deadbyte-mcp 0.15.71 → 0.15.72

package/MANIFEST.SHA256

@@ -30,7 +30,7 @@ c814771dddac8bfb184250b868ddb6ab9f5e0e43613c04c3ed8abe09324ec4db  bin/deadbyte-n
 daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4  bin/deadbyte-process-host.exe
 b55d2c4490dfb875d40f29a69df2addc5d579991cb7d094674c04d369dfcfac3  bin/deadbyte-tunnel-host.exe
 f0ce7acb1e41325cef8b6789f95bd78b6a6107423773eace57a12b49faa55095  bin/WORKER-REGISTRY.txt
-3b71a4370d8c886c7ff25818a58b19c6022a3f8a621a98b1b0d519c61a5b5496  bridge/package.json
+bfc07cd0c43c61563b01ee7312ea70210f843a389560991551c9af290459edc6  bridge/package.json
 f99413d82f84c808f52d5b8696c190a9142dd08f517f5ec3e442f0769402d189  bridge/src/bridge-health-r59.mjs
 fa0dcc4cde9c03e978c9f9dd24b62afa83f49bdada1f42ead544a9a17edd332f  bridge/src/bridge.mjs
 471f41c84c5b339cd81a708a4f36d4470e614946817ad2f9fca295dde2c83fb6  bridge/src/canonical-json-r60.mjs
@@ -46,7 +46,7 @@ b963f3256f407b4216343815d310f9dce06ac61633c3b45071be6712ebb357d2  bridge/src/rem
 331d168750a18d2b8e351796ddbf8f9619374c707c3cea18b8b166934f8af0d3  controller/deadbyte-desktop-policy.json
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-242388f64c823c766b92c42d397afec0cddfbd98e27608be2fb06d249ede962b  controller/deadbyte-process-policy.json
+a46b67c0306e4a8c40b27509539d4ffcfe0b04b9960f217e1c014d70dfc9b6cc  controller/deadbyte-process-policy.json
 d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b  controller/deadbyte-semantic-lsp-config.json
 3023d2985f5b6e5cc7c0d08cb8b342b362c93dce7ebd4224635362194be40cf2  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
@@ -108,8 +108,9 @@ d6e3b755b0483eb9468c7dca55b005e5a7f8b041f2dc7f9de800c13692151e82  docs/R168-NATI
 89105d5a90ee91fbb032004648c2b5661f95a48b62b1a4190d4c7361ef3bcd14  docs/R168-READONLY-AUDIT-AND-RESUME-20261026.md
 640a232aa5210014a372d625e2d63c3c26f55a386411d68f6ce2ad79bd5d0104  docs/R168-SIGNED-RECONCILIATION-PRECOMMIT-20261026.md
 eb985acaa740a6f4189d202f7c1f153c4586b6b1c5c17f825c61f57d583c143c  docs/R169-NPX-ACTIVE-CONTROLLER-DELEGATION-20261026.md
-bbb690aeff0a2043bb151245487cb307ca4637eee64096c8623a904af8c0a2f5  docs/R184-package-lock.json
+f403c2aca1d5438667f0bac1dd289cadf91d14f8a06cb5897eac852c25701e7c  docs/R184-package-lock.json
 720abe9ae4a132b4b8e9d6f1456b6bc1c5b19c7a61990d53fdbabb131b75c196  docs/R186-OWNER-CONSENT-HANDOFF.txt
+67abaa3e25608ff37f0b032904dc1629b693f70192d248a8a31be2c98b8d5e9a  docs/R192-LIVE-LOG-HARDENING.txt
 68b7e636d8e3091d4f571d7a0c79f81738f7bf1b89cd497a8681e0dd1f362f58  docs/R221-STRICT-OUTPUT-CONTRACT.md
 d9b68959fa7382e2a6c3dae703ac62767bba72ba21680d304048723f1671b5a0  docs/R36-CAPABILITY-EVIDENCE.md
 3c715faadfb568f094c262906c6bb8bc0caa77c6af6053c8b84aed74df3a43ef  docs/R44-ARCHITECTURE.md
@@ -1428,8 +1429,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-ef8c72bc449da826bf34c13ffd1e8aa1f753f926709934caebe5e5921ae376a0  package.json
-7935c23db2ddeaecf6cc264615300bd1c0459916f9c033bc2285c6bb962f2791  PROVENANCE.json
+aaa3d680c0efc031399f31db86d13737a86f3847263e2b091b8bcbe9f6a95d3c  package.json
+d7be74cd25fd0eccc8ecad0de004dd37f1df8d094465a1bd338afbe5c8b21e84  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1438,9 +1439,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-670bb6ebc242fc227b1618f75427ab2a6deba6a78e725636c56dbaebeae17c22  README.txt
-c808e56b2a6cb83ea266c779e20f50e4630de45add13bf516f0ae7581c2d3b2a  RELEASE.json
-78c2e530f4a19f76b80eb15bd58c03e6b7357b9218bb186107c3251fb0a1b567  SBOM.cdx.json
+1cd4f7a087f3c7a801bd01209d073e3fbdae0762f26a763d7df53bff1f026a97  README.txt
+4233ee6bbb72b05a1993b14cbe97ce3e8cf16594f2704a14d149bfa1f3df200e  RELEASE.json
+e0bb738faefb12f472fb6bc0aa007b3cbb8fe89fbbebed1e5e2c4839165c0aec  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1646,6 +1647,8 @@ fda8078f94a874b1f4cf0fc84ffed0e567d3f433f949d99686863ad4d4962fc4  scripts/r191-p
 fd66906380af8d6f1671a74c84e58e5442489ebaaeb3294d727e07d0e7028476  scripts/r191-protected-failure-gate.mjs
 21faa80e676fd50448b3b7201d84aa219389dc5132e1b813a4d8fb8e34e2af5a  scripts/r191-release-contract-runner.mjs
 9815f66c3966721016e2328776b3757e4dc802d689fb59cbe0c3946e4a0ad76f  scripts/r191-unreached-focused.mjs
+fcf691339a6f81594ecf063806240ff0818d59273829efbcaff8d0541eed986a  scripts/r192-focused.mjs
+ad48fbf914698e2d6d29f7716f72e020cc9a666ebf33bc02e3b6bc439d13cdbb  scripts/r192-release-tests.mjs
 e19a1d591ccd07af2e87d930ce23b0cc9b814bc2a395408045543847154097d7  scripts/r40-compact-ledger-probe.mjs
 68b9a60aca3f3e3e9ec239710f8368594ef3c8a98fff0816d2e9a7950df48287  scripts/r47-core-failures.mjs
 75f821cc44f8c31f67de0b28b64021d9fb160984a597e704b29c33f9f3a41dde  scripts/r47-syntax-check.mjs
@@ -1841,7 +1844,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
 63a1d4d6a53f9eb7e02197b4e42158b867da8c042c2e61848d8a36cd398b8bd8  src/context-provenance.mjs
-386d1b13e354f57dacfb8a6a3a91f1a57e299cd82c3337c708041a3253315363  src/deadbyte-cli.mjs
+72b63189fb8bc0270f41ce1320d2fe54cf48d66ec9a0d40df3ccc952d3a48651  src/deadbyte-cli.mjs
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
@@ -1952,7 +1955,7 @@ a8a0d32f261e570802eae6358b0fde47f5b86bc3565e64020905373bb84d6ab2  src/release-ge
 3f41fa32ddeed403b5431a338821b62e0c1946a9d808f06d0edb2d9341ca0121  src/remote-console.mjs
 e4289e7a073e5de51fd6180130ba47fbf361f231cd074dc6069552474de7a100  src/remote-device-r44.mjs
 9f6383c95b5339ab93fa17906248ad3a29de52339a6755ee78613e16d5e1ae96  src/remote-enforcement-probe-r60.mjs
-ae0ac7be232a3b16b64a2a11e62685778a25194a3c54bf578ab84860adcb43f2  src/remote-live-log.mjs
+f702d32247a969a2dbe3876ed8f22b9b3212313775ef430e7a835b369902b28d  src/remote-live-log.mjs
 192172611b350febcb37cf08aa1b519a08e766923f9da99d017a239a7ad9ec0b  src/remote-log-decode-r60.mjs
 6131fda046bf7a751ffc99d922e8f14bdbc3accff9ee81b4f5ebef5b7b2f9b98  src/remote-mcp-autonomous-smoke-client.mjs
 ebff2982142263632a40b9f144e802b9cb0c86c798bb6c591de7f175ba50b660  src/remote-mcp-coding-smoke-client.mjs
@@ -2001,13 +2004,13 @@ aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-std
 34719b7d54336b2abbc152ff0c5fb2f0052d4f77753f9b7538adfdd20c804b5b  src/uac-approval-contract-r153.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-51d6bad12778c49ff5901f6433a00fba271290b7f38b99be4fc7d89a96fcfe40  src/version.mjs
+0b8954350f6fceedfcc7e7fa7a0a6e9ef94832cf24ab57c4b903f7a02f004b93  src/version.mjs
 3706206ecaa560b9579f57ed3df104af543331fb09a3ad0d28b217aea2d0256f  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-94330645ac9ecd5bfb119a39d3737d5cd68abc77a021ecd58d307cb9deefabd3  TEST-MATRIX.json
+793abdb4e543612b3368e6c7c3a4a8756ebbce90857e49075e3d0c4b2964a7c4  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -2226,7 +2229,7 @@ b1ad3bc391b2f897223fe4e71bb23d4a4a8e21f8bec0915756c2606b9294e164  test/output-sc
 d81cbf3e6579d3f283387e5050f170fa4c84e1ef1418e46fbd1a67436264fbe7  test/process-longrun-r36.test.mjs
 ddac61c12ab29be1736885c01c999ca0346ba44c712cc2c8a48a7eea1ed62a53  test/process-mcp-tools.test.mjs
 b84622d07d2ecfe27b55e45f7e89949f29a2d14184d8c6f6f82ed7f1e5fa59be  test/process-native.test.mjs
-bec02800a58933b1929fd961ec5c2be1eb842696e0bb32c95d7142e1125790fb  test/process-policy-refresh.test.mjs
+b91861b316ab512b6968842f9ceb88c9a66adae2d69b468b49340d9d9950e0e6  test/process-policy-refresh.test.mjs
 a42147db7f8aa7dc5cb8c29598c3b2ba5f5f3498bddf84f4ada09c74665bc710  test/process-policy.test.mjs
 e13275898e892ca70455cb53bb0a8c936c0f1a0a1c82ece671a314aefe106367  test/process-readiness.test.mjs
 510f51a6288a1030387cf372951499aea6dba2a35362ad89510bf7480e2f8004  test/process-release-gate.test.mjs
@@ -2263,9 +2266,9 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 07a4f6955058d0975e53ba3e4d0ec202a43dac2717cd5aa8e09cde9f3b859544  test/r129-sdk-security-baseline.test.mjs
-68f323b071625a32426021d1f1917b1caaa6046282f68dccac1591bc4a478977  test/r130-release-security-contract.test.mjs
+2425b9217d9c3b1628a40052c11e8671e7f98935fbff06f610ad7b2be21022ca  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-b409224e2d49bdfdb7f30c8a8bb3e36f1f5b3a1f8d49a692295fd1d455b952cb  test/r132-release-identity.test.mjs
