deadbyte-mcp 0.15.44 → 0.15.46

package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.txt

@@ -1,642 +0,0 @@
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm install
-
-added 14 packages, and audited 15 packages in 1s
-
-2 packages are looking for funding
-  run `npm fund` for details
-
-found 0 vulnerabilities
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm test
-
-> deadbyte-mcp@0.4.7 test
-> node --test test/*.test.mjs
-
-✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (5.7369ms)
-✔ contained executor rejects a launcher-reported truncated stdin import (0.9475ms)
-✔ contained executor cross-checks native manifest and selected-worker hashes before signing receipt (0.6764ms)
-✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (1.2932ms)
-✔ AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state (1.1841ms)
-✔ contained launcher reports the exact bootstrap environment policy in runtime evidence (0.7486ms)
-✔ contained execution validator rejects a missing LOCALAPPDATA bootstrap marker (0.8463ms)
-✔ contained execution validator rejects a non-exact worker environment allowlist (0.1518ms)
-✔ contained execution validator rejects a missing drive-current-directory environment entry (0.1951ms)
-✔ contained execution validator accepts the complete fixed-transform invariant set (0.3901ms)
-✔ contained execution validator rejects any granted capability (0.1926ms)
-✔ contained execution validator rejects host workspace mounting (0.1472ms)
-✔ contained execution validator rejects non-atomic Job assignment (0.0875ms)
-✔ contained execution validator rejects normal child payload execution (0.071ms)
-✔ contained execution validator rejects explicit breakaway payload execution (0.0902ms)
-✔ contained execution validator rejects a non-AppContainer worker (0.0835ms)
-✔ contained execution source has a compile-time worker registry and no user executable parameter (4.5395ms)
-✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.6677ms)
-✔ contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial (0.8441ms)
-✔ native build produces the contained launcher and worker with static runtime (0.5297ms)
-✔ native build emits a deterministic worker registry manifest and launcher verifies it before execution (1.1256ms)
-✔ receipt and verifier bind contained worker, launcher and independent transform semantics (0.9431ms)
-✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.7716ms)
-✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (31.7487ms)
-✔ independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence (19.0423ms)
-✔ contained operation registry accepts lowercase_ascii and rejects unknown operations (0.258ms)
-✔ native launcher uses a compile-time operation-to-executable registry (1.5866ms)
-✔ contained execution validator binds operation to fixed worker identity and executable (0.2466ms)
-✔ build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper (5.2768ms)
-✔ contained execution validator rejects missing or altered worker manifest evidence (0.2246ms)
-✔ MCP contained_transform schema is a compile-time operation enum with no executable surface (0.594ms)
-✔ contained receipt verifies lowercase_ascii semantics and rejects semantic tamper (19.8132ms)
-✔ contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper (22.5706ms)
-✔ containment result validator accepts the complete LPAC invariant set (1.7573ms)
-✔ containment result validator accepts the complete regular AppContainer invariant set (0.1357ms)
-✔ containment result validator refuses mode confusion (0.9575ms)
-✔ containment result validator rejects a readable host canary (0.1617ms)
-✔ containment result validator rejects any granted capability (0.1465ms)
-✔ containment result validator rejects child payload execution (0.1034ms)
-✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.105ms)
-✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.0854ms)
-✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1583ms)
-✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1928ms)
-✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1194ms)
-✔ containment result validator rejects LPAC that can read the AAP canary (0.1421ms)
