deadbyte-mcp 0.15.44 → 0.15.46

package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.txt

@@ -1,610 +0,0 @@
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm install
-
-added 14 packages, and audited 15 packages in 1s
-
-2 packages are looking for funding
-  run `npm fund` for details
-
-found 0 vulnerabilities
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm test
-
-> deadbyte-mcp@0.4.6 test
-> node --test test/*.test.mjs
-
-✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (5.2831ms)
-✔ contained executor rejects a launcher-reported truncated stdin import (0.7205ms)
-✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.9016ms)
-✔ AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state (1.0704ms)
-✔ contained launcher reports the exact bootstrap environment policy in runtime evidence (0.6802ms)
-✔ contained execution validator rejects a missing LOCALAPPDATA bootstrap marker (0.7034ms)
-✔ contained execution validator rejects a non-exact worker environment allowlist (0.1537ms)
-✔ contained execution validator rejects a missing drive-current-directory environment entry (0.1235ms)
-✔ contained execution validator accepts the complete fixed-transform invariant set (0.2301ms)
-✔ contained execution validator rejects any granted capability (0.2198ms)
-✔ contained execution validator rejects host workspace mounting (0.1763ms)
-✔ contained execution validator rejects non-atomic Job assignment (0.1239ms)
-✔ contained execution validator rejects normal child payload execution (0.098ms)
-✔ contained execution validator rejects explicit breakaway payload execution (0.0678ms)
-✔ contained execution validator rejects a non-AppContainer worker (0.0666ms)
-✔ contained execution source has a compile-time worker registry and no user executable parameter (3.3251ms)
-✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.8859ms)
-✔ contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial (1.0888ms)
-✔ native build produces the contained launcher and worker with static runtime (0.8502ms)
-✔ receipt and verifier bind contained worker, launcher and independent transform semantics (1.6842ms)
-✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.8195ms)
-✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (26.2311ms)
-✔ contained operation registry accepts lowercase_ascii and rejects unknown operations (0.328ms)
-✔ native launcher uses a compile-time operation-to-executable registry (1.2498ms)
-✔ contained execution validator binds operation to fixed worker identity and executable (0.2404ms)
-✔ MCP contained_transform schema is a compile-time operation enum with no executable surface (0.5458ms)
-✔ contained receipt verifies lowercase_ascii semantics and rejects semantic tamper (14.8235ms)
-✔ contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper (14.7252ms)
-✔ containment result validator accepts the complete LPAC invariant set (1.2875ms)
-✔ containment result validator accepts the complete regular AppContainer invariant set (0.899ms)
-✔ containment result validator refuses mode confusion (0.3977ms)
-✔ containment result validator rejects a readable host canary (0.1605ms)
-✔ containment result validator rejects any granted capability (0.1368ms)
-✔ containment result validator rejects child payload execution (0.0996ms)
-✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1537ms)
-✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1299ms)
-✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1821ms)
-✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1844ms)
-✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1301ms)
-✔ containment result validator rejects LPAC that can read the AAP canary (0.0918ms)
-✔ containment result validator rejects missing Job assignment (0.1336ms)
-✔ containment result validator rejects timeout (0.096ms)
-✔ containment result validator rejects non-atomic Job assignment (0.1292ms)
-✔ containment result validator rejects enabled breakaway (0.1593ms)
-✔ containment result validator rejects the broken token child-policy mechanism (0.146ms)
-✔ containment result validator rejects breakaway child payload execution (0.1439ms)
-✔ containment result validator rejects a filesystem result channel (0.1666ms)
-✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.5805ms)
-✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.7849ms)
-✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5969ms)
-✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.6326ms)
-✔ native probe link contract includes Advapi32 for token inspection APIs (0.6154ms)
