deadbyte-mcp 0.15.44 → 0.15.46

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (174) hide show
  1. package/MANIFEST.SHA256 +86 -138
  2. package/PROVENANCE.json +35 -18
  3. package/README.txt +22 -21
  4. package/RELEASE.json +369 -334
  5. package/SBOM.cdx.json +2 -2
  6. package/TEST-MATRIX.json +27 -17
  7. package/bridge/package.json +1 -1
  8. package/controller/deadbyte-controller.ps1 +1871 -1769
  9. package/controller/deadbyte-desktop-policy.json +6 -6
  10. package/controller/deadbyte-process-policy.json +4 -4
  11. package/docs/R68-COMPAT-HOST-EXEC-CANDIDATE.md +63 -0
  12. package/docs/R69-LIVE-OUTCOME-R70-POLICY-TRANSFER.md +136 -0
  13. package/docs/R70-CODING-DIGEST-SUPERVISOR-CHECKPOINT-20261013.md +42 -0
  14. package/docs/R70-FINITE-GRANT-OWNER-BOUNDARY-20261013.md +80 -0
  15. package/docs/R70-OWNER-BOOTSTRAP-CHECKPOINT-20261013.md +60 -0
  16. package/docs/R70-REFERENCE-MECHANISMS.json +95 -0
  17. package/docs/R70-TRUST-GUARD-EXPIRY-CHECKPOINT-20261013.md +47 -0
  18. package/package.json +2 -2
  19. package/scripts/benchmark-l0-r71.mjs +76 -0
  20. package/scripts/gate-windows-r71.ps1 +64 -0
  21. package/scripts/gate-windows-r72.ps1 +76 -0
  22. package/scripts/npm-release-r48.mjs +4 -0
  23. package/scripts/npm-release-readiness-r71.mjs +21 -0
  24. package/scripts/npm-release-readiness-r72.mjs +76 -0
  25. package/scripts/verify-r70-full-regression.ps1 +72 -0
  26. package/src/authority-continuity-r65.mjs +28 -8
  27. package/src/autonomous-mcp-tools.mjs +1 -1
  28. package/src/autonomous-output-contracts.mjs +4 -1
  29. package/src/autonomous-policy.mjs +54 -7
  30. package/src/capability-ledger.mjs +1 -1
  31. package/src/capability-resolver.mjs +2 -1
  32. package/src/commander-compat-runtime.mjs +30 -2
  33. package/src/deadbyte-cli.mjs +722 -719
  34. package/src/launcher-isolation.mjs +58 -0
  35. package/src/native-diff-v2.mjs +18 -5
  36. package/src/native-diff.mjs +21 -5
  37. package/src/r70-owner-approval.mjs +78 -0
  38. package/src/remote-authority.mjs +75 -75
  39. package/src/remote-live-log.mjs +48 -14
  40. package/src/remote-mcp-machine-smoke-client.mjs +84 -84
  41. package/src/remote-result-journal.mjs +1 -1
  42. package/src/runtime-update.mjs +232 -24
  43. package/src/staging-input-isolation.mjs +79 -0
  44. package/src/tool-audit.mjs +2 -0
  45. package/src/version.mjs +1 -1
  46. package/test/autonomous-local-supervisor.test.mjs +2 -1
  47. package/test/autonomous-output-contract.test.mjs +17 -1
  48. package/test/autonomous-supervisor-integration.test.mjs +2 -1
  49. package/test/capability-resolver.test.mjs +17 -0
  50. package/test/codex-autonomous-r44.test.mjs +1 -1
  51. package/test/commander-compat-runtime.test.mjs +42 -0
  52. package/test/controller-policy-preflight-r59.test.mjs +1 -0
  53. package/test/deferred-slot-operation-behavior.test.mjs +2 -2
  54. package/test/native-diff-topology-r36.test.mjs +35 -2
  55. package/test/native-diff.test.mjs +83 -3
  56. package/test/r58-cleanup-retention.test.mjs +3 -3
  57. package/test/r58-concurrent-recovery.test.mjs +3 -3
  58. package/test/r58-stale-owner.test.mjs +1 -1
  59. package/test/r59-tool-surface-compat.test.mjs +9 -5
  60. package/test/r60-authority-coherence.test.mjs +10 -2
  61. package/test/r65-authority-runtime-epoch.test.mjs +9 -1
  62. package/test/r67-isolated-slot-rollback-restore.test.mjs +2 -1
  63. package/test/r67-npm-publish-gate.test.mjs +4 -2