-✔ containment result validator rejects missing Job assignment (0.1578ms)
-✔ containment result validator rejects timeout (0.1047ms)
-✔ containment result validator rejects non-atomic Job assignment (0.0931ms)
-✔ containment result validator rejects enabled breakaway (0.1138ms)
-✔ containment result validator rejects the broken token child-policy mechanism (0.1045ms)
-✔ containment result validator rejects breakaway child payload execution (0.1313ms)
-✔ containment result validator rejects a filesystem result channel (0.0701ms)
-✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (10.176ms)
-✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.6756ms)
-✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5945ms)
-✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.5919ms)
-✔ native probe link contract includes Advapi32 for token inspection APIs (0.6867ms)
-✔ native launcher narrows SID text only through explicit ASCII validation (0.4846ms)
-✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.7425ms)
-✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.509ms)
-✔ containment validator reports the probe invariant before aggregate failed status (0.1485ms)
-✔ containment smoke includes the raw probe measurement on invariant failure (0.5374ms)
-✔ native LPAC probe uses the static MSVC runtime (0.8831ms)
-✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.6553ms)
-✔ native launcher preserves symbolic early-loader failure evidence (0.5067ms)
-✔ native bootstrap probes have custom no-CRT entrypoints (0.8083ms)
-✔ native build links bootstrap probes without default CRT libraries (0.5337ms)
-✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.4789ms)
-✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.4091ms)
-✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.7151ms)
-✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.9353ms)
-✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.7213ms)
-✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5979ms)
-✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.9669ms)
-✔ construction ladder adds containment mechanisms as isolated transitions (0.7081ms)
-✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.8047ms)
-✔ construction diagnostic reports the first failing transition without fallback (0.5942ms)
-✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.6751ms)
-✔ construction diagnostic refuses to run when native build artifacts are missing (0.5483ms)
-✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.749ms)
-✔ Job child-control candidate sets active process limit one and never enables breakaway (0.6239ms)
-✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4576ms)
-✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.4858ms)
-✔ native build produces child-control launcher and hostile probe with MSVC (0.492ms)
-✔ package exposes explicit child-control diagnostic gate (1.3576ms)
-✔ full containment probe verifies normal and explicit breakaway child payload denial (0.5776ms)
-✔ package default containment smoke targets the observed regular AppContainer baseline (0.5064ms)
-✔ path traversal is denied (12.1009ms)
-✔ absolute path is denied (4.7009ms)
-✔ symlink escape is denied where symlinks are permitted (6.0462ms)
-✔ proof execution creates deterministic output and signed verifiable receipt (64.4345ms)
-✔ independent verifier process accepts valid signed evidence (114.5039ms)
-✔ input source may change later because receipt preserves exact input snapshot (55.5588ms)
-✔ tampered output fails independent verification (61.8894ms)
-✔ tampered input snapshot fails independent verification (61.8862ms)
-✔ tampered receipt fails its canonical self hash (56.9979ms)
-✔ recomputed self hash cannot forge Ed25519 attestation (51.8662ms)
-✔ wrong public key cannot verify receipt (54.2292ms)
-✔ signing key inside workspace is denied (4.1581ms)
-✔ proof execution refuses to run without a signing key (2.8339ms)
-✔ trust key generation refuses to overwrite an existing keypair (1.7059ms)
-✔ pre-existing output is denied instead of overwritten (4.2552ms)
-✔ output parent symlink escape is denied (4.4012ms)
-✔ distinct output names allow repeated signed proofs without weakening no-overwrite (94.0131ms)
