deadbyte-mcp 0.15.72 → 0.15.75

package/native/deadbyte-fs-read-r198.cpp

@@ -0,0 +1,181 @@
+#define WIN32_LEAN_AND_MEAN
+#define NOMINMAX
+#include <windows.h>
+#include <winternl.h>
+#include <bcrypt.h>
+#include <cstdio>
+#include <cstdlib>
+#include <cstring>
+#include <cwchar>
+#include <string>
+#include <vector>
+#include <algorithm>
+#pragma comment(lib, "bcrypt.lib")
+
+// A Windows-only experimental reader. Kernel resolution is anchored to an
+// already-open directory HANDLE. No reparse component is followed.
+// The caller must supply the independently authorized root and relative path.
+// This file is not a release authorization or production deployment.
+using NtCreateFilePtr=NTSTATUS (NTAPI *)(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,
+ PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
+static constexpr ULONG kFileOpen=1, kFileDir=0x1, kFileNotDir=0x40;
+static constexpr ULONG kFileSync=0x20, kFileNoReparse=0x00200000, kObjNoReparse=0x1000;
+static void fail(const char* m,int exitCode=2){
+ std::fprintf(stderr,"R197_NATIVE_REFUSE=%s\n",m);std::exit(exitCode);
+}
+static bool noReparse(HANDLE h){
+ FILE_ATTRIBUTE_TAG_INFO t{};
+ return GetFileInformationByHandleEx(h,FileAttributeTagInfo,&t,sizeof(t)) &&
+   (t.FileAttributes&FILE_ATTRIBUTE_REPARSE_POINT)==0;
+}
+static unsigned long long parseNumber(const wchar_t* input){
+ if(!input||!*input)fail("missing_number");
+ for(const wchar_t* q=input;*q;++q)if(*q<L'0'||*q>L'9')fail("invalid_number");
+ wchar_t* end=nullptr;
+ errno=0;
+ const auto n=std::wcstoull(input,&end,10);
+ if(errno||!end||*end!=L'\0')fail("number_overflow");
+ return n;
+}
+static std::vector<std::wstring> split(const std::wstring& rel){
+ if(rel.empty()||rel.size()>1024||rel[0]==L'\\'||rel[0]==L'/'||rel.find(L':')!=std::wstring::npos)
+  fail("invalid_relative_path");
+ std::vector<std::wstring> result;size_t start=0;
+ for(size_t i=0;i<=rel.size();++i){
+  if(i==rel.size()||rel[i]==L'/'||rel[i]==L'\\'){
+   const auto s=rel.substr(start,i-start);
+   if(s.empty()||s==L"."||s==L".."||s.size()>255||s.back()==L'.'||s.back()==L' '||
+      s.find(L'\0')!=std::wstring::npos)fail("invalid_segment");
+   result.push_back(s);start=i+1;
+  }
+ }
+ if(result.empty()||result.size()>32)fail("segment_budget");
+ return result;
+}
+static std::string base64(const unsigned char* b,size_t n){
+ static constexpr char abc[]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+ std::string out;out.reserve(((n+2)/3)*4);
+ for(size_t i=0;i<n;i+=3){
+  const unsigned a=b[i],x=i+1<n?b[i+1]:0,y=i+2<n?b[i+2]:0;
+  out.push_back(abc[a>>2]);out.push_back(abc[((a&3)<<4)|(x>>4)]);
+  out.push_back(i+1<n?abc[((x&15)<<2)|(y>>6)]:'=');
+  out.push_back(i+2<n?abc[y&63]:'=');
+ }
+ return out;
+}
+static std::string hex(const unsigned char* b,size_t n){
+ static constexpr char chars[]="0123456789abcdef";
+ std::string out;out.reserve(n*2);
+ for(size_t i=0;i<n;++i){out.push_back(chars[b[i]>>4]);out.push_back(chars[b[i]&15]);}
+ return out;
+}
+static void seek(HANDLE h,unsigned long long pos){
+ LARGE_INTEGER p{};p.QuadPart=static_cast<LONGLONG>(pos);
+ if(!SetFilePointerEx(h,p,nullptr,FILE_BEGIN))fail("seek_failed");
+}
