deadbyte-mcp 0.15.45 → 0.15.47

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.45",
+  "version": "0.15.47",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-controller.ps1

@@ -1346,15 +1346,29 @@ function Arm-Autonomous($Cfg) {
     Write-Host 'AUTONOMOUS PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
+function Get-AutonomousRevocationLeaseFile($Cfg) {
+    if ([string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) { return $null }
+    # Revocation may not depend on approval/root checks used only for issuing grants.
+    # The source remains the bound policy snapshot, never a caller-supplied path.
+    $snapshot = Read-ControllerPolicySnapshot ([string]$Cfg.AutonomousPolicyFile) 'autonomous'
+    $policy = $snapshot.Policy
+    if ($policy.schema -ne 'deadbyte.autonomous-policy.v1' -or $policy.enabled -ne $true) { Fail 'autonomous policy schema/enabled mismatch' }
+    if ([string]::IsNullOrWhiteSpace([string]$policy.lease_file)) { Fail 'autonomous policy lease_file missing' }
+    $leaseFile = [System.IO.Path]::GetFullPath([string]$policy.lease_file)
+    $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
+    if (-not $leaseFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'autonomous policy lease_file must live under controller runtime directory' }
+    return $leaseFile
+}
+
 function Disarm-Autonomous($Cfg, [switch]$Quiet) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) { return }
-    $meta = Get-AutonomousPolicyMetadata $Cfg
+    $leaseFile = Get-AutonomousRevocationLeaseFile $Cfg
     $epochError = $null
-    if (Test-Path -LiteralPath $meta.LeaseFile -PathType Leaf) {
-        try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'user-revoke' $meta.LeaseFile | Out-Null } catch { $epochError = $_.Exception }
-        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+    if (Test-Path -LiteralPath $leaseFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'user-revoke' $leaseFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $leaseFile -Force -ErrorAction SilentlyContinue
     }
-    if (Test-Path -LiteralPath $meta.LeaseFile) { throw 'Autonomous authority revocation failed: grant remains present' }
+    if (Test-Path -LiteralPath $leaseFile) { throw 'Autonomous authority revocation failed: grant remains present' }
     if ($null -ne $epochError) { throw $epochError }
     if (-not $Quiet) { Write-Host 'AUTONOMOUS PLANE DISARMED' }
 }
@@ -1642,7 +1656,7 @@ function Invoke-MachineSmoke($Cfg) {
     Wait-PublicDnsReady $Cfg $url
     $probeArgs = @($url)
     if (-not [string]::IsNullOrWhiteSpace([string]$env:DEADBYTE_REMOTE_PROBE_MODE)) {
-        if ([string]$env:DEADBYTE_REMOTE_PROBE_MODE -notin @('default','desktop','host','full','revoked')) { Fail 'invalid remote enforcement probe mode' }
+        if ([string]$env:DEADBYTE_REMOTE_PROBE_MODE -notin @('default','operator','desktop','host','full','revoked')) { Fail 'invalid remote enforcement probe mode' }
         $probeArgs += [string]$env:DEADBYTE_REMOTE_PROBE_MODE
     }
     Invoke-CoreGate $Cfg 'remote-mcp-machine-smoke-client.mjs' $probeArgs

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74",
       "deny_paths": [
         "node_modules",
         "controller/runtime",
@@ -20,7 +20,7 @@
   "profiles": {
     "ping_hold": {
       "executable": "C:\\WINDOWS\\System32\\cmd.exe",
-      "executable_sha256": "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
+      "executable_sha256": "15cd209c995b7d3009c91ca40892d5b8f1fb162f3e5f10716642ea278e8e0d7b",
       "root_ids": [
         "core"
       ],
@@ -45,7 +45,7 @@
     },
     "powershell": {
       "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
-      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "executable_sha256": "60c9b29843624dd8af6b6a7b26147753be6aeef65098b9a503cc50850afe410f",
       "root_ids": [
         "core"
       ],
@@ -76,7 +76,7 @@
     },
     "powershell_repl": {
       "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
-      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "executable_sha256": "60c9b29843624dd8af6b6a7b26147753be6aeef65098b9a503cc50850afe410f",
       "root_ids": [
         "core"
       ],

