deadbyte-mcp 0.8.7

package/node_modules/zod/v4/package.json

@@ -0,0 +1,7 @@
+{ 
+  "type": "module",
+  "main": "./index.cjs",
+  "module": "./index.js",
+  "types": "./index.d.cts",
+  "sideEffects": false
+}

package/node_modules/zod/v4-mini/index.cjs

@@ -0,0 +1,32 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.z = void 0;
+const z = __importStar(require("../v4/mini/external.cjs"));
+exports.z = z;
+__exportStar(require("../v4/mini/external.cjs"), exports);

package/node_modules/zod/v4-mini/index.d.cts

@@ -0,0 +1,3 @@
+import * as z from "../v4/mini/external.cjs";
+export * from "../v4/mini/external.cjs";
+export { z };

package/node_modules/zod/v4-mini/index.d.ts

@@ -0,0 +1,3 @@
+import * as z from "../v4/mini/external.js";
+export * from "../v4/mini/external.js";
+export { z };

package/node_modules/zod/v4-mini/index.js

@@ -0,0 +1,3 @@
+import * as z from "../v4/mini/external.js";
+export * from "../v4/mini/external.js";
+export { z };

package/node_modules/zod/v4-mini/package.json

@@ -0,0 +1,7 @@
+{ 
+  "type": "module",
+  "main": "./index.cjs",
+  "module": "./index.js",
+  "types": "./index.d.cts",
+  "sideEffects": false
+}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "deadbyte-mcp",
+  "version": "0.8.7",
+  "private": false,
+  "type": "module",
+  "description": "Authenticated MCP machine-truth runtime with signed audit chain, immutable release slots, contained execution, coding/autonomous production authority, and npx-first remote control.",
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.mjs",
+    "manifest:write": "node scripts/release-manifest.mjs write",
+    "manifest:verify": "node scripts/release-manifest.mjs verify",
+    "self-update:runtime": "node scripts/runtime-self-update.mjs",
+    "self-update:deferred": "node scripts/deferred-slot-operation.mjs",
+    "release:parity": "node scripts/release-parity.mjs",
+    "release:final:write": "node scripts/final-closure.mjs",
+    "release:final:verify": "node scripts/final-closure-verify.mjs",
+    "proof": "node src/proof-cli.mjs workspaces/demo input.txt",
+    "verify": "node src/verifier-cli.mjs workspaces/demo evidence/latest.json",
+    "trust:init": "node src/trust-init.mjs",
+    "mcp": "node src/mcp-server.mjs",
+    "mcp:smoke": "node src/mcp-smoke-client.mjs",
+    "mcp:agent:smoke": "node --test test/agent-runtime.test.mjs test/agent-runtime-adversarial.test.mjs test/agent-runtime-crash.test.mjs test/agent-task-receipt.test.mjs",
+    "mcp:coding:smoke": "node --test test/coding-plane.test.mjs test/coding-plane-adversarial.test.mjs test/coding-runtime.test.mjs test/coding-crash.test.mjs",
+    "mcp:machine-fs:smoke": "node src/machine-fs-smoke-client.mjs",
+    "mcp:observation:smoke": "node src/observation-smoke-client.mjs",
+    "mcp:process:smoke": "node src/process-smoke-client.mjs",
+    "process:policy:refresh": "node scripts/refresh-process-policy.mjs",
+    "mcp:autonomous:smoke": "node --test test/autonomous-runtime.test.mjs test/autonomous-loop.test.mjs test/autonomous-adversarial.test.mjs test/autonomous-supervisor-integration.test.mjs test/native-diff.test.mjs",
+    "containment:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1",
+    "containment:smoke": "node src/containment-smoke.mjs appcontainer",
+    "containment:bootstrap": "node src/containment-bootstrap.mjs",
+    "containment:smoke:lpac": "node src/containment-smoke.mjs lpac",
+    "containment:smoke:appcontainer": "node src/containment-smoke.mjs appcontainer",
+    "containment:construction": "node src/containment-construction.mjs",
+    "containment:child-control": "node src/containment-child-control.mjs",
+    "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
+    "contained:smoke": "node src/contained-smoke.mjs",
+    "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows.ps1",
+    "authority:smoke": "node src/authority-smoke.mjs",
+    "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
+    "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
+    "host:policy:init": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-host-policy.ps1",
+    "mcp:remote:host:smoke": "node src/remote-mcp-host-smoke-client.mjs",
+    "mcp:remote:autonomous:smoke": "node src/remote-mcp-autonomous-smoke-client.mjs",
+    "mcp:tunnel-compat:smoke": "node src/tunnel-stdio-compat-smoke.mjs",
+    "audit:verify": "node src/deadbyte-cli.mjs audit verify",
+    "audit:status": "node src/deadbyte-cli.mjs audit status"
+  },
+  "bundleDependencies": [
+    "@modelcontextprotocol/server",
+    "@modelcontextprotocol/client",
+    "zod"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/server": "2.0.0",
+    "zod": "4.4.3",
+    "@modelcontextprotocol/client": "2.0.0"
+  },
+  "bin": {
+    "deadbyte-mcp": "src/deadbyte-cli.mjs"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/proof/CONTAINMENT-BUILD.txt

