deadbyte-mcp 0.15.53 → 0.15.55

package/MANIFEST.SHA256

@@ -46,7 +46,7 @@ d212dfb2ed0049ea54a62fca07847143a2485a8ba09a7e20fc1cdd58593b5ce0  controller/dea
 331d168750a18d2b8e351796ddbf8f9619374c707c3cea18b8b166934f8af0d3  controller/deadbyte-desktop-policy.json
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-10f447690fb72b8f7d23678dbb3e1d2b95d071af42f4a01796b5e9a02fca912a  controller/deadbyte-process-policy.json
+6bacaa1f9af4615b1a8a516ff6ce7e12d84a779d43d87a7ba7b8abf57983532a  controller/deadbyte-process-policy.json
 d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b  controller/deadbyte-semantic-lsp-config.json
 3023d2985f5b6e5cc7c0d08cb8b342b362c93dce7ebd4224635362194be40cf2  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
@@ -1394,8 +1394,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-dbbbcc1804eb36bedb297cf14487a3b97fe40e9a506f6aeb0052ed3d80c415f3  package.json
-2822011499a153ddd4389dfe0805cb58195d12f0b1d84c30041fd9c0ba15ead1  PROVENANCE.json
+6359d653adad04e0af16cb9def361ca0512f8585bd8bdc54e58e16aa5211cafd  package.json
+6fed2e0982f3a24aae3b10af7279993813b70d83855c3b9df2963d755618fb2e  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1404,9 +1404,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-6b5b4f90c4fdc6667722d55b7d52d6acacfd655fe9bc85e786ea724fab438661  README.txt
-a8fe4687c17920eaaf0bbe03f88d3d0e3742fbc5c0f0f4e87f984c853b40a92e  RELEASE.json
-6759a82259a0c21323dce97851c237e16bbd68b49a676637a068ef5da53985f9  SBOM.cdx.json
+a3a0461ae876b0e9270116223d95e963f648b63a4b2bef68ea14e6260b087d24  README.txt
+6f7eda6536d483fd83e2bacd1306f09bd7300bc5b62417ba87819fcfac414004  RELEASE.json
+f8bb41a1abe7954b2bced0b8b99d9cca35b1364e10bddd4c60d60cf0982a29b5  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1447,7 +1447,7 @@ a64b6779eff80d68d90d238dee7f2feda5ada3c5c59bcaeae2ab7812bd28404e  scripts/deferr
 5af5953d67a5c494980feeb36bfc6df7d1cc8a6246f259c31cd3c64885d7e60a  scripts/deferred-slot-operation-r46.mjs
 34116370895aeff9a424475558f4aca3b05460146455d9bb0bafcacd1a270910  scripts/deferred-slot-operation.mjs
 1cee04ab67a1e9a06f42cb5fde7073298ca501a059c961d11659a578aaef5e90  scripts/deploy-r47.mjs
-e83f61c473b0e7c4d6cfc86b3b11af6760b81a098e07d2f38152e09886cd149b  scripts/deploy-r48.mjs
+0896a25bcd5ac98adf917591e82d179dae77201702bf11e6feae5f0db3fb9fac  scripts/deploy-r48.mjs
 2cc7a37231f8836a48c3bf4024887f38c10bfc89296ac483e4b98b3f18281933  scripts/derive-r45-parent.mjs
 67221c5619019a9d19611432d4361c99c365f14e89483e4c8f78451839960176  scripts/derive-r45-release.mjs
 87c6acc0df96a6e8bb6692bc7b12e8b386196a80cba554d9b214ff8bb12147fe  scripts/derive-r45-tests.mjs
@@ -1672,7 +1672,7 @@ c32cb9054a1b9641ae071c00622c0054272bdb0b519ea22c4ff926a1600a2b46  scripts/worklo
 546947775fac8075f48c689ea0f7bed5ea14424efd12587daead4a7df6e796df  src/activation-authority-proof-r75.mjs
 0fca861bfb959b6d84c4767b2f60a4e0ec2403291a6050ee7598f75d2c4c18e0  src/activation-continuity-engine-r65.mjs
 ef15933f6d77fdbbddafef4e46352a12ecd4ed8e2d4c6dd515059ad5fa547e65  src/activation-lock-r65.mjs
-21fe8809546f9e70eabfa3cfde233c02fe66b2dc76ca1a15aad73ec5fe2cd2b5  src/activation-preflight-r65.mjs
+44ee9d10415eb9fcbbcf744d863b3ae9a78fd79df5a933892b51346c5027bf65  src/activation-preflight-r65.mjs
 9dc1154b3857446d0412002e1f0b0031c23d1768350dc9395749a7f82be337e5  src/agent-backend-r44.mjs
 4e8e442497a15bce43b7d02ade497403d80b86e307473d26c172a0fba3a6d4ea  src/agent-eval-r42.mjs
 42858a99d43ecd1b165576890c237ad413dca25f9e6a17ec84c0e47b759913e8  src/agent-eval-runner-r42.mjs
@@ -1726,8 +1726,8 @@ c2902f09ca85c53010b11ef087114068fdedcde370d69728ca2205b8ec6322a0  src/commander-
 ff373782d804e4184f648c11ebaffc01168b259e36912c2e70f726a86eb02b8b  src/commander-observability.mjs
 7379825118da8fae16d63fe7c4d89b0ddb03e7649f3754adae58a4480f8b317f  src/commander-office-reader-r48.mjs
 23cda18e86daa4163003fb5a80e0069bc19541d454f32a9a38b1d901ee39f26b  src/commander-pdf-r48.mjs