  64. package/test/r67-release-contract.test.mjs +8 -7
  65. package/test/r69-live-outcome.test.mjs +137 -0
  66. package/test/r70-autonomous-grant-expiry.test.mjs +89 -0
  67. package/test/r70-autonomous-policy-bootstrap.test.mjs +166 -0
  68. package/test/r70-controller-autonomous-root.test.mjs +104 -0
  69. package/test/r70-controller-grant-subset.test.mjs +28 -0
  70. package/test/r70-controller-owner-issue-boundary.test.mjs +80 -0
  71. package/test/r70-controller-policy-snapshot.test.mjs +66 -0
  72. package/test/r70-owner-approval.test.mjs +67 -0
  73. package/test/r71-full-verifier-artifact.test.mjs +28 -0
  74. package/test/r71-isolated-slot-rollback-restore.test.mjs +62 -0
  75. package/test/r71-native-diff-mcp-wire.test.mjs +75 -0
  76. package/test/r71-publish-fence.test.mjs +38 -0
  77. package/test/r71-release-identity.test.mjs +33 -0
  78. package/test/r72-launcher-isolation.test.mjs +99 -0
  79. package/test/r72-publication-fence.test.mjs +56 -0
  80. package/test/r72-publication-output-integrity.test.mjs +110 -0
  81. package/test/r72-remote-safe-contract.test.mjs +101 -0
  82. package/test/r72-staging-input-isolation.test.mjs +87 -0
  83. package/test/r72-staging-workspace-isolation.test.mjs +114 -0
  84. package/test/remote-result-journal.test.mjs +12 -0
  85. package/test/remote-session-cli.test.mjs +112 -65
  86. package/test/standing-grants.test.mjs +2 -2
  87. package/test/tool-audit.test.mjs +14 -0
  88. package/bin/appcontainer-stage.obj +0 -0
  89. package/bin/bootstrap-advapi32.obj +0 -0
  90. package/bin/bootstrap-exitcode.obj +0 -0
  91. package/bin/bootstrap-kernel32.obj +0 -0
  92. package/bin/child-control-probe.obj +0 -0
  93. package/bin/child-control-stage.obj +0 -0
  94. package/bin/contained-reverse-worker.obj +0 -0
  95. package/bin/contained-transform-worker.obj +0 -0
  96. package/bin/containment-probe.obj +0 -0
  97. package/bin/deadbyte-contain.obj +0 -0
  98. package/bin/deadbyte-desktop-input-r40.obj +0 -0
  99. package/bin/deadbyte-desktop-observer-r40.obj +0 -0
  100. package/bin/deadbyte-desktop-uia-r40.obj +0 -0
  101. package/bin/deadbyte-exec.obj +0 -0
  102. package/bin/deadbyte-hardware-observer-r45.obj +0 -0
  103. package/bin/deadbyte-native-inspect-r67.obj +0 -0
  104. package/bin/deadbyte-process-host.obj +0 -0
  105. package/bin/deadbyte-tunnel-host.obj +0 -0
  106. package/conpty-input-observer.obj +0 -0
  107. package/miniconpty.obj +0 -0
  108. package/proof/CONTAINMENT-BUILD.txt +0 -163
  109. package/proof/MCP-SMOKE-STATUS.txt +0 -9
  110. package/proof/NODE-SYNTAX.txt +0 -4
  111. package/proof/PROOF.txt +0 -6
  112. package/proof/R34-TASK8-SUPERVISOR-CHECKPOINT.json +0 -29
  113. package/proof/R34-TASK9-MCP-SURFACE-CHECKPOINT.json +0 -28
  114. package/proof/SECRET-SCAN.txt +0 -4
  115. package/proof/SOURCE-GATES.txt +0 -16
  116. package/proof/STATUS.txt +0 -11
  117. package/proof/TARGET-V0313-CONTAINMENT-PASS.sha256 +0 -1
  118. package/proof/TARGET-V0313-CONTAINMENT-PASS.txt +0 -215
  119. package/proof/TARGET-V040-CONTAINED-IPC-FAIL.sha256 +0 -1
  120. package/proof/TARGET-V040-CONTAINED-IPC-FAIL.txt +0 -299
  121. package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  122. package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.txt +0 -311
  123. package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  124. package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.txt +0 -313
  125. package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.sha256 +0 -1