+static std::string hashAll(HANDLE h){
+ BCRYPT_ALG_HANDLE algorithm=nullptr;BCRYPT_HASH_HANDLE hash=nullptr;
+ if(BCryptOpenAlgorithmProvider(&algorithm,BCRYPT_SHA256_ALGORITHM,nullptr,0)<0)fail("hash_alg");
+ if(BCryptCreateHash(algorithm,&hash,nullptr,0,nullptr,0,0)<0)fail("hash_create");
+ seek(h,0);
+ std::vector<unsigned char> buffer(65536);
+ DWORD got=0;
+ for(;;){
+  if(!ReadFile(h,buffer.data(),static_cast<DWORD>(buffer.size()),&got,nullptr))fail("hash_read");
+  if(got==0)break;
+  if(BCryptHashData(hash,buffer.data(),got,0)<0)fail("hash_update");
+ }
+ unsigned char sum[32]{};
+ if(BCryptFinishHash(hash,sum,sizeof(sum),0)<0)fail("hash_finish");
+ BCryptDestroyHash(hash);BCryptCloseAlgorithmProvider(algorithm,0);
+ return hex(sum,sizeof(sum));
+}
+int wmain(int argc,wchar_t** argv){
+ if(argc!=8)fail("usage_root_relative_offset_length_hash_expectedrootdev_expectedrootino");
+ const std::wstring root=argv[1];
+ if(root.size()<4||root.size()>2048||root[1]!=L':'||(root[2]!=L'\\'&&root[2]!=L'/'))
+  fail("root_must_be_absolute_drive_path");
+ const auto names=split(argv[2]);
+ const auto offset=parseNumber(argv[3]),requested=parseNumber(argv[4]);
+ if(requested>4*1024*1024ULL||offset>9007199254740991ULL)fail("range_budget");
+ if(std::wcscmp(argv[5],L"0")!=0&&std::wcscmp(argv[5],L"1")!=0)fail("invalid_hash_mode");
+ const bool wantHash=argv[5][0]==L'1';
+ const auto expectedRootDev=parseNumber(argv[6]);
+ const auto expectedRootIno=parseNumber(argv[7]);
+ if(expectedRootDev>0xffffffffULL||expectedRootIno==0)fail("invalid_root_identity");
+ const HANDLE rootHandle=CreateFileW(root.c_str(),FILE_READ_ATTRIBUTES|FILE_LIST_DIRECTORY|SYNCHRONIZE,
+  FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,nullptr,OPEN_EXISTING,
+  FILE_FLAG_BACKUP_SEMANTICS|FILE_FLAG_OPEN_REPARSE_POINT,nullptr);
+ if(rootHandle==INVALID_HANDLE_VALUE)fail("open_root");
+ if(!noReparse(rootHandle))fail("root_reparse_or_unverified");
+ FILE_ID_INFO rootId{};if(!GetFileInformationByHandleEx(rootHandle,FileIdInfo,&rootId,sizeof(rootId)))
+  fail("root_identity_unavailable");
+ unsigned long long openedRootIno=0;
+ std::memcpy(&openedRootIno,rootId.FileId.Identifier,sizeof(openedRootIno));
+ if((rootId.VolumeSerialNumber & 0xffffffffULL)!=expectedRootDev || openedRootIno!=expectedRootIno)
+  fail("root_identity_mismatch",6); // IMPORTANT: no leaf path has been opened
+ HMODULE ntdll=GetModuleHandleW(L"ntdll.dll");
+ auto nt=reinterpret_cast<NtCreateFilePtr>(GetProcAddress(ntdll,"NtCreateFile"));
+ if(!nt)fail("ntcreatefile_unavailable");
+ HANDLE parent=rootHandle;std::vector<HANDLE> chain;chain.reserve(names.size());
+ for(size_t i=0;i<names.size();++i){
+  const bool dir=i+1<names.size();
+  UNICODE_STRING name{};name.Buffer=const_cast<PWSTR>(names[i].c_str());
+  name.Length=static_cast<USHORT>(names[i].size()*sizeof(wchar_t));
+  name.MaximumLength=name.Length;
+  OBJECT_ATTRIBUTES oa{};oa.Length=sizeof(oa);oa.RootDirectory=parent;
+  oa.ObjectName=&name;oa.Attributes=OBJ_CASE_INSENSITIVE|kObjNoReparse;
+  IO_STATUS_BLOCK ios{};HANDLE next=nullptr;
+  const ULONG options=kFileSync|kFileNoReparse|(dir?kFileDir:kFileNotDir);
+  const ACCESS_MASK access=FILE_READ_ATTRIBUTES|SYNCHRONIZE|(dir?FILE_LIST_DIRECTORY:FILE_READ_DATA);
