deadbyte-mcp 0.15.46 → 0.15.47

package/MANIFEST.SHA256

@@ -22,11 +22,12 @@ c340e65014bd0ca1567aa3555dbe3170e7a9ae21c0ea8ac998dd92b9200448a0  bin/containmen
 19ff558218fe8437dc04f50a8848756a8a83a84f73f464057562d77c7e19fb75  bin/deadbyte-desktop-uia-r40.exe
 a0c952cb891ab61aa8c1cee503643b52b23d99ea154a42dc9238e9afb884638a  bin/deadbyte-exec.exe
 c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920  bin/deadbyte-hardware-observer-r45.exe
+a1dbb8963ab89f7c99f06c78612bfa15c3fb8ed7fbc48c1b17d160d4e4f02b4c  bin/deadbyte-kernel-lock-r74.exe
 c814771dddac8bfb184250b868ddb6ab9f5e0e43613c04c3ed8abe09324ec4db  bin/deadbyte-native-inspect-r67.exe
 daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4  bin/deadbyte-process-host.exe
 b55d2c4490dfb875d40f29a69df2addc5d579991cb7d094674c04d369dfcfac3  bin/deadbyte-tunnel-host.exe
 f0ce7acb1e41325cef8b6789f95bd78b6a6107423773eace57a12b49faa55095  bin/WORKER-REGISTRY.txt
-4c4b471a39614e7d3761e7cfc51217bd2f9d3c09b4d4b256669c9685a45d9aea  bridge/package.json
+fba23e7674ba561a30ef801c6a5efcd7986b7146c386b841b0799237fcff5f74  bridge/package.json
 f99413d82f84c808f52d5b8696c190a9142dd08f517f5ec3e442f0769402d189  bridge/src/bridge-health-r59.mjs
 fa0dcc4cde9c03e978c9f9dd24b62afa83f49bdada1f42ead544a9a17edd332f  bridge/src/bridge.mjs
 471f41c84c5b339cd81a708a4f36d4470e614946817ad2f9fca295dde2c83fb6  bridge/src/canonical-json-r60.mjs
@@ -42,7 +43,7 @@ d212dfb2ed0049ea54a62fca07847143a2485a8ba09a7e20fc1cdd58593b5ce0  controller/dea
 331d168750a18d2b8e351796ddbf8f9619374c707c3cea18b8b166934f8af0d3  controller/deadbyte-desktop-policy.json
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-d0d8096ec2878d31d76b6bb7e289266ceecb419cf3b6f70193711ced8bb6be96  controller/deadbyte-process-policy.json
+566aaf7bcfe10c3d5e623e4d324e096a02e8924e98a4f5c416cff7b349685e2d  controller/deadbyte-process-policy.json
 d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b  controller/deadbyte-semantic-lsp-config.json
 3023d2985f5b6e5cc7c0d08cb8b342b362c93dce7ebd4224635362194be40cf2  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
@@ -109,6 +110,11 @@ a132b9aedd37623133de3907e0bb278cfd5ad82967d3f4ca848a9a78772c75c2  docs/R70-FINIT
 478b8b8de0eb78c6aeedf13c84cf04af2e44d34c352a5f06d5f92f7cd328dd78  docs/R70-OWNER-BOOTSTRAP-CHECKPOINT-20261013.md
 255bc5b6cde4f63a1454af6bce988b8869c85060528896aa216d9455658a53ec  docs/R70-REFERENCE-MECHANISMS.json
 f2e6c44964dd1224e62f5a5198b1e768ce0ed55dcf86f477aa141056b2324896  docs/R70-TRUST-GUARD-EXPIRY-CHECKPOINT-20261013.md
+153ef010fc2b2df2cec3aed87657220285c8692451ff0e91ff904261a3cdcae9  docs/R73-CAPABILITY-GAP-MATRIX.json
+ae0a5c2f7b672de936cd1ead7e2b00e99bf66471f5163967fd37f9e76ef01fb4  docs/R73-EXECUTION-CONTRACT.md
+7e034e8a5ebfe11fac5ca8f111f4d0577bec75da9debfa9b9b21da80b723708d  docs/R73-IMPLEMENTATION-CHANGELOG.md
+1fc6eee1a5ec38f96169fc12a34a81e54682565f2e761f4eb251cc940da52015  docs/R73-REMAINING-DEFECTS.md
+9eac159041ef0215b69eb45b10d666de12d4446b2f6e0a06d250ec221b2f3756  docs/R74-KERNEL-LOCK-BINARY.json
 aaa27193e7a639fc76d0784ce11aa07fea64a05ddfe56ca94b5dc1ef8749fee0  docs/REFERENCES.txt
 d4c46484a4493cae172a56bcc239c8c01a1f53f9fb8ce8c1cdaf06df5d83b032  docs/superpowers/plans/2026-09-14-r30-process-plane.md
 373432c3763d4d69d7737d6874ee5dd7080c008655d2e78f2e119534c6fb6e88  docs/superpowers/plans/2026-09-14-r31-process-prerequisite.md
@@ -156,6 +162,7 @@ ddf1a99c92c7640a0ab73d5cb2d1d6afc37bfea13e1b2e5f59815b816718c24e  native/deadbyt
 8af45169ec12c6ac0cf3e1d5f0a8824b0f474419a39c3fd271725436f889f251  native/deadbyte-desktop-uia.cpp
 1818a8abe3d71a260febf3dbdcbe7fcb29faaef44520e3e6a9482147f38d3ded  native/deadbyte-exec.cpp
 bf9699ee304beba96fdb986dfef1a00312084b355f5a41a02a84a2bc3d095e0a  native/deadbyte-hardware-observer.cpp