  126. package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.txt +0 -308
  127. package/proof/TARGET-V044-CONTAINED-PASS.sha256 +0 -1
  128. package/proof/TARGET-V044-CONTAINED-PASS.txt +0 -432
  129. package/proof/TARGET-V045-DUAL-OPERATION-PASS.sha256 +0 -1
  130. package/proof/TARGET-V045-DUAL-OPERATION-PASS.txt +0 -481
  131. package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.sha256 +0 -1
  132. package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.txt +0 -610
  133. package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.sha256 +0 -1
  134. package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.txt +0 -642
  135. package/proof/TARGET-V050-BATCH-GATE-PASS.sha256 +0 -1
  136. package/proof/TARGET-V050-BATCH-GATE-PASS.txt +0 -713
  137. package/proof/TESTS.txt +0 -686
  138. package/proof/TRUST-EPHEMERAL.txt +0 -4
  139. package/proof/V03-FREEZE.txt +0 -27
  140. package/proof/V041-IPC-HOTFIX.txt +0 -16
  141. package/proof/V042-ENV-HOTFIX.txt +0 -15
  142. package/proof/V043-DRIVE-CWD-HOTFIX.txt +0 -14
  143. package/proof/V044-LOCALAPPDATA-HOTFIX.txt +0 -18
  144. package/proof/V045-OPERATION-REGISTRY.txt +0 -7
  145. package/proof/V046-WORKER-REGISTRY.txt +0 -12
  146. package/proof/V047-WORKER-MANIFEST.txt +0 -18
  147. package/proof/V050-BATCH-TRUST-CLOSURE.txt +0 -21
  148. package/proof/V060-ACTIVE-NETWORK-AUTHORITY.txt +0 -29
  149. package/proof/V070-NODE-SYNTAX.txt +0 -36
  150. package/proof/V070-NODE-TESTS.txt +0 -752
  151. package/proof/V070-PACK-DRY-RUN.txt +0 -126
  152. package/proof/V070-SOURCE-GATE.txt +0 -30
  153. package/proof/V070-STATIC-SCAN.txt +0 -4
  154. package/proof/V070-WINDOWS-GATE-PENDING.txt +0 -25
  155. package/proof/V071-NODE-SYNTAX.txt +0 -1
  156. package/proof/V071-NODE-TESTS.txt +0 -796
  157. package/proof/V071-PACK-DRY-RUN.json +0 -656
  158. package/proof/V071-SOURCE-GATE.txt +0 -16
  159. package/proof/V071-WINDOWS-GATE-PENDING.txt +0 -24
  160. package/proof/V073-NODE-SYNTAX.txt +0 -4
  161. package/proof/V073-SOURCE-GATE.txt +0 -21
  162. package/proof/V073-STATIC-SCAN.txt +0 -10
  163. package/proof/V073-WINDOWS-GATE-PENDING.txt +0 -5
  164. package/proof/VERIFY.txt +0 -7
  165. package/proof/WINDOWS-CONTAINED-STATUS.txt +0 -5
  166. package/proof/WINDOWS-CONTAINMENT-STATUS.txt +0 -3
  167. package/proof/commander-closure-20260927/CONTINUATION.json +0 -43
  168. package/proof/commander-closure-20260927/RESULT.json +0 -30
  169. package/proof/commander-closure-20260927/SEARCH-CONTINUATION.json +0 -30
  170. package/proof/commander-closure-20260927/XLS-REFERENCE-PROBE.json +0 -13
  171. package/proof/commander-closure-20260928/DIFFERENTIAL-CHECKPOINT.json +0 -122
  172. package/proof/r59-full-regression-current.json +0 -13
  173. package/proof/r59-full-regression-current.stderr.log +0 -0
  174. package/proof/r59-full-regression-current.stdout.log +0 -1268
@@ -1,163 +0,0 @@
1
- ==== launcher ====
2
- deadbyte-contain.cpp
3
- exit_code=0
4
- ==== probe ====
5
- containment-probe.cpp
6
- exit_code=0
7
- ==== bootstrap-kernel32 ====
8
- bootstrap-kernel32.cpp
9
- exit_code=0
10
- ==== bootstrap-advapi32 ====
11
- bootstrap-advapi32.cpp
12
- exit_code=0
13
- ==== construction-launcher ====
14
- appcontainer-stage.cpp
15
- exit_code=0
16
- ==== bootstrap-exitcode ====
17
- bootstrap-exitcode.cpp
18
- exit_code=0
19
- ==== child-control-launcher ====
20
- child-control-stage.cpp