+  const NTSTATUS status=nt(&next,access,&oa,&ios,nullptr,FILE_ATTRIBUTE_NORMAL,
+   FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,kFileOpen,options,nullptr,0);
+  if(status<0||!next)fail("nt_open_component_refused",3);
+  chain.push_back(next);
+  if(!noReparse(next))fail("component_reparse_or_unverified",4);
+  FILE_ID_INFO id{};if(!GetFileInformationByHandleEx(next,FileIdInfo,&id,sizeof(id)))
+   fail("component_identity_unavailable",5);
+  parent=next;
+ }
+ const HANDLE leaf=chain.back();
+ FILE_ID_INFO identity{};
+ FILE_BASIC_INFO initialBasic{},finalBasic{};
+ FILE_STANDARD_INFO initialStandard{},finalStandard{};
+ if(!GetFileInformationByHandleEx(leaf,FileIdInfo,&identity,sizeof(identity)) ||
+    !GetFileInformationByHandleEx(leaf,FileBasicInfo,&initialBasic,sizeof(initialBasic)) ||
+    !GetFileInformationByHandleEx(leaf,FileStandardInfo,&initialStandard,sizeof(initialStandard)))
+  fail("file_identity_unavailable");
+ const auto fileSize=initialStandard.EndOfFile.QuadPart;
+ if(fileSize<0||fileSize>9007199254740991LL)fail("file_size_out_of_range");
+ if(offset>static_cast<unsigned long long>(fileSize))fail("offset_exceeds_size");
+ const auto length=static_cast<size_t>(std::min(requested,static_cast<unsigned long long>(fileSize)-offset));
+ std::vector<unsigned char> data(length);
+ seek(leaf,offset);
+ size_t read=0;
+ while(read<length){
+  DWORD got=0;
+  if(!ReadFile(leaf,data.data()+read,static_cast<DWORD>(length-read),&got,nullptr))
+   fail("range_read_failed");
+  if(got==0)fail("unexpected_range_eof");
+  read+=got;
+ }
+ const auto digest=wantHash?hashAll(leaf):std::string();
+ if(!GetFileInformationByHandleEx(leaf,FileBasicInfo,&finalBasic,sizeof(finalBasic))||
+    !GetFileInformationByHandleEx(leaf,FileStandardInfo,&finalStandard,sizeof(finalStandard)))
+  fail("file_postidentity_unavailable");
+ if(initialStandard.EndOfFile.QuadPart!=finalStandard.EndOfFile.QuadPart||
+    initialBasic.LastWriteTime.QuadPart!=finalBasic.LastWriteTime.QuadPart||
+    initialBasic.ChangeTime.QuadPart!=finalBasic.ChangeTime.QuadPart)
+  fail("file_mutated_during_read");
+ unsigned long long nativeId=0;
+ std::memcpy(&nativeId,identity.FileId.Identifier,sizeof(nativeId));
+ const auto encoded=base64(data.data(),data.size());
+ std::printf("{\"schema\":\"deadbyte.machine-fs-read-worker.v1\",\"bytes_read\":%llu,\"data_base64\":\"%s\",\"file_sha256\":",
+  static_cast<unsigned long long>(read),encoded.c_str());
+ if(wantHash)std::printf("\"%s\"",digest.c_str());else std::printf("null");
+ std::printf(",\"file_size\":%llu,\"file_dev\":\"%llu\",\"file_ino\":\"%llu\"}",
+   static_cast<unsigned long long>(fileSize),
+   static_cast<unsigned long long>(identity.VolumeSerialNumber & 0xffffffffULL),nativeId);
+ for(auto it=chain.rbegin();it!=chain.rend();++it)CloseHandle(*it);
+ CloseHandle(rootHandle);return 0;
+}

package/native/deadbyte-owner-token-r193.cpp

@@ -0,0 +1,156 @@
+// R193 native Windows token probe. Diagnostic only: NOT owner consent or a grant.
+// It can inspect itself or one PID. A caller must bind the returned kernel
+// creation FILETIME to an independently trusted ownership ledger.