+9cb7f1f8d5e267d7f7359307ab1136b91214b021b01831075514a69f7fe0368a  native/deadbyte-kernel-lock-r74.cpp
 b10d0d1886b091849402501bfde5bd5a7f6ba547902c6594b502891e5e1ec38a  native/deadbyte-native-inspect-r67.cpp
 51496e0cbf0376b0a62f60556c911c9276ec59ea066d1bb5450bddc20773c08b  native/deadbyte-process-host.cpp
 b1bd30e40c5cd5abd436ed5ffe23e02931e624fe33bc9f38918b2ddde58a2dc2  native/deadbyte-tunnel-host.cpp
@@ -1370,8 +1377,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-42eacd6c33e654cdbd1eb43d2e638e788e9e4aba2175ef1e8034ef4a5e2980dc  package.json
-f1ed7fae2d960ddc12beb7775d4f691ae960496ff63f1d63115e0baaf62330b0  PROVENANCE.json
+b287736f6794bd9deb3f705d5aad1c64e543400c4f404169f2fa5faa34c50707  package.json
+1720f52bf01bccc72cfd1ef898f5c4b6cbfe128c8cd472b341fa71bc9a9cbd97  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1380,9 +1387,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-b7017566c14e5b0d9cdffc49674beb00711e63e6dcdf93ef902e689364209ae2  README.txt
-4346cb40489eb78ff0b649ebd3933524510ad43306949cebb72e9b5e14ac1110  RELEASE.json
-55ac59f1cdfae1c4e3b7121983c566dd8684b05ea1198aeebb740dc102df729d  SBOM.cdx.json
+5c6d2a303b363026e5b43399e356dd7cc21c50d0276cddfc1cc8fd7b76ee42ed  README.txt
+ed26f5140ddb9e7982fd642497e7aa1903148f9b0d8ca7fa91733f35de4f1885  RELEASE.json
+eac8134f0144ceae1e197d8be06caebae5eb246591b297c2f2ca10c4ffa1f8a6  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1396,6 +1403,7 @@ f43c5e5064fb5863ce51aca156434d8b7c493ee954b8846f41625cd7130936d8  scripts/benchm
 92f23292ce358af88e6c42e126791c57b25d2b0689c538940d8c0745b7447d4e  scripts/build-containment.ps1
 f29c45250e58c5bfbf60089c17317845b6d8e3ef4a4874a37b7ed28538072ca7  scripts/build-desktop-r40.ps1
 1a85f9df365e3cd27507dcb4f88b4387436509e0e9109e3f4d386f99cedb68a1  scripts/build-hardware-r45.ps1
+7090ec92957af4ca68c916c69b03379247dc9b6d0387667d728194b77e1bac3a  scripts/build-kernel-lock-r74.ps1
 657fce7e1bb0fde217ec425da6ceb4a5b48503108db21e43040cc5ee87517569  scripts/build-native-inspector-r67.ps1
 1077e2f4baf2aae1c0d3e2416d00bd49a54e9e39a5939872c73143ca9e546633  scripts/capability-benchmark.mjs
 4330d5e5f5e68d49b526bea0fbbe330fa2203a8051e4f81ebfd23a0c4fb1ad16  scripts/check-agent-backend-r46.mjs
@@ -1497,7 +1505,7 @@ a09c4b206d8f21906baec0d6198a1c030174fc0abf724e0ecfa2741d4d91df78  scripts/gate-w
 6cdb1b0d116ddeec2bb98a28bd9c3bbe74ae808dd04d8705017486324881cc8e  scripts/gate-windows-r66-prepublish.ps1
 3c2573283f9801ab5fc1c8f53f74a28d5d87bd65fc14ae0a790e5a2122388ae6  scripts/gate-windows-r67.ps1
 158b19fdc31b3732801398fc20a25bef8e6ef9e21590ff35cbe2ed681b1bd660  scripts/gate-windows-r71.ps1
-f3a7c2f09ab2ab175c60974a2a13f6b89a7a61204d6d61e3926d06f1bb5de948  scripts/gate-windows-r72.ps1
+a9d10a04324cceafafa7edc1501e8e1f8a1ae4a094d0985c8309472512529d30  scripts/gate-windows-r72.ps1
 9a085b34b9e54023eb0efadcea1e74a1bef44b984105d064768d66910999173e  scripts/gate-windows.ps1
 9e625bdc701298c05eb2a63c208d023a487a1baf306c05940eb29c19fb1d6544  scripts/init-desktop-policy-r40.ps1
 01451045bff624a157e7eea79afd7edfa8cb8212ea0256c8ec744fe1e1b269ff  scripts/init-host-policy.ps1
@@ -1506,14 +1514,16 @@ de6142bd5693cf4edb8725c9c43fc77e9bdc12f5b398a757006d778d3ee3f8ed  scripts/inspec
 06425d2a4004cb0ad66383c10c30aaa91bb020be2926bc76f9681a8f0827ddfc  scripts/inventory-reference-dist.mjs
 7ea8cf6bf094a1612603bc716228a3753e5f06fca8a0684d2da15a04d0710c64  scripts/list-source-zips.mjs
 4326526cbff265bb8ec2d38af1825b0bac227e3506437fff6e13f9cdb20dab33  scripts/npm-artifact-identity-r61.mjs
+4422aee9ba447168ff9dfe1925738e88598f7c3fd2cb1bb5e532807695b97adf  scripts/npm-prepublish-contract-r74.mjs
 05e079de0e580355c8e2fe0531eee0b8d3a613055f54be05b3de83d2981f526a  scripts/npm-preserve-artifact-r67.mjs