-ad575fc45fdf02fd0f680a9f5a1d0a0fc8509922fd1832b2a80f72b2fa8c319c  src/commander-remote-bridge-r47.mjs
-1d292ce65a6c01dc272c7da2d13264f80552f79d2ee9c485ee0584a9cee7fb9a  src/commander-remote-relay-r47.mjs
+04a1c42ff50965d3422896f90d9b9a1fc88977085e5ecec5317f1694339db5e7  src/commander-remote-bridge-r47.mjs
+959516dfb783325b1f084ab37ba052d164d577231bd2f7a79bd506b0475e674d  src/commander-remote-relay-r47.mjs
 fe74274c8de996839c4cc95782f8caf746679b414fbf0390880b1c2ff732d5a8  src/commander-ui-resources.mjs
 b95c6c118ba81cea6671b8959723729094b4cb5736b42b470e1e1e400b55f4f8  src/commander-url-reader-r48.mjs
 dd9c535a949ab748e75c531ce2ee614b7aa0489a1fdabd33012642b545192fd3  src/commander-wire-adapter-r47.mjs
@@ -1743,7 +1743,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
 63a1d4d6a53f9eb7e02197b4e42158b867da8c042c2e61848d8a36cd398b8bd8  src/context-provenance.mjs
-91b0dacb14cc9ea35b06fc20d1108d3a4729f415871ef927b6a1679b5599d207  src/deadbyte-cli.mjs
+25072de3597b1fdd555ab947c6745ceef6944ced9bb112788a4ef27cf949434b  src/deadbyte-cli.mjs
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
@@ -1780,6 +1780,7 @@ e1afae872e4252a4002032f1610033d41f5224896b0b06be077f54b267ed4f4f  src/invocation
 9efb25c69ecb0cf5778483d24a3944d2f08f52ebcbd271a212e89189add50167  src/job-supervisor-host-r44.mjs
 652bb07d8785f3f1d1ef51dce5905e0dec049dd1e9e03974c3b87767021033be  src/kernel-lock-r74.mjs
 56336a7edafb053e0bd4012a7b4ec53171b240dab72c5d1234f59f6df237076b  src/launcher-isolation.mjs
+60d1f9ef38e106753ed4d682e77b643fc291531d39e798539933a79845740d9f  src/legacy-offline-policy-proof-r146.mjs
 532fbd7d5402bb9d65b81a1efdfa9ea1d7292d96e1d9c2d1e8d40ccc52af2670  src/lsp-stdio-client.mjs
 0cdf55dd1041f501edae9ce4647fce73b7338a97f9447b8d1bb4fa0ef777602c  src/machine-fs-mcp-tools.mjs
 d94e4478b7e465fa559065e508f65b9ef3eff815a8f2d7b2481bf2a0b05224c9  src/machine-fs-output-contracts.mjs
@@ -1834,13 +1835,13 @@ ee1104d1d77bfded8f93834226db718b6c207730c75650b040eec84aaa298078  src/r67-eviden
 9fa1ece4d9520e24225a119d190cdc59a4a548947f629e15ebdd909adaa42b9f  src/r67-regression-shards.mjs
 bfc27fcd00f40a9e06b35001ba4d4e5fda49079fe9db35d7b82608f84ea4cd9e  src/r70-owner-approval.mjs
 afc638b797d81b16c620ca2226eacc4cb1a36562a402219cdac3376867170610  src/receipt.mjs
-a22760d245b457f4ce0213b44a6a723f6002a8ddfff66543275b6f6bed664402  src/release-generation.mjs
+108765eb0cbefe55853ff44c1d28566caaa25bd329762fdd59900f64a9250a52  src/release-generation.mjs
 d2d11a6a2ee084ef8e71b8c0aa910ae0ecee2c66db47776b7777ff3e2db8a087  src/release-slot.mjs
 27c738dc52c66274ad3dc8dc344a73d55da4e28a99607c3191440a5e78d49d3e  src/remote-authority.mjs
 3f41fa32ddeed403b5431a338821b62e0c1946a9d808f06d0edb2d9341ca0121  src/remote-console.mjs
-ce6ec7ec794d1603f95311eac4712a0f8b26e7e96bc3617f88fba4297cc8b376  src/remote-device-r44.mjs
+e4289e7a073e5de51fd6180130ba47fbf361f231cd074dc6069552474de7a100  src/remote-device-r44.mjs
 9f6383c95b5339ab93fa17906248ad3a29de52339a6755ee78613e16d5e1ae96  src/remote-enforcement-probe-r60.mjs
-d3064fbd176ed5b2e6da0874aaf31662e6f1a8c273ed14bdcd329d2ca1aa6d53  src/remote-live-log.mjs
+b804f66b5f1a86e9846febeb8281b6ac5d1588911b129a7ee3eb7cf3138e3862  src/remote-live-log.mjs
 192172611b350febcb37cf08aa1b519a08e766923f9da99d017a239a7ad9ec0b  src/remote-log-decode-r60.mjs
 6131fda046bf7a751ffc99d922e8f14bdbc3accff9ee81b4f5ebef5b7b2f9b98  src/remote-mcp-autonomous-smoke-client.mjs
 ebff2982142263632a40b9f144e802b9cb0c86c798bb6c591de7f175ba50b660  src/remote-mcp-coding-smoke-client.mjs
@@ -1886,13 +1887,13 @@ c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-std
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-45a61c47e1e6b1d8fd0787206ba73c6210e0a7e85f7b2149c2c3f58f6c0da806  src/version.mjs
+e058bc640b24164d4a5ca985875508cae57547c3e6b53f2123da3a8cf7036b46  src/version.mjs