-✔ native launcher narrows SID text only through explicit ASCII validation (0.715ms)
-✔ native result channel is an explicitly inherited one-way handle, not a result path grant (1.0342ms)
-✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5159ms)
-✔ containment validator reports the probe invariant before aggregate failed status (0.2213ms)
-✔ containment smoke includes the raw probe measurement on invariant failure (0.624ms)
-✔ native LPAC probe uses the static MSVC runtime (1.1127ms)
-✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.965ms)
-✔ native launcher preserves symbolic early-loader failure evidence (0.68ms)
-✔ native bootstrap probes have custom no-CRT entrypoints (0.9439ms)
-✔ native build links bootstrap probes without default CRT libraries (0.6135ms)
-✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.8019ms)
-✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.533ms)
-✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.5646ms)
-✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.6403ms)
-✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5619ms)
-✔ package exposes separate LPAC and regular AppContainer smoke gates (0.6635ms)
-✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.7046ms)
-✔ construction ladder adds containment mechanisms as isolated transitions (0.5918ms)
-✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.8461ms)
-✔ construction diagnostic reports the first failing transition without fallback (0.5212ms)
-✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7974ms)
-✔ construction diagnostic refuses to run when native build artifacts are missing (0.7547ms)
-✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.6317ms)
-✔ Job child-control candidate sets active process limit one and never enables breakaway (0.5331ms)
-✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.415ms)
-✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.4767ms)
-✔ native build produces child-control launcher and hostile probe with MSVC (0.5133ms)
-✔ package exposes explicit child-control diagnostic gate (0.6115ms)
-✔ full containment probe verifies normal and explicit breakaway child payload denial (1.1768ms)
-✔ package default containment smoke targets the observed regular AppContainer baseline (0.5067ms)
-✔ path traversal is denied (12.019ms)
-✔ absolute path is denied (3.5821ms)
-✔ symlink escape is denied where symlinks are permitted (4.6492ms)
-✔ proof execution creates deterministic output and signed verifiable receipt (65.9119ms)
-✔ independent verifier process accepts valid signed evidence (116.8036ms)
-✔ input source may change later because receipt preserves exact input snapshot (50.1667ms)
-✔ tampered output fails independent verification (51.655ms)
-✔ tampered input snapshot fails independent verification (51.0799ms)
-✔ tampered receipt fails its canonical self hash (48.6574ms)
-✔ recomputed self hash cannot forge Ed25519 attestation (57.4348ms)
-✔ wrong public key cannot verify receipt (65.6433ms)
-✔ signing key inside workspace is denied (6.6654ms)
-✔ proof execution refuses to run without a signing key (2.7941ms)
-✔ trust key generation refuses to overwrite an existing keypair (2.1517ms)
-✔ pre-existing output is denied instead of overwritten (4.9526ms)
-✔ output parent symlink escape is denied (3.7766ms)
-✔ distinct output names allow repeated signed proofs without weakening no-overwrite (106.3125ms)
-ℹ tests 99
-ℹ suites 0
-ℹ pass 99
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 748.0267
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run mcp:smoke
-
-> deadbyte-mcp@0.4.6 mcp:smoke
-> node src/mcp-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tools": [
-    "contained_transform",
-    "evidence_verify",
-    "file_read",
-    "proof_execute",
-    "workspace_open"
-  ],
-  "workspace_id": "demo",
-  "output": "mcp-output.d610a649b2d437cb.txt",
-  "receipt_path": "evidence/4a5d5894af1a95e11b0f5c3c.json",
-  "receipt_sha256": "fcebd5fb08e69cc564cbfdc05155d91e65648ddc0cbfed25cb145376550b7d9d",
-  "key_id": "84ecbc6d3380c96f12da7f2b6de0208cd89cff46b2411f10ba610514bea1c68e",
-  "signature_algorithm": "ed25519",
-  "signature_valid": true,
-  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run containment:build
-
-> deadbyte-mcp@0.4.6 containment:build
-> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
-
-==== launcher ====
-deadbyte-contain.cpp
-==== probe ====
-containment-probe.cpp
-==== bootstrap-kernel32 ====
-bootstrap-kernel32.cpp