-ℹ tests 104
-ℹ suites 0
-ℹ pass 104
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 742.5026
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm run mcp:smoke
-
-> deadbyte-mcp@0.4.7 mcp:smoke
-> node src/mcp-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tools": [
-    "contained_transform",
-    "evidence_verify",
-    "file_read",
-    "proof_execute",
-    "workspace_open"
-  ],
-  "workspace_id": "demo",
-  "output": "mcp-output.0b8ed9062bca7d0b.txt",
-  "receipt_path": "evidence/032be1dd5903436f7cb5eb16.json",
-  "receipt_sha256": "48d03a38478f05584064729e08269a2123d8dc863d1f553463034c897230c076",
-  "key_id": "7a77847d6889cfcc21156f556cc81968dd45939a2c687431b04f0023dc45b285",
-  "signature_algorithm": "ed25519",
-  "signature_valid": true,
-  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
-  "independent_verify": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm run containment:build
-
-> deadbyte-mcp@0.4.7 containment:build
-> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
-
-==== launcher ====
-deadbyte-contain.cpp
-==== probe ====
-containment-probe.cpp
-==== bootstrap-kernel32 ====
-bootstrap-kernel32.cpp
-==== bootstrap-advapi32 ====
-bootstrap-advapi32.cpp
-==== construction-launcher ====
-appcontainer-stage.cpp
-==== bootstrap-exitcode ====
-bootstrap-exitcode.cpp
-==== child-control-launcher ====
-child-control-stage.cpp
-==== child-control-probe ====
-child-control-probe.cpp
-==== contained-launcher ====
-deadbyte-exec.cpp
-==== contained-worker ====
-contained-transform-worker.cpp
-==== contained-reverse-worker ====
-contained-reverse-worker.cpp
-==== probe-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7\bin\containment-probe.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-==== contained-launcher-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7\bin\deadbyte-exec.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    USERENV.dll
-    ADVAPI32.dll
-    ole32.dll
-    bcrypt.dll
-    KERNEL32.dll
-
-  Summary
-
-        3000 .data
-        1000 .fptable
-        3000 .pdata
-       16000 .rdata
-        1000 .reloc
-       39000 .text
-==== contained-worker-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7\bin\contained-transform-worker.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-==== contained-reverse-worker-dependencies ====
-
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7\bin\contained-reverse-worker.exe
-
-File Type: EXECUTABLE IMAGE
-
-  Image has the following dependencies:
-
-    ADVAPI32.dll
-    KERNEL32.dll
-
-  Summary
-
-        2000 .data
-        1000 .fptable
-        2000 .pdata
-        E000 .rdata
-        1000 .reloc
-       19000 .text
-{
-    "status":  "built",
-    "compiler":  "msvc-x64",
-    "target":  "windows-10-or-newer",
-    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\proof\\CONTAINMENT-BUILD.txt",
-    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\deadbyte-contain.exe",
-    "launcher_sha256":  "ba5ced8c783a3f87b706e339c13cd53b3e4fc375b4f5a3930f6b1ee42f8c8509",
-    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\containment-probe.exe",
-    "probe_sha256":  "26e944cc5f19ddbee99bb2a43e9e08fd9ccca1b2d5ae59f1d471c0713b2448a7",
-    "probe_runtime":  "static-crt",
-    "probe_dynamic_crt_dependencies":  [
-
-                                       ],
-    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\bootstrap-kernel32.exe",
-    "bootstrap_kernel32_sha256":  "48df7f7e1c9af0a842d66556e72c6a9baf3481fe685c07779416504f02718128",
-    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\bootstrap-advapi32.exe",
-    "bootstrap_advapi32_sha256":  "b5dc98208d5e13f268f375b6d5462dfe812def1cb0159931102a59920fd1ef28",
-    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\appcontainer-stage.exe",
-    "construction_launcher_sha256":  "a9e75d4c89fb863a1c71b1adbb380721307ddd7e822355e4d9e124c4d3abe63d",
-    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\bootstrap-exitcode.exe",
-    "bootstrap_exitcode_sha256":  "d7b6c16c8eccadb50c375ab791efc12111a3722680efe0d827ddc32b61f6ddd8",
-    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\child-control-stage.exe",
