deadbyte-mcp 0.15.66 → 0.15.68

package/MANIFEST.SHA256

@@ -30,7 +30,7 @@ c814771dddac8bfb184250b868ddb6ab9f5e0e43613c04c3ed8abe09324ec4db  bin/deadbyte-n
 daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4  bin/deadbyte-process-host.exe
 b55d2c4490dfb875d40f29a69df2addc5d579991cb7d094674c04d369dfcfac3  bin/deadbyte-tunnel-host.exe
 f0ce7acb1e41325cef8b6789f95bd78b6a6107423773eace57a12b49faa55095  bin/WORKER-REGISTRY.txt
-979fa275b2fb5c2cf1679bc3cbf0ec586bd02774cff638f2d530ead071cd88af  bridge/package.json
+dccfb4e262139be78ead880b53488df5c9e3b82927aab0a331789c24cf1276e8  bridge/package.json
 f99413d82f84c808f52d5b8696c190a9142dd08f517f5ec3e442f0769402d189  bridge/src/bridge-health-r59.mjs
 fa0dcc4cde9c03e978c9f9dd24b62afa83f49bdada1f42ead544a9a17edd332f  bridge/src/bridge.mjs
 471f41c84c5b339cd81a708a4f36d4470e614946817ad2f9fca295dde2c83fb6  bridge/src/canonical-json-r60.mjs
@@ -46,7 +46,7 @@ fedd83eaf14a493db077a0a239eeb68df4e19f075c971a9ff4419bb6e5ab86e3  controller/dea
 331d168750a18d2b8e351796ddbf8f9619374c707c3cea18b8b166934f8af0d3  controller/deadbyte-desktop-policy.json
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-44b0f59413c0de113a3e8718f07f6a70129b06448804b1f1607cef2bfa0f4957  controller/deadbyte-process-policy.json
+f6e9d10459d6215c587abfe041ddf517b62493a44c94092ba6136923541e1758  controller/deadbyte-process-policy.json
 d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b  controller/deadbyte-semantic-lsp-config.json
 3023d2985f5b6e5cc7c0d08cb8b342b362c93dce7ebd4224635362194be40cf2  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
@@ -107,6 +107,7 @@ d6e3b755b0483eb9468c7dca55b005e5a7f8b041f2dc7f9de800c13692151e82  docs/R168-NATI
 22c58c600c767d5b8a6f68379ef50b7f9b06d5b411ff88f1f6c7a73f66c5d8da  docs/R168-NPX-REMOTE-SKEW-HOTFIX-20261026.md
 89105d5a90ee91fbb032004648c2b5661f95a48b62b1a4190d4c7361ef3bcd14  docs/R168-READONLY-AUDIT-AND-RESUME-20261026.md
 640a232aa5210014a372d625e2d63c3c26f55a386411d68f6ce2ad79bd5d0104  docs/R168-SIGNED-RECONCILIATION-PRECOMMIT-20261026.md
+eb985acaa740a6f4189d202f7c1f153c4586b6b1c5c17f825c61f57d583c143c  docs/R169-NPX-ACTIVE-CONTROLLER-DELEGATION-20261026.md
 68b7e636d8e3091d4f571d7a0c79f81738f7bf1b89cd497a8681e0dd1f362f58  docs/R221-STRICT-OUTPUT-CONTRACT.md
 d9b68959fa7382e2a6c3dae703ac62767bba72ba21680d304048723f1671b5a0  docs/R36-CAPABILITY-EVIDENCE.md
 3c715faadfb568f094c262906c6bb8bc0caa77c6af6053c8b84aed74df3a43ef  docs/R44-ARCHITECTURE.md
@@ -703,6 +704,7 @@ a7d00bfd54525bc694b6e32f64c7ebcf5e6b7ae3657be5cc12767bce74654a47  node_modules/t
 7b6976eec43edfa68b79a459dd089c56b7a395916dbf1a01bd11e6d86e12128f  node_modules/typescript/SECURITY.md
 1af3c68039c57e539422da82a4faada506ce6d0ea6f90e0b699d02dbcdb7a90c  node_modules/typescript/ThirdPartyNoticeText.txt
 055f0ac4eed1a1591d033d59462972968bf3483b4cc07e163589569c0fb999f0  node_modules/which/bin/node-which
+89bc599ca0b3a119d711c62855b2e3619b734bf371ef55dcc049454313f9904e  node_modules/which/CHANGELOG.md
 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b  node_modules/which/LICENSE
 43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260  node_modules/which/package.json
 0c91f714f46006bc9a543e629a3ce3b63700fa8cfbe7c6310a0bcff2738356dd  node_modules/which/README.md
@@ -1425,8 +1427,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-fb631b442a05b9b56491251ed52db0d7c5188b7154a084eb448ed69dd5e0b870  package.json
-7790d83e537ce411e6472bb840ec0991bd91cb1a586a47ff38e77f4cc86151e0  PROVENANCE.json
+2ba5d2dd41dca1807edf56159355d9c8804db9e6cc3167093d2f7846b71204b8  package.json