-==== bootstrap-advapi32 ====
-bootstrap-advapi32.cpp
-==== construction-launcher ====
-appcontainer-stage.cpp
-==== bootstrap-exitcode ====
-bootstrap-exitcode.cpp
-==== child-control-launcher ====
-child-control-stage.cpp
-==== child-control-probe ====
-child-control-probe.cpp
-==== contained-launcher ====
-deadbyte-exec.cpp
-==== contained-worker ====
-contained-transform-worker.cpp
-==== contained-reverse-worker ====
-contained-reverse-worker.cpp
-==== probe-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\containment-probe.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-==== contained-launcher-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\deadbyte-exec.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    USERENV.dll
-    ADVAPI32.dll
-    ole32.dll
-    KERNEL32.dll
-
-  Summary
-
-        3000 .data
-        1000 .fptable
-        3000 .pdata
-       15000 .rdata
-        1000 .reloc
-       34000 .text
-==== contained-worker-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\contained-transform-worker.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-==== contained-reverse-worker-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\contained-reverse-worker.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-{
-    "status":  "built",
-    "compiler":  "msvc-x64",
-    "target":  "windows-10-or-newer",
-    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\proof\\CONTAINMENT-BUILD.txt",
-    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\deadbyte-contain.exe",
-    "launcher_sha256":  "ebeb0db414fa7392cfb30e01350b0ed8399a53078a0b68c15ec38c436c91eab8",
-    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\containment-probe.exe",
-    "probe_sha256":  "8cfec49774ef33f83e84c6245de25da2f7fe944b58ed06ffea66b9326c360f24",
-    "probe_runtime":  "static-crt",
-    "probe_dynamic_crt_dependencies":  [
-
-                                       ],
-    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-kernel32.exe",
-    "bootstrap_kernel32_sha256":  "504ff9e50294761a6a5da3152163a31875c7cbd640a0ceb8c26d107962a8617a",
-    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-advapi32.exe",
-    "bootstrap_advapi32_sha256":  "f7ff381bcc2963bd1c90004fe669bd218ac999b03666d5f02b828731aacd8265",
-    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\appcontainer-stage.exe",
-    "construction_launcher_sha256":  "cd6eca1c91a912bad8b133ed3e93b844901c98e9387e4b7bde2c781cef21462b",
-    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-exitcode.exe",
-    "bootstrap_exitcode_sha256":  "4b4bc26158757788bc7e25e50628e7c508641694f0fa89d5d67a06da1d1a03b4",
-    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\child-control-stage.exe",
-    "child_control_launcher_sha256":  "15e05d24ee251f82b055eddd4e3b4f51f22dfc9bfb2333f597550f91a6d194e3",
-    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\child-control-probe.exe",
-    "child_control_probe_sha256":  "1b3b85752b8912944eff73af1c8de8052c71c80f37e83628e53df98c3302d1d2",
-    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\deadbyte-exec.exe",
-    "contained_launcher_sha256":  "c3dadbf3c45572415d46ea831f6af390344565efd711351db0ccfd892bcd7f0b",
-    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\contained-transform-worker.exe",
-    "contained_worker_sha256":  "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
-    "contained_reverse_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\contained-reverse-worker.exe",
-    "contained_reverse_worker_sha256":  "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6"
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run containment:smoke
-
-> deadbyte-mcp@0.4.6 containment:smoke
-> node src/containment-smoke.mjs appcontainer
-
-{
-  "status": "passed",
-  "ok": true,
-  "backend": "windows-appcontainer",
-  "mode": "appcontainer",
-  "appcontainer_sid": "S-1-15-2-3037002961-168788534-3779512193-3498305703-1377439394-1742983008-666609610",
-  "lpac": false,
-  "lpac_token_query_available": false,
-  "aap_mode_evidence_ok": true,
-  "network_capabilities": 0,
-  "result_channel": "inherited-handle",
-  "outside_read_denied": true,
-  "child_process_denied": true,
-  "normal_child_execution_denied": true,
-  "breakaway_child_execution_denied": true,
-  "child_control": "job-active-process-limit",
-  "job_assignment": "atomic-attribute",
-  "job_breakaway_enabled": false,
-  "active_process_limit": 1,
-  "process_memory_limit_bytes": 134217728,
-  "profile_cleanup_ok": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run contained:smoke