21
- exit_code=0
22
- ==== child-control-probe ====
23
- child-control-probe.cpp
24
- exit_code=0
25
- ==== contained-launcher ====
26
- deadbyte-exec.cpp
27
- exit_code=0
28
- ==== contained-worker ====
29
- contained-transform-worker.cpp
30
- exit_code=0
31
- ==== contained-reverse-worker ====
32
- contained-reverse-worker.cpp
33
- exit_code=0
34
- ==== named-tunnel-host ====
35
- deadbyte-tunnel-host.cpp
36
- exit_code=0
37
- ==== process-host ====
38
- deadbyte-process-host.cpp
39
- exit_code=0
40
- ==== probe-dependencies ====
41
-
42
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\containment-probe.exe
43
-
44
- File Type: EXECUTABLE IMAGE
45
-
46
- Image has the following dependencies:
47
-
48
- ADVAPI32.dll
49
- KERNEL32.dll
50
-
51
- Summary
52
-
53
- 2000 .data
54
- 1000 .fptable
55
- 2000 .pdata
56
- E000 .rdata
57
- 1000 .reloc
58
- 19000 .text
59
- exit_code=0
60
- ==== contained-launcher-dependencies ====
61
-
62
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\deadbyte-exec.exe
63
-
64
- File Type: EXECUTABLE IMAGE
65
-
66
- Image has the following dependencies:
67
-
68
- USERENV.dll
69
- ADVAPI32.dll
70
- ole32.dll
71
- bcrypt.dll
72
- WS2_32.dll
73
- KERNEL32.dll
74
-
75
- Summary
76
-
77
- 3000 .data
78
- 1000 .fptable
79
- 3000 .pdata
80
- 17000 .rdata
81
- 1000 .reloc
82
- 3B000 .text
83
- exit_code=0
84
- ==== contained-worker-dependencies ====
85
-
86
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\contained-transform-worker.exe
87
-
88
- File Type: EXECUTABLE IMAGE
89
-
90
- Image has the following dependencies:
91
-
92
- ADVAPI32.dll
93
- WS2_32.dll
94
- KERNEL32.dll
95
-
96
- Summary
97
-
98
- 2000 .data
99
- 1000 .fptable
100
- 2000 .pdata
101
- F000 .rdata
102
- 1000 .reloc
103
- 19000 .text
104
- exit_code=0
105
- ==== contained-reverse-worker-dependencies ====
106
-
107
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\contained-reverse-worker.exe
108
-
109
- File Type: EXECUTABLE IMAGE
110
-
111
- Image has the following dependencies:
112
-
113
- ADVAPI32.dll
114
- WS2_32.dll
115
- KERNEL32.dll
116
-
117
- Summary
118
-
119
- 2000 .data
120
- 1000 .fptable
121
- 2000 .pdata
122
- F000 .rdata
123
- 1000 .reloc
124
- 19000 .text
125
- exit_code=0
126
- ==== named-tunnel-host-dependencies ====
127
-
128
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\deadbyte-tunnel-host.exe
129
-
130
- File Type: EXECUTABLE IMAGE
131
-
132
- Image has the following dependencies:
133
-
134
- KERNEL32.dll
135
-
136
- Summary
137
-
138
- 2000 .data
139
- 1000 .fptable
140
- 2000 .pdata
141
- C000 .rdata
142
- 1000 .reloc
143
- 18000 .text
144
- exit_code=0
145
- ==== process-host-dependencies ====
146
-
147
- Dump of file D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.44-r67\bin\deadbyte-process-host.exe
148
-
149
- File Type: EXECUTABLE IMAGE
150
-
151
- Image has the following dependencies:
152
-
153
- KERNEL32.dll
154
-
155
- Summary
156
-
157
- 2000 .data
158
- 1000 .fptable
159
- 2000 .pdata
160
- F000 .rdata
161
- 1000 .reloc
162
- 1C000 .text
163
- exit_code=0
@@ -1,9 +0,0 @@
1
- DEADBYTE MCP V0.6.0 MCP LIVE SMOKE
2
- STATUS=PASS
3
- PROTOCOL_REVISION=2026-07-28
4
- PROTOCOL_ERA=modern
5
- TOOLS=contained_transform,evidence_verify,file_read,proof_execute,workspace_open
6
- SIGNATURE_ALGORITHM=ed25519
7
- SIGNATURE_VALID=true
8
- INDEPENDENT_VERIFY=true
9
- OUTPUT_SHA256=72562501a654ddbb4f8810f8ba9017d02b29516853101456445e7642988fbd1b
@@ -1,4 +0,0 @@
