deadbyte-mcp 0.15.44 → 0.15.45

package/proof/V03-FREEZE.txt

@@ -1,27 +0,0 @@
-V0.3 REGULAR APPCONTAINER BASELINE: ACCEPTED ON TARGET WINDOWS HOST
-
-Observed in V0.3.13 target log:
-- npm test: 71/71 PASS
-- MCP 2026-07-28 smoke: PASS
-- native containment build: PASS
-- regular AppContainer full smoke: PASS
-- lpac=false
-- lpac_token_query_available=false
-- AAP behavioral mode evidence: PASS
-- network_capabilities=0
-- inherited-handle result channel
-- outside_read_denied=true
-- child_process_denied=true
-- normal_child_execution_denied=true
-- breakaway_child_execution_denied=true
-- child_control=job-active-process-limit
-- job_assignment=atomic-attribute
-- job_breakaway_enabled=false
-- active_process_limit=1
-- process_memory_limit_bytes=134217728
-- profile_cleanup_ok=true
-
-Source evidence:
-proof/TARGET-V0313-CONTAINMENT-PASS.txt
-SHA-256:
-e6a8f91b62b5fdb861ee039ae05a9c3572535d16608297ec75c6440e5ea6d20d

package/proof/V041-IPC-HOTFIX.txt

@@ -1,16 +0,0 @@
-DEADBYTE MCP V0.4.1 IPC HOTFIX
-===============================
-Target V0.4.0 observed:
-- core tests 85/85 PASS
-- MCP 2026-07-28 five-tool smoke PASS
-- native build PASS
-- V0.3 containment regression PASS
-- contained:smoke FAIL before AppContainer worker launch because deadbyte-exec.exe
-  treated Windows anonymous-pipe ERROR_BROKEN_PIPE (109) as a fatal stdin read error.
-
-V0.4.1 source change:
-- ReadStdinBounded treats only ERROR_BROKEN_PIPE as normal EOF.
-- all other ReadFile(stdin) errors remain fatal.
-- Node host still rejects rawResult.input_bytes != exact inputBytes.length.
-
-Windows V0.4.1 contained execution runtime is PENDING TARGET RETEST.

package/proof/V042-ENV-HOTFIX.txt

@@ -1,15 +0,0 @@
-DEADBYTE MCP V0.4.3 ENVIRONMENT HOTFIX
-
-Observed target failure in V0.4.1:
-  CreateProcessW(contained worker) failed with Win32 error 203
-  ERROR_ENVVAR_NOT_FOUND
-
-Patch:
-  Node trusted launcher: inherit normal host environment
-  AppContainer worker: CreateEnvironmentBlock(NULL, FALSE), explicit Unicode block
-  CreateProcessW: fixed lpApplicationName workerCopy.c_str()
-
-No shell, arbitrary executable, host workspace mount, capability grant, or Job-policy change.
-
-Target log SHA-256:
-  9c03e68e0855b65282f1506d7bd2c6152b411989f1176f6971907a628a4907e6

package/proof/V043-DRIVE-CWD-HOTFIX.txt

@@ -1,14 +0,0 @@
-V0.4.3 DRIVE-CWD HOTFIX
-======================
-Observed target V0.4.2: CreateProcessW(contained worker) failed Win32 203 after
-V0.4.2 already supplied a fresh system-only environment block.
-
-V0.4.3 adds the required hidden per-drive current-directory entry to that
-sanitary environment block, sorts the block, and keeps all other containment
-mechanisms unchanged.
-
-SOURCE TESTS: 90/90 PASS
-NODE SYNTAX: PASS
-WINDOWS NATIVE BUILD: PENDING TARGET RETEST
-CONTAINED DIRECT SMOKE: PENDING TARGET RETEST
-MCP CONTAINED SMOKE: PENDING TARGET RETEST

package/proof/V044-LOCALAPPDATA-HOTFIX.txt

@@ -1,18 +0,0 @@
-DEADBYTE MCP V0.4.4 LOCALAPPDATA BOOTSTRAP HOTFIX
-
-Observed V0.4.3 target failure:
-  CreateProcessW(contained worker) -> Win32 203
-  frozen containment regression -> PASS
-
-New worker environment policy:
-  Path
-  SystemDrive
-  SystemRoot
-  TEMP
-  TMP
-  LOCALAPPDATA
-  =<drive>:=<private AppContainer runDir>
-
-No arbitrary host environment entries are copied.
-No change to AppContainer capabilities, atomic Job, child denial, worker identity,
-workspace import/export, or MCP executable surface.

package/proof/V045-OPERATION-REGISTRY.txt

@@ -1,7 +0,0 @@
-DEADBYTE MCP V0.4.5 FIXED OPERATION REGISTRY
-
-Parent baseline: V0.4.4 target end-to-end contained execution PASS.
-Change: contained_transform accepts exactly uppercase_ascii and lowercase_ascii.
-No executable path, argv list, shell, command_run, user environment, or host workspace mount added.
-The operation id is bound through MCP schema, Node executor, native launcher, fixed worker proof, signed execution evidence, and independent verifier semantics.
-Unknown operation ids fail closed.