@@ -0,0 +1,163 @@
+==== launcher ====
+deadbyte-contain.cpp
+exit_code=0
+==== probe ====
+containment-probe.cpp
+exit_code=0
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+exit_code=0
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+exit_code=0
+==== construction-launcher ====
+appcontainer-stage.cpp
+exit_code=0
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+exit_code=0
+==== child-control-launcher ====
+child-control-stage.cpp
+exit_code=0
+==== child-control-probe ====
+child-control-probe.cpp
+exit_code=0
+==== contained-launcher ====
+deadbyte-exec.cpp
+exit_code=0
+==== contained-worker ====
+contained-transform-worker.cpp
+exit_code=0
+==== contained-reverse-worker ====
+contained-reverse-worker.cpp
+exit_code=0
+==== named-tunnel-host ====
+deadbyte-tunnel-host.cpp
+exit_code=0
+==== process-host ====
+deadbyte-process-host.cpp
+exit_code=0
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+exit_code=0
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    bcrypt.dll
+    WS2_32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       17000 .rdata
+        1000 .reloc
+       3B000 .text
+exit_code=0
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    WS2_32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        F000 .rdata
+        1000 .reloc
+       19000 .text
+exit_code=0
+==== contained-reverse-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\contained-reverse-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    WS2_32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        F000 .rdata
+        1000 .reloc
+       19000 .text
+exit_code=0
+==== named-tunnel-host-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-tunnel-host.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        C000 .rdata
+        1000 .reloc
+       18000 .text
+exit_code=0
+==== process-host-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-process-host.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        F000 .rdata
+        1000 .reloc
+       1C000 .text
+exit_code=0

package/proof/MCP-SMOKE-STATUS.txt

@@ -0,0 +1,9 @@
+DEADBYTE MCP V0.6.0 MCP LIVE SMOKE
+STATUS=PASS
+PROTOCOL_REVISION=2026-07-28
+PROTOCOL_ERA=modern
+TOOLS=contained_transform,evidence_verify,file_read,proof_execute,workspace_open
+SIGNATURE_ALGORITHM=ed25519
+SIGNATURE_VALID=true
+INDEPENDENT_VERIFY=true
+OUTPUT_SHA256=72562501a654ddbb4f8810f8ba9017d02b29516853101456445e7642988fbd1b