 acf5f5a57779bc0529f9db3d821f0ef1b53d22063aa237041348c1ca444ea677  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-1bc41f5442530b17745205035afd7be1fe98e590e5e8413a47473bb0ce521c91  TEST-MATRIX.json
+f41e82b3bd745f612b7331a804ab69e6057571dec1d8b0ee1c97aaab2073865d  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1959,8 +1960,8 @@ bacb96828ea0431cd5f3a8ecb637894f0bdf80b5f52e9308ba0cbb982f50bd2a  test/commander
 7b31f1db99ede6837ce491cc670b73d68ab0cdd7ee96ab5d3be713dc19288fc0  test/commander-protocol-r47.test.mjs
 2ec2c58c66fb1b6a8fc4386620ef984e28808f79d5ecdf87841f9a1d1f895fe1  test/commander-real-parity-r47.test.mjs
 5a7938243a5dbab4dd218fe2d8a34dbaf4eb76b4e9261bd2f15a34c01aa1e520  test/commander-reference-contract-r48.test.mjs
-b91717e90c678a07dab88f51285717f4e986b02fa65555f00e01e164d476a3a0  test/commander-remote-bridge-r47.test.mjs
-7bd183f57b33e4cd8c981fc906c80a6855cb856baace0bcb3f145dadf9d62127  test/commander-remote-plane-r47.test.mjs
+1bd0d8e11dcb2461fb4b0ed5d4c2d08be39a4cabf38046976466b04a9be8e0e4  test/commander-remote-bridge-r47.test.mjs
+e917c0495be8a51bebab517574edf5ff5658b758be6aacd4c8addbae64293712  test/commander-remote-plane-r47.test.mjs
 5af8bf878968a438cfeb7792779d2b525bedf62359251eafd48f772e273ef166  test/commander-schema-differential-r48.test.mjs
 0cb2ab0b6d74ef668f275063ab061b46b81466c21f4266cee6d1464e40cc9156  test/commander-torture-r47.test.mjs
 f94f19407f25c2227a27066d3e9f475ce0c2af9184cb304a88a7205e49ed1c61  test/commander-url-reader-r48.test.mjs
@@ -2136,7 +2137,7 @@ a4394f3a11a0e6b3019bf819a82b40709354b45dd64f614f077dfb4bda357849  test/r117-conc
 1e4830ddde45e2cad773b00e998d31bc622633be9354668cac035dd495f0a527  test/r118-cross-process-orphan-recovery.test.mjs
 f25f30262042ff0826161426d3d2e5d3536380324272537d012d3afd358fc4d5  test/r119-recovery-crash-after-commit.test.mjs
 f32d6e495af58dcfbff75561097c7ea8e04193a1fa53b16b734a234a0670cfb0  test/r120-authority-history-audit.test.mjs
-a64d7bad9c46ac48f03996debc241d4c8006f7de30ad7c5ee6f6fa740f5398d3  test/r121-signed-transition-invariant.test.mjs
+d7fdeb14cc078e1fb40de52aa446731beb25b88b60d3891eb0547d287fc8d24a  test/r121-signed-transition-invariant.test.mjs
 0a5b7904e8ff10fb5992c6f273b3f2c7f92163448f9278bb87e68aebc1d6d991  test/r122-epoch-bounded-read.test.mjs
 78afe29736672e0ff5b86ba1fa7a6a81a75993290e3a2e84a9ef439078681726  test/r123-recovery-bounded-read.test.mjs
 f5c59fcc44585fec5e60be922463f56f31ecf2a8dd0c78bfcf856fbe08b043d7  test/r124-live-log-integrity.test.mjs
@@ -2146,9 +2147,9 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-2f45d87bf72e4abd5df568694624d69dcbdb605bf456f6f5dd47a49bcb63a546  test/r130-release-security-contract.test.mjs
+10d482a2d2e3874f9e8b72af388c2adad5c17e8f958fd47396cb2496df1147c5  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-626721a443fdec3cd0c4e8abe4f59bc56d2e01fe879e74bed3f5a1626a5b5064  test/r132-release-identity.test.mjs
+564551f406e552bbee2e7ce2905e59d36b4bdf04e758985b1bce28fc567c066d  test/r132-release-identity.test.mjs
 acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
 3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
 e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
@@ -2167,6 +2168,10 @@ a21d029a174c7ae069997b284d01ba6708db388dbdf4c6fa24c3a672f0133b8d  test/r141-real
 7c6dddd97f1508d46ffffc2e06b25c077ebbc8f54d44d739619a028436317bec  test/r142-native-machinefs-authority.test.mjs
 79f87493bff0c5bfa06dbd8d51845f292dc3cabc95f9bcd937e3aa90330731ef  test/r144-claim-terminal-history.test.mjs
 ef0665adaab2a2b2d6ca8611a6335ded96b8e65a9661840acd139d3c86710e62  test/r144-controller-broad-roots-cleanup.test.mjs
+785c69e428691cf57db88bdd8a5f89c7cdb6b2840360065ac5fa89ca79d26b92  test/r146-generation-scope-narrowing.test.mjs
+eeb7f323e1265cf11a60abdddb6a5212b01be7709d4e7d122e703b9411988ddc  test/r146-legacy-offline-policy-proof.test.mjs
+32f40b649033172384267bbe8f6009dededcba81afff1e3ca51331407197fe3b  test/r146-livelog-backpressure.test.mjs
