deadbyte-mcp 0.15.54 → 0.15.55

package/MANIFEST.SHA256

@@ -1394,8 +1394,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-2a77e9ed36e110107c366fe14c6fbbdea4d1a2eb67692d065e9c153ac175a72f  package.json
-abcd09944a92afef731dd23cf4f696ce24b6c6dbe058fde7d471a8937082ae8f  PROVENANCE.json
+6359d653adad04e0af16cb9def361ca0512f8585bd8bdc54e58e16aa5211cafd  package.json
+6fed2e0982f3a24aae3b10af7279993813b70d83855c3b9df2963d755618fb2e  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1404,9 +1404,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-7e23d69be013081bcd7175a6d9b69c14b8703777d69674ad3b7060e44a6b45c8  README.txt
-24a40c3e98f6142b9837e8f6afa29d0882e9e0ee4da7fde1a2fd6a5c3dd804b7  RELEASE.json
-3f771505287311be41353a035174d1b0315b664d3f8deb54e246aa843d8af6b1  SBOM.cdx.json
+a3a0461ae876b0e9270116223d95e963f648b63a4b2bef68ea14e6260b087d24  README.txt
+6f7eda6536d483fd83e2bacd1306f09bd7300bc5b62417ba87819fcfac414004  RELEASE.json
+f8bb41a1abe7954b2bced0b8b99d9cca35b1364e10bddd4c60d60cf0982a29b5  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1672,7 +1672,7 @@ c32cb9054a1b9641ae071c00622c0054272bdb0b519ea22c4ff926a1600a2b46  scripts/worklo
 546947775fac8075f48c689ea0f7bed5ea14424efd12587daead4a7df6e796df  src/activation-authority-proof-r75.mjs
 0fca861bfb959b6d84c4767b2f60a4e0ec2403291a6050ee7598f75d2c4c18e0  src/activation-continuity-engine-r65.mjs
 ef15933f6d77fdbbddafef4e46352a12ecd4ed8e2d4c6dd515059ad5fa547e65  src/activation-lock-r65.mjs
-bd45ac765a1a7f11f6051a51a3a33a4fde614c53f6626ed36dd6c406ccc4cabf  src/activation-preflight-r65.mjs
+44ee9d10415eb9fcbbcf744d863b3ae9a78fd79df5a933892b51346c5027bf65  src/activation-preflight-r65.mjs
 9dc1154b3857446d0412002e1f0b0031c23d1768350dc9395749a7f82be337e5  src/agent-backend-r44.mjs
 4e8e442497a15bce43b7d02ade497403d80b86e307473d26c172a0fba3a6d4ea  src/agent-eval-r42.mjs
 42858a99d43ecd1b165576890c237ad413dca25f9e6a17ec84c0e47b759913e8  src/agent-eval-runner-r42.mjs
@@ -1887,13 +1887,13 @@ c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-std
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-34723ba2a18d35478dce52000d1543bfa2ad106651debc7f33f4ffea33a0ccdc  src/version.mjs
+e058bc640b24164d4a5ca985875508cae57547c3e6b53f2123da3a8cf7036b46  src/version.mjs
 acf5f5a57779bc0529f9db3d821f0ef1b53d22063aa237041348c1ca444ea677  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-ec305577f2d1478dcb9770a7fa9abe10f0b6184618e30be9684e09c835d04174  TEST-MATRIX.json
+f41e82b3bd745f612b7331a804ab69e6057571dec1d8b0ee1c97aaab2073865d  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -2137,7 +2137,7 @@ a4394f3a11a0e6b3019bf819a82b40709354b45dd64f614f077dfb4bda357849  test/r117-conc
 1e4830ddde45e2cad773b00e998d31bc622633be9354668cac035dd495f0a527  test/r118-cross-process-orphan-recovery.test.mjs
 f25f30262042ff0826161426d3d2e5d3536380324272537d012d3afd358fc4d5  test/r119-recovery-crash-after-commit.test.mjs
 f32d6e495af58dcfbff75561097c7ea8e04193a1fa53b16b734a234a0670cfb0  test/r120-authority-history-audit.test.mjs
-a64d7bad9c46ac48f03996debc241d4c8006f7de30ad7c5ee6f6fa740f5398d3  test/r121-signed-transition-invariant.test.mjs
+d7fdeb14cc078e1fb40de52aa446731beb25b88b60d3891eb0547d287fc8d24a  test/r121-signed-transition-invariant.test.mjs
