deadbyte-mcp 0.8.7

package/proof/TARGET-V040-CONTAINED-IPC-FAIL.txt

@@ -0,0 +1,299 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm install
+
+added 14 packages, and audited 15 packages in 973ms
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm test
+
+> deadbyte-mcp@0.4.0 test
+> node --test test/*.test.mjs
+
+✔ contained execution validator accepts the complete fixed-transform invariant set (1.0405ms)
+✔ contained execution validator rejects any granted capability (0.33ms)
+✔ contained execution validator rejects host workspace mounting (0.1127ms)
+✔ contained execution validator rejects non-atomic Job assignment (0.0922ms)
+✔ contained execution validator rejects normal child payload execution (0.2113ms)
+✔ contained execution validator rejects explicit breakaway payload execution (0.1384ms)
+✔ contained execution validator rejects a non-AppContainer worker (0.1445ms)
+✔ contained execution source has a fixed worker and no user executable parameter (5.452ms)
+✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.9421ms)
+✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (0.9785ms)
+✔ native build produces the contained launcher and worker with static runtime (0.6972ms)
+✔ receipt and verifier bind contained worker, launcher and independent transform semantics (0.929ms)
+✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.4954ms)
+✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (25.4912ms)
+✔ containment result validator accepts the complete LPAC invariant set (1.1333ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.7785ms)
+✔ containment result validator refuses mode confusion (0.3496ms)
+✔ containment result validator rejects a readable host canary (0.1341ms)
+✔ containment result validator rejects any granted capability (0.1234ms)
+✔ containment result validator rejects child payload execution (0.0944ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.0963ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1418ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.2118ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1865ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1162ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.0841ms)
+✔ containment result validator rejects missing Job assignment (0.102ms)
+✔ containment result validator rejects timeout (0.0658ms)
+✔ containment result validator rejects non-atomic Job assignment (0.0768ms)
+✔ containment result validator rejects enabled breakaway (0.0892ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.078ms)
+✔ containment result validator rejects breakaway child payload execution (0.0781ms)
+✔ containment result validator rejects a filesystem result channel (0.0486ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (8.7156ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.7407ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.6199ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.5016ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.4823ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.3948ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.7725ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5691ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.171ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.727ms)
+✔ native LPAC probe uses the static MSVC runtime (0.5928ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5578ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.4951ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.7401ms)
+✔ native build links bootstrap probes without default CRT libraries (0.4262ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.4306ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.0705ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.4906ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.6556ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5441ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.4965ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.522ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.6127ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.7821ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.5864ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7599ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.7119ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.5981ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.5168ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4544ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.5053ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.5331ms)
+✔ package exposes explicit child-control diagnostic gate (1.3969ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (0.5676ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.5785ms)
+✔ path traversal is denied (10.1486ms)
+✔ absolute path is denied (3.3738ms)
+✔ symlink escape is denied where symlinks are permitted (5.3296ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (59.5329ms)
+✔ independent verifier process accepts valid signed evidence (91.9041ms)
+✔ input source may change later because receipt preserves exact input snapshot (47.68ms)
+✔ tampered output fails independent verification (53.4178ms)
+✔ tampered input snapshot fails independent verification (48.9709ms)
+✔ tampered receipt fails its canonical self hash (49.5494ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (48.7602ms)
+✔ wrong public key cannot verify receipt (47.9595ms)
+✔ signing key inside workspace is denied (4.6941ms)
+✔ proof execution refuses to run without a signing key (2.3066ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.7202ms)
+✔ pre-existing output is denied instead of overwritten (4.4867ms)
+✔ output parent symlink escape is denied (3.7807ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (90.4606ms)
+ℹ tests 85
+ℹ suites 0
+ℹ pass 85
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 657.5959
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm run mcp:smoke
+
+> deadbyte-mcp@0.4.0 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "contained_transform",
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.0424fcc92abb0aa3.txt",
+  "receipt_path": "evidence/21facc370cd7c77a533f4ef1.json",
+  "receipt_sha256": "bd513e05d2eb094e8fe61acc968fdc1bfe913abb563a1e8b39c14ba21319600c",
+  "key_id": "7c3f9c8d63b8d47abc0f02bfb9109303bc9958ba151a142289e97a9afad74c06",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm run containment:build
+
+> deadbyte-mcp@0.4.0 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== contained-launcher ====
+deadbyte-exec.cpp
+==== contained-worker ====
+contained-transform-worker.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       15000 .rdata
+        1000 .reloc
+       32000 .text
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "fa9ffaafd38e1c2f942c51699b3c289247f6040f01b2c4e6a56c00a8278ce751",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\containment-probe.exe",
+    "probe_sha256":  "ff2b0b05e5a753af97281d43ba106ce37a6d1b8d6c65841852cb3a66f9b08afc",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "f0538a8b599059de93cea12c9605c66e73e2ceadc52557e4f01d6404da133fb3",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "8243284db095be3a79d0ddb064b86059b2b7a7503514c3da5a224e3aa934b88d",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "e9015b85c9f9d64035477dc0c0890272aca3f8b662b7e36a4a9649213010ff19",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "3aed2c6f9d42c8d9cbbb890b49883e494d92c65cb279bd5653fde245ac32c841",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "06d1a30522bf96fd1eba3e2ac3999e02923b51a87ea9c5f48763606a50c2ab89",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "91c78254c620cdf4d0d69ad763731276e0819eb62e0a72aa6ac1f2592a7cfa6a",
+    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\deadbyte-exec.exe",
+    "contained_launcher_sha256":  "f81e839928acf7512d20f846f8343308256f0b8e12ec3a8f670bc9977128ab29",
+    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.0\\bin\\contained-transform-worker.exe",
+    "contained_worker_sha256":  "ceb557f151583dab8e33d3bbb753e4e979ac40315b7781cae75620c2e2bf2ae2"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm run containment:smoke
+
+> deadbyte-mcp@0.4.0 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-2660424875-4033107904-3243340810-432946595-3582952064-234252354-3281341798",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm run contained:smoke
+
+> deadbyte-mcp@0.4.0 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: ReadFile(stdin) failed with Win32 error 109
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.0/src/contained-executor.mjs:120:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.0/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0> npm run mcp:contained:smoke
+
+> deadbyte-mcp@0.4.0 mcp:contained:smoke
+> node src/mcp-contained-smoke-client.mjs
+
+Error: contained_transform returned tool error: {"status":"failed","error":"Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: ReadFile(stdin) failed with Win32 error 109\r\n"}
+    at structured (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.0/src/mcp-contained-smoke-client.mjs:40:29)
+    at file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.0/src/mcp-contained-smoke-client.mjs:50:21
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.0>

