deadbyte-mcp 0.8.7

package/proof/TARGET-V042-CONTAINED-CREATEPROCESS-203.txt

@@ -0,0 +1,313 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm install
+
+added 14 packages, and audited 15 packages in 1s
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm test
+
+> deadbyte-mcp@0.4.2 test
+> node --test test/*.test.mjs
+
+✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (4.6555ms)
+✔ contained executor rejects a launcher-reported truncated stdin import (0.7686ms)
+✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.9263ms)
+✔ AppContainer worker receives a fresh system-only environment block and fixed application path (0.8998ms)
+✔ contained execution validator accepts the complete fixed-transform invariant set (0.6195ms)
+✔ contained execution validator rejects any granted capability (0.5072ms)
+✔ contained execution validator rejects host workspace mounting (0.2223ms)
+✔ contained execution validator rejects non-atomic Job assignment (0.1699ms)
+✔ contained execution validator rejects normal child payload execution (0.192ms)
+✔ contained execution validator rejects explicit breakaway payload execution (0.3463ms)
+✔ contained execution validator rejects a non-AppContainer worker (0.2107ms)
+✔ contained execution source has a fixed worker and no user executable parameter (2.3277ms)
+✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.596ms)
+✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (1.9ms)
+✔ native build produces the contained launcher and worker with static runtime (0.7916ms)
+✔ receipt and verifier bind contained worker, launcher and independent transform semantics (0.9537ms)
+✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.4923ms)
+✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (23.2488ms)
+✔ containment result validator accepts the complete LPAC invariant set (1.3783ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.1594ms)
+✔ containment result validator refuses mode confusion (0.4309ms)
+✔ containment result validator rejects a readable host canary (0.1749ms)
+✔ containment result validator rejects any granted capability (0.1635ms)
+✔ containment result validator rejects child payload execution (0.1027ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1451ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1469ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.2723ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.2558ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1303ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.0963ms)
+✔ containment result validator rejects missing Job assignment (0.0974ms)
+✔ containment result validator rejects timeout (0.1012ms)
+✔ containment result validator rejects non-atomic Job assignment (0.1512ms)
+✔ containment result validator rejects enabled breakaway (0.2591ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.1006ms)
+✔ containment result validator rejects breakaway child payload execution (0.0879ms)
+✔ containment result validator rejects a filesystem result channel (0.0513ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (7.4692ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.6882ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.6548ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.8781ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.5896ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.4936ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.9341ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.4861ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.1506ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.7318ms)
+✔ native LPAC probe uses the static MSVC runtime (0.9963ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5553ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.4257ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.7514ms)
+✔ native build links bootstrap probes without default CRT libraries (0.3851ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.4098ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (0.469ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (1.2184ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.6604ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5198ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5925ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.4917ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.4997ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.64ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.4681ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7723ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.4531ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.5888ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.4268ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4061ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.425ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.4601ms)
+✔ package exposes explicit child-control diagnostic gate (0.6412ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (1.051ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.4221ms)
+✔ path traversal is denied (11.9068ms)
+✔ absolute path is denied (4.1232ms)
+✔ symlink escape is denied where symlinks are permitted (5.1522ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (56.5846ms)
+✔ independent verifier process accepts valid signed evidence (108.7812ms)
+✔ input source may change later because receipt preserves exact input snapshot (52.6255ms)
+✔ tampered output fails independent verification (53.309ms)
+✔ tampered input snapshot fails independent verification (46.9936ms)
+✔ tampered receipt fails its canonical self hash (45.4897ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (46.1839ms)
+✔ wrong public key cannot verify receipt (54.794ms)
+✔ signing key inside workspace is denied (4.6371ms)
+✔ proof execution refuses to run without a signing key (2.8731ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.0354ms)
+✔ pre-existing output is denied instead of overwritten (5.2524ms)
+✔ output parent symlink escape is denied (4.07ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (93.4433ms)
+ℹ tests 89
+ℹ suites 0
+ℹ pass 89
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 682.6048
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run mcp:smoke
+
+> deadbyte-mcp@0.4.2 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "contained_transform",
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.8f711191791cfff0.txt",
+  "receipt_path": "evidence/b1729f67ce79895675cc0d35.json",
+  "receipt_sha256": "b034f80ec49a60facc0380dd609eeab7bb6ef96b09c1d859f8d7554bd62817d3",
+  "key_id": "b0168e933bf0f425fdf7c454a40159b96dc7bc606e02c99bd33fefa19bb2f9c2",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run containment:build
+
+> deadbyte-mcp@0.4.2 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== contained-launcher ====
+deadbyte-exec.cpp
+==== contained-worker ====
+contained-transform-worker.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       15000 .rdata
+        1000 .reloc
+       32000 .text
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "6deb8509931879f9e8d5d76c36928c0c20c3d4364065b3380a83401e62d0aa3c",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\containment-probe.exe",
+    "probe_sha256":  "0286335d7a1b6649674d5a0cd5bc6343c30412eeb4579b1418ce437a9aa6a666",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "0be10e94a0811f62ddeb3ff49232f16d5b5543e841a624d02bf5f4da73277349",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "39b634499c1504449b59d3b69af2151d7bbca612412b252167130452b0f7fb74",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "3f11437f60c91d958e3b509d0a8f52537dc8cb396e3a4d70824d2ac821559a49",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "ae91ed0db6dbf2583a9a95181e6c072014cfcad49038d244799cb182137df199",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "3d1b2a530a67ad9a76343790599d7a1e48a72e570e2e8986058c465b8e9c7dd0",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "46a9f1e675559df05bb666ee21e7072408830dae34ffc31dc520308d05ebce9f",
+    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\deadbyte-exec.exe",
+    "contained_launcher_sha256":  "5530ff874d6cc043a9b1aec59b560f49668e0d76fa1b469382c300eabc3def6d",
+    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.2\\bin\\contained-transform-worker.exe",
+    "contained_worker_sha256":  "a702636cb3cd1ed5cf5c0d45932e06060ee9ffa95abe5f03b9379497eb8bbacb"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run containment:smoke
+
+> deadbyte-mcp@0.4.2 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-1321684642-2074996142-4248510418-2585171621-1234962619-2583030610-2681527041",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run contained:smoke
+
+> deadbyte-mcp@0.4.2 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/contained-executor.mjs:113:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run mcp:contained:smoke
+
+> deadbyte-mcp@0.4.2 mcp:contained:smoke
+> node src/mcp-contained-smoke-client.mjs
+
+Error: contained_transform returned tool error: {"status":"failed","error":"Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203\r\n"}
+    at structured (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/mcp-contained-smoke-client.mjs:40:29)
+    at file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/mcp-contained-smoke-client.mjs:50:21
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2> npm run contained:smoke
+
+> deadbyte-mcp@0.4.2 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/contained-executor.mjs:113:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.2/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.2>

