deadbyte-mcp 0.15.72 → 0.15.75

package/README.txt

@@ -1,15 +1,26 @@
-DEADBYTE MCP V0.15.71 / R191 PROTECTED ACTIVATION REPAIR
+DEADBYTE MCP V0.15.75 / R195 CANONICAL OWNER OBSERVATION CANDIDATE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
 
-R191 CANDIDATE STATE
---------------------
-0.15.71 is an isolated successor to the published 0.15.70 package.
-it fixes signed R27 precondition claim reconciliation and binds the inherited
-AuthorityEpochRoot to a separately ACL-trusted exact successor stage.
-protected full regression and production activation are not yet verified.
-0.15.68 remains the active runtime and old grants are never auto-restored.
+R195 CANDIDATE STATUS
+---------------------
+0.15.75 is a separate unpublished candidate sourced from the exact 0.15.74 / R194
+release. production remains 0.15.74. This candidate changes only the canonical
+protected owner observation path; it grants no new authority.
+Protected full regression, exact package verification and release closure must
+pass before npm publication. Activation and real owner UAC enrollment are
+separate actions. No standing grant or production runtime is changed here.
+
+R194 HISTORICAL PREDECESSOR
+---------------------------
+0.15.74 was published and activated before the R195 candidate was prepared.
+Its frozen release and runtime generation remain unchanged.
+
+R193 HISTORICAL SOURCE
+----------------------
+R193 0.15.73 had a protected release-ready archive but was not published.
+Its manifest, tarball, original npm OUTCOME_UNKNOWN claim and provenance remain frozen.
 
 R190 RELEASE STATE
 ------------------
@@ -31,12 +42,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.72 mcp
-  npx -y deadbyte-mcp@0.15.72 remote
-  npx -y deadbyte-mcp@0.15.72 remote status
-  npx -y deadbyte-mcp@0.15.72 remote restart
-  npx -y deadbyte-mcp@0.15.72 audit status
-  npx -y deadbyte-mcp@0.15.72 audit verify
+  npx -y deadbyte-mcp@0.15.75 mcp
+  npx -y deadbyte-mcp@0.15.75 remote
+  npx -y deadbyte-mcp@0.15.75 remote status
+  npx -y deadbyte-mcp@0.15.75 remote restart
+  npx -y deadbyte-mcp@0.15.75 audit status
+  npx -y deadbyte-mcp@0.15.75 audit verify
 
 
 R173 EPOCH-REVOKED AUTHORITY PROOF HOTFIX
@@ -60,7 +71,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.75", "mcp"]
       }
     }
   }
@@ -72,7 +83,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.75", "mcp"]
       }
     }
   }
@@ -85,7 +96,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.72", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.75", "mcp"]
       }
     }
   }
@@ -95,7 +106,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.72", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.75", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.