+2bb3e2ea787726a4b9cd738044bc353e7eec5cc5051a364e31edd919accb0755  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1435,9 +1437,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-8f23a14f9e24060633d41add45154b32f819099d56e412e8faf4e42e154bf9a8  README.txt
-e7183a0efb071630a227ad4fc35042f2729cab7efc03b10ec45f3aecad084b23  RELEASE.json
-440257b25a905c6a92f8b37515e81ac402666561ed6bfa51ecec26b06e6abac7  SBOM.cdx.json
+87da1401a0a692253316e3c1269c368a5e5bc021fd14a265d12fdbeabf85d201  README.txt
+20e66377dc6909a415d0efbb5014e7e1b0ae85bf1e14ed3438a17e5379c83275  RELEASE.json
+935587bf7590c98fe58787c16b14b27addb2d5f4ccc53ea12be8432b4cd22787  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1609,6 +1611,8 @@ c8b3551936ff7e24d851d6cad580d11fbf495150558d963b7215230481412e2e  scripts/r168-p
 43daf6b439644b4e810a591dd301d76732559c0965f9c3c41578ab0b34b16373  scripts/r168-release-scan.mjs
 34a0ebb4a5d192e03c6680df40287b6af931e5f2f3e4bff60a66adeb8ae2d87d  scripts/r168-source-full-test-runner.mjs
 4bde90b78134c1ea51df7493d183c4dd60d2f70b2c55bc4fd0dcf1f5c510ea11  scripts/r168-subject-readonly.mjs
+bcb3db79b5c4dc9c0165ddf0d94989f342ff0a0f4be10ed4bfd4709d0763647f  scripts/r172-protected-preflight.mjs
+e7d9392f203e2f5f7a7b154f88740202f5051fbdf0a8657b8e3c6b49d196c382  scripts/r173-protected-preflight.mjs
 e19a1d591ccd07af2e87d930ce23b0cc9b814bc2a395408045543847154097d7  scripts/r40-compact-ledger-probe.mjs
 68b9a60aca3f3e3e9ec239710f8368594ef3c8a98fff0816d2e9a7950df48287  scripts/r47-core-failures.mjs
 75f821cc44f8c31f67de0b28b64021d9fb160984a597e704b29c33f9f3a41dde  scripts/r47-syntax-check.mjs
@@ -1720,17 +1724,19 @@ be332ed7cef04abaec8679198e379d7f42fc67e0833be9f42e25103c88cb5b26  scripts/window
 105a5c6dcd54e4fabb416df9eaac093654f3ea39c4233a56e0bc6d53371b2128  scripts/workload-contract-regression-r47.mjs
 c32cb9054a1b9641ae071c00622c0054272bdb0b519ea22c4ff926a1600a2b46  scripts/workload-stream-regression.mjs
 1ee9251c743d817245e858229e1e1db4f7bebb7e5411d370d33c4777528e53e0  scripts/workload-substrate-r47-regression.mjs
-546947775fac8075f48c689ea0f7bed5ea14424efd12587daead4a7df6e796df  src/activation-authority-proof-r75.mjs
+9e277f4be0bbd413bbf5fda31d6b769ceb2308c95c23562d7df29e3eadda4c03  src/activation-authority-proof-r75.mjs
+941a7ac8b700a6621e7f73780072ccd93b0094887bab722648c325c66c91d71b  src/activation-continuity-abort-r172.mjs
 0fca861bfb959b6d84c4767b2f60a4e0ec2403291a6050ee7598f75d2c4c18e0  src/activation-continuity-engine-r65.mjs
-1262bfc8408750e963710bdf31089d4fd35bb0904191eb55dccb6a49a50b32ac  src/activation-lock-r65.mjs
+7199b09fee30d3efe76bf882bdb4421f1406222487be1753b4409e5018b17e3c  src/activation-lock-r65.mjs
 6c634aebee33d925f0bc3f1a4f68d97d4115cf6ad39a5f2484e0e44fd4cca32a  src/activation-path-r167.mjs
-fc05a48ac13961c2f1dee444946531ff80100a00750fb9f8e456a6d69f6e1310  src/activation-preflight-r65.mjs
+1c9012bbe4d9b047d48ab14826f1de4fe489f282a26341be5573b3f1744cb677  src/activation-preflight-r65.mjs
 467268f6f195e9359b819e35c8b418c81e1cb40c9ba04b990fd2656e354c65a5  src/activation-reconciliation-audit-r168.mjs
 a82b05e1c521cc77f3398985d6faa1beb0fe8f65595f50bed474227550d462c5  src/activation-reconciliation-consent-r168.mjs
 585f0abd6fd9747448b8345bd5b51e80b458eaac162770bc74928242a0cc1549  src/activation-reconciliation-fence-r168.mjs
 f5b2b82f830bfeaa1c1c20cf8020dc0b0ff6437072e67c48adf96cbebe4cb7d7  src/activation-reconciliation-journal-r168.mjs
 27b0b757bd689d33c724c747a326c222ff7ccc8461fab3681a70cfa87bbeb1d3  src/activation-reconciliation-receipt-store-r168.mjs