+77b3bfcd6fa04e21c7a04206181f7b4cbd5321f799a145859d8e84d0b984d174  test/r147-remote-request-hash.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2232,7 +2237,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-16f1e5b1f3b95341969c604e2355b71764cf35fbcd6cdc18447ce5fd40eb9fc8  test/r59-tool-surface-compat.test.mjs
+fccd74bf2f4004cec7ecab0e65c8f11673c3d0f3491d956c6957d848168d1395  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2258,8 +2263,8 @@ a6ec5cbc279083ace108bac15ea313deb4dfc895d55d73c3a047d4b409ec0b70  test/r64-machi
 54dc040171f44626549d7519393c8a8c358b31a4503d865288b2a61921d77896  test/r64-release-contract.test.mjs
 32de441147f2dfd5020f2f4c1aa18187d90453a795eb957a316aff4aa8cf8ac0  test/r65-activation-lock-recovery.test.mjs
 cf20daadb0145b9c21e168d4e6e5dc510dfe66f9589e20133d1b9ab2ea22cf6d  test/r65-activation-lock.test.mjs
-d42a91f50b36a66498df9b50af90be53d191b558b65a81aff8057558e678e2d2  test/r65-activation-orchestration.test.mjs
-b0d915b3e0bace2a65dd83ee1f6783f17a255bac84c2597c6bc367f56f8ff8eb  test/r65-activation-preflight.test.mjs
+81819c033df72963965b83ac217d25afc1c8595a6005722bd657554982cb9153  test/r65-activation-orchestration.test.mjs
+37876ebc889935dcdee048ba07a00bd53bbbb99a31565189a00a425c78d5926c  test/r65-activation-preflight.test.mjs
 570e909208aeafb363c433f1379ad3a842885c6de927766b45a0edb1e8905007  test/r65-authority-continuity-decision.test.mjs
 4c661a8b13d190e419c84bb0f92164c79956742462ec461fb0859fe121902251  test/r65-authority-durable-policy-binding.test.mjs
 978cd30100d9379a4b6ca7eed7476d8d0493608a2a84c7e09654896198e1a4ba  test/r65-authority-epoch-cli.test.mjs
@@ -2330,7 +2335,7 @@ a4f4e675703d6208d2ca51151273f97e547927d6f44d8b95c88309b3ee002008  test/r72-stagi
 c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-staging-workspace-isolation.test.mjs
 20cc37b85fd61870fc51b01aeba7e7bb4e31fd6529dc38ad42e52b1549c412f8  test/r73-package-boundary.test.mjs
 ff8d6c7998053a20a0d6a855d4a0013f0f19e649b91731d970e647242bb66e86  test/r74-kernel-lock.test.mjs
-6903c010b285a7551d1f77fa2a3b56bad74db45b2cacd747da75fea33ef839ab  test/r74-prepublish-contract.test.mjs
+7cb5edf625e965c0e6a6938bd822522777880bd41ad51e73e1daaec6556e2bc2  test/r74-prepublish-contract.test.mjs
 d283a882b9d7bb38b8d6a0db97882fcaf9b6dfa717aca79dd0351012cc00ba23  test/r75-activation-authority-proof.test.mjs
 38b66147b550c1d1e068ebaa9f8de93a070c08a8a99e0ddee7970b0374c4bfc5  test/r75-authority-evidence.test.mjs
 993186133dc7620bcd3057efda9a0ba1435c938656e4b24a32ace4ce57ea9735  test/r76-pinned-marker-cas.test.mjs
@@ -2352,7 +2357,7 @@ a7ef4dace2237253192bae1963cffc9e554421d42f4ba3e377d1a52dd19217b4  test/r92-acl-a
 b3e3bb920db56f17cce081fd796975e96e49a9783d2377234e114913395353a4  test/r94-win32-propagation-enum.test.mjs
 63302f7131d9407f2abd2bd82d48576df5bb1c567345f192003e0b7b5f00868c  test/r99-privileged-import-closure.test.mjs
 e45a6cd299d8d65bdeb9bc0117ce1eb2b47fdebad89a02413ee979c9d0ae3a5c  test/release-activation-gate.test.mjs
-eedc78733d3e4a85d1c7ab053b2994cbe7804492021c07ec5d97046d7536fc46  test/release-generation.test.mjs
+87d680c4210b9bde3e5da6eb4d3da6f7be344ccfd0049fd3493e8fe72d93405f  test/release-generation.test.mjs
 bb58887a2c393cd5aac3fa3bb3a04de2704bd2a30dd2083ea638543485fa7e60  test/release-manifest-windows.test.mjs
 316d4da8e41f0f924b287048a2f27a3be912c7fc4f18163c344b5145d5e2a172  test/release-slot.test.mjs
 0109c76b480cc600f6ed42be4519df3fa6835012bb9e4ba4ae6be6635468c4a8  test/release-smoke-isolation.test.mjs

package/PROVENANCE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.53",
-  "source_model": "published 0.15.52 -> R144 bounded remote claim recovery and fail-closed authority cleanup",
+  "version": "0.15.55",
+  "source_model": "published 0.15.54 -> R152 stable activation preflight subject without clock-time rebinding",
   "signing": "ed25519",
-  "parent_tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f",
+  "parent_tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081",