+1705cab8e63c75a0ea60cf4c1d2feea628c851c37863e06db1ef5c7d6735435d  test/r132-release-identity.test.mjs
 acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
 3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
 e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
@@ -2289,7 +2292,7 @@ b92f914455cac010b1468cd37a31651e7d423571d0edfeb29829d2281073e1e3  test/r146-lega
 32f40b649033172384267bbe8f6009dededcba81afff1e3ca51331407197fe3b  test/r146-livelog-backpressure.test.mjs
 77b3bfcd6fa04e21c7a04206181f7b4cbd5321f799a145859d8e84d0b984d174  test/r147-remote-request-hash.test.mjs
 ad184a83ee098eac21d523adbebfd379dcf8b87d4878c2d8dcca95cb22fdc9ee  test/r153-clean-activation-recovery.test.mjs
-f5812de8f01f3948386409afd73aa4f005af1d3dbfab7a822e537a11c9cbefd9  test/r153-prepublish-identity.test.mjs
+59c99c087dd10507a37cb466a8e14e126c6c91c90115e08e4c2fcb1c8c8a3959  test/r153-prepublish-identity.test.mjs
 377b03dbb1d82ed0ddeee261a060b8173d5591dfc20a60d9ea991390a03039b4  test/r153-r60-host-repin-e2e-contract.test.mjs
 e2bc7995f2ca85ce5d4a15e647c209d273d8f3871d25bd353046af66ee71bb34  test/r153-r65-signed-precondition-recovery.test.mjs
 ce37fc59761ceddf43fd3844b34d57f64f1c8d191ca1d6cba13b643a5e2c02ce  test/r153-restricted-reused-pid.test.mjs
@@ -2310,17 +2313,17 @@ efc195b10b5cb706c23f3a35ba8bf07e7ee23daffcb072704e5c14ffd6db26d5  test/r158-epoc
 ff0fc541ef9b9b1565be647d2861c29afc8827504122c1df88a94d67fd2c20bd  test/r159-legacy-marker-evidence.test.mjs.before-assertion-fix-20261025-120246.bak
 d5d0eddc5c33ae9ea2f31d57381bf595bd85adf8048d2886f67554141f086bde  test/r160-marker-proof.test.mjs
 3f7ebe55c45c6c5e28145700179f6ad75e01fcaa9fd5e49be143098c314f1a9a  test/r160-package-decision-manifest.test.mjs
-139082e59214999076b6d385619bcbe152bca7286e7d9cb4ab626dc3613f31de  test/r160-release-contract.test.mjs
+f8e16dde5639bdc9cf00140c286b69b4cc7a36f70f71d908d711a5dd53e368f9  test/r160-release-contract.test.mjs
 8ddebf4e81e5ccb66533694e7b04775ea9ce063ead75a17c54ce28580a55a0b4  test/r160-stable-launcher.test.mjs
 c0635205da565e3643059abe65365740ba46bebe4591b8a9199cfba4ce525e3f  test/r163-isolated-slot-rollback-restore.test.mjs
 842222cce8d50ba214a4dc97d5965d711e83a29f6660e784ccaf000f50a4213d  test/r163-publish-fence.test.mjs
 3473a513db884f2ab40a9e3e875ca6ef2c9e5202fc0bf4df56e388b0d55e5e84  test/r164-remote-history-skew.test.mjs
-c1d100f1de0d003efc1ee086513aa912a042e404056618b6aef63c767799117c  test/r165-live-cli-skew.test.mjs
+261bf7201878c2ebeb0beb5febce637fcd66d0fa9e2b767cc2241fe54a9ea8f2  test/r165-live-cli-skew.test.mjs
 e9c493435956201439479b05d301e81673457abe5c456d8a50153f3d9922daf9  test/r165-publish-fence.test.mjs
 425e6756afe323d358287a4d00ab6460e8398a8ee39c4a64e4be7ae191c4676f  test/r166-hotfix-contract.test.mjs
 13c4c7792152466b6967627b44eb4aaf815e9c20b4bd67a50323420c937d532c  test/r166-release-readiness.test.mjs
 52e6f015329fecf570ac6211ca9904b929119b66dbf72c6776be5cefcc63b282  test/r167-activation-path.test.mjs
-73c190bc0157167540d2215d8ead5d2b2632a69e2c7daa5cea781ff8a30afd7e  test/r167-release-contract.test.mjs
+00fbe8b81dcd3c753de2369a6f82c9bf4c3d44a5e5fbfad12a4468dbf9e8b7d6  test/r167-release-contract.test.mjs
 471102e7b4e1655423efa80688c786306df62d6b76e23d41c8ebe596b8f63749  test/r167-release-readiness.test.mjs
 eb5a5e73fd0284297959f4e6ca1631ebf0f23749c56ec1b4cc75cad5f8f1ca6b  test/r168-combined-targeted-runner.mjs
 44818657894db72a0ead65e96e734f30c11f10f5914e2c4e2961ee3a3e5b2c70  test/r168-crash-journal.test.mjs
@@ -2334,14 +2337,14 @@ eb5a5e73fd0284297959f4e6ca1631ebf0f23749c56ec1b4cc75cad5f8f1ca6b  test/r168-comb
 191b6db0f79e23b48fd64be5d788dc651ef1af5ab165cff3cbe99f18139872aa  test/r168-owner-reconciliation-contract.test.mjs
 a648691c29341984996f57d55b0871ab98dc6c96ca4d927f41912bef9d15f320  test/r168-protected-entrypoint.test.mjs
 c40ee4e3c6f22ace3da133fee953a88545c773def2fe1ef84d5b552b6c9f649a  test/r168-reconciliation-audit.test.mjs
-93cdf993aa80f657a0a6e707cc144388eeb348d7db02eef56d1dff9804c05de4  test/r168-release-contract.test.mjs
+2c9d8bbc7e002b8e6c274dd8023c825440aaff5620f452e59d5297c6e437d75c  test/r168-release-contract.test.mjs
 aec64c26a92400784ad3693d594e28e7aa258a6330e2ba56f47bca1f57e568c7  test/r168-remote-one-shot-coherence.test.mjs
 ccd8b5b287808f5165f5e7fd7ade8278ae84c33463e4f9753059806da503fd3c  test/r169-delegate-active.test.mjs
 2866649338191383446edb60d11d558736a4e6d58cb0cdebd94cd8e162fae6bc  test/r169-delegate-cli-integration.test.mjs
 5d2725223b48c2d44dab2eade455f9008a36f91522dcdcc3c0594d762c282b2b  test/r169-targeted-runner.mjs
 bf015b6b85a40f9f81a7627d71217b2994c2161943368bde46be94852ec7eb77  test/r172-activation-recovery.test.mjs
-3a75e0433254566e97f3df2fd3b364fd15af165462541be2bd04106544f83c39  test/r172-release-contract.test.mjs
-7773272cdd8d21ee03df6be681f9e9493648ef30ac04aee141bd7d678768bc3d  test/r173-release-contract.test.mjs
+ca1992779332006b235d493511d7d287b81dac9d1bb8cf62868c5ae955487a8d  test/r172-release-contract.test.mjs
+56cfa94238cbd709daa43970cbb2583f6434902e411202f3e78d2f2cf792df0a  test/r173-release-contract.test.mjs
 41c7ae176274fb263b49a376a0f9d6ea92fe6c34015417584614a208146c33fb  test/r174-owner-webauthn.test.mjs
 1f39c010f8afa08d974f7741cbff09a3b75e38d2ee347a434bed0dfbdfd00c90  test/r175-cli-flags.test.mjs
 d592c975ab4c53c5a88c9cc62eb07efef5c129ed27fdb9a55f97682bdd3ec56f  test/r175-foreground-boundary.test.mjs
@@ -2349,7 +2352,7 @@ d592c975ab4c53c5a88c9cc62eb07efef5c129ed27fdb9a55f97682bdd3ec56f  test/r175-fore
 04a9f980a77496b66b33855afea30c020529261deefcee3e842bd16a787fbeac  test/r176-pretty-live-log.test.mjs
 f3e4319f862fe945690119eecbb7def921bbe81dc9b0b3e8e1964f4b693738f9  test/r177-windows-absolute-live-path.test.mjs
 e8eaf25f5d0dd591c8dd486a53d2bf9c3d70d8d7a120cf4d820a02dba9b8d30e  test/r179-absolute-path-live-log.test.mjs
-bfa42ab4857a07dfc4a776f02ec19d42cc13c0f0b223a0b6dacc2e6a47c602c1  test/r179-release-contract.test.mjs
+2a938e1cdf0f07e37d8b26a169ddaa6b45531b610c47219ddb033ba9bfcab5b4  test/r179-release-contract.test.mjs
 eff6de983ea907a6720d176d96065548163f0ec4070a8ff0a3ec8310b174136b  test/r186-controller-owner-grant.test.mjs
 9aac064b28b30bcdb99554561b43193fcf4e5bfed18e659e55aa69a30e010560  test/r186-owner-consent-preflight.test.mjs
 6afcbea206aecfdd9e960b7a6f4bcfd2a073e1e9043d936177ab5c38d7d2f90c  test/r186-owner-enrollment.test.mjs
@@ -2359,11 +2362,13 @@ c13ecbef48a524e13180e275e1d59db840d3c687457c1ecb39bd76383b6f2852  test/r186-owne
 0ea5b5374234d74bfa82f2e32a3638cd2afcc6c604397b9dd2f88ec84f695467  test/r186-owner-review-export.test.mjs
 e1aabf722066a7b747ef309411f1563869703211af8852c538268d6fd7485cf9  test/r190-foreground-cli.test.mjs
 1dea1341cd9cb4a97adb8c55fdaa0abd57e46e6cef5a6454c5b13e5ab4fa2937  test/r190-foreground-owner-recovery.test.mjs
-7fc92aa7edc4e4deb5f7b9d0c37f3d9e7a2e38ac33f09009599322678aea8fcf  test/r190-release-contract.test.mjs
+6285c9a9fd71db13f2e910621ccfef62a42fe7fe923398ba9aa46efaad9b428a  test/r190-release-contract.test.mjs
 c3689536a740de5f09ca1cb61e5cfe124b326a384cfe89f1b070bae0f4d3ff72  test/r191-epoch-root-selection.test.mjs
 f1d544f8fe71f530995f1af5659c23a7783beba822b5db12d8fe2da63f8d7703  test/r191-epoch-source-claim.test.mjs
 3cc7193029ff2935fd0997384216c324e3cdf7e750d6e42a96d41362a47bf6be  test/r191-inherited-epoch-preflight.test.mjs
-dc669530605bb8a030a0378a6b3d940c2a3d149c803c2c154a5993c2cab3ab3b  test/r191-release-contract.test.mjs
+7f9ba5ef26d2561a1fc07f19ddaf02d3f12445141ce7d77fc3ab9ce2fab5be92  test/r191-release-contract.test.mjs
+43324a47621dbbf32383c6924d11762dfa5c4d59773c1eaaab8969e6e778b29b  test/r192-live-log-hardening.test.mjs
+3ad304df1827fdd0234c0cc86dda459aee348f14249ca00c2f3ff5447a8de373  test/r192-release-identity.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2429,7 +2434,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 9a42827782a3c476e545e954fe38b99c96e925462ad9d4f7ea159493f7736bcc  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-7862d1cb7fb95eef62e45c08e4c43ba8cd531306f5f8dc59cafbbcbb76841d84  test/r59-tool-surface-compat.test.mjs
+df38cbdbc2afb6de622be5780513dda56fce820ea0d25701739ccfaf415d32b5  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs

package/PROVENANCE.json

@@ -1,18 +1,18 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.71",
+  "version": "0.15.72",
   "source_model": "npm deadbyte-mcp@0.15.70 exact registry artifact -> isolated R191 protected activation successor; active production 0.15.68 unchanged",
   "signing": "ed25519",
-  "parent_tarball_sha256": "1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e",
-  "parent_activation_status": "PUBLISHED_PREVIEW_NOT_ACTIVE",
+  "parent_tarball_sha256": "20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27",
+  "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
-    "release_id": "v0.15.68-ff29dbb2fbb89862",
-    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
-    "generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2"
+    "release_id": "v0.15.71-1818abc327478a96",
+    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+    "generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc"
   },
-  "source_predecessor_manifest_file_sha256": "df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3",
-  "source_predecessor_tarball_sha256": "1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e",
+  "source_predecessor_manifest_file_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+  "source_predecessor_tarball_sha256": "20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27",
   "reproducibility": "R190 source extracted from registry-verified npm 0.15.69 SHA256 578c1630608f9df816524c78abc9e1a55357fdc3cd25e142122f1a823e1d69e3; protected full gate pending",
   "public_surface_evidence": {
     "status": "PASS",
@@ -78,10 +78,10 @@
     "limitations_preserved": true
   },
   "builder": "deadbyte-r190-foreground-recovery-isolated",
-  "parent_release_id": "v0.15.68-ff29dbb2fbb89862",
-  "parent_manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
-  "parent_generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2",
-  "source_predecessor_version": "0.15.70",
+  "parent_release_id": "v0.15.71-1818abc327478a96",
+  "parent_manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+  "parent_generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc",
+  "source_predecessor_version": "0.15.71",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",
@@ -111,7 +111,7 @@
     },
     "doctor": "WARN_INHERITED_TRANSACTION_RESIDUE_EXIT_0"
   },
-  "source_predecessor_tarball_status": "VERIFIED_NPM_SHA1_AND_SHA256",
+  "source_predecessor_tarball_status": "PUBLISHED_EXACT_REGISTRY_VERIFIED",
   "r61": {
     "reference_corpus_roots": 7,
     "source_copying": false,
@@ -125,7 +125,7 @@
     "package_registry_activation_rollback_restore": "PENDING",
     "stable_final_claim": false
   },
-  "parent_registry_tarball_sha1": "6f3921c639d52a0d5dc5882c7e0cf7e9d439871d",
+  "parent_registry_tarball_sha1": "4c8dc9b82185d5fa13eaee42a6209c3f499831de",
   "r62": {
     "transaction_inventory_default_max_entries": 1024,
     "parent_state_records_observed": 341,
@@ -434,5 +434,17 @@
     "preflight_acl_behavior": "ASSERT_TRUSTED_AND_UNTRUSTED_PATHS_BY_ACTUAL_R89",
     "release_contract_changes": "R132_R59_README_EXACT_01571",
     "full_protected_regression": "PENDING_FRESH_PROTECTED_CANDIDATE_D"
+  },
+  "r192": {
+    "status": "INTEGRATED_SOURCE_FOCUSED_TESTED",
+    "source_manifest_sha256": "PENDING_FINAL_SOURCE_MANIFEST",
+    "parent_tarball_sha256": "20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27",
+    "secret_scrubbing": "R192_VERBOSE_RUNTIME_REASON_SCREENED",
+    "stale_cursor_pruning": "WIRED_TO_REMOTE_CLI_DISCOVERY",
+    "public_tool_delta": 0,
+    "authority_policy_delta": 0,
+    "protected_full": "NOT_RUN",
+    "npm_published": false,
+    "production_activated": false
   }
 }

package/README.txt

@@ -31,12 +31,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.71 mcp
-  npx -y deadbyte-mcp@0.15.71 remote
-  npx -y deadbyte-mcp@0.15.71 remote status
-  npx -y deadbyte-mcp@0.15.71 remote restart
-  npx -y deadbyte-mcp@0.15.71 audit status
-  npx -y deadbyte-mcp@0.15.71 audit verify
+  npx -y deadbyte-mcp@0.15.72 mcp
+  npx -y deadbyte-mcp@0.15.72 remote
+  npx -y deadbyte-mcp@0.15.72 remote status
+  npx -y deadbyte-mcp@0.15.72 remote restart
+  npx -y deadbyte-mcp@0.15.72 audit status
+  npx -y deadbyte-mcp@0.15.72 audit verify
 