-
-> deadbyte-mcp@0.4.6 contained:smoke
-> node src/contained-smoke.mjs
-
-{
-  "status": "passed",
-  "operations": [
-    {
-      "operation": "uppercase_ascii",
-      "output": "contained-smoke.uppercase_ascii.bfcf8e3a67492e5c.txt",
-      "receipt_path": "evidence/e23bee4434b47b44e1601d19.json",
-      "receipt_sha256": "f3dd0e135af52e15b59cd3a770ed19bf4f6daced22e08dea8edc548d018a3883",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
-      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "uppercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "appcontainer_sid": "S-1-15-2-3361513552-850255976-3270837108-1073868726-2501196025-29207205-2766854847",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "lowercase_ascii",
-      "output": "contained-smoke.lowercase_ascii.e9f98461a60732e9.txt",
-      "receipt_path": "evidence/9b825498378a0020e65d6eae.json",
-      "receipt_sha256": "6afaf958207d942074fa4be3d97713f39d4a9ec39378ee47e4890853a78f96c3",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
-      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "lowercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "appcontainer_sid": "S-1-15-2-166109027-199659701-1458555881-1902884768-324104787-2207113977-495157982",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "reverse_bytes",
-      "output": "contained-smoke.reverse_bytes.0d3f4180babdef4b.txt",
-      "receipt_path": "evidence/c50e99c366317cb698210343.json",
-      "receipt_sha256": "c411f22e1c79a8a07e3cfb1a23602bfa211cfc0ba45bd9460339f3ddf03da1f8",
-      "worker_id": "contained-reverse-v1",
-      "worker_sha256": "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6",
-      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "reverse_bytes",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-reverse-v1",
-        "worker_executable": "contained-reverse-worker.exe",
-        "appcontainer_sid": "S-1-15-2-147383832-3979116827-2910916169-3858969129-1397959439-1453272385-3671103684",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    }
-  ]
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run mcp:contained:smoke
-
-> deadbyte-mcp@0.4.6 mcp:contained:smoke
-> node src/mcp-contained-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tool": "contained_transform",
-  "operations": [
-    {
-      "operation": "uppercase_ascii",
-      "output": "mcp-contained.uppercase_ascii.480fb44b5299c695.txt",
-      "receipt_path": "evidence/463cbbf477dfc236be777b6b.json",
-      "receipt_sha256": "5ff90c4c4c400e1038b333e97d03d2252e274b2d9b77960ff24b8dfa7201008d",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
-      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "uppercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "appcontainer_sid": "S-1-15-2-1266155568-3035531915-1865381721-3985906965-3222987059-748956445-3255435853",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "lowercase_ascii",
-      "output": "mcp-contained.lowercase_ascii.3b35c1f62aa1f0a7.txt",
-      "receipt_path": "evidence/9198b9fe5689a26011c94c52.json",
-      "receipt_sha256": "fc63840b53d68e0259758593712c4035fdf3a9f407e557070d9dcdae5d504844",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
-      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "lowercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "appcontainer_sid": "S-1-15-2-234887472-568281919-3925671230-1286202595-550526470-3045920542-1114217493",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "reverse_bytes",
-      "output": "mcp-contained.reverse_bytes.1fead296d0819dad.txt",
-      "receipt_path": "evidence/065a66be4a98f178e069c7f7.json",
-      "receipt_sha256": "d2adaff8d531ce23bb8b86d97640f4f53ceb4bbaf995f18a9eab8388928a531a",
-      "worker_id": "contained-reverse-v1",
-      "worker_sha256": "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6",
-      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "reverse_bytes",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-reverse-v1",
-        "worker_executable": "contained-reverse-worker.exe",
-        "appcontainer_sid": "S-1-15-2-539722223-1151481215-3092449872-1885096647-2808087802-1241436490-81186307",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    }
-  ]
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6>

package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.sha256

@@ -1 +0,0 @@
-5f1b9da95309aebb8e5875a2f0dfdaaaf837f60afb141fa93856f6624d6a5f91  proof/TARGET-V047-RUNTIME-MANIFEST-PASS.txt