package/docs/R73-CAPABILITY-GAP-MATRIX.json

@@ -0,0 +1,17 @@
+{
+  "schema": "deadbyte.r73-reference-differential.v1",
+  "scope": "read-only static comparison; no donor runtime or benchmark was executed",
+  "references": [
+    {"version":"0.2.52","root":"D:/Projects/deadbyte-mcp/references/desktop-commander v0.2.52","license":"MIT per package.json"},
+    {"version":"0.3.0","root":"D:/Projects/deadbyte-mcp/references/desktop-commander v0.3.0","license":"MIT per package.json and LICENSE"},
+    {"version":"0.3.1-alpha.2","root":"D:/Projects/deadbyte-mcp/references/desktop-commander-0.3.1-alpha.2/static","license":"MIT per package.json and LICENSE"}
+  ],
+  "findings": [
+    {"mechanism":"process-tree cleanup","donor_evidence":"desktop-commander v0.3.0/dist/utils/process-tree.js","deadbyte_evidence":"native/deadbyte-process-host.cpp; src/process-runtime.mjs","decision":"KEEP","reason":"DEADBYTE Job Object ownership and creation-time identity are stronger than PID-only taskkill; test PID reuse instead of porting code."},
+    {"mechanism":"atomic file replacement","donor_evidence":"desktop-commander v0.3.0/dist/utils/atomic-write.js; dist/utils/rename.js","deadbyte_evidence":"src/atomic-mutation.mjs; test/atomic-mutation.test.mjs","decision":"ADAPT","reason":"The existing mutation lock could reclaim a live writer solely from aged mtime. R73 adds owner liveness and lock identity checks, retaining exact preconditions and unknown-effect semantics."},
+    {"mechanism":"corrupt config recovery","donor_evidence":"desktop-commander v0.3.0/dist/config-recovery.js","deadbyte_evidence":"src/runtime-update.mjs; src/activation-preflight-r65.mjs","decision":"DEFER","reason":"No reproduced DEADBYTE config recovery defect yet; avoid a second unsanctioned recovery path."},
+    {"mechanism":"bounded remote reconnect and telemetry","donor_evidence":"desktop-commander v0.3.0/dist/remote-device/remote-channel.js; dist/remote-device/transport-telemetry.js","deadbyte_evidence":"src/remote-device-r44.mjs; bridge/src/remote-call-claims-r60.mjs","decision":"KEEP","reason":"DEADBYTE has durable pre-dispatch claims and no-replay; focused recovery tests are required before any runtime change."},
+    {"mechanism":"alpha presentation and transport changes","donor_evidence":"desktop-commander-0.3.1-alpha.2/static/dist/utils/toolHistory.js; static/dist/remote-device/remote-channel.js","deadbyte_evidence":"src/remote-live-log.mjs; bridge/src/remote-dispatch-r60.mjs","decision":"DEFER","reason":"Static alpha snapshot is not behavioral or performance evidence; no compatible regression has been demonstrated."}
+  ],
+  "code_copied": false
+}

package/docs/R73-EXECUTION-CONTRACT.md

@@ -0,0 +1,11 @@
+# R73 controlled successor contract
+
+- Objective: improve post-0.15.46 correctness and recovery from reproducible defects; do not claim competitor superiority without equivalent runtime measurements.
+- Source master: published `deadbyte-mcp@0.15.46` tarball at `C:\Users\DEADBYTE\.deadbyte-mcp\evidence\npm-publication\0.15.46\deadbyte-mcp-0.15.46.tgz`, SHA-256 `b1a7c215e66fba14b1f1c19675dd3c9e75340d41fd5bd2a3d778175624bfc03e`. The extracted 2,288-file manifest verifies as `55c42123634a7fc3550c0cc24f09dc769ce777a9566032faab9247bb8d85067a`.
+- Runtime predecessor: active `v0.15.45-34aa8d1241cfb8bf` (manifest `34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc`); observed OFFLINE with all five authority planes DISARMED on 2026-10-15. Published source and active runtime are intentionally distinct.
+- Target: this non-Git `deadbyte-mcp-0.15.47-r73` successor only. The published tarball, R72 tree, active slots, grants, evidence, and reference corpus are protected.
+- Method: inspect actual current primitives and three Desktop Commander reference snapshots; capture RED for any behavioral change; implement the smallest native fix; focused GREEN, adversarial tests, full regression, Windows gate, independent review, manifest and verify-only package proof. No donor code reuse, generic shell, public tool or authority expansion.
+- Decision authority: owner has approved bounded source/tests in isolated successor (Class 2/3). License choice, new public interface/authority, deployment, npm publication, active runtime operations and production grant changes remain Class 1 and are prohibited in this task.
+- Assurance: HIGH_RISK for authority, filesystem, process, remote replay and release evidence. Acceptance oracles are fixture-controlled runtime state, independent file/process identity, exact hash/receipt verification, protocol responses and actual exit codes. Static comparison is not runtime acceptance.
+- Stop conditions: source/tarball identity drift; unavoidable production effect; missing independent owner authority; unresolved ambiguous mutation; or a mandatory gate that cannot pass without scope expansion. Preserve failed evidence. Do not seal a final release.
+- Rollback: discard only R73 successor changes through an explicitly reviewed file-level recovery from the verified 0.15.46 tarball; never reset or clean another tree.

