deadbyte-mcp 0.8.7

package/proof/TARGET-V046-FIXED-EXECUTABLE-REGISTRY-PASS.txt

@@ -0,0 +1,610 @@
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm install
+
+added 14 packages, and audited 15 packages in 1s
+
+2 packages are looking for funding
+  run `npm fund` for details
+
+found 0 vulnerabilities
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm test
+
+> deadbyte-mcp@0.4.6 test
+> node --test test/*.test.mjs
+
+✔ contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF (5.2831ms)
+✔ contained executor rejects a launcher-reported truncated stdin import (0.7205ms)
+✔ trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset (0.9016ms)
+✔ AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state (1.0704ms)
+✔ contained launcher reports the exact bootstrap environment policy in runtime evidence (0.6802ms)
+✔ contained execution validator rejects a missing LOCALAPPDATA bootstrap marker (0.7034ms)
+✔ contained execution validator rejects a non-exact worker environment allowlist (0.1537ms)
+✔ contained execution validator rejects a missing drive-current-directory environment entry (0.1235ms)
+✔ contained execution validator accepts the complete fixed-transform invariant set (0.2301ms)
+✔ contained execution validator rejects any granted capability (0.2198ms)
+✔ contained execution validator rejects host workspace mounting (0.1763ms)
+✔ contained execution validator rejects non-atomic Job assignment (0.1239ms)
+✔ contained execution validator rejects normal child payload execution (0.098ms)
+✔ contained execution validator rejects explicit breakaway payload execution (0.0678ms)
+✔ contained execution validator rejects a non-AppContainer worker (0.0666ms)
+✔ contained execution source has a compile-time worker registry and no user executable parameter (3.3251ms)
+✔ contained launcher imports by stdin/profile copy and never mounts a host workspace (0.8859ms)
+✔ contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial (1.0888ms)
+✔ native build produces the contained launcher and worker with static runtime (0.8502ms)
+✔ receipt and verifier bind contained worker, launcher and independent transform semantics (1.6842ms)
+✔ MCP protocol smoke expects the stable five-tool V0.4 catalog (0.8195ms)
+✔ contained receipt verifies fixed runtime hashes and independently recomputed transform semantics (26.2311ms)
+✔ contained operation registry accepts lowercase_ascii and rejects unknown operations (0.328ms)
+✔ native launcher uses a compile-time operation-to-executable registry (1.2498ms)
+✔ contained execution validator binds operation to fixed worker identity and executable (0.2404ms)
+✔ MCP contained_transform schema is a compile-time operation enum with no executable surface (0.5458ms)
+✔ contained receipt verifies lowercase_ascii semantics and rejects semantic tamper (14.8235ms)
+✔ contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper (14.7252ms)
+✔ containment result validator accepts the complete LPAC invariant set (1.2875ms)
+✔ containment result validator accepts the complete regular AppContainer invariant set (0.899ms)
+✔ containment result validator refuses mode confusion (0.3977ms)
+✔ containment result validator rejects a readable host canary (0.1605ms)
+✔ containment result validator rejects any granted capability (0.1368ms)
+✔ containment result validator rejects child payload execution (0.0996ms)
+✔ containment result validator rejects a non-LPAC token when LPAC is expected (0.1537ms)
+✔ containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode (0.1299ms)
+✔ containment result validator rejects LPAC when regular AppContainer is expected (0.1821ms)
+✔ containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails (0.1844ms)
+✔ containment result validator requires LPAC-specific token query for LPAC mode (0.1301ms)
+✔ containment result validator rejects LPAC that can read the AAP canary (0.0918ms)
+✔ containment result validator rejects missing Job assignment (0.1336ms)
+✔ containment result validator rejects timeout (0.096ms)
+✔ containment result validator rejects non-atomic Job assignment (0.1292ms)
+✔ containment result validator rejects enabled breakaway (0.1593ms)
+✔ containment result validator rejects the broken token child-policy mechanism (0.146ms)