 4870c1dba23d1f05f9302153a309ba5d42d1b08aee34eabd3361792c26b254ae  scripts/npm-publication-r65.mjs
 9d12d15f7c83ddf272834072ed37d618a232bd8a3fd36c339761fe08bb9380d8  scripts/npm-publish-r47.ps1
 4f1a6e0f8d23bd24b066b3a2df0cae1d47822c16c754122fde78dc509d0752f8  scripts/npm-release-r47.mjs
-8969ae092850a65cffa15aa226727a1186ab43dbb00dce1459ffc02c41c0af34  scripts/npm-release-r48.mjs
+c97cfe4e09bfcc08179372f0d37b544b0a0303f0ab65dee5d724061b1968eca5  scripts/npm-release-r48.mjs
 c166f98c5ec30d66b1769a9a017d8c4bc56230f221d99539f64b2b597187d912  scripts/npm-release-readiness-r67.mjs
 34b0448dbf7ba61ce821e53f4de0ca85aadeb44c96e689b39cf43c4801216857  scripts/npm-release-readiness-r71.mjs
 8fb0e7a6222d5e2ab67f45453844e53a22958a6c3ba34833c76713a246f2e802  scripts/npm-release-readiness-r72.mjs
+9b4fb96df0a25eaa62b77acc6be79f293cee53a8d6191bee76539e47a45dbabc  scripts/npm-release-readiness-r74.mjs
 62ad4f6f62cc31b9ea0fdc1cebbf26ccd1088f3f65dc6cf59b39c8be63521488  scripts/owner-probe-r58.mjs
 31bc0af20f7eecddda5f845da023f1d1750c70627ce872a885a3b06596c0c07f  scripts/pcb-skill-src-bringup-evidence.md.txt
 75d59f8e8d25fefb1f3afa7bd37f17287f277a7bcd09a04813daa9dea9d629fd  scripts/pcb-skill-src-constraint-model.md.txt
@@ -1564,6 +1574,7 @@ b356f98b2e94b639a1de46afef6c290076255e8aaf1f3e39873007b875cfb84c  scripts/r67-re
 a0979bb8112ca1c3f2576c29e5fd4ed29a769f212e845aa0b0025e87a2fe44c0  scripts/r67-run-shard-batch.mjs
 46f65aebed1d4fadcfd70a9c18b034525955c7517d2352821c32fa889d22b7bc  scripts/r67-stage-candidate.mjs
 2d3218c47e5c8ab26b460be9e98a1582048517938808ada3759e9e535ca5cbdb  scripts/r67-verify-parent-ping.mjs
+b7e0195e789ffef5f355f32f481b402335c664012da30b3432c977f9e1a0307f  scripts/r73-atomic-benchmark.mjs
 38ff2864fb657f7c7b9970db9db153d8b29be89184ba8b234c47ce02ce3078d0  scripts/read-source-zips.mjs
 bec6b4e8eb554e579db60af6f2acc1714e6a615926c55886b56e62fdc9dd1249  scripts/refresh-process-policy.mjs
 98ecc16fb1c88f1ed2ce8e488102b327ed959cae2dd39c010c47483f80b7d97b  scripts/release-manifest.mjs
@@ -1648,7 +1659,7 @@ e4a0f5f65501433e2695a38c1d8d9a217e91f934b03f2e4fe387af08684f367b  src/agent-gove
 5f4a73a1c3dc178c4b5de193b6cfc4774cfc46d5ad95ef0b786d4d386d82323b  src/agent-mcp-tools.mjs
 22d32373fdaceb7debae300ec4db2f3b1677072e946a203acff6f5e4dc458946  src/agent-memory-plane.mjs
 5cca555943318990ae8dc82481ab0d172e813261c71b541cc99114f411b040fa  src/agent-runtime.mjs
-622ee1d3c34c50a6343788cc7312e47cb43a87bdace78fb37ca7f51d453b19ad  src/atomic-mutation.mjs
+4e05ebb01f28268763a885b3f5b464eb29f3ed16097ab6814b004c89c62d591f  src/atomic-mutation.mjs
 0e2d1cdcc5e592ffe36e32fa6da68d84e00f992ca3a189b7a3735d8bbac476a6  src/audit-context.mjs
 cdbca84e760777e939fd813a16152318271b5cbf64e02d30921f24e1f6f59bff  src/audit-verify.mjs
 16be2ba8bf1d67838590eb6cc5ba79f4ea8fdb74bf31d1fb06e70296636720c2  src/authority-continuity-r65.mjs
@@ -1741,6 +1752,7 @@ cd00584f346160c8ad16b4dcf64b3fb6499668f3bc299c199b67f53caa995746  src/ingress-mo
 e1afae872e4252a4002032f1610033d41f5224896b0b06be077f54b267ed4f4f  src/invocation.mjs
 12c5347b87bf7b42276a1c3fef4c3d7271c06219c653cf55b95612d0f9bc7913  src/jev-decision-plane.mjs
 9efb25c69ecb0cf5778483d24a3944d2f08f52ebcbd271a212e89189add50167  src/job-supervisor-host-r44.mjs
+652bb07d8785f3f1d1ef51dce5905e0dec049dd1e9e03974c3b87767021033be  src/kernel-lock-r74.mjs
 56336a7edafb053e0bd4012a7b4ec53171b240dab72c5d1234f59f6df237076b  src/launcher-isolation.mjs
 532fbd7d5402bb9d65b81a1efdfa9ea1d7292d96e1d9c2d1e8d40ccc52af2670  src/lsp-stdio-client.mjs
 0cdf55dd1041f501edae9ce4647fce73b7338a97f9447b8d1bb4fa0ef777602c  src/machine-fs-mcp-tools.mjs
@@ -1845,12 +1857,12 @@ c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-std