 0a5b7904e8ff10fb5992c6f273b3f2c7f92163448f9278bb87e68aebc1d6d991  test/r122-epoch-bounded-read.test.mjs
 78afe29736672e0ff5b86ba1fa7a6a81a75993290e3a2e84a9ef439078681726  test/r123-recovery-bounded-read.test.mjs
 f5c59fcc44585fec5e60be922463f56f31ecf2a8dd0c78bfcf856fbe08b043d7  test/r124-live-log-integrity.test.mjs
@@ -2147,9 +2147,9 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-f3dfb44383d9deaecaba83f085c443ffcd9e2e90d95c0aa50ca02a3a226a4a5d  test/r130-release-security-contract.test.mjs
+10d482a2d2e3874f9e8b72af388c2adad5c17e8f958fd47396cb2496df1147c5  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-736f61b40787d46e1ef2c53f8f7dfc12297044f0be9ac706bf65065a13169cf9  test/r132-release-identity.test.mjs
+564551f406e552bbee2e7ce2905e59d36b4bdf04e758985b1bce28fc567c066d  test/r132-release-identity.test.mjs
 acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
 3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
 e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
@@ -2237,7 +2237,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-ed3dcabd5bac65bbefe82be1a960299519225efe850a32e637c8c9b4c871c59e  test/r59-tool-surface-compat.test.mjs
+fccd74bf2f4004cec7ecab0e65c8f11673c3d0f3491d956c6957d848168d1395  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2264,7 +2264,7 @@ a6ec5cbc279083ace108bac15ea313deb4dfc895d55d73c3a047d4b409ec0b70  test/r64-machi
 32de441147f2dfd5020f2f4c1aa18187d90453a795eb957a316aff4aa8cf8ac0  test/r65-activation-lock-recovery.test.mjs
 cf20daadb0145b9c21e168d4e6e5dc510dfe66f9589e20133d1b9ab2ea22cf6d  test/r65-activation-lock.test.mjs
 81819c033df72963965b83ac217d25afc1c8595a6005722bd657554982cb9153  test/r65-activation-orchestration.test.mjs
-b0d915b3e0bace2a65dd83ee1f6783f17a255bac84c2597c6bc367f56f8ff8eb  test/r65-activation-preflight.test.mjs
+37876ebc889935dcdee048ba07a00bd53bbbb99a31565189a00a425c78d5926c  test/r65-activation-preflight.test.mjs
 570e909208aeafb363c433f1379ad3a842885c6de927766b45a0edb1e8905007  test/r65-authority-continuity-decision.test.mjs
 4c661a8b13d190e419c84bb0f92164c79956742462ec461fb0859fe121902251  test/r65-authority-durable-policy-binding.test.mjs
 978cd30100d9379a4b6ca7eed7476d8d0493608a2a84c7e09654896198e1a4ba  test/r65-authority-epoch-cli.test.mjs
@@ -2335,7 +2335,7 @@ a4f4e675703d6208d2ca51151273f97e547927d6f44d8b95c88309b3ee002008  test/r72-stagi
 c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-staging-workspace-isolation.test.mjs
 20cc37b85fd61870fc51b01aeba7e7bb4e31fd6529dc38ad42e52b1549c412f8  test/r73-package-boundary.test.mjs
 ff8d6c7998053a20a0d6a855d4a0013f0f19e649b91731d970e647242bb66e86  test/r74-kernel-lock.test.mjs
-15e79ef59028c21374547b827d4816003e85c275c78af94111144ce44c1973da  test/r74-prepublish-contract.test.mjs
+7cb5edf625e965c0e6a6938bd822522777880bd41ad51e73e1daaec6556e2bc2  test/r74-prepublish-contract.test.mjs
 d283a882b9d7bb38b8d6a0db97882fcaf9b6dfa717aca79dd0351012cc00ba23  test/r75-activation-authority-proof.test.mjs
 38b66147b550c1d1e068ebaa9f8de93a070c08a8a99e0ddee7970b0374c4bfc5  test/r75-authority-evidence.test.mjs
 993186133dc7620bcd3057efda9a0ba1435c938656e4b24a32ace4ce57ea9735  test/r76-pinned-marker-cas.test.mjs