 c1e2672913b70f3f922d7ff4690bb4934cf58147999da9f926d77de8126da44a  src/activation-reconciliation-terminal-r168.mjs
+ab2bcc118e3b4898e942e60d639ef8b2d9c6964c8036a57bd37ce2aa600de302  src/active-controller-delegation-r169.mjs
 9dc1154b3857446d0412002e1f0b0031c23d1768350dc9395749a7f82be337e5  src/agent-backend-r44.mjs
 4e8e442497a15bce43b7d02ade497403d80b86e307473d26c172a0fba3a6d4ea  src/agent-eval-r42.mjs
 42858a99d43ecd1b165576890c237ad413dca25f9e6a17ec84c0e47b759913e8  src/agent-eval-runner-r42.mjs
@@ -1802,7 +1808,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
 63a1d4d6a53f9eb7e02197b4e42158b867da8c042c2e61848d8a36cd398b8bd8  src/context-provenance.mjs
-3f367bb073c16f8bb1b828e465f2390a99a3539c3df4233420c985cb6984758d  src/deadbyte-cli.mjs
+6531590c658012a2aae238f9bcb21421249b31a9b6527079655fa0a5869e797c  src/deadbyte-cli.mjs
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
@@ -1919,7 +1925,7 @@ d3d7790eed837c93df33126f29538cf81e7bf283236203b8b84242305df551c5  src/remote-mcp
 0def81d261a97b471b889efabea7c3c60c20c22cd981e0ad1dd33234b09d1cf8  src/remote-mcp-r44-parity-client.mjs
 197b15164a0019325812e8f6501b78122e3557bc4587b40e7ff63ef69a3acf48  src/remote-mcp-r45-parity-client.mjs
 b72728205fce12f24ccbd0afa697644ca9902b8973a32121309c68910688fbd3  src/remote-mcp-smoke-client.mjs
-6991b2e0aded60faa1b2d5311c4a4457b2bdbb87d55ec3751b5a60e3fcfbee7a  src/remote-one-shot-coherence-r168.mjs
+cd3e021e1f53d36a11ffee07f8e8538933e76f33b7daa5bd497f22a7d33f5731  src/remote-one-shot-coherence-r168.mjs
 849560ec163e1837de7c75bcfad307e15f33354b938dc1923a5d080e15b63d4a  src/remote-result-journal.mjs
 3c5deef87e0cca122da6d3707b8ab2b21fbb15c19ffdbdab6b407f3cc944125c  src/remote-session-guardian.mjs
 827b156eac01cc9ec6f5ca9a49219612f0da511fde770a9eb1235aa913b5e514  src/request-identity.mjs
@@ -1953,13 +1959,13 @@ aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-std
 34719b7d54336b2abbc152ff0c5fb2f0052d4f77753f9b7538adfdd20c804b5b  src/uac-approval-contract-r153.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-ff75bd486b0bec5cd10f75c53abccb69942dad583b864954e4253c2373a07742  src/version.mjs
+269648484d5f691add569179392ae421c0b152f493969c5e59c205e8de2ae4ce  src/version.mjs
 3706206ecaa560b9579f57ed3df104af543331fb09a3ad0d28b217aea2d0256f  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-2806c7e72ff79bca7a509fae88051fed5f2796c3a2e0b19637fc3bdd8c93457e  TEST-MATRIX.json
+32a9ea5bd28dc9f3be81a482806728fdadd0a59a21be223cd63fb6b8eae722f9  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -2213,9 +2219,9 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-608ae35720416795145caee58dba763f0599eb5c44786ccce6cd2e3a0339ee66  test/r130-release-security-contract.test.mjs
+55b862a423a5994384f4d7343d2853deab5e745a76e5dcb0f714680e78d2923c  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-3715e3b25e314925d1bf02ff6ab021769dc51f988f9a4f88d527a3bb67ea91d8  test/r132-release-identity.test.mjs
+cb013d23eb051c4d9e68f28091f9a97728e9de04d8df9ac6d315cfdfbfabeed2  test/r132-release-identity.test.mjs
 acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
 3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
 e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
@@ -2239,7 +2245,7 @@ b92f914455cac010b1468cd37a31651e7d423571d0edfeb29829d2281073e1e3  test/r146-lega
 32f40b649033172384267bbe8f6009dededcba81afff1e3ca51331407197fe3b  test/r146-livelog-backpressure.test.mjs
 77b3bfcd6fa04e21c7a04206181f7b4cbd5321f799a145859d8e84d0b984d174  test/r147-remote-request-hash.test.mjs
