_directory_set": true,
320
- "input_bytes": 33,
321
- "output_bytes": 33,
322
- "profile_cleanup_ok": true,
323
- "proof": {
324
- "token_is_appcontainer": true,
325
- "capability_count": 0,
326
- "aap_mode_evidence_ok": true,
327
- "outside_read_denied": true,
328
- "inside_write_ok": true,
329
- "in_job": true,
330
- "normal_child_execution_denied": true,
331
- "breakaway_child_execution_denied": true,
332
- "transform_ok": true
333
- }
334
- },
335
- "independent_verify": true
336
- },
337
- {
338
- "operation": "lowercase_ascii",
339
- "output": "contained-smoke.lowercase_ascii.75f25025953129a9.txt",
340
- "receipt_path": "evidence/292e4df6a6292a9f74d6e598.json",
341
- "receipt_sha256": "d43487478c0ec59dd847c4b409e3d2fb9f4883d0cc63f4dd010e6abf7777bdaf",
342
- "worker_id": "contained-transform-v1",
343
- "worker_sha256": "4c582e4ab61b3f67e74af4d59c92119639c12d402eaec9314e51e52dbe6b60f3",
344
- "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
345
- "containment": {
346
- "backend": "windows-appcontainer",
347
- "mode": "appcontainer",
348
- "operation": "lowercase_ascii",
349
- "appcontainer_sid": "S-1-15-2-3276780649-1998391335-333952113-1444525428-48836075-2746502260-548776863",
350
- "network_capabilities": 0,
351
- "job_assignment": "atomic-attribute",
352
- "job_breakaway_enabled": false,
353
- "active_process_limit": 1,
354
- "process_memory_limit_bytes": 134217728,
355
- "child_control": "job-active-process-limit",
356
- "import_transport": "host-stdin-to-profile-copy",
357
- "export_transport": "profile-copy-to-host-json",
358
- "workspace_mounted": false,
359
- "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
360
- "worker_localappdata_present": true,
361
- "worker_environment_allowlist_exact": true,
362
- "worker_drive_current_directory_set": true,
363
- "input_bytes": 33,
364
- "output_bytes": 33,
365
- "profile_cleanup_ok": true,
366
- "proof": {
367
- "token_is_appcontainer": true,
368
- "capability_count": 0,
369
- "aap_mode_evidence_ok": true,
370
- "outside_read_denied": true,
371
- "inside_write_ok": true,
372
- "in_job": true,
373
- "normal_child_execution_denied": true,
374
- "breakaway_child_execution_denied": true,
375
- "transform_ok": true
376
- }
377
- },
378
- "independent_verify": true
379
- }
380
- ]
381
- }
382
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5> npm run mcp:contained:smoke
383
-
384
- > deadbyte-mcp@0.4.5 mcp:contained:smoke
385
- > node src/mcp-contained-smoke-client.mjs
386
-
387
- {
388
- "status": "passed",
389
- "protocol_revision": "2026-07-28",
390
- "protocol_era": "modern",
391
- "tool": "contained_transform",
392
- "operations": [
393
- {
394
- "operation": "uppercase_ascii",
395
- "output": "mcp-contained.uppercase_ascii.6ab0c1b5879feab2.txt",
396
- "receipt_path": "evidence/a9e52b6a472a6668c360832b.json",
397
- "receipt_sha256": "9edb374d314efa2f75625cefe04807c47f6ef9733da41e4998f479fb11561b93",
398
- "worker_id": "contained-transform-v1",
399
- "worker_sha256": "4c582e4ab61b3f67e74af4d59c92119639c12d402eaec9314e51e52dbe6b60f3",
400
- "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
401
- "containment": {
402
- "backend": "windows-appcontainer",
403
- "mode": "appcontainer",
404
- "operation": "uppercase_ascii",
405
- "appcontainer_sid": "S-1-15-2-3557169479-1482738082-2260948297-4285290631-3480997085-1544564370-1255670799",
406
- "network_capabilities": 0,
407
- "job_assignment": "atomic-attribute",
408
- "job_breakaway_enabled": false,
409
- "active_process_limit": 1,
410
- "process_memory_limit_bytes": 134217728,
411
- "child_control": "job-active-process-limit",
412
- "import_transport": "host-stdin-to-profile-copy",
413
- "export_transport": "profile-copy-to-host-json",
414
- "workspace_mounted": false,
415
- "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
416
- "worker_localappdata_present": true,
417
- "worker_environment_allowlist_exact": true,
418
- "worker_drive_current_directory_set": true,
419
- "input_bytes": 33,
420
- "output_bytes": 33,
421
- "profile_cleanup_ok": true,
422
- "proof": {
423
- "token_is_appcontainer": true,
424
- "capability_count": 0,
425
- "aap_mode_evidence_ok": true,
426
- "outside_read_denied": true,
427
- "inside_write_ok": true,
428
- "in_job": true,
429
- "normal_child_execution_denied": true,
430
- "breakaway_child_execution_denied": true,
431
- "transform_ok": true
432
- }
433
- },
434
- "independent_verify": true
435
- },
436
- {
437
- "operation": "lowercase_ascii",
438
- "output": "mcp-contained.lowercase_ascii.faae2a50cdc42b03.txt",
439
- "receipt_path": "evidence/e5753c824439c34f91df4bf4.json",
440
- "receipt_sha256": "4611c9e0ea55de6dd84092c11341febf1db6a30282c1f7d697896dac99997619",
441
- "worker_id": "contained-transform-v1",
442
- "worker_sha256": "4c582e4ab61b3f67e74af4d59c92119639c12d402eaec9314e51e52dbe6b60f3",
443
- "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
444
- "containment": {
445
- "backend": "windows-appcontainer",
446
- "mode": "appcontainer",
447
- "operation": "lowercase_ascii",
448
- "appcontainer_sid": "S-1-15-2-3706544246-4147445628-3319095205-3169734719-1181853395-2361400424-2192748026",
449
- "network_capabilities": 0,
450
- "job_assignment": "atomic-attribute",
451
- "job_breakaway_enabled": false,
452
- "active_process_limit": 1,
453
- "process_memory_limit_bytes": 134217728,
454
- "child_control": "job-active-process-limit",
455
- "import_transport": "host-stdin-to-profile-copy",
456
- "export_transport": "profile-copy-to-host-json",
457
- "workspace_mounted": false,
458
- "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
459
- "worker_localappdata_present": true,
460
- "worker_environment_allowlist_exact": true,
461
- "worker_drive_current_directory_set": true,
462
- "input_bytes": 33,
463
- "output_bytes": 33,
464
- "profile_cleanup_ok": true,
465
- "proof": {
466
- "token_is_appcontainer": true,
467
- "capability_count": 0,
468
- "aap_mode_evidence_ok": true,
469
- "outside_read_denied": true,
470
- "inside_write_ok": true,
471
- "in_job": true,
472
- "normal_child_execution_denied": true,
473
- "breakaway_child_execution_denied": true,
474
- "transform_ok": true
475
- }
476
- },
477
- "independent_verify": true
478
- }
479
- ]
480
- }
481
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.5>
@@ -1 +0,0 @@
1
- 27a6be214004f4b71768f77f381e98b3600c4da1f927f2ea3158a5083c78d127 TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.txt