   "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
@@ -11,8 +11,8 @@
     "manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
-  "source_predecessor_manifest_file_sha256": "e00223a76ef6d0e0fa7e850de597fa44cd6113cd49725535492da73f1daf4244",
-  "reproducibility": "R144 isolated 0.15.53 candidate from published 0.15.52 tarball SHA-256 ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f; production 0.15.45 unchanged pending separate activation approval",
+  "source_predecessor_manifest_file_sha256": "e87712aee4fdad8f450cce2351b87675aa1c112811f2aa8e363cbe808cd49b9f",
+  "reproducibility": "R152 isolated successor of published 0.15.54, exact upstream tarball SHA-256 bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081; production runtime 0.15.45 unchanged; new preflight subject excludes observed_at_utc only; owner Ed25519 approval required",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -25,12 +25,12 @@
     "evidence_receipt_sha256": "2d3adcc33d010c4977974971222e6b13d613ff268097fff0eec0113e4f82f281"
   },
   "fresh_full_regression": {
-    "status": "PENDING_R71_FRESH_SOURCE",
+    "status": "PENDING_R152_PROTECTED_FULL",
     "tests": null,
     "passed": null,
     "skipped": null,
     "failed": null,
-    "evidence_scope": "R67 historical evidence is not R71 proof"
+    "evidence_scope": "R152 focused unit and live read-only preflight PASS; protected full not yet observed"
   },
   "inherited_r58_consolidation": {
     "frontend_status_vocabulary": true,
@@ -76,12 +76,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r144-remote-recovery-release-candidate",
+  "builder": "deadbyte-r152-activation-subject-development",
   "parent_release_id": "v0.15.45-34aa8d1241cfb8bf",
   "parent_manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
   "parent_generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4",
-  "source_predecessor_version": "0.15.52",
-  "source_predecessor_tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f",
+  "source_predecessor_version": "0.15.54",
+  "source_predecessor_tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",
@@ -282,5 +282,16 @@
     "public_named_tunnel": "PASS_SIGNED_MACHINE_PING",
     "controller_lifecycle": "PASS_START_RESTART_STOP_ISOLATED_PROTECTED_CANDIDATE",
     "production_activation": "DEFERRED_SEPARATE_OWNER_APPROVAL"
+  },
+  "r146": {
+    "reference_corpus_roots": 11,
+    "reference_source_bytes_copied": false,
+    "whole_drive_policy_inheritance": "REMOVED_FOCUSED_PASS",
+    "owner_signed_policy_migration": "PASS_FOCUSED",
+    "activation_claim_and_reproof": "PASS_FOCUSED",
+    "unprotected_full_regression": "ENVIRONMENT_RED_UNTRUSTED_WRITE_ACE",
+    "protected_full_regression": "PENDING",
+    "registry_publication": "NOT_RUN",
+    "production_activation": "BLOCKED_FRESH_OWNER_APPROVAL_REQUIRED"
   }
 }

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.53 / R144 REMOTE RECOVERY
+DEADBYTE MCP V0.15.55 / R152 ACTIVATION SUBJECT STABILITY
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.53 mcp
-  npx -y deadbyte-mcp@0.15.53 remote
-  npx -y deadbyte-mcp@0.15.53 remote status
-  npx -y deadbyte-mcp@0.15.53 remote restart
-  npx -y deadbyte-mcp@0.15.53 audit status
-  npx -y deadbyte-mcp@0.15.53 audit verify
+  npx -y deadbyte-mcp@0.15.55 mcp
+  npx -y deadbyte-mcp@0.15.55 remote
+  npx -y deadbyte-mcp@0.15.55 remote status
+  npx -y deadbyte-mcp@0.15.55 remote restart
+  npx -y deadbyte-mcp@0.15.55 audit status
+  npx -y deadbyte-mcp@0.15.55 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.55", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.53 remote
+  npx -y deadbyte-mcp@0.15.55 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.53 mcp