 ad184a83ee098eac21d523adbebfd379dcf8b87d4878c2d8dcca95cb22fdc9ee  test/r153-clean-activation-recovery.test.mjs
-22006a286489f8d80685613d3fc9761c1797dd7da3c7352e63c45db2f4d97f2a  test/r153-prepublish-identity.test.mjs
+bbfb36b6c9ff112f0e00f9c1ab81e7706ce81d7c626a2ba14dc2b10a4fca19ec  test/r153-prepublish-identity.test.mjs
 377b03dbb1d82ed0ddeee261a060b8173d5591dfc20a60d9ea991390a03039b4  test/r153-r60-host-repin-e2e-contract.test.mjs
 e2bc7995f2ca85ce5d4a15e647c209d273d8f3871d25bd353046af66ee71bb34  test/r153-r65-signed-precondition-recovery.test.mjs
 ce37fc59761ceddf43fd3844b34d57f64f1c8d191ca1d6cba13b643a5e2c02ce  test/r153-restricted-reused-pid.test.mjs
@@ -2262,15 +2268,15 @@ d5d0eddc5c33ae9ea2f31d57381bf595bd85adf8048d2886f67554141f086bde  test/r160-mark
 7816089ae7668f7a5776a50259638cf31dc480116f3445b70afb0b8c64dbb4d3  test/r160-package-decision-manifest.test.mjs
 cf624087da10899195500f265ea48a304afa0ebdef74f064cfccb105ec2248d3  test/r160-release-contract.test.mjs
 8ddebf4e81e5ccb66533694e7b04775ea9ce063ead75a17c54ce28580a55a0b4  test/r160-stable-launcher.test.mjs
-4b9c67bf208700f7061e7a7ee28365405f73dc1ca81d06b2dbb5e73b635bebfd  test/r163-isolated-slot-rollback-restore.test.mjs
+52aa861ec17d6914bd1bf682dc2b4409dd3586206a3bceb231203f911c1583cc  test/r163-isolated-slot-rollback-restore.test.mjs
 842222cce8d50ba214a4dc97d5965d711e83a29f6660e784ccaf000f50a4213d  test/r163-publish-fence.test.mjs
 3473a513db884f2ab40a9e3e875ca6ef2c9e5202fc0bf4df56e388b0d55e5e84  test/r164-remote-history-skew.test.mjs
-acdf043d6b183c57c7e8e40b7ee73cb5e0630f830ceb3141f9d2e982e1f4acf3  test/r165-live-cli-skew.test.mjs
+b167b60eaedb6fdfe5288a837c6e5689b3ef89357621a8d297f6fcbe0727fea8  test/r165-live-cli-skew.test.mjs
 e9c493435956201439479b05d301e81673457abe5c456d8a50153f3d9922daf9  test/r165-publish-fence.test.mjs
 425e6756afe323d358287a4d00ab6460e8398a8ee39c4a64e4be7ae191c4676f  test/r166-hotfix-contract.test.mjs
 13c4c7792152466b6967627b44eb4aaf815e9c20b4bd67a50323420c937d532c  test/r166-release-readiness.test.mjs
 52e6f015329fecf570ac6211ca9904b929119b66dbf72c6776be5cefcc63b282  test/r167-activation-path.test.mjs
-91523cb4faf8e5d571bfffb9a59281bbd93b177815155d77e2940c11def0f9e4  test/r167-release-contract.test.mjs
+5747aa22acca96bf45634431fa320c02eab822a64e3e9a80befaa0df7662d49d  test/r167-release-contract.test.mjs
 471102e7b4e1655423efa80688c786306df62d6b76e23d41c8ebe596b8f63749  test/r167-release-readiness.test.mjs
 eb5a5e73fd0284297959f4e6ca1631ebf0f23749c56ec1b4cc75cad5f8f1ca6b  test/r168-combined-targeted-runner.mjs
 44818657894db72a0ead65e96e734f30c11f10f5914e2c4e2961ee3a3e5b2c70  test/r168-crash-journal.test.mjs
@@ -2282,10 +2288,16 @@ eb5a5e73fd0284297959f4e6ca1631ebf0f23749c56ec1b4cc75cad5f8f1ca6b  test/r168-comb
 7b0c15a35ec97aa34bedb3759a2c8f276e9b776de2c56a3bebe3be8d6009c102  test/r168-native-r85-protected-scratch.test.mjs
 50ea9e611570940170b6960a5114ce491d50d6a250121f28f3cbb6b26db34771  test/r168-npm-resume-identity.test.mjs
 191b6db0f79e23b48fd64be5d788dc651ef1af5ab165cff3cbe99f18139872aa  test/r168-owner-reconciliation-contract.test.mjs
-b599caa3d90bc3dc49d8c0ec431c30d9af5c1b2f1619be16c873ff5032bc123c  test/r168-protected-entrypoint.test.mjs
+41a4dcaa8d00ef5148f9700f71a5dda3558dacc8d6c90ca17bcdcb9310dbc3e8  test/r168-protected-entrypoint.test.mjs
 c40ee4e3c6f22ace3da133fee953a88545c773def2fe1ef84d5b552b6c9f649a  test/r168-reconciliation-audit.test.mjs
-f1d82ca8de09b24349ca524c6c4192c6371dd8d5be37abbb9cbc5c655ee7cf04  test/r168-release-contract.test.mjs