package/docs/R73-IMPLEMENTATION-CHANGELOG.md

@@ -0,0 +1,12 @@
+# R73 candidate change log
+
+- Bootstrapped this non-Git successor from the verified published 0.15.46 tarball, not the mutable R72 tree. Active runtime 0.15.45 was not operated on.
+- RED: the identical six-case test file against the SHA-verified 0.15.46 predecessor `src/atomic-mutation.mjs` returned 3 pass / 3 fail. An aged lock was deleted while its writer was alive, a dead-owner lock was stolen without atomic ownership proof, and post-commit lock ownership loss was not classified. Against R73, the same six cases returned 6 pass / 0 fail.
+- GREEN: retain owner identity in the lock, do not reclaim an aged live lock, and never auto-delete an aged dead-owner lock without an atomic compare-and-delete primitive. Dead-owner locks fail closed with explicit reconciliation required; this trades automatic availability for serialization safety. New-lock I/O failure attempts to clean its own marker, timeout uses monotonic elapsed time, and post-commit lock ownership loss is classified as unknown effect. No public schema or authority change.
+- R67 v2 receipt reconciliation was already implemented. The npm tarball omitted `package-lock.json`; R73 regenerated it offline from 0.15.46 package metadata (matching the R72 source lock SHA-256 `bdddc9cba7a985feea78d3ec6c7100bb650587dcfee852eaa420f08fc6fdbb12`). The real CLI reconciler now returns `STALE_SOURCE`, 32 stale shards and zero integrity faults against historical R67 evidence, never a fabricated PASS.
+- Package boundary RED: npm dry-run inventory included two generated `testing/r70-verifier` artifacts. Added `.npmignore` for generated test evidence/reference/private environment paths; the identical behavioral test is GREEN. Existing evidence files were not deleted.
+- Full regression exposed four setup failures unrelated to the new lock behavior: the R48 pinned donor path no longer existed, and process policy retained four R72-root paths after tarball extraction. The donor file at `desktop-commander v0.2.52` has the exact pinned SHA-256 `f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140`; the test now points there without changing expectations. The process policy was rebound only to this isolated successor and refreshed with the canonical native/system hash tool. Targeted 8/8 tests pass.
+- The R72 `RELEASE.json.r72_hotfix` hashes describe an earlier candidate seal, not the final published tarball: embedded `883d73…`/`1aa877…` differ from final manifest `55c421…`/tarball `b1a7c2…`. The current R72 publication fence reads the external manifest and evidence index, not these embedded hashes. R73 must not promote this historical snapshot to a final claim.
+- npm package metadata declares no license, while inspected Desktop Commander snapshots say MIT. No license was chosen for DEADBYTE.
+
+No npm publish, production activation, rollback, grant change, donor code copy, or final-release seal is authorized in R73.

package/docs/R73-REMAINING-DEFECTS.md

@@ -0,0 +1,9 @@
+# R73 remaining boundaries
+
+1. A dead owner may leave an aged `.deadbyte-mutation.lock`. R73 refuses automatic deletion because a pathname check followed by unlink can remove a new writer's lock. Recovery requires independent target/receipt reconciliation and an ownership-safe OS primitive or reviewed operator action; no mutation is retried while the lock remains.
+2. Lock-file serialization assumes cooperative writers within an authorized root. A hostile process with write access to the same directory can replace the marker between read and unlink. Directory access control and exact SHA preconditions remain necessary; this file lock is not a hostile-local-process security boundary.
+3. Published 0.15.46 package omits `package-lock.json`; R73 regenerated the 0.15.46 lock offline in the isolated successor, matching the R72 source lock hash. The real R67 CLI now runs here and reports `STALE_SOURCE` for all 32 historical shards, not PASS. This does not change the published tarball or backfill historical receipts.
+4. `RELEASE.json.r72_hotfix` contains prepublication candidate hashes, not the final published 0.15.46 tarball/manifest hashes. The actual R72 publish fence uses external evidence and current manifest bytes. R73 documentation labels this historical snapshot; future release contracts should use explicit snapshot/final fields without self-referential embedded hashes.
+5. DEADBYTE npm package has no `license` field or root license file. Owner must decide licensing; donor MIT terms do not license DEADBYTE by implication.
+6. No donor runtime benchmark or ChatGPT remote end-to-end comparison has been performed. Static reference inspection cannot establish performance or capability superiority.
+7. R73 package version/metadata remain 0.15.46/R72 pending behavioral and release gates. This directory is a development successor, not a sealed or publishable 0.15.47 artifact.