+  npx -y deadbyte-mcp@0.15.55 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.53", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.55", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.53 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.55 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 
@@ -562,3 +562,7 @@ replacement between calls may request hash_file and compare file_sha256 values,
 restart or report drift if they differ; unchanged hashes do not make concurrent in-place
 modification during a read an atomic snapshot. The coding root's local read policy remains
 the final authority, including the established read-only behavior when coding is disarmed.
+
+R152 note: repeated read-only activation preflights now bind stable authority and runtime identity, not observed_at_utc.
+An owner-signed Ed25519 offline scope repair approval is still required before production activation from 0.15.45.
+Do not use remote on production until this approval and an independently observed activation/rollback gate succeed.

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.53",
-  "train": "R144",
-  "label": "R144 REMOTE RECOVERY / VERIFIED PUBLIC NPM CANDIDATE",
+  "version": "0.15.55",
+  "train": "R152",
+  "label": "R152 ACTIVATION SUBJECT STABILITY / OWNER APPROVAL REQUIRED",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,10 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.52",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\testing\\r144-remote-recovery\\source-predecessor-0.15.52\\deadbyte-mcp-0.15.52.tgz",
+    "version": "0.15.54",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\testing\\r144-remote-recovery\\r150-registry-artifact\\deadbyte-mcp-0.15.54.tgz",
     "release_status": "REGISTRY_PUBLISHED",
-    "tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f"
+    "tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -37,8 +37,8 @@
     "performance_acceptance": "PASS_BOUNDED_PREPUBLISH",
     "fresh_full_regression": "PASS_R64_PREPACKAGE",
     "package_acceptance": "PENDING_R71",
-    "registry_round_trip": "PENDING_R71",
-    "production_activation_rollback_restore": "PENDING_R71",
+    "registry_round_trip": "PENDING_R152",
+    "production_activation_rollback_restore": "PENDING_OWNER_SIGNED_APPROVAL",
     "stable_final_claim": false,
     "cross_plane_acceptance": "PASS",
     "public_surface_compatibility": "R71_43_TOOLS_TWO_REVIEWED_SCHEMA_DELTAS",
@@ -402,5 +402,18 @@
     "npm_publish": "PENDING",
     "production_activation": "DEFERRED_SEPARATE_OWNER_APPROVAL",
     "stable_final_claim": false
+  },
+  "r146": {
+    "release_candidate_version": "0.15.54",
+    "source_predecessor_version": "0.15.53",
+    "source_predecessor_tarball_sha256": "596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c",
+    "production_predecessor_version": "0.15.45",
+    "whole_drive_policy_inheritance": "REMOVED_FOCUSED_PASS",
+    "legacy_offline_policy_proof": "OWNER_SIGNED_CANDIDATE_BOUND_FOCUSED_PASS",
+    "activation_transaction_reproof": "PASS_FOCUSED",
+    "protected_full_regression": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "BLOCKED_FRESH_OWNER_APPROVAL_REQUIRED",
+    "stable_final_claim": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r144:0.15.53",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r152:0.15.55",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.53"
+      "version": "0.15.55"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.53",
-  "train": "R144",
+  "version": "0.15.55",
+  "train": "R146",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -10,6 +10,21 @@
     "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
   },
   "required": [
+    {
+      "id": "r146-scoped-policy-generation",
+      "command": "node --test test/r146-generation-scope-narrowing.test.mjs test/r146-legacy-offline-policy-proof.test.mjs test/r65-activation-orchestration.test.mjs",
+      "expected": "Whole-drive roots are not inherited; migration requires exact owner-signed candidate-bound proof and immediate reproof"