package/RELEASE.json

@@ -1,22 +1,22 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.72",
-  "train": "R192",
-  "label": "R192 live log hardening and foreground integration",
+  "version": "0.15.75",
+  "train": "R206",
+  "label": "R206 evidence-bound candidate selection release closure",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "version": "0.15.71",
-    "release_id": "v0.15.71-1818abc327478a96",
-    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
-    "generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc",
+    "version": "0.15.74",
+    "release_id": "v0.15.74-e84bf4eed16e9443",
+    "manifest_sha256": "e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47",
+    "generation_manifest_sha256": "598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7",
     "activation_status": "PRODUCTION_ACTIVE"
   },
   "runtime_predecessor": {
-    "version": "0.15.71",
-    "release_id": "v0.15.71-1818abc327478a96",
-    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
-    "generation_manifest_sha256": "aef437280102171a9b68da754fca16a03202104db7d5c420751624580ad6fadc"
+    "version": "0.15.74",
+    "release_id": "v0.15.74-e84bf4eed16e9443",
+    "manifest_sha256": "e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47",
+    "generation_manifest_sha256": "598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7"
   },
   "r190_foreground_recovery": {
     "status": "PREPUBLISH_VERIFIED",
@@ -36,13 +36,13 @@
     "authority_scope_delta": 0
   },
   "source_predecessor": {
-    "version": "0.15.71",
-    "train": "R191",
-    "source_path": "https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-0.15.71.tgz",
-    "release_status": "PUBLISHED_REGISTRY_VERIFIED",
-    "manifest_status": "PUBLISHED_EXACT_MANIFEST_VERIFIED_ACTIVE_PRODUCTION",
-    "manifest_sha256": "1818abc327478a96d935c200e25aad8515f15edc1842845b73bd0de57606da8c",
-    "tarball_sha256": "20ed3b20e72b4e4226736a1e432b05b851e9fa265e9bc2966b74f266477b7e27"
+    "version": "0.15.75",
+    "train": "R205",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r205-evidence-selection-dev",
+    "release_status": "DEVELOPMENT_VERIFIED_RELEASE_BLOCKED",
+    "manifest_status": "R205_MANIFEST_VERIFIED",
+    "manifest_sha256": "166eebde18d53a9ec46f738383c289733f9cd37918b3572b7515d1ab9b122c92",
+    "tarball_sha256": null
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -637,5 +637,72 @@
     "integration": "FOREGROND_CLI_SOURCE_INTEGRATION_NOT_MONOLITHIC_REWRITE",
     "verified_artifact": "PENDING_PACK_GATE",
     "references_used": "D:/Projects/deadbyte-mcp/references (read-only conceptual comparisons)"
+  },
+  "r193": {
+    "status": "PRE_FINAL_PROTECTED_GREEN_AWAITING_EXACT_IDENTITY_GATE",
+    "scope": "PROTECTED_OWNER_AUTHORIZATION_AND_LIMITED_RUNTIME_MIGRATION",
+    "production": "v0.15.72-0a5d9436e06e2d9e_UNCHANGED",
+    "production_activation": "NOT_RUN",
+    "publication": "NOT_RUN",
+    "source_predecessor_version": "0.15.72",
+    "source_predecessor_tarball_sha256": "15ab5d9808cbca342aee3f64c6d1123e8fbb72964674eab460e355c8675bf84d",
+    "focused_tests": "PASS_80_FAIL_0",
+    "protected_focused": "PASS_60_FAIL_0_SKIP_1_OWNER_ENROLLMENT_BOUNDARY",
+    "protected_focused_transcript_sha256": "44228e5f21f21b86b01a2df028cb9e71aa6f827aa8750b9a616cfec4be70ae5a",
+    "protected_full": "PASS_2136_FAIL_0_SKIP_51_PRE_FINAL_SOURCE_MUTATION",
+    "protected_full_transcript_sha256": "2c829f178c09190e0e09d7b7731b18621de5b610f337f6b9aab67f1c484a860b",
+    "final_exact_byte_closure": "PENDING_FRESH_PROTECTED_FIXTURE_AFTER_READINESS_GUARD",
+    "development_policy_root": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r193-owner-uac-dev",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "owner_enrollment": "NOT_RUN",
+    "limited_runtime_migration": "NOT_RUN"
+  },
+  "r194": {
+    "status": "CANDIDATE_METADATA_PREPARED_GATES_PENDING",
+    "scope": "NPM_AUTH_RECOVERY_AND_OWNER_AUTHORIZATION",
+    "development_policy_root": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery",
+    "source_predecessor_version": "0.15.73",
+    "source_predecessor_manifest_sha256": "e0b3f8b333f1c1260a97b178d1a8beff5742355296a9fe7daba378612604a3bd",
+    "source_predecessor_tarball_sha256": "13c3dd23a535609aa53173b328c7d9299d5dcada684f3253a88af6a4b300c534",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "owner_enrollment": "NOT_RUN",
+    "limited_runtime_migration": "NOT_RUN",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN"
+  },
+  "r195": {
+    "status": "BEHAVIOR_GREEN_RELEASE_GATES_PENDING",
+    "scope": "CANONICAL_PROTECTED_OWNER_OBSERVATION",
+    "development_policy_root": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r195-owner-enrollment-live",
+    "source_predecessor_version": "0.15.74",
+    "source_predecessor_manifest_sha256": "e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47",
+    "source_predecessor_tarball_sha256": "5da436a3f8068107e74caf6da58ff1e211d4a62f94266853136b601762f36f0c",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "owner_enrollment": "PENDING_OWNER_GESTURE_AFTER_ACTIVATION",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN"
+  },
+  "r206": {
+    "status": "BEHAVIOR_GREEN_FINAL_GATES_PENDING",
+    "scope": "EVIDENCE_BOUND_CANDIDATE_SELECTION_RELEASE_CLOSURE",
+    "development_policy_root": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r206-release-closure",
+    "source_predecessor_train": "R205",
+    "source_predecessor_manifest_sha256": "166eebde18d53a9ec46f738383c289733f9cd37918b3572b7515d1ab9b122c92",
+    "runtime_predecessor_release_id": "v0.15.74-e84bf4eed16e9443",
+    "selector_release_authority": false,
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "deferred_unverified": [
+      "REMOTE_TWO_MACHINE_E2E",
+      "NATIVE_UIA_APPLICATION_EFFECT",
+      "BOUNDED_CDP_HARNESS2",
+      "REA_WINDOWS_209_TOOL_PARITY"
+    ],
+    "owner_enrollment": "PENDING_SEPARATE_POST_ACTIVATION_OWNER_GESTURE",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN"
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r192:0.15.72",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r206:0.15.75",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.72"
+      "version": "0.15.75"
     }
   },
   "components": [
@@ -65,6 +65,18 @@
       "type": "library",
       "name": "@modelcontextprotocol/core",
       "version": "2.3.1"
+    },
+    {
+      "type": "file",
+      "name": "deadbyte-owner-token-r193.exe",
+      "version": "0.15.73",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d554d732872f3d671fd2fb63c11fc0dac1f8cae377259c6d64dd0c5b3762f2b8"
+        }
+      ],
+      "evidence_status": "PROTECTED_FOCUSED_AND_FULL_VERIFIED_PREPUBLICATION"
     }
   ]
 }