 
 R173 EPOCH-REVOKED AUTHORITY PROOF HOTFIX
@@ -60,7 +60,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.71", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
       }
     }
   }
@@ -72,7 +72,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.71", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
       }
     }
   }
@@ -85,7 +85,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.71", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
       }
     }
   }
@@ -95,7 +95,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.71", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.72", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.

package/RELEASE.json

@@ -1,22 +1,22 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.71",
-  "train": "R191",
-  "label": "R191 protected activation precondition and signed claim recovery successor",
+  "version": "0.15.72",
+  "train": "R192",
+  "label": "R192 live log hardening and foreground integration",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "version": "0.15.68",
-    "release_id": "v0.15.68-ff29dbb2fbb89862",
-    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
-    "generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2",
+    "version": "0.15.71",
+    "release_id": "v0.15.71-1818abc327478a96",
+    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+    "generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc",
     "activation_status": "PRODUCTION_ACTIVE"
   },
   "runtime_predecessor": {
-    "version": "0.15.68",
-    "release_id": "v0.15.68-ff29dbb2fbb89862",
-    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
-    "generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2"
+    "version": "0.15.71",
+    "release_id": "v0.15.71-1818abc327478a96",
+    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+    "generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc"
   },
   "r190_foreground_recovery": {
     "status": "PREPUBLISH_VERIFIED",
@@ -36,13 +36,13 @@
     "authority_scope_delta": 0
   },
   "source_predecessor": {
-    "version": "0.15.70",
-    "train": "R190",
-    "source_path": "https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-0.15.70.tgz",
+    "version": "0.15.71",
+    "train": "R191",
+    "source_path": "https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-0.15.71.tgz",
     "release_status": "PUBLISHED_REGISTRY_VERIFIED",
-    "manifest_status": "PUBLISHED_EXACT_MANIFEST_VERIFIED_NOT_ACTIVE",
-    "manifest_sha256": "df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3",
-    "tarball_sha256": "1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e"
+    "manifest_status": "PUBLISHED_EXACT_MANIFEST_VERIFIED_ACTIVE_PRODUCTION",
+    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
+    "tarball_sha256": "20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -622,5 +622,20 @@
     "r43_historical_signed_public_key": "2_PASS_0_FAIL_READ_ONLY",
     "preflight_acl_behavior": "ASSERT_TRUSTED_AND_UNTRUSTED_PATHS_BY_ACTUAL_R89",
     "release_contract_changes": "R132_R59_README_EXACT_01571"
+  },
+  "r192": {
+    "status": "CANDIDATE_TESTING",
+    "scope": "LIVE_LOG_SECRET_REDACTION_BOUNDED_DIAGNOSTICS_AND_ROTATION_CURSOR_PRUNING",
+    "production": "v0.15.71-1818abc327478a96_UNTOUCHED",
+    "production_activation": "NOT_RUN",
+    "publication": "NOT_RUN",
+    "source_predecessor_version": "0.15.71",
+    "focused_tests": "PASS_31_FAIL_0",
+    "development_policy_root": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev",
+    "public_tool_schema_changed": false,
+    "authority_grants_changed": false,
+    "integration": "FOREGROND_CLI_SOURCE_INTEGRATION_NOT_MONOLITHIC_REWRITE",
+    "verified_artifact": "PENDING_PACK_GATE",
+    "references_used": "D:/Projects/deadbyte-mcp/references (read-only conceptual comparisons)"
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r191:0.15.71",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r192:0.15.72",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.71"
+      "version": "0.15.72"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.71",
-  "train": "R191",
+  "version": "0.15.72",
+  "train": "R192",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -154,6 +154,11 @@
       "id": "r179-live-log-and-foreground",
       "command": "Run Ctrl+C, restart, crash and concurrent sessions with pre-existing standing grants and confirm no implicit revocation",
       "expected": "Owner standing grants unchanged; observation-only marker CAS; signed audit remains verifiable"
+    },
+    {
+      "id": "r192-live-log-hardening",
+      "gate": "R192 regression preserves clean default live logs, sanitization and bounded log rotation",
+      "status": "PASS_FOCUSED_31_0"
     }
   ],
   "observed_pre_release_evidence": {
@@ -729,5 +734,14 @@
     "preflight_acl_behavior": "ASSERT_TRUSTED_AND_UNTRUSTED_PATHS_BY_ACTUAL_R89",
     "release_contract_changes": "R132_R59_README_EXACT_01571",
     "full_protected_regression": "PENDING_FRESH_PROTECTED_CANDIDATE_D"
+  },
+  "r192": {
+    "focused": "PASS_31_FAIL_0",
+    "integration": "PENDING_FULL_REGRESSION",
+    "protected_full": "NOT_RUN",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_policy_delta": 0
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.71",
+  "version": "0.15.72",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R184-package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.71",
+  "version": "0.15.72",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "deadbyte-mcp",
-      "version": "0.15.71",
+      "version": "0.15.72",
       "bundleDependencies": [
         "@modelcontextprotocol/server",
         "@modelcontextprotocol/client",

package/docs/R192-LIVE-LOG-HARDENING.txt

@@ -0,0 +1,39 @@
+R192 live log hardening
+target 0.15.72
+
+the default npx remote console stays compact
+signed tool audit is the authority for execution results
+console output never grants or restores machine authority
+
+changes
+- extra screening and byte bounds for verbose runtime diagnostics
+- keep tool name status and duration while reducing noisy reason text
+- remove old log cursors and partial-line fragments after discovery drops files
+- preserve independent START and terminal result lines for mutations
+- keep heartbeat folding timeline filters and trace formatting
+- no change to the public MCP tool catalog or authority policy
+
+integration
+src/deadbyte-cli.mjs reads and tracks foreground streams
+src/remote-live-log.mjs formats audit-safe progress and prunes old readers
+src/remote-log-decode-r60.mjs handles bounded append and file identity
+src/tool-audit.mjs remains the signed and sanitized audit source
+
+reference study
+D:\Projects\deadbyte-mcp\references
+read-only comparison of remote MCP/Commander implementations
+no donor code imported or copied into R192
+
+verification
+R192 focused 31 pass 0 fail
+R192 extended release identity 60 pass 0 fail
+full workspace regression not yet verified
+protected Windows package test not yet verified
+npm publication not yet verified
+production activation not run
+
+release constraints
+0.15.71 remains the active rollback predecessor
+no writes to installed production files or owner authority
+do not publish before exact package verification
+do not use npm success messages as proof of registry bytes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.71",
+  "version": "0.15.72",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/scripts/r192-focused.mjs