+    },
+    {
+      "id": "r146-protected-native-full",
+      "command": "node --test --test-concurrency=4 test/*.test.mjs on exact protected 0.15.54 candidate",
+      "expected": "Zero failures; classified skips preserved; installed manifest verification passes"
+    },
+    {
+      "id": "r146-package-registry-activation",
+      "command": "Verify exact tarball, publish only after protected green, then activate only with a fresh signed policy-migration approval",
+      "expected": "Registry readback exact; production migration transactional and owner-authorized; no implicit authority restoration"
+    },
     {
       "id": "r144-protected-native-full",
       "command": "node --test --test-concurrency=4 test/*.test.mjs on exact protected candidate",

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r146-scoped-policy-dev\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r146-scoped-policy-dev\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r146-scoped-policy-dev\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r146-scoped-policy-dev",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.53",
+  "version": "0.15.55",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/scripts/deploy-r48.mjs

@@ -11,12 +11,35 @@ import {classifyActivationPreflight,classifyAuthorityContinuity,orchestrateActiv
 import {createEpochNativeContinuityEngine} from '../src/activation-continuity-engine-r65.mjs';
 import {createActivationClaimManager} from '../src/activation-lock-r65.mjs';
 import {observeAuthorityEvidence} from '../src/activation-authority-proof-r75.mjs';
+import {proveLegacyOfflineScopeRepair} from '../src/legacy-offline-policy-proof-r146.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const state=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
 const sha=async f=>createHash('sha256').update(await readFile(f)).digest('hex');
 const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
 
+function parseDeployArgs(argv){
+  const out={preflight:false,approvalPath:null,approvalSha256:null};
+  for(let index=0;index<argv.length;index++){
+    const arg=argv[index];
+    if(arg==='--preflight'){if(out.preflight)throw new Error('duplicate --preflight');out.preflight=true;continue;}
+    if(arg==='--policy-migration-approval'){
+      if(out.approvalPath)throw new Error('duplicate --policy-migration-approval');
+      const value=argv[++index];if(!value)throw new Error('--policy-migration-approval requires a path');
+      out.approvalPath=path.resolve(value);continue;
+    }
+    if(arg==='--policy-migration-approval-sha256'){
+      if(out.approvalSha256)throw new Error('duplicate --policy-migration-approval-sha256');
+      const value=String(argv[++index]??'').toLowerCase();if(!/^[0-9a-f]{64}$/.test(value))throw new Error('--policy-migration-approval-sha256 requires lowercase SHA-256');
+      out.approvalSha256=value;continue;
+    }
+    throw new Error(`unknown deploy argument '${arg}'`);
+  }
+  if(Boolean(out.approvalPath)!==Boolean(out.approvalSha256))throw new Error('policy migration approval path and SHA-256 are required together');
+  return out;
+}
+const deployArgs=parseDeployArgs(process.argv.slice(2));
+
 async function writeExclusive(file,value){
   const handle=await open(file,'wx',0o600);
   try{await handle.writeFile(JSON.stringify(value)+'\n');await handle.sync();}
@@ -72,13 +95,35 @@ function controllerCommand(command){
   if(run.error||run.status!==0)throw new Error(`activation controller ${command} failed exit=${run.status} code=${run.error?.code??'none'}`);
 }
 
-async function activationPreflight(manifest,pkg,pointer){
+function legacyOfflineRecovery(approvalPath,approvalSha256){
+  if(!approvalPath)return null;
+  return async({observation,preflight_subject_sha256,pointer,expectedParent,candidate,expectedCandidate})=>
+    proveLegacyOfflineScopeRepair({stateRoot:state,pointer,expectedParent,candidate,expectedCandidate,