-3b56b7dc36e895054d652b511c1e626c03616ec232c97a4e68b89005bcd1a259  test/r168-remote-one-shot-coherence.test.mjs
+31218d4b085db1b34f410a7487c0fee9ac40286ec512ee56e500650bf551bfcc  test/r168-release-contract.test.mjs
+0039529761aef4389074f17cd29223a6435b66785616417c030cfd0dd7370951  test/r168-remote-one-shot-coherence.test.mjs
+ccd8b5b287808f5165f5e7fd7ade8278ae84c33463e4f9753059806da503fd3c  test/r169-delegate-active.test.mjs
+2866649338191383446edb60d11d558736a4e6d58cb0cdebd94cd8e162fae6bc  test/r169-delegate-cli-integration.test.mjs
+5d2725223b48c2d44dab2eade455f9008a36f91522dcdcc3c0594d762c282b2b  test/r169-targeted-runner.mjs
+bf015b6b85a40f9f81a7627d71217b2994c2161943368bde46be94852ec7eb77  test/r172-activation-recovery.test.mjs
+d7e3b51f3cd90f1876912832d9b13023b566d5b78d8a3c4a9ce9a776660917c9  test/r172-release-contract.test.mjs
+6c7d5d7b6e1554db8fe8c5c27977f62a93095d3351727eb8e35b33dc21940610  test/r173-release-contract.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2351,7 +2363,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-5a4ae34958c88c555d168a29c99999f3c1d4a1e5b414334bf394b2116803786e  test/r59-tool-surface-compat.test.mjs
+b5a4c09711ed25bfab64045f132eec18f8c6a7e37f949fd30861e223826241f1  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2451,7 +2463,7 @@ c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-stagi
 ff8d6c7998053a20a0d6a855d4a0013f0f19e649b91731d970e647242bb66e86  test/r74-kernel-lock.test.mjs
 7cb5edf625e965c0e6a6938bd822522777880bd41ad51e73e1daaec6556e2bc2  test/r74-prepublish-contract.test.mjs
 d283a882b9d7bb38b8d6a0db97882fcaf9b6dfa717aca79dd0351012cc00ba23  test/r75-activation-authority-proof.test.mjs
-38b66147b550c1d1e068ebaa9f8de93a070c08a8a99e0ddee7970b0374c4bfc5  test/r75-authority-evidence.test.mjs
+19bfae3e86101af9b5a1ea730498bf0de5fb39f894488b687c516db3a76e00af  test/r75-authority-evidence.test.mjs
 993186133dc7620bcd3057efda9a0ba1435c938656e4b24a32ace4ce57ea9735  test/r76-pinned-marker-cas.test.mjs
 2c21c965864ca4f7deb8f0d5bee4f5a54d20e1c2dbf373f19faa1fc869c33bd1  test/r77-epoch-grant-cas.test.mjs
 547c01ea307b182dbcee341773a29eb5e3045245a046e220b85ace373a0fd678  test/r78-parent-junction-cas.test.mjs

package/PROVENANCE.json

@@ -1,18 +1,19 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.66",
-  "source_model": "published R167 0.15.65 -> isolated R168 0.15.66; active production 0.15.61 unchanged",
+  "version": "0.15.68",
+  "source_model": "published R172 0.15.67 -> isolated R173 0.15.68; active production 0.15.61 unchanged",
   "signing": "ed25519",
-  "parent_tarball_sha256": "b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83",
-  "parent_activation_status": "PRODUCTION_ACTIVE",
+  "parent_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
+  "parent_activation_status": "PUBLISHED_NOT_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
     "release_id": "v0.15.61-055d1ff0aa99e60b",
     "manifest_sha256": "055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf",
     "generation_manifest_sha256": "f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4"
   },
-  "source_predecessor_manifest_file_sha256": "3316654646cc870584a7c969c2032af6c795229ff8c65e5a8b794f97c2458c41",
-  "reproducibility": "R168 source successor to published R167 0.15.65 exact manifest 3316654646cc870584a7c969c2032af6c795229ff8c65e5a8b794f97c2458c41; live predecessor 0.15.61 held unchanged",
+  "source_predecessor_manifest_file_sha256": "4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8",