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-94ce288d4d28b68fcee334fc2197bb4fa516420f0a185b557e32841cadfe40f1  src/version.mjs
+0aeea56130ec56c97ac1749877d047cd4f3cab21e5e89e30e40b24710cda861f  src/version.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-6d4bd9a013d90a2d6ac5b31c4296ff473b3841141b08dd7505e568174b719eed  TEST-MATRIX.json
+08e56162f22ae8d7065bed8e9ba5afe03dcc4b5636ccf8065a2622caa67b7829  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1861,7 +1873,7 @@ edbfa117a72cf3a253f251f0ca68e1ae84916dbf1ab609c145fad51cab1c40c0  test/agent-eva
 2c224f8aacdc041f2eedbe7d5b924d57ee3059b6d2657617f0e586a4411c84de  test/agent-runtime-crash.test.mjs
 6f55a2bbdd734a57069712869fdee4ae5f5dc7c49816567d446ee4b79209b6d3  test/agent-runtime.test.mjs
 d7434032cb171ce8bd65df93f9d0d516b7a7c6fe1e44be2993e3da33d496c78d  test/agent-task-receipt.test.mjs
-98de1fc43092c27e0fa85f391607494b11e6cc0d53eaf47b6db1ab457c6d6a4b  test/atomic-mutation.test.mjs
+5243eb93b2fb37f2a29178ea124afed0e7e9b75b2c655ec181a588a8ac387b4d  test/atomic-mutation.test.mjs
 01bb5af17d094617f4fd1cd9d57922c24f25c0e66d30c8171768cb237be63b1a  test/audit-context.test.mjs
 8749498efed0c346de5ba5db3452b6ea015966ea7fb835f0976f0fe44e720b83  test/audit-server-integration.test.mjs
 16c7d9e3ca03d135155b0826d4937d371768ac5d4fd65b8dcf8f92c91f28420c  test/audit-verify.test.mjs
@@ -1919,7 +1931,7 @@ bacb96828ea0431cd5f3a8ecb637894f0bdf80b5f52e9308ba0cbb982f50bd2a  test/commander
 5a7938243a5dbab4dd218fe2d8a34dbaf4eb76b4e9261bd2f15a34c01aa1e520  test/commander-reference-contract-r48.test.mjs
 b91717e90c678a07dab88f51285717f4e986b02fa65555f00e01e164d476a3a0  test/commander-remote-bridge-r47.test.mjs
 7bd183f57b33e4cd8c981fc906c80a6855cb856baace0bcb3f145dadf9d62127  test/commander-remote-plane-r47.test.mjs
-165cf460326c6952892aa8ddeeecc3895db95401ac6093141e8fe0d2060d3e20  test/commander-schema-differential-r48.test.mjs
+5af8bf878968a438cfeb7792779d2b525bedf62359251eafd48f772e273ef166  test/commander-schema-differential-r48.test.mjs
 0cb2ab0b6d74ef668f275063ab061b46b81466c21f4266cee6d1464e40cc9156  test/commander-torture-r47.test.mjs
 f94f19407f25c2227a27066d3e9f475ce0c2af9184cb304a88a7205e49ed1c61  test/commander-url-reader-r48.test.mjs
 d8e884e241c705b12797f911fb967a4a33b1ec6f3e15b433735882b3de4a34e5  test/commander-wire-contract-r47.test.mjs
@@ -2141,7 +2153,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 a6a84956b06cfafbee9ceeeca048555e302792ba177ac4c8f7f6559964d7ff9f  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-7266b6fff7d1088f5ff4f07563bc3d69809cff0d55a00715454e486d42985f2d  test/r59-tool-surface-compat.test.mjs
+37917bca0bc3e34d087e9b79fc79fb4c80a297ec5fe6ab0e526238c21dbcfdee  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2237,6 +2249,9 @@ ee6e58191394515782812f15545f33a5b5264cd163b5a5771fb043507e2dfb01  test/r72-publi
 945b3c9fff9f2d1574ddb8d275008e8b29a4edfdbc56efa302e24e79688cc54a  test/r72-remote-safe-contract.test.mjs
 a4f4e675703d6208d2ca51151273f97e547927d6f44d8b95c88309b3ee002008  test/r72-staging-input-isolation.test.mjs
 c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-staging-workspace-isolation.test.mjs
+20cc37b85fd61870fc51b01aeba7e7bb4e31fd6529dc38ad42e52b1549c412f8  test/r73-package-boundary.test.mjs
+c374a9365b1a4f65d38c6c52a760d7de26e1a035aae6f844de8e317188a95e9f  test/r74-kernel-lock.test.mjs
+3cf4cff51060c2996cbd38796629d9af0537576d2f169bd22d857187c5dec063  test/r74-prepublish-contract.test.mjs
 e45a6cd299d8d65bdeb9bc0117ce1eb2b47fdebad89a02413ee979c9d0ae3a5c  test/release-activation-gate.test.mjs
 eedc78733d3e4a85d1c7ab053b2994cbe7804492021c07ec5d97046d7536fc46  test/release-generation.test.mjs
 bb58887a2c393cd5aac3fa3bb3a04de2704bd2a30dd2083ea638543485fa7e60  test/release-manifest-windows.test.mjs