1
- DEADBYTE_MCP_VERSION=0.7.3
2
- NODE_SYNTAX_FILES=44
3
- NODE_SYNTAX_PASS=44
4
- NODE_SYNTAX_FAIL=0
package/proof/PROOF.txt DELETED
@@ -1,6 +0,0 @@
1
- DEADBYTE MCP V0.6.0 SIGNED PROOF REGRESSION
2
- STATUS=PASS
3
- RECEIPT_SHA256=5bc4f1ace478b79fc491811888b039ebffb72d09f7cd51f520f6569a0cc3d0d4
4
- KEY_ID=64ee8445e138c19a2049dc4242924d056f2b62913ed65364916413eb684a946e
5
- SIGNATURE_ALGORITHM=ed25519
6
- OUTPUT_SHA256=72562501a654ddbb4f8810f8ba9017d02b29516853101456445e7642988fbd1b
@@ -1,29 +0,0 @@
1
- {
2
- "schema": "deadbyte.r34.task8-checkpoint.v1",
3
- "task": 8,
4
- "status": "passed",
5
- "workspace": "D:\\Projects\\deadbyte-mcp-r34-loop-engine",
6
- "node_executable_sha256": "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
7
- "sources": {
8
- "src/autonomous-local-supervisor.mjs": "ab0158c3f6e270ee367ae96455dd2b75a902c808b2a10ac2c5b75fdda00be6c3",
9
- "src/autonomous-supervisor.mjs": "8ea06b5941de9b346ab4e97ff6ed236964b864fbe725602baee3a54dd74527c0",
10
- "src/autonomous-supervisor-host.mjs": "335022086ef41e6cc9853468d928acc864deab8009383dc22518a6ec7e749fa1",
11
- "src/deadbyte-cli.mjs": "0b0d41a51559502a6ff377a4f74e6f80ea77d37002a700e04bd7c4dd3f226b42",
12
- "controller/deadbyte-controller.ps1": "279dfe20345193ca229cc442b25796f12d4c8ec9f9d3e2d26a607a7342b96a5a",
13
- "controller/deadbyte-controller.config.psd1.example": "f20a5bf0df576dbdd32af657640b26c5c50c39dce0b465b7488c218917c729f7"
14
- },
15
- "regression": {
16
- "tests": 40,
17
- "passed": 40,
18
- "failed": 0,
19
- "receipt_id": "473fb1f0f7e6a2dec1ea9d80",
20
- "receipt_sha256": "255e3679051eff46ae745b16f07d6a3c40f87e42259ac651ef286c9d876ceae2",
21
- "receipt_signature_valid": true,
22
- "marker": "TASK8_REGRESSION=PASS"
23
- },
24
- "authority_contract": {
25
- "self_arm": false,
26
- "recovery_operations": ["resume","disarmautonomous","disarmcoding","disarmprocess","disarmhost","status"],
27
- "final_required": "ONLINE + process/coding/autonomous/host DISARMED"
28
- }
29
- }
@@ -1,28 +0,0 @@
1
- {
2
- "schema": "deadbyte.r34-task9-checkpoint.v1",
3
- "status": "passed",
4
- "workspace": "D:\\Projects\\deadbyte-mcp-r34-loop-engine",
5
- "public_tool_count": 68,
6
- "public_tool_unique_count": 68,
7
- "public_tool_catalog_sha256": "bb7c08e116178e3da4b577b591f7058eb6caf7632358e765d28ccb20b2e36f45",
8
- "mcp_server_sha256": "5a6cd82c332e4cef30c4ccfeb12f8cb3634cb6c92104931768b42ba6a84b62b3",
9
- "controller_sha256": "cf8ab26a7481801da07c5c0a842df4ce1279854ed67781f967e5412da5c2aa3d",
10
- "supervisor_integration_test_sha256": "127e170995460daabab88860f20f1b4c2416839e018df0e1cda23b58d032beab",
11
- "exact_surface_gate": {
12
- "tests": 19,
13
- "pass": 19,
14
- "fail": 0,
15
- "receipt_id": "dc0b7e9c6c9e340c037bc54a",
16
- "receipt_sha256": "f6b8ac9b6d499d51f60c7f8053a2e591e09654cdfe5bf69c449b15d133e48506"
17
- },
18
- "catalog_observation": {
19
- "receipt_id": "7dd6df7d9b575e786101d1d0",
20
- "receipt_sha256": "226e0861c01cb485ef94b91c1562a3cb70123698b9a52bb62ba883940be940cf"
21
- },
22
- "supervision": {
23
- "in_process_compatibility": true,
24
- "external_owner_mode": true,
25
- "bridge_external_mode_does_not_execute_goal": true,
26
- "standalone_host_advances_durable_goal": true
27
- }
28
- }
@@ -1,4 +0,0 @@
1
- DEADBYTE_MCP_VERSION=0.7.3
2
- RESULT=PASS
3
- No private-key material, MCP secret path literal, node_modules, shell:true, broad taskkill-by-image, or Stop-Process -Name occurs in the source package.