+#ifndef WIN32_LEAN_AND_MEAN
+#define WIN32_LEAN_AND_MEAN
+#endif
+#include <windows.h>
+#include <sddl.h>
+#include <cstring>
+#include <iomanip>
+#include <iostream>
+#include <limits>
+#include <string>
+#include <vector>
+
+static bool info(HANDLE token, TOKEN_INFORMATION_CLASS klass, void* output, DWORD size) {
+  DWORD written = 0;
+  return GetTokenInformation(token, klass, output, size, &written) != 0 && written >= size;
+}
+
+struct TokenReport {
+  bool valid = false;
+  bool elevated = false;
+  bool admin_enabled = false;
+  DWORD integrity_rid = 0;
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+};
+
+static TokenReport inspect_token(HANDLE process) {
+  TokenReport out{};
+  HANDLE token = nullptr;
+  if (!OpenProcessToken(process, TOKEN_QUERY | TOKEN_DUPLICATE, &token)) return out;
+  TOKEN_ELEVATION elevation{};
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+  bool valid = info(token, TokenElevation, &elevation, sizeof(elevation))
+    && info(token, TokenElevationType, &elevation_type, sizeof(elevation_type))
+    && info(token, TokenType, &token_type, sizeof(token_type))
+    && info(token, TokenSessionId, &session_id, sizeof(session_id));
+
+  PSID administrators = nullptr;
+  BOOL admin_enabled = FALSE;
+  HANDLE membership_token = nullptr;
+  SID_IDENTIFIER_AUTHORITY authority = SECURITY_NT_AUTHORITY;
+  if (valid) {
+    valid = AllocateAndInitializeSid(&authority, 2, SECURITY_BUILTIN_DOMAIN_RID,
+      DOMAIN_ALIAS_RID_ADMINS, 0, 0, 0, 0, 0, 0, &administrators) != 0;
+    if (valid) valid = DuplicateToken(token, SecurityIdentification, &membership_token) != 0;
+    if (valid) valid = CheckTokenMembership(membership_token, administrators, &admin_enabled) != 0;
+  }
+  DWORD len = 0;
+  DWORD integrity_rid = 0;
+  if (valid) {
+    GetTokenInformation(token, TokenIntegrityLevel, nullptr, 0, &len);
+    valid = GetLastError() == ERROR_INSUFFICIENT_BUFFER
+      && len >= sizeof(TOKEN_MANDATORY_LABEL) && len <= 65536;
+    if (valid) {
+      std::vector<unsigned char> buffer(len);
+      valid = GetTokenInformation(token, TokenIntegrityLevel, buffer.data(), len, &len) != 0;
+      if (valid) {
+        auto* label = reinterpret_cast<TOKEN_MANDATORY_LABEL*>(buffer.data());
+        auto* sid = label->Label.Sid;
+        valid = IsValidSid(sid) != 0 && *GetSidSubAuthorityCount(sid) >= 1;
+        if (valid) integrity_rid = *GetSidSubAuthority(sid, *GetSidSubAuthorityCount(sid)-1);
+      }
+    }
+  }
+  if (membership_token) CloseHandle(membership_token);
+  if (administrators) FreeSid(administrators);
+  CloseHandle(token);
+  out.valid = valid;
+  out.elevated = elevation.TokenIsElevated != 0;
+  out.admin_enabled = admin_enabled != FALSE;
+  out.integrity_rid = integrity_rid;
+  out.elevation_type = elevation_type;
+  out.token_type = token_type;
+  out.session_id = session_id;
+  return out;
+}
+
+static bool standard_token(const TokenReport& report) {
+  return !report.elevated && !report.admin_enabled
+    && report.token_type == TokenPrimary
+    && report.integrity_rid >= SECURITY_MANDATORY_MEDIUM_RID
+    && report.integrity_rid < SECURITY_MANDATORY_HIGH_RID
+    && report.elevation_type != TokenElevationTypeFull;
+}
+
+int main(int argc, char** argv) {
+  const bool report = argc == 2 && std::strcmp(argv[1], "--report") == 0;
+  const bool require_standard = argc == 2 && std::strcmp(argv[1], "--require-standard") == 0;
+  const bool inspect_pid = argc == 3 && std::strcmp(argv[1], "--inspect-pid") == 0;