package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.sha256

@@ -0,0 +1 @@
+2e409175735281af0cb5ed131b40864b1acea222b31306ee5b1753e2fde6ccbe  TARGET-V043-CONTAINED-CREATEPROCESS-203.txt

package/proof/TARGET-V043-CONTAINED-CREATEPROCESS-203.txt

@@ -0,0 +1,308 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm install
+
+added 14 packages, and audited 15 packages in 1s
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm test
+
+> deadbyte-mcp@0.4.3 test
+> node --test test/*.test.mjs
+
+✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (5.4319ms)
+✔ contained executor rejects a launcher-reported truncated stdin import (1.0251ms)
+✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.8456ms)
+✔ AppContainer worker receives a system-only environment with required drive current-directory state (0.8743ms)
+✔ contained execution validator rejects a missing drive-current-directory environment entry (0.8743ms)
+✔ contained execution validator accepts the complete fixed-transform invariant set (0.2341ms)
+✔ contained execution validator rejects any granted capability (0.1682ms)
+✔ contained execution validator rejects host workspace mounting (0.1684ms)
+✔ contained execution validator rejects non-atomic Job assignment (0.2669ms)
+✔ contained execution validator rejects normal child payload execution (0.2821ms)
+✔ contained execution validator rejects explicit breakaway payload execution (0.1697ms)
+✔ contained execution validator rejects a non-AppContainer worker (0.1339ms)
+✔ contained execution source has a fixed worker and no user executable parameter (2.3621ms)
+✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (1.7972ms)
+✔ contained worker rechecks AppContainer, zero capabilities, canaries, Job and child denial (0.6162ms)
+✔ native build produces the contained launcher and worker with static runtime (0.7086ms)
+✔ receipt and verifier bind contained worker, launcher and independent transform semantics (0.9064ms)
+✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.6133ms)
+✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (25.9313ms)
+✔ containment result validator accepts the complete LPAC invariant set (1.6716ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.1898ms)
+✔ containment result validator refuses mode confusion (1.5841ms)
+✔ containment result validator rejects a readable host canary (0.2636ms)
+✔ containment result validator rejects any granted capability (0.2202ms)
+✔ containment result validator rejects child payload execution (0.1244ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1262ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1007ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1856ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.4554ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1703ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.0892ms)
+✔ containment result validator rejects missing Job assignment (0.1213ms)
+✔ containment result validator rejects timeout (0.124ms)
+✔ containment result validator rejects non-atomic Job assignment (0.1196ms)
+✔ containment result validator rejects enabled breakaway (0.1422ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.0935ms)
+✔ containment result validator rejects breakaway child payload execution (0.08ms)
+✔ containment result validator rejects a filesystem result channel (0.0646ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.8489ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.7715ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.6833ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.627ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.6943ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.6746ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (0.8285ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5148ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.202ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.7512ms)
+✔ native LPAC probe uses the static MSVC runtime (0.6861ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.5932ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.6052ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.7661ms)
+✔ native build links bootstrap probes without default CRT libraries (0.6468ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.6423ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.1803ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.4985ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.6689ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5668ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.5623ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.4942ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.5366ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.7905ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.5078ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7142ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.5582ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.6242ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.5991ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.4297ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.4484ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.5368ms)