package/proof/NODE-SYNTAX.txt

@@ -0,0 +1,4 @@
+DEADBYTE_MCP_VERSION=0.7.3
+NODE_SYNTAX_FILES=44
+NODE_SYNTAX_PASS=44
+NODE_SYNTAX_FAIL=0

package/proof/PROOF.txt

@@ -0,0 +1,6 @@
+DEADBYTE MCP V0.6.0 SIGNED PROOF REGRESSION
+STATUS=PASS
+RECEIPT_SHA256=5bc4f1ace478b79fc491811888b039ebffb72d09f7cd51f520f6569a0cc3d0d4
+KEY_ID=64ee8445e138c19a2049dc4242924d056f2b62913ed65364916413eb684a946e
+SIGNATURE_ALGORITHM=ed25519
+OUTPUT_SHA256=72562501a654ddbb4f8810f8ba9017d02b29516853101456445e7642988fbd1b

package/proof/SECRET-SCAN.txt

@@ -0,0 +1,4 @@
+DEADBYTE_MCP_VERSION=0.7.3
+RESULT=PASS
+No private-key material, MCP secret path literal, node_modules, shell:true, broad taskkill-by-image, or Stop-Process -Name occurs in the source package.
+The tunnel stdio compatibility adapter imports no child_process API and performs no file write.

package/proof/SOURCE-GATES.txt

@@ -0,0 +1,16 @@
+DEADBYTE MCP V0.7.3 SOURCE/ADVERSARIAL GATES
+TESTS=142
+PASS=142
+FAIL=0
+TUNNEL_STDIO_COMPAT_TESTS=10_10_PASS
+NODE_SYNTAX=PASS_44_44
+PROTOCOL_REVISION=2026-07-28
+STRICT_SDK_LEGACY_POLICY=reject
+TUNNEL_STARTUP_PROBE_COMPAT=SOURCE_PASS_TARGET_PENDING
+LEGACY_CAPABILITY_TRANSLATION=NONE
+SIGNED_PROOF_REGRESSION=PASS
+INDEPENDENT_VERIFIER_REGRESSION=PASS
+ACTIVE_NETWORK_SOURCE_GATES=PASS
+EXECUTION_AUTHORITY_SOURCE_GATES=PASS
+PRIVILEGED_HOST_PLANE_SOURCE_GATES=PASS
+WINDOWS_NATIVE_BATCH_GATE=PENDING_TARGET

package/proof/STATUS.txt

@@ -0,0 +1,11 @@
+DEADBYTE MCP V0.7.3
+SOURCE_TESTS=PASS_142_142
+TUNNEL_STDIO_COMPAT=SOURCE_PASS_TARGET_PENDING
+MCP_PROTOCOL=2026-07-28
+STRICT_CORE_LEGACY=REJECT
+LEGACY_STARTUP_PROBE_ADAPTER=OPTIONAL_NARROW_PREFILTER
+LEGACY_CAPABILITY_TRANSLATION=NONE
+PRIVILEGED_HOST_PLANE=LOCAL_POLICY_PLUS_EXPIRING_ARM_LEASE
+GENERAL_UNBOUNDED_COMMAND_EXECUTION=NOT_EXPOSED
+WINDOWS_BATCH_GATE=PENDING_TARGET
+PUBLIC_TUNNEL_GATE=PENDING_TARGET

package/proof/TARGET-V0313-CONTAINMENT-PASS.sha256

@@ -0,0 +1 @@
+e6a8f91b62b5fdb861ee039ae05a9c3572535d16608297ec75c6440e5ea6d20d  TARGET-V0313-CONTAINMENT-PASS.txt