package/PROVENANCE.json

@@ -1,6 +1,6 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.46",
+  "version": "0.15.47",
   "source_model": "sealed production 0.15.44 -> isolated R71 candidate; no production mutation prior to independent release closure",
   "signing": "ed25519",
   "parent_tarball_sha256": "3b03d075967106ff354db2a96d0385d158ca92495a59d40f3f65c907eaa043b1",

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.46 / R72 REMOTE HOTFIX CANDIDATE
+DEADBYTE MCP V0.15.47 / R74 CRASH-SAFE RECOVERY CANDIDATE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.46 mcp
-  npx -y deadbyte-mcp@0.15.46 remote
-  npx -y deadbyte-mcp@0.15.46 remote status
-  npx -y deadbyte-mcp@0.15.46 remote restart
-  npx -y deadbyte-mcp@0.15.46 audit status
-  npx -y deadbyte-mcp@0.15.46 audit verify
+  npx -y deadbyte-mcp@0.15.47 mcp
+  npx -y deadbyte-mcp@0.15.47 remote
+  npx -y deadbyte-mcp@0.15.47 remote status
+  npx -y deadbyte-mcp@0.15.47 remote restart
+  npx -y deadbyte-mcp@0.15.47 audit status
+  npx -y deadbyte-mcp@0.15.47 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.47", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.46 remote
+  npx -y deadbyte-mcp@0.15.47 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.46 mcp
+  npx -y deadbyte-mcp@0.15.47 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.47", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.46", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.47", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.46 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.47 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.46",
-  "train": "R72",
-  "label": "R72 REMOTE HOTFIX CANDIDATE",
+  "version": "0.15.47",
+  "train": "R74",
+  "label": "R74 CRASH-SAFE RECOVERY AND RELEASE IDENTITY",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,9 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.44",
-    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\releases\\v0.15.44-9f500af433df3e77",
-    "manifest_file_sha256": "9f500af433df3e7778d4f11acf418526d5889f478114c955c8c72c0077a0636e",
-    "release_status": "PRODUCTION_RELEASED"
+    "version": "0.15.46",
+    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.46\\deadbyte-mcp-0.15.46.tgz",
+    "release_status": "REGISTRY_PUBLISHED"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r72:0.15.46",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r74:0.15.47",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.46"
+      "version": "0.15.47"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.46",
-  "train": "R72",
+  "version": "0.15.47",
+  "train": "R74",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.46",
+  "version": "0.15.47",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.47-r74",
       "deny_paths": [
         "node_modules",
         "controller/runtime",
@@ -20,7 +20,7 @@
   "profiles": {
     "ping_hold": {
       "executable": "C:\\WINDOWS\\System32\\cmd.exe",
-      "executable_sha256": "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
+      "executable_sha256": "15cd209c995b7d3009c91ca40892d5b8f1fb162f3e5f10716642ea278e8e0d7b",
       "root_ids": [
         "core"
       ],
@@ -45,7 +45,7 @@
     },
     "powershell": {
       "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
-      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "executable_sha256": "60c9b29843624dd8af6b6a7b26147753be6aeef65098b9a503cc50850afe410f",
       "root_ids": [
         "core"
       ],
@@ -76,7 +76,7 @@
     },
     "powershell_repl": {
       "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
-      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "executable_sha256": "60c9b29843624dd8af6b6a7b26147753be6aeef65098b9a503cc50850afe410f",
       "root_ids": [
         "core"
       ],