+  "source_predecessor_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
+  "reproducibility": "R173 source successor to published R172 0.15.67 exact manifest 4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8; live predecessor 0.15.61 held unchanged",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -76,12 +77,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r168-remote-coherence-and-reconciliation-isolated",
+  "builder": "deadbyte-r173-epoch-proof-hotfix-isolated",
   "parent_release_id": "v0.15.61-055d1ff0aa99e60b",
   "parent_manifest_sha256": "055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf",
   "parent_generation_manifest_sha256": "f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4",
-  "source_predecessor_version": "0.15.65",
-  "source_predecessor_tarball_sha256": "fc3ae5b1505e316bc9dfedf8d063cb00641754c8f5f1306a31f8cc4bb84c9484",
+  "source_predecessor_version": "0.15.67",
+  "source_predecessor_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",
@@ -345,5 +346,28 @@
     "owner_approval": "NOT_PRESENT",
     "production_activation": "NOT_RUN",
     "publication": "NOT_RUN"
+  },
+  "r172": {
+    "status": "FOCUSED_GREEN_PREPUBLICATION",
+    "source_predecessor_version": "0.15.66",
+    "source_predecessor_manifest_sha256": "962e227dace247d59aa860211388fbde461c5f9c8a7e8a878e34a14a27d355f8",
+    "source_predecessor_tarball_sha256": "31b194a4fbff7dbdb9f4f275b4ea49c5115f7b0bb2241c0c72d72ef690311a5d",
+    "runtime_predecessor_release_id": "v0.15.61-055d1ff0aa99e60b",
+    "source_bytes_copied_from_references": false,
+    "activation_recovery": "EVIDENCE_BOUND_PREDISPATCH_ONLY",
+    "protected_focused": "PASS_27_TESTS_0_FAILURES",
+    "full_protected_regression": "PENDING_FINAL_BYTES",
+    "publication": "NOT_RUN",
+    "production_activation": "NOT_RUN"
+  },
+  "r173": {
+    "status": "FOCUSED_GREEN_PREPUBLICATION",
+    "source_predecessor_version": "0.15.67",
+    "source_predecessor_manifest_sha256": "4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8",
+    "source_predecessor_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
+    "runtime_predecessor_release_id": "v0.15.61-055d1ff0aa99e60b",
+    "epoch_revoked_authority_proof": "SIGNED_HEAD_AND_CAPTURED_GRANT_BOUND",
+    "publication": "NOT_RUN",
+    "production_activation": "NOT_RUN"
   }
 }

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.66 / R168 REMOTE COHERENCE HOTFIX
+DEADBYTE MCP V0.15.68 / R173 EPOCH-REVOKED AUTHORITY PROOF HOTFIX
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,17 +16,17 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.66 mcp
-  npx -y deadbyte-mcp@0.15.66 remote
-  npx -y deadbyte-mcp@0.15.66 remote status
-  npx -y deadbyte-mcp@0.15.66 remote restart
-  npx -y deadbyte-mcp@0.15.66 audit status
-  npx -y deadbyte-mcp@0.15.66 audit verify
+  npx -y deadbyte-mcp@0.15.68 mcp
+  npx -y deadbyte-mcp@0.15.68 remote
+  npx -y deadbyte-mcp@0.15.68 remote status
+  npx -y deadbyte-mcp@0.15.68 remote restart
+  npx -y deadbyte-mcp@0.15.68 audit status
+  npx -y deadbyte-mcp@0.15.68 audit verify
 
 
-R168 VERSION-SKEW SAFETY
+R173 EPOCH-REVOKED AUTHORITY PROOF HOTFIX
 ------------------------
-This 0.15.66 CLI keeps npm publication and local production activation separate.
+This 0.15.68 CLI keeps npm publication and local production activation separate.
 When a newer npm CLI finds an older installed runtime, one-shot remote status
 observes the existing stable launcher and prints VERSION SKEW without deploying.