package/docs/R74-KERNEL-LOCK-BINARY.json

@@ -0,0 +1,11 @@
+{
+  "schema": "deadbyte.r74-kernel-lock-binary.v1",
+  "status": "candidate",
+  "exe": "bin/deadbyte-kernel-lock-r74.exe",
+  "sha256": "a1dbb8963ab89f7c99f06c78612bfa15c3fb8ed7fbc48c1b17d160d4e4f02b4c",
+  "source": "native/deadbyte-kernel-lock-r74.cpp",
+  "source_sha256": "9cb7f1f8d5e267d7f7359307ab1136b91214b021b01831075514a69f7fe0368a",
+  "allow_network_egress": false,
+  "max_output_bytes": 65536,
+  "exit_fail_closed": true
+}

package/native/deadbyte-kernel-lock-r74.cpp

@@ -0,0 +1,65 @@
+#define WIN32_LEAN_AND_MEAN
+#define NOMINMAX
+#include <windows.h>
+#include <iostream>
+#include <string>
+
+int wmain(int argc, wchar_t** argv) {
+    if (argc < 3) {
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error\":\"usage: acquire <file> | probe <file>\"}\n";
+        return 2;
+    }
+    const std::wstring op = argv[1];
+    const std::wstring path = argv[2];
+
+    if (op == L"probe") {
+        HANDLE h = CreateFileW(path.c_str(), GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+        if (h == INVALID_HANDLE_VALUE) {
+            DWORD err = GetLastError();
+            if (err == ERROR_SHARING_VIOLATION || err == ERROR_LOCK_VIOLATION || err == ERROR_ACCESS_DENIED) {
+                std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"locked\",\"error_code\":\"SHARING_VIOLATION\",\"win32_error\":" << err << "}\n";
+                return 1;
+            }
+            std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error_code\":\"WIN32_ERROR\",\"win32_error\":" << err << "}\n";
+            return 2;
+        }
+        CloseHandle(h);
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"unlocked\"}\n";
+        return 0;
+    }
+
+    if (op == L"acquire") {
+        HANDLE h = CreateFileW(path.c_str(), GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+        if (h == INVALID_HANDLE_VALUE) {
+            DWORD err = GetLastError();
+            if (err == ERROR_SHARING_VIOLATION || err == ERROR_LOCK_VIOLATION || err == ERROR_ACCESS_DENIED) {
+                std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"locked\",\"error_code\":\"SHARING_VIOLATION\",\"win32_error\":" << err << "}\n";
+                return 1;
+            }
+            std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error_code\":\"WIN32_ERROR\",\"win32_error\":" << err << "}\n";
+            return 2;
+        }
+
+        std::string record = "deadbyte.kernel-lock.r74:pid=" + std::to_string(GetCurrentProcessId()) + "\n";
+        DWORD written = 0;
+        SetFilePointer(h, 0, NULL, FILE_BEGIN);
+        SetEndOfFile(h);
+        WriteFile(h, record.data(), static_cast<DWORD>(record.size()), &written, NULL);
+        FlushFileBuffers(h);
+
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"acquired\",\"pid\":" << GetCurrentProcessId() << "}\n";
+        std::cout.flush();
+
+        char buf[1];
+        DWORD bytesRead = 0;
+        ReadFile(GetStdHandle(STD_INPUT_HANDLE), buf, 1, &bytesRead, NULL);
+
+        CloseHandle(h);
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"released\"}\n";
+        std::cout.flush();
+        return 0;
+    }
+
+    std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error\":\"unknown operation\"}\n";
+    return 2;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.45",
+  "version": "0.15.47",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r71.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r72.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",

package/scripts/build-kernel-lock-r74.ps1

@@ -0,0 +1,28 @@
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version Latest
+$root=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $root 'native\deadbyte-kernel-lock-r74.cpp'
+$observed=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($observed -ne $SourceSha256){throw "R74 kernel lock source SHA mismatch; refusing build"}
+Write-Output "R74_SOURCE_SHA256=$observed"
+$bin=Join-Path $root 'bin'
+$exe=Join-Path $bin 'deadbyte-kernel-lock-r74.exe'
+$obj=Join-Path $bin 'deadbyte-kernel-lock-r74.obj'
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'vswhere missing'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'MSVC x64 C++ toolchain missing'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$cmd=if($env:ComSpec){$env:ComSpec}else{Join-Path $env:SystemRoot 'System32\cmd.exe'}
+New-Item -ItemType Directory -Path $bin -Force | Out-Null
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+$output=& $cmd /d /s /c $line 2>&1
+$rc=$LASTEXITCODE
+$output | ForEach-Object { Write-Output ([string]$_) }
+if($rc -ne 0){throw "R74 kernel lock build failed exit=$rc"}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R74 kernel lock exe missing'}
+$sha=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output "R74_NATIVE_BUILD_PASS sha256=$sha path=$exe"