package/docs/R73-CAPABILITY-GAP-MATRIX.json

@@ -0,0 +1,17 @@
+{
+  "schema": "deadbyte.r73-reference-differential.v1",
+  "scope": "read-only static comparison; no donor runtime or benchmark was executed",
+  "references": [
+    {"version":"0.2.52","root":"D:/Projects/deadbyte-mcp/references/desktop-commander v0.2.52","license":"MIT per package.json"},
+    {"version":"0.3.0","root":"D:/Projects/deadbyte-mcp/references/desktop-commander v0.3.0","license":"MIT per package.json and LICENSE"},
+    {"version":"0.3.1-alpha.2","root":"D:/Projects/deadbyte-mcp/references/desktop-commander-0.3.1-alpha.2/static","license":"MIT per package.json and LICENSE"}
+  ],
+  "findings": [
+    {"mechanism":"process-tree cleanup","donor_evidence":"desktop-commander v0.3.0/dist/utils/process-tree.js","deadbyte_evidence":"native/deadbyte-process-host.cpp; src/process-runtime.mjs","decision":"KEEP","reason":"DEADBYTE Job Object ownership and creation-time identity are stronger than PID-only taskkill; test PID reuse instead of porting code."},
+    {"mechanism":"atomic file replacement","donor_evidence":"desktop-commander v0.3.0/dist/utils/atomic-write.js; dist/utils/rename.js","deadbyte_evidence":"src/atomic-mutation.mjs; test/atomic-mutation.test.mjs","decision":"ADAPT","reason":"The existing mutation lock could reclaim a live writer solely from aged mtime. R73 adds owner liveness and lock identity checks, retaining exact preconditions and unknown-effect semantics."},
+    {"mechanism":"corrupt config recovery","donor_evidence":"desktop-commander v0.3.0/dist/config-recovery.js","deadbyte_evidence":"src/runtime-update.mjs; src/activation-preflight-r65.mjs","decision":"DEFER","reason":"No reproduced DEADBYTE config recovery defect yet; avoid a second unsanctioned recovery path."},
+    {"mechanism":"bounded remote reconnect and telemetry","donor_evidence":"desktop-commander v0.3.0/dist/remote-device/remote-channel.js; dist/remote-device/transport-telemetry.js","deadbyte_evidence":"src/remote-device-r44.mjs; bridge/src/remote-call-claims-r60.mjs","decision":"KEEP","reason":"DEADBYTE has durable pre-dispatch claims and no-replay; focused recovery tests are required before any runtime change."},
+    {"mechanism":"alpha presentation and transport changes","donor_evidence":"desktop-commander-0.3.1-alpha.2/static/dist/utils/toolHistory.js; static/dist/remote-device/remote-channel.js","deadbyte_evidence":"src/remote-live-log.mjs; bridge/src/remote-dispatch-r60.mjs","decision":"DEFER","reason":"Static alpha snapshot is not behavioral or performance evidence; no compatible regression has been demonstrated."}
+  ],
+  "code_copied": false
+}

package/docs/R73-EXECUTION-CONTRACT.md

@@ -0,0 +1,11 @@
+# R73 controlled successor contract
+
+- Objective: improve post-0.15.46 correctness and recovery from reproducible defects; do not claim competitor superiority without equivalent runtime measurements.
+- Source master: published `deadbyte-mcp@0.15.46` tarball at `C:\Users\DEADBYTE\.deadbyte-mcp\evidence\npm-publication\0.15.46\deadbyte-mcp-0.15.46.tgz`, SHA-256 `b1a7c215e66fba14b1f1c19675dd3c9e75340d41fd5bd2a3d778175624bfc03e`. The extracted 2,288-file manifest verifies as `55c42123634a7fc3550c0cc24f09dc769ce777a9566032faab9247bb8d85067a`.
+- Runtime predecessor: active `v0.15.45-34aa8d1241cfb8bf` (manifest `34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc`); observed OFFLINE with all five authority planes DISARMED on 2026-10-15. Published source and active runtime are intentionally distinct.
+- Target: this non-Git `deadbyte-mcp-0.15.47-r73` successor only. The published tarball, R72 tree, active slots, grants, evidence, and reference corpus are protected.
+- Method: inspect actual current primitives and three Desktop Commander reference snapshots; capture RED for any behavioral change; implement the smallest native fix; focused GREEN, adversarial tests, full regression, Windows gate, independent review, manifest and verify-only package proof. No donor code reuse, generic shell, public tool or authority expansion.
+- Decision authority: owner has approved bounded source/tests in isolated successor (Class 2/3). License choice, new public interface/authority, deployment, npm publication, active runtime operations and production grant changes remain Class 1 and are prohibited in this task.
+- Assurance: HIGH_RISK for authority, filesystem, process, remote replay and release evidence. Acceptance oracles are fixture-controlled runtime state, independent file/process identity, exact hash/receipt verification, protocol responses and actual exit codes. Static comparison is not runtime acceptance.
+- Stop conditions: source/tarball identity drift; unavoidable production effect; missing independent owner authority; unresolved ambiguous mutation; or a mandatory gate that cannot pass without scope expansion. Preserve failed evidence. Do not seal a final release.
+- Rollback: discard only R73 successor changes through an explicitly reviewed file-level recovery from the verified 0.15.46 tarball; never reset or clean another tree.