+  if (!report && !require_standard && !inspect_pid) {
+    std::cerr << "usage: deadbyte-owner-token-r193.exe --report|--require-standard|--inspect-pid PID\n";
+    return 64;
+  }
+  if (inspect_pid) {
+    std::string raw(argv[2]);
+    size_t consumed = 0;
+    unsigned long long parsed = 0;
+    try { parsed = std::stoull(raw, &consumed, 10); }
+    catch (...) { std::cerr << "R193_TARGET_PID_INVALID\n"; return 64; }
+    if (consumed != raw.size() || parsed < 1 || parsed > std::numeric_limits<DWORD>::max()) {
+      std::cerr << "R193_TARGET_PID_INVALID\n";
+      return 64;
+    }
+    const DWORD pid = static_cast<DWORD>(parsed);
+    HANDLE process = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+    if (!process) { std::cerr << "R193_TARGET_PROCESS_UNAVAILABLE\n"; return 72; }
+    FILETIME created{}, exited{}, kernel{}, user{};
+    const bool times = GetProcessTimes(process, &created, &exited, &kernel, &user) != 0;
+    const TokenReport target = inspect_token(process);
+    CloseHandle(process);
+    if (!times || !target.valid) {
+      std::cerr << "R193_TARGET_TOKEN_INSPECTION_FAILED\n";
+      return 73;
+    }
+    ULARGE_INTEGER identity{};
+    identity.LowPart = created.dwLowDateTime;
+    identity.HighPart = created.dwHighDateTime;
+    std::cout << "{\"schema\":\"deadbyte.r193-native-process-token.v1\",\"pid\":" << pid
+      << ",\"creation_filetime_hex\":\"" << std::hex << std::setfill('0') << std::setw(16)
+      << identity.QuadPart << std::dec
+      << "\",\"alive\":true,\"identity_verified\":true,\"elevated\":"
+      << (target.elevated ? "true" : "false")
+      << ",\"admin_enabled\":" << (target.admin_enabled ? "true" : "false")
+      << ",\"integrity_rid\":" << target.integrity_rid
+      << ",\"elevation_type\":" << static_cast<int>(target.elevation_type)
+      << ",\"token_type\":\"" << (target.token_type == TokenPrimary ? "primary" : "impersonation")
+      << "\",\"session_id\":" << target.session_id
+      << ",\"owner_approved\":false,\"authority_granted\":false}\n";
+    return 0;
+  }
+
+  const TokenReport self = inspect_token(GetCurrentProcess());
+  if (!self.valid) {
+    std::cerr << "R193_TOKEN_INSPECTION_FAILED\n";
+    return 71;
+  }
+  const bool standard = standard_token(self);
+  const char* reason = standard ? "STANDARD_TOKEN_OBSERVED" : "NOT_STANDARD_TOKEN";
+  std::cout << "{\"schema\":\"deadbyte.r193-native-token.v1\",\"status\":\""
+    << (standard ? "STANDARD_TOKEN_OBSERVED" : "BLOCKED")
+    << "\",\"reason\":\"" << reason
+    << "\",\"elevated\":" << (self.elevated ? "true" : "false")
+    << ",\"admin_enabled\":" << (self.admin_enabled ? "true" : "false")
+    << ",\"integrity_rid\":" << self.integrity_rid
+    << ",\"elevation_type\":" << static_cast<int>(self.elevation_type)
+    << ",\"token_type\":" << static_cast<int>(self.token_type)
+    << ",\"session_id\":" << self.session_id
+    << ",\"parent_independence_verified\":false,\"owner_approved\":false,\"authority_granted\":false}\n";
+  return require_standard && !standard ? 3 : 0;
+}

package/native/deadbyte-root-relative-probe-r197.cpp

@@ -0,0 +1,97 @@
+#define WIN32_LEAN_AND_MEAN
+#include <windows.h>
+#include <winternl.h>
+#include <cstdio>
+#include <cstdlib>
+#include <cstring>
+#include <cwchar>
+#include <string>
+#include <vector>
+#include <algorithm>
+
+// No content read. This proof worker demonstrates handle-anchored, no-reparse
+// traversal. It is NOT wired into machine-fs read or exposed as a public tool.