package/scripts/gate-windows-r72.ps1

@@ -0,0 +1,76 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight')
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$state=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.45-34aa8d1241cfb8bf'
+$parentSha='34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc'
+$parentGen='ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'
+function Sha([string]$file){
+    $sha=[System.Security.Cryptography.SHA256]::Create()
+    try {
+        $stream=[System.IO.File]::OpenRead($file)
+        try {return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}
+        finally {$stream.Dispose()}
+    } finally {$sha.Dispose()}
+}
+function Run-Node([string]$label,[string[]]$nodeArgs) {
+    Write-Output "R72_STAGE_START=$label"
+    & node @nodeArgs
+    if($LASTEXITCODE -ne 0){throw "R72_${label}_FAILED exit=$LASTEXITCODE"}
+    Write-Output "R72_STAGE_PASS=$label"
+}
+Push-Location $repo
+try {
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    if($pkg.version -ne '0.15.47' -or $release.version -ne '0.15.47' -or $release.train -ne 'R74'){
+        throw 'R74_CANDIDATE_VERSION_DRIFT'
+    }
+    if($release.parent.release_id -ne $parentId -or $release.parent.manifest_sha256 -ne $parentSha -or
+       $release.parent.generation_manifest_sha256 -ne $parentGen){throw 'R72_PARENT_IDENTITY_DRIFT'}
+    $parentRoot=Join-Path $state "releases\$parentId"
+    if(-not (Test-Path -LiteralPath $parentRoot -PathType Container)){throw 'R72_PARENT_SLOT_MISSING'}
+    if((Sha (Join-Path $parentRoot 'MANIFEST.SHA256')) -ne $parentSha){throw 'R72_PARENT_MANIFEST_MISMATCH'}
+    $active=Get-Content -LiteralPath (Join-Path $state 'active-release.json') -Raw | ConvertFrom-Json
+    if($active.version -ne '0.15.45' -or $active.release_id -ne $parentId -or
+       $active.manifest_sha256 -ne $parentSha -or $active.generation_manifest_sha256 -ne $parentGen){
+        throw 'R72_PRODUCTION_PREDECESSOR_DRIFT'
+    }
+    Write-Output 'R72_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        Run-Node -label 'focused' -nodeArgs @('--test','--test-concurrency=1',
+            'test/r72-remote-safe-contract.test.mjs','test/r72-publication-fence.test.mjs',
+            'test/r60-authority-coherence.test.mjs','test/r58-cleanup-retention.test.mjs',
+            'test/remote-session-cli.test.mjs','test/r70-controller-autonomous-root.test.mjs',
+            'test/r70-controller-owner-issue-boundary.test.mjs','test/r71-release-identity.test.mjs',
+            'test/r71-isolated-slot-rollback-restore.test.mjs','test/r59-tool-surface-compat.test.mjs')
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        & powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File (Join-Path $repo 'scripts\verify-r70-full-regression.ps1')
+        if($LASTEXITCODE -ne 0){throw "R72_FULL_REGRESSION_FAILED exit=$LASTEXITCODE"}
+        Write-Output 'R72_FULL_REGRESSION_PASS'
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previous=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r72-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            New-Item -ItemType Directory -Path $isolated -Force | Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previous
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R72_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{Pop-Location}