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.72",
-  "train": "R192",
+  "version": "0.15.75",
+  "train": "R206",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -10,6 +10,26 @@
     "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
   },
   "required": [
+    {
+      "id": "r206-independent-candidate-evidence",
+      "command": "node --test --test-concurrency=1 test/r206-candidate-evidence.test.mjs",
+      "expected": "Every decision-bearing correctness and benchmark receipt is independently verified and the selector remains unable to authorize release"
+    },
+    {
+      "id": "r206-release-identity",
+      "command": "node --test --test-concurrency=1 test/r206-release-contract.test.mjs",
+      "expected": "R205 source and active 0.15.74 runtime predecessors remain distinct; public tool and authority surfaces are unchanged"
+    },
+    {
+      "id": "r206-protected-full-and-package",
+      "command": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r206.ps1 -Stage all",
+      "expected": "Exact final manifest passes R89 protected focused/full regression and package verify-only with every skip classified"
+    },
+    {
+      "id": "r195-canonical-protected-owner-observation",
+      "command": "node --test test/r195-canonical-owner-observation.test.mjs",
+      "expected": "Protected owner request and broker observe the exact active controller through the canonical verified launcher"
+    },
     {
       "id": "r191-trusted-successor-epoch-root",
       "command": "run R191 protected 0.15.71 ACL and full Windows regression",
@@ -743,5 +763,33 @@
     "npm_publish": "NOT_RUN",
     "public_tool_delta": 0,
     "authority_policy_delta": 0
+  },
+  "r193": {
+    "focused": "PASS_80_FAIL_0_SKIP_0",
+    "protected_focused": "PASS_60_FAIL_0_SKIP_1_OWNER_ENROLLMENT_BOUNDARY",
+    "protected_focused_transcript_sha256": "44228e5f21f21b86b01a2df028cb9e71aa6f827aa8750b9a616cfec4be70ae5a",
+    "protected_full": "PASS_2136_FAIL_0_SKIP_51_PRE_FINAL_SOURCE_MUTATION",
+    "protected_full_transcript_sha256": "2c829f178c09190e0e09d7b7731b18621de5b610f337f6b9aab67f1c484a860b",
+    "manifest": "PENDING_FINAL_METADATA_FREEZE",
+    "windows_gate": "PENDING_FRESH_EXACT_BYTES_AFTER_READINESS_GUARD",
+    "publish_readiness_guard": "PASS_RED_THEN_GREEN_10_TESTS_WITH_CANONICAL_ENTRYPOINT",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "owner_enrollment": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0
+  },
+  "r194": {
+    "focused": "PENDING_FRESH_SOURCE",
+    "full": "PENDING_FRESH_PROTECTED",
+    "manifest": "PENDING_NEW_SEAL",
+    "windows_gate": "PENDING",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "owner_enrollment": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.72",
+  "version": "0.15.75",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r206-release-closure\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r206-release-closure\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r206-release-closure\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.75-r206-release-closure",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R184-package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.72",
+  "version": "0.15.75",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "deadbyte-mcp",
-      "version": "0.15.72",
+      "version": "0.15.75",
       "bundleDependencies": [
         "@modelcontextprotocol/server",
         "@modelcontextprotocol/client",
@@ -28,8 +28,6 @@
     },
     "node_modules/@modelcontextprotocol/client": {
       "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.3.1.tgz",
-      "integrity": "sha512-mIGZXpHsjnZ6lD+gD/WCMpR5k8yVQQ8nNFH1N0Srf7AvnwTUMYD6pvTY8ng2+He5FfV7YMZLmrjL7cLa/cc3dQ==",
       "inBundle": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -47,8 +45,6 @@
     },
     "node_modules/@modelcontextprotocol/core": {
       "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.3.1.tgz",
-      "integrity": "sha512-laVmIhPGpWi7rG9q+0UigblRN0Hws/Yjlb6qLFtVqryXVLkc4h+yN8z731POD2LnAGQlFe7/tXhUm7Bi0YB91g==",
       "inBundle": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -60,8 +56,6 @@
     },
     "node_modules/@modelcontextprotocol/server": {
       "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/server/-/server-2.3.1.tgz",
-      "integrity": "sha512-e59MfWuSssj6DoQ96JCTqdW1AXT5/XtnTl0WWd6MU1Ka434fFUGGosCLJbGNySDhHGvxQWoRWK137FXYFkYNWw==",
       "inBundle": true,
       "license": "Apache-2.0",
       "dependencies": {