@@ -0,0 +1,10 @@
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import path from 'node:path';
+const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
+const files=['test/r192-live-log-hardening.test.mjs',
+'test/remote-live-log-r37.test.mjs','test/r51-live-log-polling.test.mjs',
+'test/remote-log-decode-r60.test.mjs'];
+const r=spawnSync(process.execPath,['--test','--test-concurrency=1',...files],{cwd:root,encoding:'utf8',windowsHide:true,shell:false,timeout:130000,maxBuffer:700000});
+console.log(JSON.stringify({state:r.status===0?'PASS':'FAIL',exit:r.status,error:r.error?.message??null,stdout:r.stdout?.slice(-16000),stderr:r.stderr?.slice(-4000)}));
+if(r.error||r.status!==0)process.exitCode=1;

package/scripts/r192-release-tests.mjs

@@ -0,0 +1,8 @@
+import {spawnSync} from 'node:child_process';import path from 'node:path';import {fileURLToPath} from 'node:url';
+const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
+const tests=['r192-release-identity','r192-live-log-hardening','r130-release-security-contract','r132-release-identity','r153-prepublish-identity','r167-release-contract','r172-release-contract','r173-release-contract','r179-release-contract','r190-release-contract','r191-release-contract','process-policy-refresh','remote-live-log-r37','r51-live-log-polling'];
+const r=spawnSync(process.execPath,['--test','--test-concurrency=1',...tests.map(t=>'test/'+t+'.test.mjs')],{
+ cwd:root,encoding:'utf8',windowsHide:true,shell:false,timeout:220000,maxBuffer:1400000});
+console.log(JSON.stringify({status:r.status===0?'PASS':'FAIL',exit:r.status,error:r.error?.message??null,
+ stdout:r.stdout?.slice(-18000),stderr:r.stderr?.slice(-2200)}));
+if(r.error||r.status!==0)process.exitCode=1;

package/src/deadbyte-cli.mjs

@@ -16,7 +16,7 @@ import { exportOfflineDiagnostics } from './r67-diagnostic-export.mjs';
 import { verifyOfflineDiagnosticsZip } from './r67-diagnostics-verify.mjs';
 import { parseActivePointer } from './release-slot.mjs';
 import { printDoctor } from './doctor-r45.mjs';
-import { classifyRemoteAuditOutcome, createLiveTimelineFilter, createLiveTimelineTracker, createLiveTimelineWriter, defaultForegroundTimelineOptions, formatRemoteLogResetNotice, formatCompactAuditEvent, formatRemoteLifecycle, formatRemoteToolCall, formatRuntimeDiagnosticLine, selectLiveLogNames } from './remote-live-log.mjs';
+import { classifyRemoteAuditOutcome, createLiveTimelineFilter, createLiveTimelineTracker, createLiveTimelineWriter, defaultForegroundTimelineOptions, formatRemoteLogResetNotice, formatCompactAuditEvent, formatRemoteLifecycle, formatRemoteToolCall, formatRuntimeDiagnosticLine, selectLiveLogNames, pruneLiveLogReaders } from './remote-live-log.mjs';
 import { prepareRemoteConsole, remoteDisplayText } from './remote-console.mjs';
 import { ensureRuntimeCoherence } from './runtime-coherence.mjs';
 import {selectR168OneShotRemotePath} from './remote-one-shot-coherence-r168.mjs';
@@ -414,6 +414,7 @@ async function tailRemoteLogs(root,signal,{journal=null,offsets=null,activityTra
     const now=Date.now();
     if(now>=nextDiscoveryAt){
       liveFiles=await listLogFiles(root);
+      pruneLiveLogReaders(activeOffsets,partialLines,liveFiles);
       nextDiscoveryAt=now+LIVE_LOG_DISCOVERY_INTERVAL_MS;
     }
     for(const file of liveFiles){

package/src/remote-live-log.mjs

@@ -62,6 +62,19 @@ export function formatRemoteLogResetNotice(file,reason){
   return '[LIVELOG] RUNTIME_LOG_REOPENED '+name+' — '+detail+'; console diagnostic continuity may have gaps; audit verification is separate';
 }
 
+// Bound the foreground reader state to the current discovery snapshot.
+// Audit continuity is still enforced by the signed journal, not this cache.
+export function pruneLiveLogReaders(offsets,partialLines,liveFiles){
+  if(!(offsets instanceof Map)||!(partialLines instanceof Map)||
+    !Array.isArray(liveFiles)||liveFiles.some(file=>typeof file!=='string'||!file))
+    throw new Error('live log reader state invalid');
+  const keep=new Set(liveFiles);
+  let cursorsRemoved=0,fragmentsRemoved=0;
+  for(const file of offsets.keys())if(!keep.has(file)){offsets.delete(file);cursorsRemoved++;}
+  for(const file of partialLines.keys())if(!keep.has(file)){partialLines.delete(file);fragmentsRemoved++;}
+  return {cursors_removed:cursorsRemoved,fragments_removed:fragmentsRemoved};
+}
+
 export function selectLiveLogNames({auditNames=[],runtimeNames=[]}={}){
   if(!Array.isArray(auditNames)||!Array.isArray(runtimeNames)) throw new Error('live log names must be arrays');
   const audit=[...new Set(auditNames.filter(name=>typeof name==='string'&&/^segment-\d{8}\.jsonl$/.test(name)))].sort().slice(-2);
@@ -713,6 +726,14 @@ export function formatRuntimeDiagnosticLine(file,line,{verbose=false,displayMode
     return remoteDisplayText('['+label+'.DEBUG] OUT '+output[1],displayMode);
   }
   const compact=line.match(/^\[TOOL\]\s+(\S+)\s+#(\d+)\s+(✓|✗|OK|ERR)\s+([A-Za-z0-9_.-]+)\s+([^\s]+)(?:\s+—\s+(.+))?$/u);
-  if(compact) return verbose?remoteDisplayText('['+label+'.DEBUG] #'+compact[2]+' '+compact[3]+' '+compact[4]+' '+compact[5]+(compact[6]?' — '+compact[6]:''),displayMode):null;
+  if(compact){
+    if(!verbose)return null;
+    // Runtime logs are lower-trust diagnostics than signed audit records.
+    // Never echo a donor/transport error reason before screening and bounding it.
+    const screened=compact[6]?sanitizeAuditArgs(compact[6]):null;
+    const reason=typeof screened==='string'?clipped(screened,180):screened?'[REDACTED]':'';
+    return remoteDisplayText('['+label+'.DEBUG] #'+compact[2]+' '+compact[3]+' '+compact[4]+' '+compact[5]+
+      (reason?' — '+reason:''),displayMode);
+  }
   return null;
 }

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.71';
+export const DEADBYTE_VERSION = '0.15.72';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/process-policy-refresh.test.mjs

@@ -70,7 +70,7 @@ test('R167 process policy binds coherently to the explicit development root', as
   // The distributed policy is pinned to its explicit development provenance,
   // not to the physical extraction path of the exact immutable npm tarball.
   const release = JSON.parse(await readFile(path.join(repoRoot, 'RELEASE.json'), 'utf8'));
-  const approvedRoot = release.r191_activation_repair?.development_policy_root;
+  const approvedRoot = release.r192?.development_policy_root;
   assert.equal(typeof approvedRoot, 'string', 'R191 development policy root must be explicit in release metadata');
   assert.ok(path.isAbsolute(approvedRoot), 'R191 development policy root must be absolute');
   const expectedRoot = path.resolve(approvedRoot);

package/test/r130-release-security-contract.test.mjs

@@ -14,14 +14,14 @@ test('current successor retains the R130 security baseline with truthful R190 id
     read('SBOM.cdx.json'),readReleaseLock(root),read('TEST-MATRIX.json')]);
   assert.equal(pkg.name,'deadbyte-mcp');
   for(const actual of [pkg.version,release.version,provenance.version,matrix.version,bom.metadata.component.version,lock.version,lock.packages[''].version,DEADBYTE_VERSION])
-    assert.equal(actual,'0.15.71');
-  assert.equal(release.train,'R191');
-  assert.equal(matrix.train,'R191');
-  assert.equal(release.source_predecessor.version,'0.15.70');
-  assert.equal(release.source_predecessor.train,'R190');
-  assert.match(release.source_predecessor.source_path,/deadbyte-mcp-0\.15\.70\.tgz/i);
-  assert.equal(release.source_predecessor.manifest_status,'PUBLISHED_EXACT_MANIFEST_VERIFIED_NOT_ACTIVE');
-  assert.equal(release.runtime_predecessor.version,'0.15.68');
+    assert.equal(actual,'0.15.72');
+  assert.equal(release.train,'R192');
+  assert.equal(matrix.train,'R192');
+  assert.equal(release.source_predecessor.version,'0.15.71');
+  assert.equal(release.source_predecessor.train,'R191');
+  assert.match(release.source_predecessor.source_path,/deadbyte-mcp-0\.15\.71\.tgz/i);
+  assert.equal(release.source_predecessor.manifest_status,'PUBLISHED_EXACT_MANIFEST_VERIFIED_ACTIVE_PRODUCTION');
+  assert.equal(release.runtime_predecessor.version,'0.15.71');
   assert.equal(provenance.r160.source_predecessor_manifest_status,'STALE_REJECTED');
   assert.equal(pkg.dependencies['@modelcontextprotocol/client'],'2.3.1');
   assert.equal(pkg.dependencies['@modelcontextprotocol/server'],'2.3.1');