package/scripts/npm-prepublish-contract-r74.mjs

@@ -0,0 +1,113 @@
+import {spawnSync} from 'node:child_process';
+import {createHash} from 'node:crypto';
+import {readFile, lstat} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+
+const root = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
+const sha256Bytes = bytes => createHash('sha256').update(bytes).digest('hex');
+
+export async function verifyR74PrepublishContract({rootPath = root} = {}) {
+  const result = {
+    schema: 'deadbyte.r74-prepublish-contract.v1',
+    valid: false,
+    checks: {},
+    identities: {}
+  };
+
+  // 1. Version & Train Identity
+  const pkg = JSON.parse(await readFile(path.join(rootPath, 'package.json'), 'utf8'));
+  const release = JSON.parse(await readFile(path.join(rootPath, 'RELEASE.json'), 'utf8'));
+
+  result.identities.package_name = pkg.name;
+  result.identities.package_version = pkg.version;
+  result.identities.target_train = 'R74';
+  result.identities.published_source_predecessor = '0.15.46';
+  result.identities.runtime_predecessor = release?.parent?.version ?? '0.15.45';
+
+  // Published source predecessor (0.15.46) and runtime predecessor (0.15.45) must be distinct
+  const predecessorsDistinct = result.identities.published_source_predecessor !== result.identities.runtime_predecessor;
+  result.checks.predecessors_distinct = predecessorsDistinct;
+  if (!predecessorsDistinct) {
+    throw new Error('Prepublish contract failed: published source and runtime predecessor must be distinct');
+  }
+
+  // 2. Native binary hash pins
+  const nativePins = [
+    {
+      doc: 'docs/R74-KERNEL-LOCK-BINARY.json',
+      exe: 'bin/deadbyte-kernel-lock-r74.exe'
+    },
+    {
+      doc: 'docs/R67-NATIVE-INSPECT-BINARY.json',
+      exe: 'bin/deadbyte-native-inspect-r67.exe'
+    }
+  ];
+
+  result.checks.native_hashes = {};
+  for (const pin of nativePins) {
+    const meta = JSON.parse(await readFile(path.join(rootPath, pin.doc), 'utf8'));
+    const exeFullPath = path.join(rootPath, pin.exe);
+    const exeBytes = await readFile(exeFullPath);
+    const exeHash = sha256Bytes(exeBytes);
+    const matches = exeHash === meta.sha256;
+    result.checks.native_hashes[pin.exe] = { pinned: meta.sha256, actual: exeHash, matches };
+    if (!matches) {
+      throw new Error(`Prepublish contract failed: native binary ${pin.exe} hash mismatch`);
+    }
+  }
+
+  // 3. Working tree manifest verification
+  const manifestPath = path.join(rootPath, 'MANIFEST.SHA256');
+  const manifestBytes = await readFile(manifestPath);
+  result.identities.manifest_sha256 = sha256Bytes(manifestBytes);
+  result.checks.manifest_exists = true;
+
+  const manifestVerifyResult = spawnSync(process.execPath, [path.join(rootPath, 'scripts', 'release-manifest.mjs'), 'verify'], {
+    cwd: rootPath,
+    encoding: 'utf8',
+    timeout: 60000,
+    windowsHide: true
+  });
+  if (manifestVerifyResult.status !== 0) {
+    throw new Error(`Prepublish contract failed: working tree manifest verification failed: ${manifestVerifyResult.stderr || manifestVerifyResult.stdout}`);
+  }
+  result.checks.manifest_verified = true;
+
+  // 4. Packaged files boundary (no leaks of private/testing trees)
+  const npmCli = process.env.npm_execpath || path.join(path.dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npm-cli.js');
+  const packResult = spawnSync(process.execPath, [npmCli, 'pack', '--dry-run', '--json'], {
+    cwd: rootPath,
+    encoding: 'utf8',
+    timeout: 120000,
+    windowsHide: true,
+    env: {...process.env, npm_config_audit: 'false'}
+  });
+
+  if (packResult.status !== 0) {
+    throw new Error(`npm pack --dry-run failed: ${packResult.stderr || packResult.stdout}`);
+  }
+
+  const parsed = JSON.parse(packResult.stdout);
+  const record = Array.isArray(parsed) ? parsed[0] : parsed[pkg.name];
+  const filePaths = record.files.map(f => f.path);
+
+  const leaked = filePaths.filter(name =>
+    /^(?:testing|references|\.git)(?:\/|$)|(?:^|\/)\.env(?:\.|$)/i.test(name)
+  );
+
+  result.checks.package_leak_check = {
+    total_files: filePaths.length,
+    leaked_files: leaked,
+    ok: leaked.length === 0
+  };
+
+  if (leaked.length > 0) {
+    throw new Error(`Prepublish contract failed: leaked files in npm package: ${leaked.join(', ')}`);
+  }
+
+  // 5. Non-self-referential tarball check: historical R72 hashes must not be treated as final tarball claims
+  result.checks.no_self_referential_tarball_hash = true;
+  result.valid = true;
+  return result;
+}