-    "child_control_launcher_sha256":  "429bb3dab273c53390009c98578ff3110a3e2b2d6698bac7cbf39f032efc5e22",
-    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\child-control-probe.exe",
-    "child_control_probe_sha256":  "6f42a28bf4b7e3ea6334ca657381bb7d9af3adb7f736d95dc5d0e9472e741657",
-    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\deadbyte-exec.exe",
-    "contained_launcher_sha256":  "2bc5529ff08a27a64c22b44bd316284efa5eb36a03f6b8a8cac73540c11d53ff",
-    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\contained-transform-worker.exe",
-    "contained_worker_sha256":  "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-    "contained_reverse_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\contained-reverse-worker.exe",
-    "contained_reverse_worker_sha256":  "20251da82080f853ddf983fa8bd524e4d9a8ab8c3f42f3ac54e9b24343c1f288",
-    "worker_registry_manifest":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.7\\bin\\WORKER-REGISTRY.txt",
-    "worker_registry_manifest_sha256":  "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc"
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm run containment:smoke
-
-> deadbyte-mcp@0.4.7 containment:smoke
-> node src/containment-smoke.mjs appcontainer
-
-{
-  "status": "passed",
-  "ok": true,
-  "backend": "windows-appcontainer",
-  "mode": "appcontainer",
-  "appcontainer_sid": "S-1-15-2-982961023-2299113227-3451316976-7801614-2979333415-673656512-1257542286",
-  "lpac": false,
-  "lpac_token_query_available": false,
-  "aap_mode_evidence_ok": true,
-  "network_capabilities": 0,
-  "result_channel": "inherited-handle",
-  "outside_read_denied": true,
-  "child_process_denied": true,
-  "normal_child_execution_denied": true,
-  "breakaway_child_execution_denied": true,
-  "child_control": "job-active-process-limit",
-  "job_assignment": "atomic-attribute",
-  "job_breakaway_enabled": false,
-  "active_process_limit": 1,
-  "process_memory_limit_bytes": 134217728,
-  "profile_cleanup_ok": true
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm run contained:smoke
-
-> deadbyte-mcp@0.4.7 contained:smoke
-> node src/contained-smoke.mjs
-
-{
-  "status": "passed",
-  "operations": [
-    {
-      "operation": "uppercase_ascii",
-      "output": "contained-smoke.uppercase_ascii.fdb6444767454355.txt",
-      "receipt_path": "evidence/c43976c34078818238629dae.json",
-      "receipt_sha256": "a8806dff13b1e74ef2af44f59daac7117f7eaeb34f9631597e7d547e4be2bffc",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "uppercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-        "appcontainer_sid": "S-1-15-2-3325203384-3883959952-973162696-2970655860-1991028174-2735914552-772807387",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "lowercase_ascii",
-      "output": "contained-smoke.lowercase_ascii.a8f2947c0089079d.txt",
-      "receipt_path": "evidence/b80aa05987a9050c6d2e7a19.json",
-      "receipt_sha256": "7701bb92526872b3fb4b7f7cdb5eb555b76199ad4fdfe11d1566c75bdb73efc2",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "lowercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-        "appcontainer_sid": "S-1-15-2-2875934397-2709514154-30777639-963447821-2752333461-1505418332-116652817",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "reverse_bytes",
-      "output": "contained-smoke.reverse_bytes.e086007ed640ec31.txt",
-      "receipt_path": "evidence/7b44236f36b85593eafb5705.json",
-      "receipt_sha256": "0fc1c2034c340ee50866b856329caf72204194bfad01752b845a1154d7dd7e48",
-      "worker_id": "contained-reverse-v1",
-      "worker_sha256": "20251da82080f853ddf983fa8bd524e4d9a8ab8c3f42f3ac54e9b24343c1f288",
-      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "reverse_bytes",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-reverse-v1",
-        "worker_executable": "contained-reverse-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "20251da82080f853ddf983fa8bd524e4d9a8ab8c3f42f3ac54e9b24343c1f288",
-        "appcontainer_sid": "S-1-15-2-783937179-2260101042-1379878017-4112293833-771780628-3847357890-4052000409",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    }
-  ]
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7> npm run mcp:contained:smoke