package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.sha256

@@ -0,0 +1 @@
+9c03e68e0855b65282f1506d7bd2c6152b411989f1176f6971907a628a4907e6  TARGET-V041-CONTAINED-CREATEPROCESS-203.txt

package/proof/TARGET-V041-CONTAINED-CREATEPROCESS-203.txt

@@ -0,0 +1,311 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm install
+
+added 14 packages, and audited 15 packages in 1s
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm test
+
+> deadbyte-mcp@0.4.1 test
+> node --test test/*.test.mjs
+
+✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (6.0034ms)
+✔ contained executor rejects a launcher-reported truncated stdin import (0.9943ms)
+✔ contained execution validator accepts the complete fixed-transform invariant set (0.6058ms)
+✔ contained execution validator rejects any granted capability (0.4778ms)
+✔ contained execution validator rejects host workspace mounting (0.2253ms)
+✔ contained execution validator rejects non-atomic Job assignment (0.1558ms)
+✔ contained execution validator rejects normal child payload execution (0.1988ms)
+✔ contained execution validator rejects explicit breakaway payload execution (0.221ms)
+✔ contained execution validator rejects a non-AppContainer worker (0.2568ms)
+✔ contained execution source has a fixed worker and no user executable parameter (2.6849ms)
+✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (3.9452ms)
+✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (1.0239ms)
+✔ native build produces the contained launcher and worker with static runtime (1.1982ms)
+✔ receipt and verifier bind contained worker, launcher and independent transform semantics (2.3131ms)
+✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.8298ms)
+✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (24.6162ms)
+✔ containment result validator accepts the complete LPAC invariant set (2.086ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.1247ms)
+✔ containment result validator refuses mode confusion (1.058ms)
+✔ containment result validator rejects a readable host canary (0.2545ms)
+✔ containment result validator rejects any granted capability (0.2204ms)
+✔ containment result validator rejects child payload execution (0.1658ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.2192ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1759ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.2577ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.3561ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.2201ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.1749ms)
+✔ containment result validator rejects missing Job assignment (0.1408ms)
+✔ containment result validator rejects timeout (0.1148ms)
+✔ containment result validator rejects non-atomic Job assignment (0.1225ms)
+✔ containment result validator rejects enabled breakaway (0.1032ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.087ms)
+✔ containment result validator rejects breakaway child payload execution (0.0866ms)
+✔ containment result validator rejects a filesystem result channel (0.0607ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (11.5157ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.8935ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.7653ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.6824ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.5976ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.4569ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.7331ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.501ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.1671ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.5378ms)
+✔ native LPAC probe uses the static MSVC runtime (0.702ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.4381ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.4233ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.8389ms)
+✔ native build links bootstrap probes without default CRT libraries (0.5316ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.5074ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.1095ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.4902ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.665ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5584ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.4985ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.5295ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.4586ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.7994ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.5128ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.6022ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.5035ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.6269ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.5703ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4392ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.5727ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.506ms)