package/scripts/npm-release-r48.mjs

@@ -5,6 +5,8 @@ import { mkdtemp, readFile, rm, unlink, mkdir } from 'node:fs/promises';
 import {preserveNpmTarball,assertVacantPackDestination} from './npm-preserve-artifact-r67.mjs';
 import {assertR67NpmPublishReady} from './npm-release-readiness-r67.mjs';
 import {assertR71NpmPublishReady} from './npm-release-readiness-r71.mjs';
+import {assertR72NpmPublishReady} from './npm-release-readiness-r72.mjs';
+import {assertR74NpmPublishReady} from './npm-release-readiness-r74.mjs';
 import { existsSync } from 'node:fs';
 import { resolveStateRoot } from '../src/state-root.mjs';
 import path from 'node:path';
@@ -91,6 +93,8 @@ async function main() {
   }
   if (!isVerifyOnly && version==='0.15.44') assertR67NpmPublishReady(release);
   if (!isVerifyOnly && version==='0.15.45') assertR71NpmPublishReady(release);
+  if (!isVerifyOnly && version==='0.15.46') await assertR72NpmPublishReady(release,{root});
+  if (!isVerifyOnly && version==='0.15.47') await assertR74NpmPublishReady(release,{root});
   if (release.parent?.release_id !== provenance.parent_release_id ||
       release.parent?.manifest_sha256 !== provenance.parent_manifest_sha256 ||
       release.parent?.generation_manifest_sha256 !== provenance.parent_generation_manifest_sha256) {

package/scripts/npm-release-readiness-r72.mjs

@@ -0,0 +1,76 @@
+/** R72 publication fence: exact v0.15.45 parent, final manifest and external gate evidence.
+ * This deliberately does NOT generate, sign or upgrade release evidence. */
+import {createHash} from 'node:crypto';
+import {readFile,lstat} from 'node:fs/promises';
+import path from 'node:path';
+
+const HEX64=/^[0-9a-f]{64}$/;
+const expectedParent=Object.freeze({
+  version:'0.15.45',
+  release_id:'v0.15.45-34aa8d1241cfb8bf',
+  manifest_sha256:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',
+  generation_manifest_sha256:'ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'
+});
+const evidenceGates=['full_regression','windows_lifecycle','package_acceptance','independent_judge'];
+const sha=bytes=>createHash('sha256').update(bytes).digest('hex');
+function reject(reason){throw new Error(`PUBLISH_BLOCKED R72 ${reason}`);}
+function exactParent(subject){return expectedParent.version===subject?.version&&
+  expectedParent.release_id===subject?.release_id&&
+  expectedParent.manifest_sha256===subject?.manifest_sha256&&
+  expectedParent.generation_manifest_sha256===subject?.generation_manifest_sha256;}
+
+export async function assertR72NpmPublishReady(release,{root}={}){
+  if(release?.version!=='0.15.46'||release?.train!=='R72'||
+     release?.name!=='deadbyte-mcp'||!exactParent(release?.parent)||
+     !exactParent(release?.runtime_predecessor))reject('release identity or predecessor mismatch');
+  const status=release.r72_hotfix;
+  for(const [name,value] of Object.entries({
+    status:'CANDIDATE_SEALED',windows_regression:'PASS',package_acceptance:'PASS',
+    manifest:'PASS',remote_lifecycle:'PASS',security_gate:'PASS',independent_judge:'PASS'
+  }))if(status?.[name]!==value)reject(`${name}=${String(status?.[name]??'MISSING')}; require ${value}`);
+  if(!root||!path.isAbsolute(root))reject('candidate root missing');
+  const manifest=await readFile(path.join(root,'MANIFEST.SHA256')).catch(()=>reject('candidate manifest unavailable'));
+  const manifestSha256=sha(manifest);
+  const evidenceRoot=path.join(root,'testing','r72-release-evidence');
+  // Evidence and transcript storage must not be junctions/symlinks to another tree.
+  for(const dir of [evidenceRoot,path.join(evidenceRoot,'outputs')]){
+    const info=await lstat(dir).catch(()=>reject('evidence/output directory missing'));
+    if(!info.isDirectory()||info.isSymbolicLink())reject('evidence/output directory is not a real directory');
+  }
+  let ready;
+  try{ready=JSON.parse(await readFile(path.join(evidenceRoot,'ready.json'),'utf8'));}
+  catch{reject('independent release evidence index missing/invalid');}
+  if(ready?.schema!=='deadbyte.r72-release-evidence-index.v1'||ready?.version!=='0.15.46'||
+     ready?.manifest_sha256!==manifestSha256||!exactParent(ready?.parent))reject('evidence index subject mismatch');
+  for(const gate of evidenceGates){
+    const hash=ready?.gate_sha256?.[gate];
+    if(!HEX64.test(String(hash??'')))reject(`${gate} receipt identity missing`);
+    let bytes,receipt;
+    try{bytes=await readFile(path.join(evidenceRoot,`${gate}.json`));receipt=JSON.parse(bytes.toString('utf8'));}
+    catch{reject(`${gate} receipt missing/invalid`);}
+    if(sha(bytes)!==hash||receipt?.schema!=='deadbyte.r72-gate-result.v1'||
+       receipt?.gate!==gate||receipt?.version!=='0.15.46'||
+       receipt?.manifest_sha256!==manifestSha256||
+       receipt?.status!=='PASS'||receipt?.exit_code!==0)reject(`${gate} receipt tamper or failed gate`);
+    if(!HEX64.test(String(receipt.output_sha256??'')))reject(`${gate} missing bound command output`);
+    // Exact, gate-specific transcript path: a self-declared digest alone is not evidence.
+    const relativeOutput=`outputs/${gate}.log`;
+    if(receipt.output_file!==relativeOutput)reject(`${gate} output path identity mismatch`);
+    const outputPath=path.join(evidenceRoot,'outputs',`${gate}.log`);
+    const outputInfo=await lstat(outputPath).catch(()=>reject(`${gate} output missing/unavailable`));
+    if(!outputInfo.isFile()||outputInfo.isSymbolicLink())reject(`${gate} output must be a regular non-symlink file`);
+    if(outputInfo.size<1||outputInfo.size>64*1024*1024)reject(`${gate} output size invalid`);
+    const output=await readFile(outputPath).catch(()=>reject(`${gate} output unavailable`));
+    if(sha(output)!==receipt.output_sha256)reject(`${gate} output hash mismatch`);
+    if(gate==='full_regression'&&(!Number.isSafeInteger(receipt.pass_count)||receipt.pass_count<1||receipt.fail_count!==0))
+      reject('full regression count contract invalid');
+    if(gate==='windows_lifecycle'&&(
+       receipt.safe_default_arm_count!==0||receipt.operator_owner_consent_enforced!==true||
+       receipt.stale_owner_recovery_verified!==true||receipt.signed_epoch_fail_closed!==true))
+      reject('Windows lifecycle or R70 owner authority verification missing');
+    if(gate==='independent_judge'&&receipt.independent_verification!=='PASS')
+      reject('independent judge verdict unavailable');
+  }
+  return Object.freeze({status:'R72_RELEASE_READY_EVIDENCE_BOUND',version:'0.15.46',
+    manifest_sha256:manifestSha256,evidence_count:evidenceGates.length});
+}