package/PROVENANCE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.54",
-  "source_model": "published 0.15.53 -> R146 scoped policy generation and owner-approved offline legacy policy migration",
+  "version": "0.15.55",
+  "source_model": "published 0.15.54 -> R152 stable activation preflight subject without clock-time rebinding",
   "signing": "ed25519",
-  "parent_tarball_sha256": "596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c",
+  "parent_tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081",
   "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
@@ -11,8 +11,8 @@
     "manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
-  "source_predecessor_manifest_file_sha256": "04722504077844bbddb069aee72bfb7336b9ebfee8b6dd4733f48a82f4762cad",
-  "reproducibility": "R146 isolated 0.15.54 candidate from published 0.15.53 tarball SHA-256 596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c; production 0.15.45 unchanged and migration requires a fresh owner-signed approval",
+  "source_predecessor_manifest_file_sha256": "e87712aee4fdad8f450cce2351b87675aa1c112811f2aa8e363cbe808cd49b9f",
+  "reproducibility": "R152 isolated successor of published 0.15.54, exact upstream tarball SHA-256 bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081; production runtime 0.15.45 unchanged; new preflight subject excludes observed_at_utc only; owner Ed25519 approval required",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -25,12 +25,12 @@
     "evidence_receipt_sha256": "2d3adcc33d010c4977974971222e6b13d613ff268097fff0eec0113e4f82f281"
   },
   "fresh_full_regression": {
-    "status": "PENDING_R71_FRESH_SOURCE",
+    "status": "PENDING_R152_PROTECTED_FULL",
     "tests": null,
     "passed": null,
     "skipped": null,
     "failed": null,
-    "evidence_scope": "R67 historical evidence is not R71 proof"
+    "evidence_scope": "R152 focused unit and live read-only preflight PASS; protected full not yet observed"
   },
   "inherited_r58_consolidation": {
     "frontend_status_vocabulary": true,
@@ -76,12 +76,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r146-scoped-policy-release-candidate",
+  "builder": "deadbyte-r152-activation-subject-development",
   "parent_release_id": "v0.15.45-34aa8d1241cfb8bf",
   "parent_manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
   "parent_generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4",
-  "source_predecessor_version": "0.15.53",
-  "source_predecessor_tarball_sha256": "596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c",
+  "source_predecessor_version": "0.15.54",
+  "source_predecessor_tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.54 / R146 SCOPED POLICY MIGRATION
+DEADBYTE MCP V0.15.55 / R152 ACTIVATION SUBJECT STABILITY
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.54 mcp
-  npx -y deadbyte-mcp@0.15.54 remote
-  npx -y deadbyte-mcp@0.15.54 remote status
-  npx -y deadbyte-mcp@0.15.54 remote restart
-  npx -y deadbyte-mcp@0.15.54 audit status
-  npx -y deadbyte-mcp@0.15.54 audit verify
+  npx -y deadbyte-mcp@0.15.55 mcp
+  npx -y deadbyte-mcp@0.15.55 remote
+  npx -y deadbyte-mcp@0.15.55 remote status
+  npx -y deadbyte-mcp@0.15.55 remote restart
+  npx -y deadbyte-mcp@0.15.55 audit status
+  npx -y deadbyte-mcp@0.15.55 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.55", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.54 remote
+  npx -y deadbyte-mcp@0.15.55 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.54 mcp
+  npx -y deadbyte-mcp@0.15.55 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.55", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.54", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.55", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.54 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.55 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 
@@ -562,3 +562,7 @@ replacement between calls may request hash_file and compare file_sha256 values,
 restart or report drift if they differ; unchanged hashes do not make concurrent in-place
 modification during a read an atomic snapshot. The coding root's local read policy remains
 the final authority, including the established read-only behavior when coding is disarmed.
+
+R152 note: repeated read-only activation preflights now bind stable authority and runtime identity, not observed_at_utc.
+An owner-signed Ed25519 offline scope repair approval is still required before production activation from 0.15.45.
+Do not use remote on production until this approval and an independently observed activation/rollback gate succeed.