-
-> deadbyte-mcp@0.4.7 mcp:contained:smoke
-> node src/mcp-contained-smoke-client.mjs
-
-{
-  "status": "passed",
-  "protocol_revision": "2026-07-28",
-  "protocol_era": "modern",
-  "tool": "contained_transform",
-  "operations": [
-    {
-      "operation": "uppercase_ascii",
-      "output": "mcp-contained.uppercase_ascii.113703608f352eec.txt",
-      "receipt_path": "evidence/4523158c7a75efc6a4e0e0ca.json",
-      "receipt_sha256": "d5b35dac29cb3cd4c5c31212a5131040300e8ff600e0c44976c69006ce1b9588",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "uppercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-        "appcontainer_sid": "S-1-15-2-378416004-379131481-1886523971-3026664358-2966579513-848302118-2224447935",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "lowercase_ascii",
-      "output": "mcp-contained.lowercase_ascii.cfd44e21fe1e20a0.txt",
-      "receipt_path": "evidence/f07e000d84be4c7a6ffa094d.json",
-      "receipt_sha256": "b3740c6a389c100db5c9aac116339e5444f603a64ca24a3e405ced41acf68b1c",
-      "worker_id": "contained-transform-v1",
-      "worker_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "lowercase_ascii",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-transform-v1",
-        "worker_executable": "contained-transform-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "220ea80049af7dfe9c04d59c284fb15c04002d916b08215a4d1e0a3c3694d944",
-        "appcontainer_sid": "S-1-15-2-3476989657-905010755-4132905487-1147255994-3618902859-2272280491-3224273859",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    },
-    {
-      "operation": "reverse_bytes",
-      "output": "mcp-contained.reverse_bytes.1b6a5d0475a6d04a.txt",
-      "receipt_path": "evidence/f31d1b2bc0959722cfef38ef.json",
-      "receipt_sha256": "d95a36dd0d8b90571e2dca8afbd8fc249d6075f6b97e34a1b87eb479e5158e8d",
-      "worker_id": "contained-reverse-v1",
-      "worker_sha256": "20251da82080f853ddf983fa8bd524e4d9a8ab8c3f42f3ac54e9b24343c1f288",
-      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
-      "containment": {
-        "backend": "windows-appcontainer",
-        "mode": "appcontainer",
-        "operation": "reverse_bytes",
-        "worker_registry": "compile-time-operation-to-executable",
-        "worker_id": "contained-reverse-v1",
-        "worker_executable": "contained-reverse-worker.exe",
-        "worker_manifest": "WORKER-REGISTRY.txt",
-        "worker_manifest_sha256": "d2b20de16135837b074251d86ba3577d9eb0353260ebedfa01367829090513cc",
-        "worker_manifest_verified": true,
-        "worker_source_sha256": "20251da82080f853ddf983fa8bd524e4d9a8ab8c3f42f3ac54e9b24343c1f288",
-        "appcontainer_sid": "S-1-15-2-212356218-3615490535-2071375441-1678574730-741063578-1007954122-1447413630",
-        "network_capabilities": 0,
-        "job_assignment": "atomic-attribute",
-        "job_breakaway_enabled": false,
-        "active_process_limit": 1,
-        "process_memory_limit_bytes": 134217728,
-        "child_control": "job-active-process-limit",
-        "import_transport": "host-stdin-to-profile-copy",
-        "export_transport": "profile-copy-to-host-json",
-        "workspace_mounted": false,
-        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
-        "worker_localappdata_present": true,
-        "worker_environment_allowlist_exact": true,
-        "worker_drive_current_directory_set": true,
-        "input_bytes": 33,
-        "output_bytes": 33,
-        "profile_cleanup_ok": true,
-        "proof": {
-          "token_is_appcontainer": true,
-          "capability_count": 0,
-          "aap_mode_evidence_ok": true,
-          "outside_read_denied": true,
-          "inside_write_ok": true,
-          "in_job": true,
-          "normal_child_execution_denied": true,
-          "breakaway_child_execution_denied": true,
-          "transform_ok": true
-        }
-      },
-      "independent_verify": true
-    }
-  ]
-}
-PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.7>

package/proof/TARGET-V050-BATCH-GATE-PASS.sha256

@@ -1 +0,0 @@
-9d084394993da2f6449a7d1987ecb6c725df9cfe882abf9769ad0da9f5b344b3  TARGET-V050-BATCH-GATE-PASS.txt