package/proof/TARGET-V0313-CONTAINMENT-PASS.txt

@@ -0,0 +1,215 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm install
+
+added 14 packages, and audited 15 packages in 963ms
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm test
+
+> deadbyte-mcp@0.3.13 test
+> node --test test/*.test.mjs
+
+✔ containment result validator accepts the complete LPAC invariant set (1.1396ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.6282ms)
+✔ containment result validator refuses mode confusion (0.3449ms)
+✔ containment result validator rejects a readable host canary (0.1322ms)
+✔ containment result validator rejects any granted capability (0.1238ms)
+✔ containment result validator rejects child payload execution (0.0892ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.104ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.089ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1262ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1888ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1078ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.0746ms)
+✔ containment result validator rejects missing Job assignment (0.0842ms)
+✔ containment result validator rejects timeout (0.0505ms)
+✔ containment result validator rejects non-atomic Job assignment (0.0615ms)
+✔ containment result validator rejects enabled breakaway (0.0772ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.0735ms)
+✔ containment result validator rejects breakaway child payload execution (0.071ms)
+✔ containment result validator rejects a filesystem result channel (0.0446ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.3153ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.6526ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5487ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.4706ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.6161ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.4779ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.7954ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5384ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.1442ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.4933ms)
+✔ native LPAC probe uses the static MSVC runtime (0.6517ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5705ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.5297ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.7356ms)
+✔ native build links bootstrap probes without default CRT libraries (0.4126ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.6276ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (0.5048ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (1.0869ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.7696ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.6397ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5718ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.4928ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.5602ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.7124ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.5295ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7217ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.4939ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.5038ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.631ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4815ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.5638ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.6516ms)
+✔ package exposes explicit child-control diagnostic gate (0.7295ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (1.0875ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.4261ms)
+✔ path traversal is denied (10.1277ms)
+✔ absolute path is denied (3.7872ms)
+✔ symlink escape is denied where symlinks are permitted (4.8939ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (58.5685ms)
+✔ independent verifier process accepts valid signed evidence (95.0005ms)
+✔ input source may change later because receipt preserves exact input snapshot (49.4795ms)
+✔ tampered output fails independent verification (47.1297ms)
+✔ tampered input snapshot fails independent verification (48.5015ms)
+✔ tampered receipt fails its canonical self hash (46.4563ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (49.0947ms)
+✔ wrong public key cannot verify receipt (49.6119ms)
+✔ signing key inside workspace is denied (5.3598ms)
+✔ proof execution refuses to run without a signing key (3.8094ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.2646ms)
+✔ pre-existing output is denied instead of overwritten (5.0484ms)
+✔ output parent symlink escape is denied (3.84ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (90.0468ms)
+ℹ tests 71
+ℹ suites 0
+ℹ pass 71
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 652.2955
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run mcp:smoke
+
+> deadbyte-mcp@0.3.13 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.d0c35d88430ba1cd.txt",
+  "receipt_path": "evidence/bc785479d614eaf09585840a.json",
+  "receipt_sha256": "14c158c50e2a1fa94e179af2c8bfe23faf8a18d1c9f7010fa6bd97c80ef5006a",
+  "key_id": "482753a0e96d249a3b7131eae751b46bd50ed93299ff220c47cb8ef31a03ef1f",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run containment:build
+
+> deadbyte-mcp@0.3.13 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "c2cfd6aefb9cb0666293596021e66cff94e0874caecbc3d58ad3ac605a2960b5",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\containment-probe.exe",
+    "probe_sha256":  "caea20624c4313157c88e594f049592c38f6b60073b781a9f4774ad4b6116059",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "47c74d6e1280a77585ec79766f5a3290d1a65a63821ad69aa8dbd209d2a682b4",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "a15b81e08d2cb939e9ef73259176e7cd47b28598fb42ae160237ce7d973ad819",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "089fe97889b071afa60758ebd9b89664f3276124cf717460e0f7a77dde8e8be5",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "60988e03c38cfc580f7cb16bdd70e170f91f396f98f8cde3b739b7d2bdaf81fe",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "51d7237b8400efc23362778456aa0dccce486eb2aaeb34c61ea6c0b7cd3741ac",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.3.13\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "c99f1ce1e8e1c2dccd92e351a502831da773252685e56c03c3c49375dab49a77"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13> npm run containment:smoke
+
+> deadbyte-mcp@0.3.13 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-4111943323-3496647161-2835768962-2457042568-2197073676-23766261-1459042700",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.3.13>

package/proof/TARGET-V040-CONTAINED-IPC-FAIL.sha256

@@ -0,0 +1 @@
+8e14e29e28e0d1eaf50de4dc6c056976d664525c4be3307ec03a1cf0063ed180  TARGET-V040-CONTAINED-IPC-FAIL.txt