 On a version mismatch, remote arm/disarm/restart and bare foreground remote
@@ -45,7 +45,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -70,7 +70,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -80,7 +80,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.68", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -369,7 +369,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.66 remote
+  npx -y deadbyte-mcp@0.15.68 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -430,7 +430,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.66 mcp
+  npx -y deadbyte-mcp@0.15.68 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -439,7 +439,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -465,7 +465,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.68", "mcp"]
       }
     }
   }
@@ -475,9 +475,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.66", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.68", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.66 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.68 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.66",
-  "train": "R168",
-  "label": "R168 remote coherence and reconciliation safety release",
+  "version": "0.15.68",
+  "train": "R173",
+  "label": "R173 epoch-revoked authority proof hotfix",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.61",
@@ -19,13 +19,13 @@
     "generation_manifest_sha256": "f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4"
   },
   "source_predecessor": {
-    "version": "0.15.65",
-    "train": "R167",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.65-r167-activation-path",
+    "version": "0.15.67",
+    "train": "R172",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.67-r172-final-remote-recovery",
     "release_status": "PUBLISHED_REGISTRY_VERIFIED",
     "manifest_status": "VERIFIED_FINAL_BYTES",
-    "manifest_sha256": "3316654646cc870584a7c969c2032af6c795229ff8c65e5a8b794f97c2458c41",
-    "tarball_sha256": "fc3ae5b1505e316bc9dfedf8d063cb00641754c8f5f1306a31f8cc4bb84c9484"
+    "manifest_sha256": "4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8",
+    "tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -516,5 +516,37 @@
     "public_tool_delta": 0,
     "authority_scope_delta": 0,
     "stable_final_claim": false
+  },
+  "r172": {
+    "scope": "TERMINAL_ACTIVATION_RECOVERY_AND_EPOCH_REVOKED_CLASSIFICATION",
+    "source_predecessor_version": "0.15.66",
+    "source_predecessor_train": "R168",
+    "source_predecessor_manifest_sha256": "962e227dace247d59aa860211388fbde461c5f9c8a7e8a878e34a14a27d355f8",
+    "source_predecessor_tarball_sha256": "31b194a4fbff7dbdb9f4f275b4ea49c5115f7b0bb2241c0c72d72ef690311a5d",
+    "runtime_predecessor_release_id": "v0.15.61-055d1ff0aa99e60b",
+    "old_r65_claim": "TERMINAL_VERIFIED",
+    "current_predispatch_claim": "PENDING_VERIFIED_RECONCILIATION",
+    "epoch_revoked_classifier": "PASS_FOCUSED",
+    "protected_focused": "PASS_27_TESTS_0_FAILURES",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "protected_full_regression": "PENDING_FINAL_BYTES",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
+  },
+  "r173": {
+    "scope": "EPOCH_REVOKED_AUTHORITY_PROOF_AND_FINAL_REMOTE_RECOVERY",
+    "source_predecessor_version": "0.15.67",
+    "source_predecessor_train": "R172",
+    "source_predecessor_manifest_sha256": "4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8",
+    "source_predecessor_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
+    "runtime_predecessor_release_id": "v0.15.61-055d1ff0aa99e60b",
+    "epoch_revoked_authority_proof": "GREEN_FOCUSED",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r168:0.15.66",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r173:0.15.68",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.66"
+      "version": "0.15.68"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.66",
-  "train": "R168",
+  "version": "0.15.68",
+  "train": "R173",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -632,5 +632,18 @@
     "production_activation": "NOT_RUN",
     "public_tools_delta": 0,
     "authority_scope_delta": 0
+  },
+  "r172": {
+    "epoch_revoked_classifier": "PASS_FOCUSED",
+    "predispatch_abort_reconciliation": "PASS_READONLY_LIVE_PREDICATE",
+    "tampered_or_incomplete_evidence": "PASS_FOCUSED_FAIL_CLOSED",
+    "protected_native_positive": "PASS_27_TESTS_0_FAILURES",
+    "full_regression": "PENDING_FINAL_BYTES",
+    "npm_exact_artifact": "PENDING_FINAL_BYTES",
+    "public_tool_count": 43,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "publication": "NOT_RUN",
+    "production_activation": "NOT_RUN"
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.66",
+  "version": "0.15.68",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.66-r168-activation-reconcile\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.66-r168-activation-reconcile\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.68-r173-epoch-proof\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.68-r173-epoch-proof\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.66-r168-activation-reconcile\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.68-r173-epoch-proof\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.66-r168-activation-reconcile",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.68-r173-epoch-proof",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R169-NPX-ACTIVE-CONTROLLER-DELEGATION-20261026.md

@@ -0,0 +1,57 @@
+# R169 — npx latest active-controller delegation
+Date: 2026-10-26
+Status: DELEGATION_IMPLEMENTED / 57_OF_57_TARGETED_PASS / PRODUCTION_R89_GRANT_BLOCKED / NOT_PUBLISHED
+
+## User objective
+Allow explicit `npx deadbyte-mcp@latest remote armprocess` and the other exact arm/disarm verbs to reach the currently installed stable controller when the npm CLI and active runtime have version skew, without automatic activation, R65 claim removal, modifying grants to bypass authorization, or downgrading.