+✔ package exposes explicit child-control diagnostic gate (1.3995ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (0.4495ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.4233ms)
+✔ path traversal is denied (11.8703ms)
+✔ absolute path is denied (4.0994ms)
+✔ symlink escape is denied where symlinks are permitted (5.7643ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (61.3255ms)
+✔ independent verifier process accepts valid signed evidence (98.0863ms)
+✔ input source may change later because receipt preserves exact input snapshot (50.9168ms)
+✔ tampered output fails independent verification (52.6432ms)
+✔ tampered input snapshot fails independent verification (52.9905ms)
+✔ tampered receipt fails its canonical self hash (47.9699ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (49.6513ms)
+✔ wrong public key cannot verify receipt (52.5751ms)
+✔ signing key inside workspace is denied (4.6819ms)
+✔ proof execution refuses to run without a signing key (2.715ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.0557ms)
+✔ pre-existing output is denied instead of overwritten (5.659ms)
+✔ output parent symlink escape is denied (3.5507ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (96.263ms)
+ℹ tests 90
+ℹ suites 0
+ℹ pass 90
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 689.3161
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run mcp:smoke
+
+> deadbyte-mcp@0.4.3 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "contained_transform",
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.5e2ae748ed933037.txt",
+  "receipt_path": "evidence/94a8edf57cd6ee0b51236119.json",
+  "receipt_sha256": "9d3f59f0cf4a008f6ce8dac6d3fd83a9d3558efee43986fe38ba89efc69045c8",
+  "key_id": "e3fe2b6d454faffe14ae0292b94d5b9f3339a2a3da3f8f12eafac37ea49b8422",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run containment:build
+
+> deadbyte-mcp@0.4.3 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== contained-launcher ====
+deadbyte-exec.cpp
+==== contained-worker ====
+contained-transform-worker.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       15000 .rdata
+        1000 .reloc
+       34000 .text
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "91c01d56070c8a0ab6e0511324fda498dfd313d7d02f569906787c6d5cd469d0",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\containment-probe.exe",
+    "probe_sha256":  "a81ac82ff06f7c554c892b58b58fde850b8fc556258f03b501347e93aede8562",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "39b43aa4456248d4cb5cafca4b4ec2af64074abb368b8e9a689a4498a519505f",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "2874f5bade5a13028663f3afad231ee5c2403e5806e0a2cb1ae0982886de4775",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "5a61c5fe2ee9bd5ecf8e0884dcb32b7ba524b686fff2847c763282966667d4ce",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "fd34b704fbe44b3ac1867397e9a7bbad1fecef7600e57a04dc9211fccaaad5ef",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "1c5c3cf61588eebad8420b75c86b4f63cff61765ce38b575755f03bac92df38e",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "0f6552995a28663ca174c868437ec51b6929117e706f28359c7f87a9595609af",
+    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\deadbyte-exec.exe",
+    "contained_launcher_sha256":  "3e8e44ae102739728391e16458d73138250f03a5f0c60c689c86ffd312facf83",
+    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.3\\bin\\contained-transform-worker.exe",
+    "contained_worker_sha256":  "7fb76b5d6ac7b5851ca77d531e1cac031e0b073525997317e7ec5d8feb08c5c5"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run containment:smoke
+
+> deadbyte-mcp@0.4.3 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-4079645820-1835825969-3864193502-642071751-1167754026-2635131216-1769158405",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run contained:smoke
+
+> deadbyte-mcp@0.4.3 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/contained-executor.mjs:113:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run mcp:contained:smoke
+
+> deadbyte-mcp@0.4.3 mcp:contained:smoke
+> node src/mcp-contained-smoke-client.mjs
+
+Error: contained_transform returned tool error: {"status":"failed","error":"Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203\r\n"}
+    at structured (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/mcp-contained-smoke-client.mjs:40:29)
+    at file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/mcp-contained-smoke-client.mjs:50:21
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3> npm run contained:smoke
+
+> deadbyte-mcp@0.4.3 contained:smoke
+> node src/contained-smoke.mjs
+
+Error: contained launcher returned non-JSON: exit=1 stderr=deadbyte-exec: CreateProcessW(contained worker) failed with Win32 error 203
+
+    at executeContainedTransform (file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/contained-executor.mjs:113:11)
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    at async file:///C:/Users/DEADBYTE/Downloads/deadbyte-mcp-v0.4.3/src/contained-smoke.mjs:21:18
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.3>

package/proof/TARGET-V044-CONTAINED-PASS.sha256

@@ -0,0 +1 @@
+e1469419672d359c5570193f7e317a93afc95e7ab596aa696c1c9917e7f8c277  TARGET-V044-CONTAINED-PASS.txt