package/test/r132-release-identity.test.mjs

@@ -16,17 +16,17 @@ test('R190 package identity preserves R132 evidence and published R179 source pr
   for(const value of [pkg.version,lock.version,lock.packages[''].version,release.version,prov.version,bom.metadata.component.version,matrix.version,DEADBYTE_VERSION]){
     assert.equal(value,pkg.version);
   }
-  assert.equal(release.train,'R191');
-  assert.equal(matrix.train,'R191');
-  assert.equal(release.source_predecessor.version,'0.15.70');
-  assert.equal(release.source_predecessor.train,'R190');
-  assert.match(release.source_predecessor.source_path,/deadbyte-mcp-0\.15\.70\.tgz/i);
+  assert.equal(release.train,'R192');
+  assert.equal(matrix.train,'R192');
+  assert.equal(release.source_predecessor.version,'0.15.71');
+  assert.equal(release.source_predecessor.train,'R191');
+  assert.match(release.source_predecessor.source_path,/deadbyte-mcp-0\.15\.71\.tgz/i);
   assert.equal(prov.r160.source_predecessor_manifest_status,'STALE_REJECTED');
   assert.equal(release.r165.published_source_manifest_sha256,'4adf7d94682fbb71c4a91eb3147ecc48076bbc5d79cb67fcb875cde6a1bb4805');
   assert.equal(release.r165.published_source_tarball_sha256,'812e97609b7c51353ed25f2202129737e43bb4fbe0778c3adec43ec065352641');
-  assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
+  assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
   assert.notEqual(release.r179.source_predecessor_tarball_sha256,release.source_predecessor.tarball_sha256);
-  assert.equal(release.runtime_predecessor.version,'0.15.68');
+  assert.equal(release.runtime_predecessor.version,'0.15.71');
   assert.equal(prov.runtime_predecessor.release_id,release.runtime_predecessor.release_id);
   assert.equal(prov.runtime_predecessor.manifest_sha256,release.runtime_predecessor.manifest_sha256);
   assert.equal(prov.runtime_predecessor.generation_manifest_sha256,release.runtime_predecessor.generation_manifest_sha256);

package/test/r153-prepublish-identity.test.mjs

@@ -26,7 +26,7 @@ test('R153 historical verifier refuses current successor package identity',async
  const state={pkg:JSON.parse(await readFile(path.join(root,'package.json'),'utf8')),
   release:JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8')),
   bridge:JSON.parse(await readFile(path.join(root,'bridge/package.json'),'utf8'))};
- assert.equal(state.pkg.version,'0.15.71');
+ assert.equal(state.pkg.version,'0.15.72');
  assert.throws(()=>verifyR153Lineage(state),/package version/);
  await assert.rejects(verifyR153IdentityTree(root),/package version/);
 });

package/test/r160-release-contract.test.mjs

@@ -8,9 +8,9 @@ const read=async rel=>JSON.parse(await readFile(path.join(root,rel),'utf8'));
 
 test('R160 historical contract remains distinct from the current package identity',async()=>{
   const [release,provenance]=await Promise.all([read('RELEASE.json'),read('PROVENANCE.json')]);
-  assert.equal(release.runtime_predecessor.version,'0.15.68');
-  assert.equal(release.runtime_predecessor.release_id,'v0.15.68-ff29dbb2fbb89862');
-  assert.equal(release.runtime_predecessor.manifest_sha256,'ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885');
+  assert.equal(release.runtime_predecessor.version,'0.15.71');
+  assert.equal(release.runtime_predecessor.release_id,'v0.15.71-1818abc327478a96');
+  assert.equal(release.runtime_predecessor.manifest_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
   assert.equal(release.r160.runtime_predecessor_version,'0.15.61');
   assert.equal(release.r160.source_predecessor_train,'R159');
   assert.equal(release.r160.public_tool_delta,0);

package/test/r165-live-cli-skew.test.mjs

@@ -17,7 +17,7 @@ const hashMarker=c=>c.repeat(64);
 async function fixture(t,kind){
   assert.equal(typeof envRoot,'string'); assert.ok(path.isAbsolute(envRoot));
   assert.match(sha(await readFile(path.join(envRoot,'MANIFEST.SHA256'))),/^[0-9a-f]{64}$/);
-  assert.equal(JSON.parse(await readFile(path.join(envRoot,'package.json'),'utf8')).version,'0.15.71');
+  assert.equal(JSON.parse(await readFile(path.join(envRoot,'package.json'),'utf8')).version,'0.15.72');
   const dir=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r164-skew-e2e-'));
   t.after(async()=>{await rm(dir,{recursive:true,force:true,maxRetries:10,retryDelay:150});});
   const state=path.join(dir,'state'),bin=path.join(state,'bin');

package/test/r167-release-contract.test.mjs

@@ -8,7 +8,7 @@ import {DEADBYTE_VERSION} from '../src/version.mjs';
 const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 const read=async rel=>JSON.parse(await readFile(path.join(root,rel),'utf8'));
 const readOptional=async rel=>{try{return await read(rel);}catch(error){if(error?.code==='ENOENT')return null;throw error;}};
-const VERSION='0.15.71';
+const VERSION='0.15.72';
 const R166_MANIFEST='ad3c091fbbe2bac6d234548724008b67305fd483ad6542f92d5aeb1aa84f5849';
 const R166_TARBALL='3d22412c3cebabd66bfa92ca4dbaaf3ef49acba7f92436a16485d7e4cb18c653';
 
@@ -20,20 +20,20 @@ test('current package identity retains the immutable R167/R173 activation lineag
     provenance.version,matrix.version,bom.metadata.component.version,DEADBYTE_VERSION];
   if(lock)versions.push(lock.version,lock.packages[''].version);
   for(const version of versions)assert.equal(version,VERSION);
-  assert.equal(release.train,'R191');
-  assert.equal(matrix.train,'R191');
-  assert.equal(bom.serialNumber,'urn:cdx:deadbyte-mcp:r191:0.15.71');
+  assert.equal(release.train,'R192');
+  assert.equal(matrix.train,'R192');
+  assert.equal(bom.serialNumber,'urn:cdx:deadbyte-mcp:r192:0.15.72');
   assert.deepEqual(release.runtime_predecessor,{
-    version:'0.15.68',release_id:'v0.15.68-ff29dbb2fbb89862',
-    manifest_sha256:'ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885',
-    generation_manifest_sha256:'2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2'
+    version:'0.15.71',release_id:'v0.15.71-1818abc327478a96',
+    manifest_sha256:'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c',
+    generation_manifest_sha256:'aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc'
   });
-  assert.equal(release.source_predecessor.version,'0.15.70');
-  assert.equal(release.source_predecessor.train,'R190');
-  assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
+  assert.equal(release.source_predecessor.version,'0.15.71');
+  assert.equal(release.source_predecessor.train,'R191');
+  assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
   assert.equal(release.r173.source_predecessor_version,'0.15.67');
   assert.equal(release.r167.source_predecessor_manifest_sha256,R166_MANIFEST);
-  assert.equal(provenance.source_predecessor_manifest_file_sha256,'df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3');
+  assert.equal(provenance.source_predecessor_manifest_file_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
   assert.equal(provenance.r173.source_predecessor_manifest_sha256,'4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8');
   assert.equal(release.r172.source_predecessor_manifest_sha256,'962e227dace247d59aa860211388fbde461c5f9c8a7e8a878e34a14a27d355f8');
   assert.equal(release.r172.source_predecessor_tarball_sha256,'31b194a4fbff7dbdb9f4f275b4ea49c5115f7b0bb2241c0c72d72ef690311a5d');

package/test/r168-release-contract.test.mjs

@@ -13,8 +13,10 @@ const predecessorTarball='fc3ae5b1505e316bc9dfedf8d063cb00641754c8f5f1306a31f8cc
 
 test('R172 preserves the immutable R168 publication lineage separately from current identity',async()=>{
  const release=await read('RELEASE.json');
- assert.equal(release.runtime_predecessor.version,'0.15.68');
- assert.equal(release.parent.version,'0.15.68');
+ assert.equal(release.runtime_predecessor.version,'0.15.71');
+ assert.equal(release.parent.version,'0.15.71');
+ assert.equal(release.runtime_predecessor.release_id,'v0.15.71-1818abc327478a96');
+ assert.equal(release.parent.release_id,'v0.15.71-1818abc327478a96');
  assert.notEqual(release.runtime_predecessor.release_id,parent);
  assert.notEqual(release.parent.release_id,parent);
  assert.equal(release.r168.scope,'REMOTE_VERSION_SKEW_FAIL_CLOSED_AND_READONLY_RECONCILIATION');

package/test/r172-release-contract.test.mjs

@@ -16,12 +16,12 @@ test('R190 binds the published source predecessor separately from the active run
   const versions=[pkg.version,bridge.version,release.version,provenance.version,matrix.version,
     bom.metadata.component.version,DEADBYTE_VERSION];
   if(lock)versions.push(lock.version,lock.packages[''].version);
-  for(const value of versions)assert.equal(value,'0.15.71');
-  assert.equal(release.train,'R191'); assert.equal(matrix.train,'R191');
-  assert.equal(release.source_predecessor.version,'0.15.70');
-  assert.equal(release.source_predecessor.manifest_sha256,'df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3');
-  assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
-  assert.equal(release.runtime_predecessor.release_id,'v0.15.68-ff29dbb2fbb89862');
+  for(const value of versions)assert.equal(value,'0.15.72');
+  assert.equal(release.train,'R192'); assert.equal(matrix.train,'R192');
+  assert.equal(release.source_predecessor.version,'0.15.71');
+  assert.equal(release.source_predecessor.manifest_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
+  assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
+  assert.equal(release.runtime_predecessor.release_id,'v0.15.71-1818abc327478a96');
   assert.equal(release.r173.public_tool_delta,0); assert.equal(release.r173.authority_scope_delta,0);
 });
 