4
- The tunnel stdio compatibility adapter imports no child_process API and performs no file write.
@@ -1,16 +0,0 @@
1
- DEADBYTE MCP V0.7.3 SOURCE/ADVERSARIAL GATES
2
- TESTS=142
3
- PASS=142
4
- FAIL=0
5
- TUNNEL_STDIO_COMPAT_TESTS=10_10_PASS
6
- NODE_SYNTAX=PASS_44_44
7
- PROTOCOL_REVISION=2026-07-28
8
- STRICT_SDK_LEGACY_POLICY=reject
9
- TUNNEL_STARTUP_PROBE_COMPAT=SOURCE_PASS_TARGET_PENDING
10
- LEGACY_CAPABILITY_TRANSLATION=NONE
11
- SIGNED_PROOF_REGRESSION=PASS
12
- INDEPENDENT_VERIFIER_REGRESSION=PASS
13
- ACTIVE_NETWORK_SOURCE_GATES=PASS
14
- EXECUTION_AUTHORITY_SOURCE_GATES=PASS
15
- PRIVILEGED_HOST_PLANE_SOURCE_GATES=PASS
16
- WINDOWS_NATIVE_BATCH_GATE=PENDING_TARGET
package/proof/STATUS.txt DELETED
@@ -1,11 +0,0 @@
1
- DEADBYTE MCP V0.7.3
2
- SOURCE_TESTS=PASS_142_142
3
- TUNNEL_STDIO_COMPAT=SOURCE_PASS_TARGET_PENDING
4
- MCP_PROTOCOL=2026-07-28
5
- STRICT_CORE_LEGACY=REJECT
6
- LEGACY_STARTUP_PROBE_ADAPTER=OPTIONAL_NARROW_PREFILTER
7
- LEGACY_CAPABILITY_TRANSLATION=NONE
8
- PRIVILEGED_HOST_PLANE=LOCAL_POLICY_PLUS_EXPIRING_ARM_LEASE
9
- GENERAL_UNBOUNDED_COMMAND_EXECUTION=NOT_EXPOSED
10
- WINDOWS_BATCH_GATE=PENDING_TARGET
11
- PUBLIC_TUNNEL_GATE=PENDING_TARGET
@@ -1 +0,0 @@
1
- e6a8f91b62b5fdb861ee039ae05a9c3572535d16608297ec75c6440e5ea6d20d TARGET-V0313-CONTAINMENT-PASS.txt
@@ -1,215 +0,0 @@
1
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm install
2
-
3
- added 14 packages, and audited 15 packages in 963ms
4
-
5
- 2 packages are looking for funding
6
- run `npm fund` for details
7
-
8
- found 0 vulnerabilities
9
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
10
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm test
11
-
12
- > deadbyte-mcp@0.3.13 test
13
- > node --test test/*.test.mjs
14
-
15
- ✔ containment result validator accepts the complete LPAC invariant set (1.1396ms)
16
- ✔ containment result validator accepts the complete regular AppContainer invariant set (0.6282ms)
17
- ✔ containment result validator refuses mode confusion (0.3449ms)
18
- ✔ containment result validator rejects a readable host canary (0.1322ms)
19
- ✔ containment result validator rejects any granted capability (0.1238ms)
20
- ✔ containment result validator rejects child payload execution (0.0892ms)
21
- ✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.104ms)
22
- ✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.089ms)
23
- ✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1262ms)
24
- ✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1888ms)
25
- ✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1078ms)
26
- ✔ containment result validator rejects LPAC that can read the AAP canary (0.0746ms)
27
- ✔ containment result validator rejects missing Job assignment (0.0842ms)
28
- ✔ containment result validator rejects timeout (0.0505ms)
29
- ✔ containment result validator rejects non-atomic Job assignment (0.0615ms)
30
- ✔ containment result validator rejects enabled breakaway (0.0772ms)
31
- ✔ containment result validator rejects the broken token child-policy mechanism (0.0735ms)
32
- ✔ containment result validator rejects breakaway child payload execution (0.071ms)
33
- ✔ containment result validator rejects a filesystem result channel (0.0446ms)
34
- ✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.3153ms)
35
- ✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.6526ms)
36
- ✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5487ms)
37
- ✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.4706ms)
38
- ✔ native probe link contract includes Advapi32 for token inspection APIs (0.6161ms)
39
- ✔ native launcher narrows SID text only through explicit ASCII validation (0.4779ms)
40
- ✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.7954ms)
41
- ✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5384ms)
42
- ✔ containment validator reports the probe invariant before aggregate failed status (0.1442ms)
43
- ✔ containment smoke includes the raw probe measurement on invariant failure (0.4933ms)
44
- ✔ native LPAC probe uses the static MSVC runtime (0.6517ms)
45
- ✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5705ms)
46