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.54",
-  "train": "R146",
-  "label": "R146 SCOPED POLICY MIGRATION / PREPUBLISH CANDIDATE",
+  "version": "0.15.55",
+  "train": "R152",
+  "label": "R152 ACTIVATION SUBJECT STABILITY / OWNER APPROVAL REQUIRED",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,10 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.53",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\testing\\r144-remote-recovery\\R144F-REGISTRY-0.15.53.tgz",
+    "version": "0.15.54",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\testing\\r144-remote-recovery\\r150-registry-artifact\\deadbyte-mcp-0.15.54.tgz",
     "release_status": "REGISTRY_PUBLISHED",
-    "tarball_sha256": "596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c"
+    "tarball_sha256": "bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -37,8 +37,8 @@
     "performance_acceptance": "PASS_BOUNDED_PREPUBLISH",
     "fresh_full_regression": "PASS_R64_PREPACKAGE",
     "package_acceptance": "PENDING_R71",
-    "registry_round_trip": "PENDING_R71",
-    "production_activation_rollback_restore": "PENDING_R71",
+    "registry_round_trip": "PENDING_R152",
+    "production_activation_rollback_restore": "PENDING_OWNER_SIGNED_APPROVAL",
     "stable_final_claim": false,
     "cross_plane_acceptance": "PASS",
     "public_surface_compatibility": "R71_43_TOOLS_TWO_REVIEWED_SCHEMA_DELTAS",

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r146:0.15.54",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r152:0.15.55",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.54"
+      "version": "0.15.55"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,6 +1,6 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.54",
+  "version": "0.15.55",
   "train": "R146",
   "primary_platform": "win32-x64",
   "reference": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.54",
+  "version": "0.15.55",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/src/activation-preflight-r65.mjs

@@ -45,7 +45,12 @@ export function classifyActivationPreflight({pointer,expectedParent,candidate,ex
   if(!expectedParent||!expectedCandidate||!candidate||!pointer)throw new Error('activation preflight subject missing');
   const authority=vector(observation);
   if(PLANES.some(plane=>typeof authority[plane]!=='boolean'))return Object.freeze({state:'UNKNOWN',safe_to_activate:false,reason:'authority observation incomplete'});
-  const subject={pointer,expectedParent,candidate,expectedCandidate,observation};
+  // Observed time is freshness metadata, not a runtime or authority identity.
+  // Rebinding to it makes a second read reject an otherwise identical signed approval.
+  // Keep every other observed field pinned, including runtime IDs and grant proofs.
+  const stableObservation={...observation};
+  delete stableObservation.observed_at_utc;
+  const subject={pointer,expectedParent,candidate,expectedCandidate,observation:stableObservation};
   const bound={subject_sha256:digest(subject),authority:Object.freeze(authority)};
   for(const plane of PLANES){
     const entry=observation?.authority?.[plane],proof=observation?.authority_proof?.[plane];

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.54';
+export const DEADBYTE_VERSION = '0.15.55';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/r121-signed-transition-invariant.test.mjs

@@ -76,18 +76,17 @@ test('R121 correctly signed restore after user revoke is still an invalid author
       await assert.rejects(candidate.auditHistory({plane:'process'}), /authority epoch transition invalid/);
       assert.equal((await readFile(path.join(dir, 'events', eventFile))).equals(eventBytes), true);
 
-      // An older source can append a fresh grant over this forged head because
-      // its immediate-predecessor check lacks transition semantics. The new
-      // hot path checks the newest pair, while explicit audit must detect the
-      // invalid transition that is now deeper in history.
+      // Current protected writers must reject the already-forged transition
+      // rather than extending it and making the corrupted head appear trusted.
       const finalNonce = randomBytes(32).toString('hex');
       const finalGrant = Buffer.from(JSON.stringify({instance_nonce:finalNonce, fixture:'R121 final'}));
-      const finalHead = await writer.append({plane:'process', action:'grant',
-        grantBytes:finalGrant, grantInstanceNonce:finalNonce});
-      assert.equal((await candidate.readHead({plane:'process'})).event_sha256, finalHead.event_sha256);
+      await assert.rejects(writer.append({plane:'process', action:'grant',
+        grantBytes:finalGrant, grantInstanceNonce:finalNonce}), /authority epoch transition invalid/);
+      await assert.rejects(candidate.readHead({plane:'process'}), /authority epoch transition invalid/);
       assert.equal((await candidate.verifyGrant({plane:'process', grantBytes:finalGrant,
-        grantInstanceNonce:finalNonce})).trusted, true);
+        grantInstanceNonce:finalNonce})).trusted, false);
       await assert.rejects(candidate.auditHistory({plane:'process'}), /authority epoch transition invalid/);
+      assert.equal((await readFile(path.join(dir, 'events', eventFile))).equals(eventBytes), true);
     } finally {
       await rm(root, {recursive:true, force:true, maxRetries:8, retryDelay:100});
     }