package/test/r173-release-contract.test.mjs

@@ -13,21 +13,21 @@ test('R190 package identity binds the exact published R179 source and live runti
     json('package.json'),readReleaseLock(root),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json')
   ]);
-  assert.equal(pkg.version,'0.15.71');
-  assert.equal(lock.version,'0.15.71');
-  assert.equal(lock.packages[''].version,'0.15.71');
-  assert.equal(bridge.version,'0.15.71');
-  assert.equal(release.version,'0.15.71');
-  assert.equal(release.train,'R191');
-  assert.equal(matrix.version,'0.15.71');
-  assert.equal(matrix.train,'R191');
-  assert.equal(sbom.metadata.component.version,'0.15.71');
-  assert.equal(release.source_predecessor.version,'0.15.70');
-  assert.equal(release.source_predecessor.train,'R190');
-  assert.equal(release.source_predecessor.manifest_sha256,'df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3');
-  assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
-  assert.equal(release.runtime_predecessor.version,'0.15.68');
-  assert.equal(provenance.version,'0.15.71');
+  assert.equal(pkg.version,'0.15.72');
+  assert.equal(lock.version,'0.15.72');
+  assert.equal(lock.packages[''].version,'0.15.72');
+  assert.equal(bridge.version,'0.15.72');
+  assert.equal(release.version,'0.15.72');
+  assert.equal(release.train,'R192');
+  assert.equal(matrix.version,'0.15.72');
+  assert.equal(matrix.train,'R192');
+  assert.equal(sbom.metadata.component.version,'0.15.72');
+  assert.equal(release.source_predecessor.version,'0.15.71');
+  assert.equal(release.source_predecessor.train,'R191');
+  assert.equal(release.source_predecessor.manifest_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
+  assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
+  assert.equal(release.runtime_predecessor.version,'0.15.71');
+  assert.equal(provenance.version,'0.15.72');
   assert.equal(provenance.parent_tarball_sha256,release.source_predecessor.tarball_sha256);
   assert.equal(provenance.source_predecessor_manifest_file_sha256,release.source_predecessor.manifest_sha256);
 });

package/test/r179-release-contract.test.mjs

@@ -7,23 +7,23 @@ import {DEADBYTE_VERSION} from '../src/version.mjs';
 import {readReleaseLock} from './helpers/release-lock.mjs';
 const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 const read=async file=>JSON.parse(await readFile(path.join(root,file),'utf8'));
-const parent='v0.15.68-ff29dbb2fbb89862';
-const manifest='ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885';
-const generation='2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2';
+const parent='v0.15.71-1818abc327478a96';
+const manifest='1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c';
+const generation='aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc';
 const tarball='1a7f1fe05a06178b8d772a140be6e0470790b743cef690c3f8f8165cc61075bf';
 test('R190 version, lock snapshot, bridge, matrix, SBOM and provenance identify exact 0.15.70 successor',async()=>{
  const [pkg,lock,bridge,release,provenance,matrix,sbom]=await Promise.all([
   read('package.json'),readReleaseLock(root),read('bridge/package.json'),read('RELEASE.json'),
   read('PROVENANCE.json'),read('TEST-MATRIX.json'),read('SBOM.cdx.json')]);
  for(const version of [pkg.version,lock.version,lock.packages[''].version,bridge.version,release.version,provenance.version,
-  matrix.version,sbom.metadata.component.version,DEADBYTE_VERSION])assert.equal(version,'0.15.71');
- assert.equal(release.train,'R191');assert.equal(matrix.train,'R191');
- assert.equal(sbom.serialNumber,'urn:cdx:deadbyte-mcp:r191:0.15.71');
+  matrix.version,sbom.metadata.component.version,DEADBYTE_VERSION])assert.equal(version,'0.15.72');
+ assert.equal(release.train,'R192');assert.equal(matrix.train,'R192');
+ assert.equal(sbom.serialNumber,'urn:cdx:deadbyte-mcp:r192:0.15.72');
  assert.equal(release.parent.release_id,parent);assert.equal(release.parent.manifest_sha256,manifest);
  assert.equal(release.parent.generation_manifest_sha256,generation);
- assert.equal(release.source_predecessor.version,'0.15.70');
- assert.equal(release.source_predecessor.manifest_sha256,'df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3');
- assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
+ assert.equal(release.source_predecessor.version,'0.15.71');
+ assert.equal(release.source_predecessor.manifest_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
+ assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
  assert.equal(release.runtime_predecessor.release_id,parent);
  assert.equal(provenance.runtime_predecessor.release_id,parent);
  assert.equal(provenance.parent_tarball_sha256,release.source_predecessor.tarball_sha256);
@@ -48,7 +48,7 @@ test('R190 retains historical R179 and R173 source evidence without promoting it
  assert.equal(release.r173.source_predecessor_version,'0.15.67');
  assert.equal(release.r173.source_predecessor_manifest_sha256,'4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8');
  assert.equal(prov.r173.source_predecessor_version,'0.15.67');
- assert.equal(release.source_predecessor.version,'0.15.70');
+ assert.equal(release.source_predecessor.version,'0.15.71');
  assert.notEqual(release.source_predecessor.tarball_sha256,release.r173.source_predecessor_tarball_sha256);
 });
 test('R184 ships a semantic lock snapshot matching installed package identity and dependencies',async()=>{

package/test/r190-release-contract.test.mjs

@@ -8,17 +8,17 @@ test('R190 candidate identity separates published source 0.15.69 from active run
   json('package.json'),json('bridge/package.json'),json('RELEASE.json'),json('PROVENANCE.json'),
   json('TEST-MATRIX.json'),json('SBOM.cdx.json'),readFile(new URL('../src/version.mjs',import.meta.url),'utf8')]);
  for(const value of [pkg.version,bridge.version,release.version,provenance.version,matrix.version,
-  sbom.metadata.component.version])assert.equal(value,'0.15.71');
- assert.match(versionSource,/DEADBYTE_VERSION = '0\.15\.71'/);
- assert.equal(release.train,'R191');assert.equal(matrix.train,'R191');
- assert.equal(release.source_predecessor.version,'0.15.70');
- assert.equal(release.source_predecessor.tarball_sha256,'1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e');
- assert.equal(release.source_predecessor.manifest_sha256,'df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3');
- assert.equal(release.runtime_predecessor.version,'0.15.68');
- assert.equal(release.runtime_predecessor.release_id,'v0.15.68-ff29dbb2fbb89862');
- assert.equal(provenance.source_predecessor_version,'0.15.70');
+  sbom.metadata.component.version])assert.equal(value,'0.15.72');
+ assert.match(versionSource,/DEADBYTE_VERSION = '0\.15\.72'/);
+ assert.equal(release.train,'R192');assert.equal(matrix.train,'R192');
+ assert.equal(release.source_predecessor.version,'0.15.71');
+ assert.equal(release.source_predecessor.tarball_sha256,'20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27');
+ assert.equal(release.source_predecessor.manifest_sha256,'1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c');
+ assert.equal(release.runtime_predecessor.version,'0.15.71');
+ assert.equal(release.runtime_predecessor.release_id,'v0.15.71-1818abc327478a96');
+ assert.equal(provenance.source_predecessor_version,'0.15.71');
  assert.equal(provenance.source_predecessor_tarball_sha256,release.source_predecessor.tarball_sha256);
- assert.match(sbom.serialNumber,/r191:0\.15\.71$/);
+ assert.match(sbom.serialNumber,/r192:0\.15\.72$/);
 });
 
 test('R190 release metadata records verified recovery without claiming publication or activation',async()=>{