- ✔ native launcher preserves symbolic early-loader failure evidence (0.5297ms)
47
- ✔ native bootstrap probes have custom no-CRT entrypoints (0.7356ms)
48
- ✔ native build links bootstrap probes without default CRT libraries (0.4126ms)
49
- ✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.6276ms)
50
- ✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (0.5048ms)
51
- ✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (1.0869ms)
52
- ✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.7696ms)
53
- ✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.6397ms)
54
- ✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5718ms)
55
- ✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.4928ms)
56
- ✔ construction ladder adds containment mechanisms as isolated transitions (0.5602ms)
57
- ✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.7124ms)
58
- ✔ construction diagnostic reports the first failing transition without fallback (0.5295ms)
59
- ✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7217ms)
60
- ✔ construction diagnostic refuses to run when native build artifacts are missing (0.4939ms)
61
- ✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.5038ms)
62
- ✔ Job child-control candidate sets active process limit one and never enables breakaway (0.631ms)
63
- ✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4815ms)
64
- ✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.5638ms)
65
- ✔ native build produces child-control launcher and hostile probe with MSVC (0.6516ms)
66
- ✔ package exposes explicit child-control diagnostic gate (0.7295ms)
67
- ✔ full containment probe verifies normal and explicit breakaway child payload denial (1.0875ms)
68
- ✔ package default containment smoke targets the observed regular AppContainer baseline (0.4261ms)
69
- ✔ path traversal is denied (10.1277ms)
70
- ✔ absolute path is denied (3.7872ms)
71
- ✔ symlink escape is denied where symlinks are permitted (4.8939ms)
72
- ✔ proof execution creates deterministic output and signed verifiable receipt (58.5685ms)
73
- ✔ independent verifier process accepts valid signed evidence (95.0005ms)
74
- ✔ input source may change later because receipt preserves exact input snapshot (49.4795ms)
75
- ✔ tampered output fails independent verification (47.1297ms)
76
- ✔ tampered input snapshot fails independent verification (48.5015ms)
77
- ✔ tampered receipt fails its canonical self hash (46.4563ms)
78
- ✔ recomputed self hash cannot forge Ed25519 attestation (49.0947ms)
79
- ✔ wrong public key cannot verify receipt (49.6119ms)
80
- ✔ signing key inside workspace is denied (5.3598ms)
81
- ✔ proof execution refuses to run without a signing key (3.8094ms)
82
- ✔ trust key generation refuses to overwrite an existing keypair (2.2646ms)
83
- ✔ pre-existing output is denied instead of overwritten (5.0484ms)
84
- ✔ output parent symlink escape is denied (3.84ms)
85
- ✔ distinct output names allow repeated signed proofs without weakening no-overwrite (90.0468ms)
86
- ℹ tests 71
87
- ℹ suites 0
88
- ℹ pass 71
89
- ℹ fail 0
90
- ℹ cancelled 0
91
- ℹ skipped 0
92
- ℹ todo 0
93
- ℹ duration_ms 652.2955
94
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
95
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run mcp:smoke
96
-
97
- > deadbyte-mcp@0.3.13 mcp:smoke
98
- > node src/mcp-smoke-client.mjs
99
-
100
- {
101
- "status": "passed",
102
- "protocol_revision": "2026-07-28",
103
- "protocol_era": "modern",
104
- "tools": [
105
- "evidence_verify",
106
- "file_read",
107
- "proof_execute",
108
- "workspace_open"
109
- ],
110
- "workspace_id": "demo",
111
- "output": "mcp-output.d0c35d88430ba1cd.txt",
112
- "receipt_path": "evidence/bc785479d614eaf09585840a.json",
113
- "receipt_sha256": "14c158c50e2a1fa94e179af2c8bfe23faf8a18d1c9f7010fa6bd97c80ef5006a",
114
- "key_id": "482753a0e96d249a3b7131eae751b46bd50ed93299ff220c47cb8ef31a03ef1f",
115
- "signature_algorithm": "ed25519",
116
- "signature_valid": true,
117
- "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
118
- "independent_verify": true
119
- }
120
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
121
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run containment:build