package/docs/R73-IMPLEMENTATION-CHANGELOG.md

@@ -0,0 +1,12 @@
+# R73 candidate change log
+
+- Bootstrapped this non-Git successor from the verified published 0.15.46 tarball, not the mutable R72 tree. Active runtime 0.15.45 was not operated on.
+- RED: the identical six-case test file against the SHA-verified 0.15.46 predecessor `src/atomic-mutation.mjs` returned 3 pass / 3 fail. An aged lock was deleted while its writer was alive, a dead-owner lock was stolen without atomic ownership proof, and post-commit lock ownership loss was not classified. Against R73, the same six cases returned 6 pass / 0 fail.
+- GREEN: retain owner identity in the lock, do not reclaim an aged live lock, and never auto-delete an aged dead-owner lock without an atomic compare-and-delete primitive. Dead-owner locks fail closed with explicit reconciliation required; this trades automatic availability for serialization safety. New-lock I/O failure attempts to clean its own marker, timeout uses monotonic elapsed time, and post-commit lock ownership loss is classified as unknown effect. No public schema or authority change.
+- R67 v2 receipt reconciliation was already implemented. The npm tarball omitted `package-lock.json`; R73 regenerated it offline from 0.15.46 package metadata (matching the R72 source lock SHA-256 `bdddc9cba7a985feea78d3ec6c7100bb650587dcfee852eaa420f08fc6fdbb12`). The real CLI reconciler now returns `STALE_SOURCE`, 32 stale shards and zero integrity faults against historical R67 evidence, never a fabricated PASS.
+- Package boundary RED: npm dry-run inventory included two generated `testing/r70-verifier` artifacts. Added `.npmignore` for generated test evidence/reference/private environment paths; the identical behavioral test is GREEN. Existing evidence files were not deleted.
+- Full regression exposed four setup failures unrelated to the new lock behavior: the R48 pinned donor path no longer existed, and process policy retained four R72-root paths after tarball extraction. The donor file at `desktop-commander v0.2.52` has the exact pinned SHA-256 `f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140`; the test now points there without changing expectations. The process policy was rebound only to this isolated successor and refreshed with the canonical native/system hash tool. Targeted 8/8 tests pass.
+- The R72 `RELEASE.json.r72_hotfix` hashes describe an earlier candidate seal, not the final published tarball: embedded `883d73…`/`1aa877…` differ from final manifest `55c421…`/tarball `b1a7c2…`. The current R72 publication fence reads the external manifest and evidence index, not these embedded hashes. R73 must not promote this historical snapshot to a final claim.
+- npm package metadata declares no license, while inspected Desktop Commander snapshots say MIT. No license was chosen for DEADBYTE.
+
+No npm publish, production activation, rollback, grant change, donor code copy, or final-release seal is authorized in R73.

package/docs/R73-REMAINING-DEFECTS.md

@@ -0,0 +1,9 @@
+# R73 remaining boundaries
+
+1. A dead owner may leave an aged `.deadbyte-mutation.lock`. R73 refuses automatic deletion because a pathname check followed by unlink can remove a new writer's lock. Recovery requires independent target/receipt reconciliation and an ownership-safe OS primitive or reviewed operator action; no mutation is retried while the lock remains.
+2. Lock-file serialization assumes cooperative writers within an authorized root. A hostile process with write access to the same directory can replace the marker between read and unlink. Directory access control and exact SHA preconditions remain necessary; this file lock is not a hostile-local-process security boundary.
+3. Published 0.15.46 package omits `package-lock.json`; R73 regenerated the 0.15.46 lock offline in the isolated successor, matching the R72 source lock hash. The real R67 CLI now runs here and reports `STALE_SOURCE` for all 32 historical shards, not PASS. This does not change the published tarball or backfill historical receipts.
+4. `RELEASE.json.r72_hotfix` contains prepublication candidate hashes, not the final published 0.15.46 tarball/manifest hashes. The actual R72 publish fence uses external evidence and current manifest bytes. R73 documentation labels this historical snapshot; future release contracts should use explicit snapshot/final fields without self-referential embedded hashes.
+5. DEADBYTE npm package has no `license` field or root license file. Owner must decide licensing; donor MIT terms do not license DEADBYTE by implication.
+6. No donor runtime benchmark or ChatGPT remote end-to-end comparison has been performed. Static reference inspection cannot establish performance or capability superiority.
+7. R73 package version/metadata remain 0.15.46/R72 pending behavioral and release gates. This directory is a development successor, not a sealed or publishable 0.15.47 artifact.