package/test/r130-release-security-contract.test.mjs

@@ -13,14 +13,14 @@ test('R130 security patch has a new immutable package identity and truthful sour
     read('SBOM.cdx.json'),read('package-lock.json'),read('TEST-MATRIX.json')]);
   assert.equal(pkg.name,'deadbyte-mcp');
   for(const actual of [pkg.version,release.version,provenance.version,matrix.version,bom.metadata.component.version,lock.version,lock.packages[''].version,DEADBYTE_VERSION])
-    assert.equal(actual,'0.15.54');
-  assert.equal(release.train,'R146');
+    assert.equal(actual,'0.15.55');
+  assert.equal(release.train,'R152');
   assert.equal(matrix.train,'R146');
-  assert.equal(release.source_predecessor.version,'0.15.53');
-  assert.match(release.source_predecessor.source_path,/0\.15\.53/);
+  assert.equal(release.source_predecessor.version,'0.15.54');
+  assert.match(release.source_predecessor.source_path,/0\.15\.54/);
   assert.equal(release.runtime_predecessor.version,'0.15.45');
-  assert.equal(provenance.source_predecessor_version,'0.15.53');
-  assert.equal(provenance.source_predecessor_manifest_file_sha256,'04722504077844bbddb069aee72bfb7336b9ebfee8b6dd4733f48a82f4762cad');
+  assert.equal(provenance.source_predecessor_version,'0.15.54');
+  assert.equal(provenance.source_predecessor_manifest_file_sha256,'e87712aee4fdad8f450cce2351b87675aa1c112811f2aa8e363cbe808cd49b9f');
   assert.equal(pkg.dependencies['@modelcontextprotocol/client'],'2.3.1');
   assert.equal(pkg.dependencies['@modelcontextprotocol/server'],'2.3.1');
   for(const dep of ['@modelcontextprotocol/client','@modelcontextprotocol/server'])

package/test/r132-release-identity.test.mjs

@@ -13,15 +13,15 @@ test('R144 package identities, R132 historic evidence and published predecessor
     read('package.json'),read('package-lock.json'),read('RELEASE.json'),
     read('PROVENANCE.json'),read('SBOM.cdx.json'),read('TEST-MATRIX.json')]);
   for(const value of [pkg.version,lock.version,lock.packages[''].version,release.version,prov.version,bom.metadata.component.version,matrix.version,DEADBYTE_VERSION]){
-    assert.equal(value,'0.15.54');
+    assert.equal(value,pkg.version);
   }
-  assert.equal(release.train,'R146');
+  assert.equal(release.train,'R152');
   assert.equal(matrix.train,'R146');
-  assert.equal(release.source_predecessor.version,'0.15.53');
-  assert.match(release.source_predecessor.source_path,/0\.15\.53/);
-  assert.equal(prov.source_predecessor_version,'0.15.53');
-  assert.equal(prov.source_predecessor_manifest_file_sha256,'04722504077844bbddb069aee72bfb7336b9ebfee8b6dd4733f48a82f4762cad');
-  assert.equal(prov.parent_tarball_sha256,'596aba2aefdb6d55824302e5aa2ca0e8ca2ea30eb2a6a13da4ec6ab036bd2a2c');
+  assert.equal(release.source_predecessor.version,'0.15.54');
+  assert.match(release.source_predecessor.source_path,/0\.15\.54/);
+  assert.equal(prov.source_predecessor_version,'0.15.54');
+  assert.equal(prov.source_predecessor_manifest_file_sha256,'e87712aee4fdad8f450cce2351b87675aa1c112811f2aa8e363cbe808cd49b9f');
+  assert.equal(prov.parent_tarball_sha256,'bedb4be86f4c22d4c98d661a08738d5ef51027a87240a1770c8cc0b0a4885081');
   assert.equal(release.runtime_predecessor.version,'0.15.45');
   assert.equal(prov.runtime_predecessor.release_id,release.runtime_predecessor.release_id);
   assert.equal(prov.runtime_predecessor.manifest_sha256,release.runtime_predecessor.manifest_sha256);