+
+## Published baseline preserved
+- Public npm latest: deadbyte-mcp@0.15.66, immutable
+- Active runtime: v0.15.61-055d1ff0aa99e60b ONLINE, Coding ARMED
+- Process DISARMED, Autonomous/Desktop/Host not changed
+- R65 activation claim preserved
+- Isolated copy of published R168 source at:
+  D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.67-r169-npx-delegation
+- Exact predecessor MANIFEST.SHA256: 962e227dace247d59aa860211388fbde461c5f9c8a7e8a878e34a14a27d355f8
+- R169 is DEVELOPMENT ONLY. package.json and release metadata still 0.15.66; no candidate release closure and no npm publish.
+
+## Surgical source changes
+- src/remote-one-shot-coherence-r168.mjs
+  SHA-256 cd3e021e1f53d36a11ffee07f8e8538933e76f33b7daa5bd497f22a7d33f5731
+  Explicit arm/disarm verbs from NEWER CLI to OLDER active runtime => delegate_active
+  Read-only status => observe_active
+  Restart, stop, start, clean, toggles, menu, tests => blocked_version_skew
+  CLI older than installed runtime => blocked_version_skew
+  No active binding => mutating verbs rejected
+- src/active-controller-delegation-r169.mjs
+  SHA-256 ab2bcc118e3b4898e942e60d639ef8b2d9c6964c8036a57bd37ce2aa600de302
+  Guard requires stable launcher path under active state root, exact launcher SHA256 matching active pointer, exact active release manifest digest, generation manifest digest, bounded regular files, and ancestry constraints. Does not sign, arm or activate.
+- src/deadbyte-cli.mjs
+  SHA-256 6531590c658012a2aae238f9bcb21421249b31a9b6527079655fa0a5869e797c
+  One-shot runRemote dispatches delegated commands only via installed PowerShell controller, with active pointer identity checks before and after.
+  It skips synchronizeOneShotRuntime / npm cache deployment in delegated path. The installed launcher still enforces existing R89/authority policy.
+
+## Tests and live evidence
+- R169 selector behavioral TDD RED (expected blocked_version_skew), GREEN 4/4 PASS.
+- R169 CLI integration test TDD RED (attempted runtime coherence instead of delegation), GREEN.
+- Four CLI integration cases: success in scratch, tampered launcher rejected, altered release manifest rejected, escaped release root rejected.
+- Combined R168/R169 targeted regression: 57 PASS / 0 FAIL / 0 SKIP.
+- Signed combined run receipt d3d10ab64ed6316c08fcfe74, receipt SHA-256 75fe5165727008e997ebbce5eed7082a19ac2c898d97eea39b62cac4dc14892a, signature_valid=true.
+- Live read-only Process controller status: DISARMED.
+- Live exact R169 code delegated `remote armprocess` to ACTIVE 0.15.61 controller (not npm deployment); the controller rejected grant:
+  `DEADBYTE AUTHORITY EPOCH: R89 privileged installation not protected: UNTRUSTED_WRITE_ACE`
+  `DEADBYTE controller: authority epoch command 'grant' failed for process (exit=1)`
+- Live failed grant command signed execution receipt 9abb7b902bc68638a9d24d09, receipt SHA-256 221ecc71038e34ff1546c5f2e2b091514a03b1f6d3a493df75d8a2dd6d8b3225, signature_valid=true.
+- Post-failure production machine_status: 0.15.61 same release ID ONLINE, Coding ARMED. Process remains DISARMED.
+
+## Root blocker and next gate
+The R89 native addon loader src/epoch-lock-r85.mjs derives its source root from the installed runtime release and calls inspectTrustedInstallation(privilegedEpochInstallFiles(root,process.execPath)). Production 0.15.61 authority-grant execution resolves to a runtime package under a user-writable state installation; its ACL chain was rejected as UNTRUSTED_WRITE_ACE. Forwarding via npx successfully reaches the existing controller but cannot make a denied grant lawful.
+Do NOT use weaker ACL rules, rewrite signatures, remove an old R65 claim, alter policy files, or assume a successful arm from a successful process dispatch.
+
+Before release/activation:
+1. Resolve the protected R89 authority runtime install and binding so grant requests run from exact trusted protected bytes. Observe and test under Windows ACL evidence without widening permissions.
+2. Complete owner-authorized R65 old-claim reconciliation and crash-safe terminal outcome under native five-plane exclusion, separately from new production activation.
+3. Only then activate the intended published/runtime version under explicit authorization, verify all five planes, preserve Coding, and validate `npx@latest` at the real controller boundary.
+4. If R169 forwarding is still desired afterward, finalize 0.15.67 package identity, manifest/provenance, protected focused/full regression, npm verify-only, exact-byte closure and explicit npm publish. Never publish development code as 0.15.66 again.
+
+R169 tests do NOT prove successful live privilege granting or a new published npm version. No production activation, R65 claim deletion or manual grant edits occurred.