122
-
123
- > deadbyte-mcp@0.3.13 containment:build
124
- > powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
125
-
126
- ==== launcher ====
127
- deadbyte-contain.cpp
128
- ==== probe ====
129
- containment-probe.cpp
130
- ==== bootstrap-kernel32 ====
131
- bootstrap-kernel32.cpp
132
- ==== bootstrap-advapi32 ====
133
- bootstrap-advapi32.cpp
134
- ==== construction-launcher ====
135
- appcontainer-stage.cpp
136
- ==== bootstrap-exitcode ====
137
- bootstrap-exitcode.cpp
138
- ==== child-control-launcher ====
139
- child-control-stage.cpp
140
- ==== child-control-probe ====
141
- child-control-probe.cpp
142
- ==== probe-dependencies ====
143
-
144
- Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13\bin\containment-probe.exe
145
-
146
- File Type: EXECUTABLE IMAGE
147
-
148
- Image has the following dependencies:
149
-
150
- ADVAPI32.dll
151
- KERNEL32.dll
152
-
153
- Summary
154
-
155
- 2000 .data
156
- 1000 .fptable
157
- 2000 .pdata
158
- E000 .rdata
159
- 1000 .reloc
160
- 19000 .text
161
- {
162
- "status": "built",
163
- "compiler": "msvc-x64",
164
- "target": "windows-10-or-newer",
165
- "diagnostics": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\proof\\CONTAINMENT-BUILD.txt",
166
- "launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\deadbyte-contain.exe",
167
- "launcher_sha256": "c2cfd6aefb9cb0666293596021e66cff94e0874caecbc3d58ad3ac605a2960b5",
168
- "probe": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\containment-probe.exe",
169
- "probe_sha256": "caea20624c4313157c88e594f049592c38f6b60073b781a9f4774ad4b6116059",
170
- "probe_runtime": "static-crt",
171
- "probe_dynamic_crt_dependencies": [
172
-
173
- ],
174
- "bootstrap_kernel32": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-kernel32.exe",
175
- "bootstrap_kernel32_sha256": "47c74d6e1280a77585ec79766f5a3290d1a65a63821ad69aa8dbd209d2a682b4",
176
- "bootstrap_advapi32": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-advapi32.exe",
177
- "bootstrap_advapi32_sha256": "a15b81e08d2cb939e9ef73259176e7cd47b28598fb42ae160237ce7d973ad819",
178
- "construction_launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\appcontainer-stage.exe",
179
- "construction_launcher_sha256": "089fe97889b071afa60758ebd9b89664f3276124cf717460e0f7a77dde8e8be5",
180
- "bootstrap_exitcode": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-exitcode.exe",
181
- "bootstrap_exitcode_sha256": "60988e03c38cfc580f7cb16bdd70e170f91f396f98f8cde3b739b7d2bdaf81fe",
182
- "child_control_launcher": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\child-control-stage.exe",
183
- "child_control_launcher_sha256": "51d7237b8400efc23362778456aa0dccce486eb2aaeb34c61ea6c0b7cd3741ac",
184
- "child_control_probe": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\child-control-probe.exe",
185
- "child_control_probe_sha256": "c99f1ce1e8e1c2dccd92e351a502831da773252685e56c03c3c49375dab49a77"
186
- }
187
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
188
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run containment:smoke
189
-
190
- > deadbyte-mcp@0.3.13 containment:smoke
191
- > node src/containment-smoke.mjs appcontainer
192
-
193
- {
194
- "status": "passed",
195
- "ok": true,
196
- "backend": "windows-appcontainer",
197
- "mode": "appcontainer",
198
- "appcontainer_sid": "S-1-15-2-4111943323-3496647161-2835768962-2457042568-2197073676-23766261-1459042700",
199
- "lpac": false,
200
- "lpac_token_query_available": false,
201
- "aap_mode_evidence_ok": true,
202
- "network_capabilities": 0,
203
- "result_channel": "inherited-handle",
204
- "outside_read_denied": true,
205
- "child_process_denied": true,
206
- "normal_child_execution_denied": true,
207
- "breakaway_child_execution_denied": true,
208
- "child_control": "job-active-process-limit",
209
- "job_assignment": "atomic-attribute",
210
- "job_breakaway_enabled": false,
211
- "active_process_limit": 1,
212
- "process_memory_limit_bytes": 134217728,
213
- "profile_cleanup_ok": true
214
- }
215
- PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
@@ -1 +0,0 @@
1
- 8e14e29e28e0d1eaf50de4dc6c056976d664525c4be3307ec03a1cf0063ed180 TARGET-V040-CONTAINED-IPC-FAIL.txt