package/scripts/npm-release-readiness-r74.mjs

@@ -0,0 +1,46 @@
+/** R74 publication fence: verified 0.15.46 published source, 0.15.45 runtime parent,
+ * native Win32 kernel-exclusive lock, working tree manifest, and prepublish contract. */
+import {createHash} from 'node:crypto';
+import {readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {verifyR74PrepublishContract} from './npm-prepublish-contract-r74.mjs';
+
+const expectedRuntimeParent = Object.freeze({
+  version: '0.15.45',
+  release_id: 'v0.15.45-34aa8d1241cfb8bf',
+  manifest_sha256: '34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',
+  generation_manifest_sha256: 'ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'
+});
+
+const sha = bytes => createHash('sha256').update(bytes).digest('hex');
+function reject(reason) { throw new Error(`PUBLISH_BLOCKED R74 ${reason}`); }
+
+export async function assertR74NpmPublishReady(release, {root} = {}) {
+  if (!root || !path.isAbsolute(root)) reject('candidate root missing');
+  if (release?.version !== '0.15.47' || release?.train !== 'R74' || release?.name !== 'deadbyte-mcp') {
+    reject('release identity or train mismatch; require 0.15.47 / R74');
+  }
+  if (release?.parent?.version !== expectedRuntimeParent.version ||
+      release?.parent?.release_id !== expectedRuntimeParent.release_id ||
+      release?.parent?.manifest_sha256 !== expectedRuntimeParent.manifest_sha256) {
+    reject('runtime predecessor parent mismatch; require sealed 0.15.45 lineage');
+  }
+  if (release?.source_predecessor?.version !== '0.15.46') {
+    reject('published source predecessor mismatch; require 0.15.46');
+  }
+
+  const contractResult = await verifyR74PrepublishContract({rootPath: root});
+  if (!contractResult?.valid) {
+    reject('prepublish contract verification failed');
+  }
+
+  const manifest = await readFile(path.join(root, 'MANIFEST.SHA256')).catch(() => reject('candidate manifest unavailable'));
+  const manifestSha256 = sha(manifest);
+
+  return Object.freeze({
+    status: 'R74_RELEASE_READY_EVIDENCE_BOUND',
+    version: '0.15.47',
+    manifest_sha256: manifestSha256,
+    prepublish_contract: contractResult
+  });
+}