+✔ containment result validator rejects breakaway child payload execution (0.1439ms)
+✔ containment result validator rejects a filesystem result channel (0.1666ms)
+✔ native launcher uses atomic Job assignment and excludes the broken child-policy attribute (9.5805ms)
+✔ native build script targets Windows 10 and preserves MSVC diagnostics (0.7849ms)
+✔ native build command composition is Windows PowerShell 5.1 parser-safe (0.5969ms)
+✔ native launcher link contract includes Ole32 for CoTaskMemFree (0.6326ms)
+✔ native probe link contract includes Advapi32 for token inspection APIs (0.6154ms)
+✔ native launcher narrows SID text only through explicit ASCII validation (0.715ms)
+✔ native result channel is an explicitly inherited one-way handle, not a result path grant (1.0342ms)
+✔ containment smoke preserves parseable failed measurements instead of discarding child exit evidence (0.5159ms)
+✔ containment validator reports the probe invariant before aggregate failed status (0.2213ms)
+✔ containment smoke includes the raw probe measurement on invariant failure (0.624ms)
+✔ native LPAC probe uses the static MSVC runtime (1.1127ms)
+✔ native build audits the probe for dynamic MSVC and UCRT dependencies (0.965ms)
+✔ native launcher preserves symbolic early-loader failure evidence (0.68ms)
+✔ native bootstrap probes have custom no-CRT entrypoints (0.9439ms)
+✔ native build links bootstrap probes without default CRT libraries (0.6135ms)
+✔ native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode (0.8019ms)
+✔ full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence (1.533ms)
+✔ full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure (0.5646ms)
+✔ full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence (0.6403ms)
+✔ bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities (0.5619ms)
+✔ package exposes separate LPAC and regular AppContainer smoke gates (0.6635ms)
+✔ construction ladder starts from Microsoft-style security-capabilities-only baseline (0.7046ms)
+✔ construction ladder adds containment mechanisms as isolated transitions (0.5918ms)
+✔ construction entrypoint probe is no-CRT and proves execution only through exit code 66 (0.8461ms)
+✔ construction diagnostic reports the first failing transition without fallback (0.5212ms)
+✔ construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW (0.7974ms)
+✔ construction diagnostic refuses to run when native build artifacts are missing (0.7547ms)
+✔ child-control matrix isolates policy, suspended start, delayed Job, and atomic Job (0.6317ms)
+✔ Job child-control candidate sets active process limit one and never enables breakaway (0.5331ms)
+✔ child-control hostile probe tests normal creation and explicit Job breakaway execution (0.415ms)
+✔ child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial (0.4767ms)
+✔ native build produces child-control launcher and hostile probe with MSVC (0.5133ms)
+✔ package exposes explicit child-control diagnostic gate (0.6115ms)
+✔ full containment probe verifies normal and explicit breakaway child payload denial (1.1768ms)
+✔ package default containment smoke targets the observed regular AppContainer baseline (0.5067ms)
+✔ path traversal is denied (12.019ms)
+✔ absolute path is denied (3.5821ms)
+✔ symlink escape is denied where symlinks are permitted (4.6492ms)
+✔ proof execution creates deterministic output and signed verifiable receipt (65.9119ms)
+✔ independent verifier process accepts valid signed evidence (116.8036ms)
+✔ input source may change later because receipt preserves exact input snapshot (50.1667ms)
+✔ tampered output fails independent verification (51.655ms)
+✔ tampered input snapshot fails independent verification (51.0799ms)
+✔ tampered receipt fails its canonical self hash (48.6574ms)
+✔ recomputed self hash cannot forge Ed25519 attestation (57.4348ms)
+✔ wrong public key cannot verify receipt (65.6433ms)
+✔ signing key inside workspace is denied (6.6654ms)
+✔ proof execution refuses to run without a signing key (2.7941ms)
+✔ trust key generation refuses to overwrite an existing keypair (2.1517ms)
+✔ pre-existing output is denied instead of overwritten (4.9526ms)
+✔ output parent symlink escape is denied (3.7766ms)
+✔ distinct output names allow repeated signed proofs without weakening no-overwrite (106.3125ms)