package/proof/V046-WORKER-REGISTRY.txt

@@ -1,12 +0,0 @@
-DEADBYTE MCP V0.4.6 FIXED EXECUTABLE REGISTRY
-
-Accepted parent: V0.4.5 target dual-operation PASS.
-
-Compile-time mapping:
-  uppercase_ascii -> contained-transform-v1 -> contained-transform-worker.exe
-  lowercase_ascii -> contained-transform-v1 -> contained-transform-worker.exe
-  reverse_bytes   -> contained-reverse-v1   -> contained-reverse-worker.exe
-
-No MCP field accepts a worker id, executable path, argv, shell, or environment block.
-The selected worker id/executable is included in validated execution evidence and signed receipt lineage.
-Independent verifier hashes the mapped package binary and recomputes transform semantics.

package/proof/V047-WORKER-MANIFEST.txt

@@ -1,18 +0,0 @@
-DEADBYTE MCP V0.4.7 RUNTIME WORKER MANIFEST ATTESTATION
-
-Accepted parent: V0.4.6 target evidence proves three operations through two fixed package-local worker binaries over both direct and MCP contained execution paths.
-
-V0.4.7 adds a build-generated bin/WORKER-REGISTRY.txt manifest that binds:
-- schema/version/policy
-- operation -> worker_id mapping
-- worker_id -> executable basename mapping
-- launcher SHA-256
-- transform worker SHA-256
-- reverse worker SHA-256
-
-The Node control plane verifies the entire manifest and all binaries before spawn.
-The native launcher independently parses the manifest, hashes launcher/workers using BCrypt SHA-256, and verifies the selected profile copy before CreateProcessW.
-The signed execution receipt binds worker_manifest_sha256 and worker_source_sha256.
-The independent verifier re-opens the manifest and current runtime binaries and verifies those bindings before semantic verification succeeds.
-
-No arbitrary executable path, argv, shell, command_run, user environment, or host workspace mount is exposed.

package/proof/V050-BATCH-TRUST-CLOSURE.txt

@@ -1,21 +0,0 @@
-DEADBYTE MCP V0.5.0 BATCH EXECUTION TRUST CLOSURE
-
-Accepted parent:
-- V0.4.7 runtime manifest attestation target PASS
-
-V0.5.0 adds in one release:
-- 256-bit fresh per-invocation challenge
-- canonical invocation request SHA-256
-- input / operation / worker-manifest / worker-id / worker-source binding
-- native BCrypt recomputation before worker spawn
-- worker proof echo of challenge + request digest
-- Node current-invocation comparison before export/signing
-- signed receipt invocation evidence
-- independent verifier invocation digest recomputation
-- partial invocation evidence rejection
-- historical no-invocation receipt compatibility
-- same-operation freshness smoke proof
-- one-command Windows batch gate
-
-No command_run, shell, argv, user executable, user worker id, user challenge,
-or host workspace mount is exposed.

package/proof/V060-ACTIVE-NETWORK-AUTHORITY.txt

@@ -1,29 +0,0 @@
-DEADBYTE MCP V0.6.0 SOURCE CANDIDATE
-
-BATCH GOALS
-- active host-positive-control loopback TCP denial proof
-- zero AppContainer network capabilities retained
-- strict MCP execution schema
-- exact native launcher/worker argv contracts
-- no executable/path/argv/shell/user-worker authority
-- one-command Windows batch gate
-
-ACTIVE NETWORK PROBE
-- trusted launcher opens 127.0.0.1 ephemeral TCP listener
-- trusted host positive-control connection must succeed
-- zero-capability AppContainer worker attempts same live endpoint
-- contained connection success is failure
-- denied attempt with non-zero Winsock error is required
-- evidence is validated before receipt signing and by independent verifier
-
-AUTHORITY PROBE
-- MCP executable/argv/path-shaped-operation attempts must reject
-- direct native extra --worker override must reject with exit 64
-- rejected attempts must not create output artifacts
-
-TARGET STATUS
-- Windows native build: PENDING
-- authority smoke: PENDING
-- active network runtime smoke: PENDING
-- direct contained smoke: PENDING
-- MCP-contained smoke: PENDING

package/proof/V070-NODE-SYNTAX.txt

@@ -1,36 +0,0 @@
-PASS src/authority-smoke.mjs
-PASS src/canonical-json.mjs
-PASS src/contained-cli.mjs
-PASS src/contained-executor.mjs
-PASS src/contained-result.mjs
-PASS src/contained-smoke.mjs
-PASS src/containment-bootstrap.mjs
-PASS src/containment-child-control.mjs
-PASS src/containment-construction.mjs
-PASS src/containment-result.mjs
-PASS src/containment-smoke.mjs
-PASS src/executor.mjs
-PASS src/hash.mjs
-PASS src/invocation.mjs
-PASS src/mcp-contained-smoke-client.mjs
-PASS src/mcp-server.mjs
-PASS src/mcp-smoke-client.mjs
-PASS src/operation-policy.mjs
-PASS src/path-policy.mjs
-PASS src/proof-cli.mjs
-PASS src/proof-worker.mjs
-PASS src/receipt.mjs
-PASS src/remote-mcp-smoke-client.mjs
-PASS src/request-identity.mjs
-PASS src/runtime-identity.mjs
-PASS src/text-policy.mjs
-PASS src/trust-init.mjs
-PASS src/trust.mjs
-PASS src/verifier-cli.mjs
-PASS src/verifier.mjs
-PASS src/version.mjs
-PASS src/worker-registry.mjs
-PASS test/contained.test.mjs
-PASS test/containment.test.mjs
-PASS test/controller.test.mjs
-PASS test/core.test.mjs