+using NtCreateFilePtr=NTSTATUS (NTAPI *)(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,
+ PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
+static constexpr ULONG kFileOpen=1;
+static constexpr ULONG kFileDir=0x00000001;
+static constexpr ULONG kFileNotDir=0x00000040;
+static constexpr ULONG kFileSync=0x00000020;
+static constexpr ULONG kFileNoReparse=0x00200000;
+static constexpr ULONG kObjNoReparse=0x00001000;
+
+static void fail(const char* m,int exitCode=2){
+ std::fprintf(stderr,"R197_NATIVE_REFUSE=%s\n",m);
+ std::exit(exitCode);
+}
+static bool noReparse(HANDLE h){
+ FILE_ATTRIBUTE_TAG_INFO t{};
+ if(!GetFileInformationByHandleEx(h,FileAttributeTagInfo,&t,sizeof(t)))return false;
+ return (t.FileAttributes&FILE_ATTRIBUTE_REPARSE_POINT)==0;
+}
+static bool fileIdentity(HANDLE h,FILE_ID_INFO& out){
+ return GetFileInformationByHandleEx(h,FileIdInfo,&out,sizeof(out))!=0;
+}
+static std::vector<std::wstring> split(const std::wstring& rel){
+ if(rel.empty()||rel.size()>1024||rel[0]==L'\\'||rel[0]==L'/'||
+    rel.find(L':')!=std::wstring::npos)fail("invalid_relative_path");
+ std::vector<std::wstring> segments;size_t start=0;
+ for(size_t i=0;i<=rel.size();++i){
+  if(i==rel.size()||rel[i]==L'/'||rel[i]==L'\\'){
+   auto s=rel.substr(start,i-start);
+   if(s.empty()||s==L"."||s==L".."||s.size()>255||
+      s.back()==L'.'||s.back()==L' '||s.find(L'\0')!=std::wstring::npos)fail("invalid_segment");
+   segments.push_back(std::move(s));start=i+1;
+  }
+ }
+ if(segments.empty()||segments.size()>32)fail("segment_budget");
+ return segments;
+}
+int wmain(int argc,wchar_t** argv){
+ if(argc!=3)fail("usage_root_and_relative");
+ const std::wstring root=argv[1];
+ if(root.size()<4||root.size()>2048||root[1]!=L':'||
+    (root[2]!=L'\\'&&root[2]!=L'/'))fail("root_must_be_absolute_drive_path");
+ const auto names=split(argv[2]);
+ const HANDLE rootHandle=CreateFileW(root.c_str(),FILE_READ_ATTRIBUTES|FILE_LIST_DIRECTORY|SYNCHRONIZE,
+  FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,nullptr,OPEN_EXISTING,
+  FILE_FLAG_BACKUP_SEMANTICS|FILE_FLAG_OPEN_REPARSE_POINT,nullptr);
+ if(rootHandle==INVALID_HANDLE_VALUE)fail("open_root");
+ if(!noReparse(rootHandle))fail("root_reparse_or_unverified");
+ FILE_ID_INFO rootId{};if(!fileIdentity(rootHandle,rootId))fail("root_identity_unavailable");
+ HMODULE ntdll=GetModuleHandleW(L"ntdll.dll");
+ const auto nt=reinterpret_cast<NtCreateFilePtr>(GetProcAddress(ntdll,"NtCreateFile"));
+ if(!nt)fail("ntcreatefile_unavailable");
+ HANDLE parent=rootHandle;
+ std::vector<HANDLE> handles;handles.reserve(names.size());
+ for(size_t i=0;i<names.size();++i){
+  const bool directory=i+1<names.size();
+  UNICODE_STRING component{};
+  component.Buffer=const_cast<PWSTR>(names[i].c_str());
+  component.Length=static_cast<USHORT>(names[i].size()*sizeof(wchar_t));
+  component.MaximumLength=component.Length;
+  OBJECT_ATTRIBUTES oa{};
+  oa.Length=sizeof(oa);oa.RootDirectory=parent;oa.ObjectName=&component;
+  oa.Attributes=OBJ_CASE_INSENSITIVE|kObjNoReparse;
+  IO_STATUS_BLOCK ios{};
+  HANDLE next=nullptr;
+  const ULONG options=kFileSync|kFileNoReparse|(directory?kFileDir:kFileNotDir);
+  const ACCESS_MASK access=FILE_READ_ATTRIBUTES|SYNCHRONIZE|(directory?FILE_LIST_DIRECTORY:FILE_READ_DATA);
+  const NTSTATUS status=nt(&next,access,&oa,&ios,nullptr,FILE_ATTRIBUTE_NORMAL,
+    FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,kFileOpen,options,nullptr,0);
+  if(status<0||next==nullptr)fail("nt_open_component_refused",3);
+  handles.push_back(next);
+  if(!noReparse(next))fail("component_reparse_or_unverified",4);
+  FILE_ID_INFO id{};if(!fileIdentity(next,id))fail("component_identity_unavailable",5);
+  parent=next;
+ }
+ const HANDLE leaf=handles.back();
+ LARGE_INTEGER size{};
+ if(!GetFileSizeEx(leaf,&size)||size.QuadPart<0)fail("file_size_unavailable");
+ std::printf("R197_NATIVE_HANDLE_RELATIVE_OPEN_PASS bytes=%llu components=%llu\n",
+   static_cast<unsigned long long>(size.QuadPart),
+   static_cast<unsigned long long>(handles.size()));