+ℹ tests 99
+ℹ suites 0
+ℹ pass 99
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 748.0267
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run mcp:smoke
+
+> deadbyte-mcp@0.4.6 mcp:smoke
+> node src/mcp-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tools": [
+    "contained_transform",
+    "evidence_verify",
+    "file_read",
+    "proof_execute",
+    "workspace_open"
+  ],
+  "workspace_id": "demo",
+  "output": "mcp-output.d610a649b2d437cb.txt",
+  "receipt_path": "evidence/4a5d5894af1a95e11b0f5c3c.json",
+  "receipt_sha256": "fcebd5fb08e69cc564cbfdc05155d91e65648ddc0cbfed25cb145376550b7d9d",
+  "key_id": "84ecbc6d3380c96f12da7f2b6de0208cd89cff46b2411f10ba610514bea1c68e",
+  "signature_algorithm": "ed25519",
+  "signature_valid": true,
+  "output_sha256": "f0d2e1eb388c253fd66bcf57e5e0bb32fc4e3d29146745b74ae7d0583fc72f07",
+  "independent_verify": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run containment:build
+
+> deadbyte-mcp@0.4.6 containment:build
+> powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1
+
+==== launcher ====
+deadbyte-contain.cpp
+==== probe ====
+containment-probe.cpp
+==== bootstrap-kernel32 ====
+bootstrap-kernel32.cpp
+==== bootstrap-advapi32 ====
+bootstrap-advapi32.cpp
+==== construction-launcher ====
+appcontainer-stage.cpp
+==== bootstrap-exitcode ====
+bootstrap-exitcode.cpp
+==== child-control-launcher ====
+child-control-stage.cpp
+==== child-control-probe ====
+child-control-probe.cpp
+==== contained-launcher ====
+deadbyte-exec.cpp
+==== contained-worker ====
+contained-transform-worker.cpp
+==== contained-reverse-worker ====
+contained-reverse-worker.cpp
+==== probe-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\containment-probe.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-launcher-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\deadbyte-exec.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    USERENV.dll
+    ADVAPI32.dll
+    ole32.dll
+    KERNEL32.dll
+
+  Summary
+
+        3000 .data
+        1000 .fptable
+        3000 .pdata
+       15000 .rdata
+        1000 .reloc
+       34000 .text
+==== contained-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\contained-transform-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+==== contained-reverse-worker-dependencies ====
+
+Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6\bin\contained-reverse-worker.exe
+
+File Type: EXECUTABLE IMAGE
+
+  Image has the following dependencies:
+
+    ADVAPI32.dll
+    KERNEL32.dll
+
+  Summary
+
+        2000 .data
+        1000 .fptable
+        2000 .pdata
+        E000 .rdata
+        1000 .reloc
+       19000 .text
+{
+    "status":  "built",
+    "compiler":  "msvc-x64",
+    "target":  "windows-10-or-newer",
+    "diagnostics":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\proof\\CONTAINMENT-BUILD.txt",
+    "launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\deadbyte-contain.exe",
+    "launcher_sha256":  "ebeb0db414fa7392cfb30e01350b0ed8399a53078a0b68c15ec38c436c91eab8",
+    "probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\containment-probe.exe",
+    "probe_sha256":  "8cfec49774ef33f83e84c6245de25da2f7fe944b58ed06ffea66b9326c360f24",
+    "probe_runtime":  "static-crt",
+    "probe_dynamic_crt_dependencies":  [
+
+                                       ],
+    "bootstrap_kernel32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-kernel32.exe",
+    "bootstrap_kernel32_sha256":  "504ff9e50294761a6a5da3152163a31875c7cbd640a0ceb8c26d107962a8617a",
+    "bootstrap_advapi32":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-advapi32.exe",
+    "bootstrap_advapi32_sha256":  "f7ff381bcc2963bd1c90004fe669bd218ac999b03666d5f02b828731aacd8265",
+    "construction_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\appcontainer-stage.exe",
+    "construction_launcher_sha256":  "cd6eca1c91a912bad8b133ed3e93b844901c98e9387e4b7bde2c781cef21462b",
+    "bootstrap_exitcode":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\bootstrap-exitcode.exe",
+    "bootstrap_exitcode_sha256":  "4b4bc26158757788bc7e25e50628e7c508641694f0fa89d5d67a06da1d1a03b4",
+    "child_control_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\child-control-stage.exe",