package/docs/R74-KERNEL-LOCK-BINARY.json

@@ -0,0 +1,11 @@
+{
+  "schema": "deadbyte.r74-kernel-lock-binary.v1",
+  "status": "candidate",
+  "exe": "bin/deadbyte-kernel-lock-r74.exe",
+  "sha256": "a1dbb8963ab89f7c99f06c78612bfa15c3fb8ed7fbc48c1b17d160d4e4f02b4c",
+  "source": "native/deadbyte-kernel-lock-r74.cpp",
+  "source_sha256": "9cb7f1f8d5e267d7f7359307ab1136b91214b021b01831075514a69f7fe0368a",
+  "allow_network_egress": false,
+  "max_output_bytes": 65536,
+  "exit_fail_closed": true
+}

package/native/deadbyte-kernel-lock-r74.cpp

@@ -0,0 +1,65 @@
+#define WIN32_LEAN_AND_MEAN
+#define NOMINMAX
+#include <windows.h>
+#include <iostream>
+#include <string>
+
+int wmain(int argc, wchar_t** argv) {
+    if (argc < 3) {
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error\":\"usage: acquire <file> | probe <file>\"}\n";
+        return 2;
+    }
+    const std::wstring op = argv[1];
+    const std::wstring path = argv[2];
+
+    if (op == L"probe") {
+        HANDLE h = CreateFileW(path.c_str(), GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+        if (h == INVALID_HANDLE_VALUE) {
+            DWORD err = GetLastError();
+            if (err == ERROR_SHARING_VIOLATION || err == ERROR_LOCK_VIOLATION || err == ERROR_ACCESS_DENIED) {
+                std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"locked\",\"error_code\":\"SHARING_VIOLATION\",\"win32_error\":" << err << "}\n";
+                return 1;
+            }
+            std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error_code\":\"WIN32_ERROR\",\"win32_error\":" << err << "}\n";
+            return 2;
+        }
+        CloseHandle(h);
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"unlocked\"}\n";
+        return 0;
+    }
+
+    if (op == L"acquire") {
+        HANDLE h = CreateFileW(path.c_str(), GENERIC_READ | GENERIC_WRITE, 0, NULL, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
+        if (h == INVALID_HANDLE_VALUE) {
+            DWORD err = GetLastError();
+            if (err == ERROR_SHARING_VIOLATION || err == ERROR_LOCK_VIOLATION || err == ERROR_ACCESS_DENIED) {
+                std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"locked\",\"error_code\":\"SHARING_VIOLATION\",\"win32_error\":" << err << "}\n";
+                return 1;
+            }
+            std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error_code\":\"WIN32_ERROR\",\"win32_error\":" << err << "}\n";
+            return 2;
+        }
+
+        std::string record = "deadbyte.kernel-lock.r74:pid=" + std::to_string(GetCurrentProcessId()) + "\n";
+        DWORD written = 0;
+        SetFilePointer(h, 0, NULL, FILE_BEGIN);
+        SetEndOfFile(h);
+        WriteFile(h, record.data(), static_cast<DWORD>(record.size()), &written, NULL);
+        FlushFileBuffers(h);
+
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"acquired\",\"pid\":" << GetCurrentProcessId() << "}\n";
+        std::cout.flush();
+
+        char buf[1];
+        DWORD bytesRead = 0;
+        ReadFile(GetStdHandle(STD_INPUT_HANDLE), buf, 1, &bytesRead, NULL);
+
+        CloseHandle(h);
+        std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"released\"}\n";
+        std::cout.flush();
+        return 0;
+    }
+
+    std::cout << "{\"schema\":\"deadbyte.kernel-lock.r74.v1\",\"status\":\"failed\",\"error\":\"unknown operation\"}\n";
+    return 2;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.46",
+  "version": "0.15.47",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/scripts/build-kernel-lock-r74.ps1

@@ -0,0 +1,28 @@
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version Latest
+$root=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $root 'native\deadbyte-kernel-lock-r74.cpp'
+$observed=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($observed -ne $SourceSha256){throw "R74 kernel lock source SHA mismatch; refusing build"}
+Write-Output "R74_SOURCE_SHA256=$observed"
+$bin=Join-Path $root 'bin'
+$exe=Join-Path $bin 'deadbyte-kernel-lock-r74.exe'
+$obj=Join-Path $bin 'deadbyte-kernel-lock-r74.obj'
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'vswhere missing'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'MSVC x64 C++ toolchain missing'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$cmd=if($env:ComSpec){$env:ComSpec}else{Join-Path $env:SystemRoot 'System32\cmd.exe'}
+New-Item -ItemType Directory -Path $bin -Force | Out-Null
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+$output=& $cmd /d /s /c $line 2>&1
+$rc=$LASTEXITCODE
+$output | ForEach-Object { Write-Output ([string]$_) }
+if($rc -ne 0){throw "R74 kernel lock build failed exit=$rc"}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R74 kernel lock exe missing'}
+$sha=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output "R74_NATIVE_BUILD_PASS sha256=$sha path=$exe"

package/scripts/gate-windows-r72.ps1

@@ -26,8 +26,8 @@ Push-Location $repo
 try {
     $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
     $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
-    if($pkg.version -ne '0.15.46' -or $release.version -ne '0.15.46' -or $release.train -ne 'R72'){
-        throw 'R72_CANDIDATE_VERSION_DRIFT'
+    if($pkg.version -ne '0.15.47' -or $release.version -ne '0.15.47' -or $release.train -ne 'R74'){
+        throw 'R74_CANDIDATE_VERSION_DRIFT'
     }
     if($release.parent.release_id -ne $parentId -or $release.parent.manifest_sha256 -ne $parentSha -or
        $release.parent.generation_manifest_sha256 -ne $parentGen){throw 'R72_PARENT_IDENTITY_DRIFT'}