+✔ package exposes explicit child-control diagnostic gate (1.3414ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (0.5547ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.4188ms)
+✔ path traversal is denied (12.9762ms)
+✔ absolute path is denied (3.5009ms)
+✔ symlink escape is denied where symlinks are permitted (4.9431ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (57.7247ms)
+✔ independent verifier process accepts valid signed evidence (96.3236ms)
+✔ input source may change later because receipt preserves exact input snapshot (49.0181ms)
+✔ tampered output fails independent verification (56.8016ms)
+✔ tampered input snapshot fails independent verification (53.1264ms)
+✔ tampered receipt fails its canonical self hash (60.8732ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (48.9883ms)
+✔ wrong public key cannot verify receipt (53.9235ms)
+✔ signing key inside workspace is denied (5.0497ms)
+✔ proof execution refuses to run without a signing key (2.9705ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.1178ms)
+✔ pre-existing output is denied instead of overwritten (4.7305ms)
+✔ output parent symlink escape is denied (3.6661ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (95.4227ms)
+ℹ tests 87
+ℹ suites 0
+ℹ pass 87
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 701.0165
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run mcp:smoke
+
+> deadbyte-mcp@0.4.1 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "contained_transform",
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.d33c86c7311acf39.txt",
+  "receipt_path": "evidence/7f1ab500c1c1f1a449900bed.json",
+  "receipt_sha256": "d7d667dad7e8f53e91618a9e33fbca170f89b379ee812dc6d6e4c2af0619ba9f",
+  "key_id": "abc6932f7e0b1f0449a32cb37b534300ca5a92b266d5c35c9d41437073a50399",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run containment:build
+
+> deadbyte-mcp@0.4.1 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== contained-launcher ====
+deadbyte-exec.cpp
+==== contained-worker ====
+contained-transform-worker.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       15000 .rdata
+        1000 .reloc
+       32000 .text
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "0843dd26446fcc72f74fe0db03a869ca7964e591fc407833e03415962066247f",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\containment-probe.exe",
+    "probe_sha256":  "adcc8ad049e7d17a90dc655c68a8310c57234e84d427a580b4ce04bc33ad92a6",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "5cc076e4cb7dc3fb0854fa9401fe526a75da95a0bcdc387ffc56a0380b2e8e2b",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "c14888ef174b987629ec8a12ad39936a34a50ba80e69b87945f46ef94aced39a",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "734915b9bb5c49d382b11b8580093a000991df8d0aa326e765abf648b7e650c3",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "16705a206901e82532401ce072ac31079a035c2120209a6d8a59bf118d241b89",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "868b7437a45b9ce5bb09b9c2e7d64e4194ccb13c68e670bda87eb85e0144191c",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "5c8f09896a6ae13e7c1e7f7102188925d395ffe40fec2f49182eedb1c21bc34f",
+    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\deadbyte-exec.exe",
+    "contained_launcher_sha256":  "b01be5f60296c3817ad3eb026dbdc421a2210f26088adc7c885794ced02c93f1",
+    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.1\\bin\\contained-transform-worker.exe",
+    "contained_worker_sha256":  "c5ac3f1a7baf981e188fee8de9160fdb0a1c3df7cbbdef014b11c5f819ea0567"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run containment:smoke
+
+> deadbyte-mcp@0.4.1 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-314905525-821367475-4169343514-2908973908-4008264484-3545532746-1266786354",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run contained:smoke
+
+> deadbyte-mcp@0.4.1 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/contained-executor.mjs:120:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run mcp:contained:smoke
+
+> deadbyte-mcp@0.4.1 mcp:contained:smoke
+> node src/mcp-contained-smoke-client.mjs
+
+Error: contained_transform returned tool error: {"status":"failed","error":"Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203\r\n"}
+    at structured (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/mcp-contained-smoke-client.mjs:40:29)
+    at file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/mcp-contained-smoke-client.mjs:50:21
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1> npm run contained:smoke
+
+> deadbyte-mcp@0.4.1 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/contained-executor.mjs:120:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.1/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.1>

package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.sha256

@@ -0,0 +1 @@
+029d3707d938e9c493e6f6532029ea19df26553ce4362b67ef49f4bbe72a3209  TARGET-V042-CONTAINED-CREATEPROCESS-203.txt