+    "child_control_launcher_sha256":  "15e05d24ee251f82b055eddd4e3b4f51f22dfc9bfb2333f597550f91a6d194e3",
+    "child_control_probe":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\child-control-probe.exe",
+    "child_control_probe_sha256":  "1b3b85752b8912944eff73af1c8de8052c71c80f37e83628e53df98c3302d1d2",
+    "contained_launcher":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\deadbyte-exec.exe",
+    "contained_launcher_sha256":  "c3dadbf3c45572415d46ea831f6af390344565efd711351db0ccfd892bcd7f0b",
+    "contained_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\contained-transform-worker.exe",
+    "contained_worker_sha256":  "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
+    "contained_reverse_worker":  "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-v0.4.6\\bin\\contained-reverse-worker.exe",
+    "contained_reverse_worker_sha256":  "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6"
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run containment:smoke
+
+> deadbyte-mcp@0.4.6 containment:smoke
+> node src/containment-smoke.mjs appcontainer
+
+{
+  "status": "passed",
+  "ok": true,
+  "backend": "windows-appcontainer",
+  "mode": "appcontainer",
+  "appcontainer_sid": "S-1-15-2-3037002961-168788534-3779512193-3498305703-1377439394-1742983008-666609610",
+  "lpac": false,
+  "lpac_token_query_available": false,
+  "aap_mode_evidence_ok": true,
+  "network_capabilities": 0,
+  "result_channel": "inherited-handle",
+  "outside_read_denied": true,
+  "child_process_denied": true,
+  "normal_child_execution_denied": true,
+  "breakaway_child_execution_denied": true,
+  "child_control": "job-active-process-limit",
+  "job_assignment": "atomic-attribute",
+  "job_breakaway_enabled": false,
+  "active_process_limit": 1,
+  "process_memory_limit_bytes": 134217728,
+  "profile_cleanup_ok": true
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run contained:smoke
+
+> deadbyte-mcp@0.4.6 contained:smoke
+> node src/contained-smoke.mjs
+
+{
+  "status": "passed",
+  "operations": [
+    {
+      "operation": "uppercase_ascii",
+      "output": "contained-smoke.uppercase_ascii.bfcf8e3a67492e5c.txt",
+      "receipt_path": "evidence/e23bee4434b47b44e1601d19.json",
+      "receipt_sha256": "f3dd0e135af52e15b59cd3a770ed19bf4f6daced22e08dea8edc548d018a3883",
+      "worker_id": "contained-transform-v1",
+      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
+      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "uppercase_ascii",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-transform-v1",
+        "worker_executable": "contained-transform-worker.exe",
+        "appcontainer_sid": "S-1-15-2-3361513552-850255976-3270837108-1073868726-2501196025-29207205-2766854847",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    },
+    {
+      "operation": "lowercase_ascii",
+      "output": "contained-smoke.lowercase_ascii.e9f98461a60732e9.txt",
+      "receipt_path": "evidence/9b825498378a0020e65d6eae.json",
+      "receipt_sha256": "6afaf958207d942074fa4be3d97713f39d4a9ec39378ee47e4890853a78f96c3",
+      "worker_id": "contained-transform-v1",
+      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
+      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "lowercase_ascii",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-transform-v1",
+        "worker_executable": "contained-transform-worker.exe",
+        "appcontainer_sid": "S-1-15-2-166109027-199659701-1458555881-1902884768-324104787-2207113977-495157982",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    },
+    {
+      "operation": "reverse_bytes",
+      "output": "contained-smoke.reverse_bytes.0d3f4180babdef4b.txt",
+      "receipt_path": "evidence/c50e99c366317cb698210343.json",
+      "receipt_sha256": "c411f22e1c79a8a07e3cfb1a23602bfa211cfc0ba45bd9460339f3ddf03da1f8",
+      "worker_id": "contained-reverse-v1",
+      "worker_sha256": "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6",
+      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "reverse_bytes",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-reverse-v1",
+        "worker_executable": "contained-reverse-worker.exe",