package/test/r191-release-contract.test.mjs

@@ -6,20 +6,20 @@ import path from 'node:path';
 import {DEADBYTE_VERSION} from '../src/version.mjs';
 const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 const json=async f=>JSON.parse(await readFile(path.join(root,f),'utf8'));
-const predecessor='v0.15.68-ff29dbb2fbb89862';
-const publishedManifest='df15db35c7ddddd769650f5c86557159d10d99e9eef4dd232cae67faeb8ad6e3';
-const publishedTarball='1a5f5f30bf4781ed951d6d201b8a972d088b2091555d7f4cc2e2bb899ed5707e';
+const predecessor='v0.15.71-1818abc327478a96';
+const publishedManifest='1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c';
+const publishedTarball='20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27';
 test('R191 exact version identity includes bundled bridge, lock snapshot, SBOM, provenance and matrix',async()=>{
  const [pkg,bridge,lock,release,provenance,matrix,bom]=await Promise.all(['package.json','bridge/package.json','docs/R184-package-lock.json','RELEASE.json','PROVENANCE.json','TEST-MATRIX.json','SBOM.cdx.json'].map(json));
- for(const ver of [pkg.version,bridge.version,lock.version,lock.packages[''].version,release.version,provenance.version,matrix.version,bom.metadata.component.version,DEADBYTE_VERSION])assert.equal(ver,'0.15.71');
- for(const train of [release.train,matrix.train])assert.equal(train,'R191');
- assert.equal(bom.serialNumber,'urn:cdx:deadbyte-mcp:r191:0.15.71');
+ for(const ver of [pkg.version,bridge.version,lock.version,lock.packages[''].version,release.version,provenance.version,matrix.version,bom.metadata.component.version,DEADBYTE_VERSION])assert.equal(ver,'0.15.72');
+ for(const train of [release.train,matrix.train])assert.equal(train,'R192');
+ assert.equal(bom.serialNumber,'urn:cdx:deadbyte-mcp:r192:0.15.72');
  assert.equal(release.parent.release_id,predecessor);
  assert.equal(provenance.parent_release_id,predecessor);
- assert.equal(release.source_predecessor.version,'0.15.70');
+ assert.equal(release.source_predecessor.version,'0.15.71');
  assert.equal(release.source_predecessor.manifest_sha256,publishedManifest);
  assert.equal(release.source_predecessor.tarball_sha256,publishedTarball);
- assert.equal(provenance.source_predecessor_version,'0.15.70');
+ assert.equal(provenance.source_predecessor_version,'0.15.71');
  assert.equal(provenance.parent_tarball_sha256,publishedTarball);
  assert.equal(provenance.source_predecessor_tarball_sha256,publishedTarball);
  assert.equal(provenance.source_predecessor_manifest_file_sha256,publishedManifest);

package/test/r192-live-log-hardening.test.mjs

@@ -0,0 +1,50 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {formatRuntimeDiagnosticLine,createLiveTimelineTracker,
+  pruneLiveLogReaders} from '../src/remote-live-log.mjs';
+
+const compact=(reason)=>'[TOOL] 2026-10-28T14:00:00.000Z #12 ✗ coding_command_run 10ms — '+reason;
+
+test('R192 runtime verbose diagnostics never disclose secret-bearing reasons',()=>{
+  const raw=compact('password=canaryNotForConsole123');
+  const out=formatRuntimeDiagnosticLine('bridge.stdout.log',raw,{verbose:true,displayMode:'ascii'});
+  assert.equal(typeof out,'string');
+  assert.match(out,/coding_command_run/);
+  assert.match(out,/REDACTED/);
+  assert.doesNotMatch(out,/canaryNotForConsole123/);
+  assert.equal(formatRuntimeDiagnosticLine('bridge.stdout.log',raw,{verbose:false}),null);
+});
+
+test('R192 runtime diagnostic detail is short, single-line and status-preserving',()=>{
+  const out=formatRuntimeDiagnosticLine('bridge.stdout.log',compact('slow write rejected '+('x'.repeat(800))),{verbose:true,displayMode:'ascii'});
+  assert.match(out,/\[BRIDGE.STDOUT.DEBUG\].*coding_command_run 10ms/);
+  assert.ok(out.length<350,'a single runtime diagnostic cannot flood the foreground');
+  assert.equal(out.split(/\r?\n/).length,1);
+});
+
+test('R192 audit result redacts secrets without hiding outcome classification',()=>{
+  const tracker=createLiveTimelineTracker({clock:()=>1000,displayMode:'ascii'});
+  tracker.observe({event_type:'tool.request',request_id:'123456789012',tool:'host_exec',args:{root_id:'core',mode:'native'}});
+  const out=tracker.observe({event_type:'tool.result',request_id:'123456789012',tool:'host_exec',
+    outcome:{status:'denied',is_error:true,duration_ms:24,reason:'authorization: Bearer supersensitive123456'}});
+  assert.match(out,/ERR/);
+  assert.doesNotMatch(out,/supersensitive123456/);
+  assert.match(out,/REDACTED/);
+});
+
+test('R192 rotation prunes stale cursors and partial line fragments without touching current streams',()=>{
+  const live=new Map([['current.log',{offset:12}],['gone.log',{offset:77}]]);
+  const fragments=new Map([['current.log','half'],['gone.log','secret']]);
+  const result=pruneLiveLogReaders(live,fragments,['current.log','other.log']);
+  assert.deepEqual(result,{cursors_removed:1,fragments_removed:1});
+  assert.deepEqual([...live.keys()],['current.log']);
+  assert.deepEqual([...fragments], [['current.log','half']]);
+});
+
+test('R192 reject malformed discovery before mutating any reader state',()=>{
+  const live=new Map([['current.log',{offset:12}]]);
+  const fragments=new Map([['current.log','half']]);
+  assert.throws(()=>pruneLiveLogReaders(live,fragments,[123]),/invalid/i);
+  assert.equal(live.has('current.log'),true);
+  assert.equal(fragments.get('current.log'),'half');
+});

package/test/r192-release-identity.test.mjs

@@ -0,0 +1,40 @@
+import test from 'node:test';import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';import {createHash} from 'node:crypto';import path from 'node:path';import {fileURLToPath} from 'node:url';
+import {DEADBYTE_VERSION} from '../src/version.mjs';
+const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
+const read=async name=>JSON.parse(await readFile(path.join(root,name),'utf8'));
+const prevHash='1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c';
+const prevTar='20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27';
+test('R192 exact package, bridge, lock, metadata and runtime version are 0.15.72',async()=>{
+ const [pkg,bridge,lock,release,prov,matrix,bom]=await Promise.all([
+ read('package.json'),read('bridge/package.json'),read('docs/R184-package-lock.json'),
+ read('RELEASE.json'),read('PROVENANCE.json'),read('TEST-MATRIX.json'),read('SBOM.cdx.json')]);
+ for(const actual of [pkg.version,bridge.version,lock.version,lock.packages[''].version,
+ release.version,prov.version,matrix.version,bom.metadata.component.version,DEADBYTE_VERSION])
+   assert.equal(actual,'0.15.72');
+ assert.equal(release.train,'R192');assert.equal(matrix.train,'R192');
+ assert.equal(bom.serialNumber,'urn:cdx:deadbyte-mcp:r192:0.15.72');
+ assert.equal(release.parent.release_id,'v0.15.71-1818abc327478a96');
+ assert.equal(release.parent.manifest_sha256,prevHash);
+ assert.equal(release.source_predecessor.tarball_sha256,prevTar);
+ assert.equal(release.source_predecessor.manifest_sha256,prevHash);
+ assert.equal(prov.parent_tarball_sha256,prevTar);
+ assert.equal(prov.parent_manifest_sha256,prevHash);
+ assert.equal(release.r192.production_activation,'NOT_RUN');
+ assert.equal(release.r192.public_tool_schema_changed,false);
+ assert.equal(release.r192.authority_grants_changed,false);
+});
+test('R192 foreground reader enforces caller-safe telemetry rather than changing authority',async()=>{
+ const [cli,log]=await Promise.all([
+ readFile(path.join(root,'src','deadbyte-cli.mjs'),'utf8'),
+ readFile(path.join(root,'src','remote-live-log.mjs'),'utf8')]);
+ assert.match(cli,/pruneLiveLogReaders\(activeOffsets,partialLines,liveFiles\)/);
+ assert.match(log,/export function pruneLiveLogReaders/);
+ assert.match(log,/sanitizeAuditArgs\(compact\[6\]\)/);
+ const [policy,release]=await Promise.all([
+ read('controller/deadbyte-process-policy.json'),read('RELEASE.json')]);
+ const approved=release.r192.development_policy_root;
+ assert.equal(typeof approved,'string');
+ assert.ok(path.isAbsolute(approved));
+ assert.equal(path.resolve(policy.roots.core.path),path.resolve(approved));
+});

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R72 compact baseline permits only R64 read offset and authorized coding-on
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60','0.15.61','0.15.62','0.15.63','0.15.64','0.15.65','0.15.66','0.15.67','0.15.68','0.15.69','0.15.70','0.15.71'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60','0.15.61','0.15.62','0.15.63','0.15.64','0.15.65','0.15.66','0.15.67','0.15.68','0.15.69','0.15.70','0.15.71','0.15.72'].includes(packageVersion)){
     assert.deepEqual([...diff.schema_changed].sort(),['machine_fs','native_diff_preview']);
     assert.equal(diff.unchanged.length,41);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');