+ for(auto it=handles.rbegin();it!=handles.rend();++it)CloseHandle(*it);
+ CloseHandle(rootHandle);
+ return 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.72",
+  "version": "0.15.75",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -9,6 +9,8 @@
   },
   "scripts": {
     "test": "node --test --test-concurrency=4 test/*.test.mjs",
+    "r195:focused:test": "node --test test/r195-canonical-owner-observation.test.mjs test/r193-owner-enrollment-entrypoint.test.mjs test/r193-owner-uac-broker.test.mjs test/r193-owner-uac-entrypoint.test.mjs test/r186-owner-enrollment.test.mjs test/r188-owner-uac.test.mjs",
+    "r206:focused:test": "node --test --test-concurrency=1 test/r205-candidate-selection.test.mjs test/r205-candidate-selection-cli.test.mjs test/r206-candidate-evidence.test.mjs test/r206-release-contract.test.mjs test/r195-canonical-owner-observation.test.mjs",
     "manifest:write": "node scripts/release-manifest.mjs write",
     "manifest:verify": "node scripts/release-manifest.mjs verify",
     "r41:parent:verify": "node scripts/verify-r41-parent.mjs",
@@ -95,7 +97,7 @@
     "r67:shard:run": "node scripts/r67-regression-shard-run.mjs",
     "r67:shard:verify": "node scripts/r67-regression-reconcile.mjs",
     "r167:focused:test": "node --test --test-concurrency=1 test/r167-activation-path.test.mjs test/r167-release-contract.test.mjs test/r167-release-readiness.test.mjs test/r160-release-contract.test.mjs test/r158-epoch-bootstrap.test.mjs test/r65-activation-orchestration.test.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r168.ps1 -Stage all",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r206.ps1 -Stage all",
     "r168:focused:test": "node test/r168-combined-targeted-runner.mjs",
     "r168:release:verify": "node scripts/npm-release-r48.mjs --verify-only",
     "r172:focused:test": "node --test --test-concurrency=1 test/r172-activation-recovery.test.mjs test/r172-release-contract.test.mjs test/r169-delegate-active.test.mjs test/r169-delegate-cli-integration.test.mjs test/r65-activation-lock-recovery.test.mjs test/r65-activation-orchestration.test.mjs",

package/scripts/build-native-desktop-uia-r199-fixed.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-desktop-uia-r199.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-desktop-uia-r199-fixed.exe'
+$obj=Join-Path $bin 'deadbyte-desktop-uia-r199-fixed.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" user32.lib ole32.lib oleaut32.lib uiautomationcore.lib /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/build-native-desktop-uia-r199.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-desktop-uia-r199.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-desktop-uia-r199.exe'
+$obj=Join-Path $bin 'deadbyte-desktop-uia-r199.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" user32.lib ole32.lib oleaut32.lib uiautomationcore.lib /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/build-native-fs-read-r197-fixed.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-fs-read-r197.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-fs-read-r197-fixed.exe'
+$obj=Join-Path $bin 'deadbyte-fs-read-r197-fixed.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/build-native-fs-read-r197.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-fs-read-r197.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-fs-read-r197.exe'
+$obj=Join-Path $bin 'deadbyte-fs-read-r197.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/build-native-fs-read-r198.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-fs-read-r198.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-fs-read-r198.exe'
+$obj=Join-Path $bin 'deadbyte-fs-read-r198.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/build-native-root-probe-r197.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-root-relative-probe-r197.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-root-relative-probe-r197.exe'
+$obj=Join-Path $bin 'deadbyte-root-relative-probe-r197.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)