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R72 compact baseline permits only R64 read offset and authorized coding-on
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55'].includes(packageVersion)){
     assert.deepEqual([...diff.schema_changed].sort(),['machine_fs','native_diff_preview']);
     assert.equal(diff.unchanged.length,41);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');

package/test/r65-activation-preflight.test.mjs

@@ -34,3 +34,38 @@ test('parked dirty, generation drift and identity loss fail closed without an ac
   assert.equal(classifyActivationPreflight({...input,observation:withAuthorityProof({...online,policy_sha256:{...policies,host:null}})}).state,'UNKNOWN');
   assert.equal(classifyActivationPreflight({...input,observation:withAuthorityProof({...online,cloud:{alive:false,reason:'missing'}})}).state,'RUNTIME_DRIFT');
 });
+
+test('R152 preflight subject ignores observation timestamp but binds runtime, policy, and authority identity',()=>{
+  const a=withAuthorityProof({...online,observed_at_utc:'2026-10-23T07:00:00.000Z'});
+  const b=withAuthorityProof({...online,observed_at_utc:'2026-10-23T07:00:04.000Z'});
+  const baseline=classifyActivationPreflight({...input,observation:a});
+  const repeated=classifyActivationPreflight({...input,observation:b});
+  assert.equal(baseline.state,'ONLINE_READY');
+  assert.equal(repeated.state,'ONLINE_READY');
+  assert.equal(baseline.subject_sha256,repeated.subject_sha256);
+  for(const changed of [
+    {...b,bridge:{...b.bridge,pid:13304}},
+    {...b,policy_sha256:{...b.policy_sha256,coding:'a'.repeat(64)}},
+    {...b,active_release_id:'substituted-release'},
+    {...b,authority:{...b.authority,host:true}},
+    {...b,authority_proof:{...b.authority_proof,coding:{...b.authority_proof.coding,grant_absent:true}}}
+  ]){
+    const got=classifyActivationPreflight({...input,observation:changed});
+    assert.notEqual(got.subject_sha256,baseline.subject_sha256);
+    assert.notEqual(got.subject_sha256,undefined);
+  }
+});
+
+test('R152 offline legacy scope repair subject is stable across fresh read timestamps',()=>{
+  const down={...online,state:'OFFLINE',local_ready:false,
+    bridge:{alive:false,reason:'no-ledger',pid:null},core:{alive:false,reason:'bridge-unavailable',pid:null},
+    cloud:{alive:false,reason:'no-ledger',pid:null},supervisor:{running:false,reason:'no-ledger'},
+    authority:Object.fromEntries(Object.keys(authority).map(plane=>[plane,{configured:true,armed:false,
+      reason:plane==='autonomous'?'unverified':'disarmed'}]))};
+  const a=classifyActivationPreflight({...input,observation:withAuthorityProof({...down,observed_at_utc:'2026-10-23T07:00:00.000Z'})});
+  const b=classifyActivationPreflight({...input,observation:withAuthorityProof({...down,observed_at_utc:'2026-10-23T07:00:10.000Z'})});
+  assert.equal(a.state,'AUTHORITY_UNVERIFIED');
+  assert.equal(b.state,'AUTHORITY_UNVERIFIED');
+  assert.equal(a.subject_sha256,b.subject_sha256);
+  assert.equal(a.safe_to_activate,false);
+});

package/test/r74-prepublish-contract.test.mjs

@@ -22,7 +22,7 @@ test('R74 prepublish contract: positive path succeeds and verifies identities',
   assert.equal(result.identities.package_name, 'deadbyte-mcp');
   // R74 component contract retains its train-specific source and predecessor assertions;
   // the containing R144 package must report its actual immutable package version.
-  assert.equal(result.identities.package_version, '0.15.54');
+  assert.equal(result.identities.package_version, JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version);
   assert.equal(result.identities.target_train, 'R74');
   assert.equal(result.identities.published_source_predecessor, '0.15.46');
   assert.notEqual(result.identities.published_source_predecessor, result.identities.runtime_predecessor);