+      preflightSubjectSha256:preflight_subject_sha256,observation,policyPaths:observation.policy_paths,
+      policySha256:observation.policy_sha256,approvalPath,approvalSha256,
+      ownerPublicKeyPath:path.join(state,'trust','r70-owner-public.pem')});
+}
+
+async function activationPreflight(manifest,pkg,pointer,recovery){
   const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
   const observed=await observeController();
   const result=classifyActivationPreflight({pointer,expectedParent:release.parent,
     candidate:{version:pkg.version,manifest_sha256:manifest},
     expectedCandidate:{version:release.version,manifest_sha256:manifest},observation:observed});
   const continuity=classifyAuthorityContinuity(observed);
+  if(result.state==='AUTHORITY_UNVERIFIED'&&recovery&&observed.state==='OFFLINE'){
+    try{
+      const proof=await recovery({phase:'preflight',observation:observed,preflight_subject_sha256:result.subject_sha256,
+        pointer,expectedParent:release.parent,candidate:{version:pkg.version,manifest_sha256:manifest},
+        expectedCandidate:{version:release.version,manifest_sha256:manifest}});
+      if(proof?.state==='VERIFIED_OFFLINE_LEGACY_SCOPE_REPAIR'&&proof.owner_approval_verified===true)
+        return {...result,state:'LEGACY_SCOPE_REPAIR_READY',safe_to_activate:true,authority_continuity:'LEGACY_SCOPE_REPAIRED_DISARMED',
+          legacy_scope_proof_sha256:proof.subject_sha256,owner_approval_subject_sha256:proof.owner_approval_subject_sha256,reauth_planes:[]};
+    }catch(error){
+      return {...result,state:'LEGACY_SCOPE_REPAIR_UNVERIFIED',safe_to_activate:false,
+        reason:String(error?.message??error).slice(0,256),authority_continuity:'UNVERIFIED',reauth_planes:[]};
+    }
+  }
   if(continuity.state==='UNVERIFIED')return {...result,state:'AUTHORITY_CONTINUITY_UNVERIFIED',safe_to_activate:false,
     reason:continuity.reason??'authority continuity observation unverified',authority_continuity:'UNVERIFIED',reauth_planes:continuity.reauth_planes??[]};
   if(continuity.state==='EPOCH_NATIVE')return {...result,authority_continuity:'EPOCH_NATIVE',
@@ -139,13 +184,13 @@ const bridgeScript=path.join(bridgeRoot,'src','bridge.mjs');
 const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
 const expectedVersion=pkg.version;
 const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
-const preflight=await activationPreflight(manifest,pkg,pointer);
-if(process.argv.includes('--preflight')){
+const recovery=legacyOfflineRecovery(deployArgs.approvalPath,deployArgs.approvalSha256);
+const preflight=await activationPreflight(manifest,pkg,pointer,recovery);
+if(deployArgs.preflight){
   console.log(JSON.stringify(preflight));
   process.exit(0);
 }
-if(process.argv.length>2)throw new Error('deploy accepts only --preflight');
-if(!['ONLINE_READY','ONLINE_HOST_ARMED','PARKED_DIRTY','OFFLINE_CLEAN'].includes(preflight.state))
+if(!['ONLINE_READY','ONLINE_HOST_ARMED','PARKED_DIRTY','OFFLINE_CLEAN','LEGACY_SCOPE_REPAIR_READY'].includes(preflight.state))
   throw new Error(`activation preflight rejected: ${preflight.state} subject=${preflight.subject_sha256??'<incomplete>'}`);
 const args=[
   '--stage',root,'--development-root',root,'--expected-version',expectedVersion,'--expected-manifest',manifest,
@@ -178,6 +223,7 @@ if(preflight.authority_continuity==='EPOCH_NATIVE'){
 const outcome=await orchestrateActivation({pointer,expectedParent:release.parent,
   candidate:{version:expectedVersion,manifest_sha256:manifest},expectedCandidate:{version:release.version,manifest_sha256:manifest},
   observe:async()=>observeController(),command:async command=>controllerCommand(command),claim:claimActivation,continuityEngine,
+  legacyOfflineRecovery:recovery,
   recordOutcome:recordActivationOutcome,
   activate:async()=>{
     result=await runSlotUpdateCli(args,{stateRoot:state});