+        "appcontainer_sid": "S-1-15-2-147383832-3979116827-2910916169-3858969129-1397959439-1453272385-3671103684",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    }
+  ]
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6> npm run mcp:contained:smoke
+
+> deadbyte-mcp@0.4.6 mcp:contained:smoke
+> node src/mcp-contained-smoke-client.mjs
+
+{
+  "status": "passed",
+  "protocol_revision": "2026-07-28",
+  "protocol_era": "modern",
+  "tool": "contained_transform",
+  "operations": [
+    {
+      "operation": "uppercase_ascii",
+      "output": "mcp-contained.uppercase_ascii.480fb44b5299c695.txt",
+      "receipt_path": "evidence/463cbbf477dfc236be777b6b.json",
+      "receipt_sha256": "5ff90c4c4c400e1038b333e97d03d2252e274b2d9b77960ff24b8dfa7201008d",
+      "worker_id": "contained-transform-v1",
+      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
+      "output_sha256": "913f14afe546ccdbac841041256bb3a3be5795e5c062d30709d6d472470d67d5",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "uppercase_ascii",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-transform-v1",
+        "worker_executable": "contained-transform-worker.exe",
+        "appcontainer_sid": "S-1-15-2-1266155568-3035531915-1865381721-3985906965-3222987059-748956445-3255435853",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    },
+    {
+      "operation": "lowercase_ascii",
+      "output": "mcp-contained.lowercase_ascii.3b35c1f62aa1f0a7.txt",
+      "receipt_path": "evidence/9198b9fe5689a26011c94c52.json",
+      "receipt_sha256": "fc63840b53d68e0259758593712c4035fdf3a9f407e557070d9dcdae5d504844",
+      "worker_id": "contained-transform-v1",
+      "worker_sha256": "20b1f53d76157f7a6a9de31e910f322b6919217bc77071bfed0e47ad74ee00df",
+      "output_sha256": "ba0204b0f3a0e8af760840092b14ff4c363d53622b3d611e17ea5c83e9db06c5",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "lowercase_ascii",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-transform-v1",
+        "worker_executable": "contained-transform-worker.exe",
+        "appcontainer_sid": "S-1-15-2-234887472-568281919-3925671230-1286202595-550526470-3045920542-1114217493",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    },
+    {
+      "operation": "reverse_bytes",
+      "output": "mcp-contained.reverse_bytes.1fead296d0819dad.txt",
+      "receipt_path": "evidence/065a66be4a98f178e069c7f7.json",
+      "receipt_sha256": "d2adaff8d531ce23bb8b86d97640f4f53ceb4bbaf995f18a9eab8388928a531a",
+      "worker_id": "contained-reverse-v1",
+      "worker_sha256": "64a973e5b9df5c33e2a591a43187e311688d8ffd86cb387a3258b7df649410a6",
+      "output_sha256": "fe4d94ba0a06c3bc8ec97fad86ef346418f9526410c2a2ab93aa4bfbcd251a17",
+      "containment": {
+        "backend": "windows-appcontainer",
+        "mode": "appcontainer",
+        "operation": "reverse_bytes",
+        "worker_registry": "compile-time-operation-to-executable",
+        "worker_id": "contained-reverse-v1",
+        "worker_executable": "contained-reverse-worker.exe",
+        "appcontainer_sid": "S-1-15-2-539722223-1151481215-3092449872-1885096647-2808087802-1241436490-81186307",
+        "network_capabilities": 0,
+        "job_assignment": "atomic-attribute",
+        "job_breakaway_enabled": false,
+        "active_process_limit": 1,
+        "process_memory_limit_bytes": 134217728,
+        "child_control": "job-active-process-limit",
+        "import_transport": "host-stdin-to-profile-copy",
+        "export_transport": "profile-copy-to-host-json",
+        "workspace_mounted": false,
+        "worker_environment": "appcontainer-bootstrap-allowlist-plus-drive-cwd",
+        "worker_localappdata_present": true,
+        "worker_environment_allowlist_exact": true,
+        "worker_drive_current_directory_set": true,
+        "input_bytes": 33,
+        "output_bytes": 33,
+        "profile_cleanup_ok": true,
+        "proof": {
+          "token_is_appcontainer": true,
+          "capability_count": 0,
+          "aap_mode_evidence_ok": true,
+          "outside_read_denied": true,
+          "inside_write_ok": true,
+          "in_job": true,
+          "normal_child_execution_denied": true,
+          "breakaway_child_execution_denied": true,
+          "transform_ok": true
+        }
+      },
+      "independent_verify": true
+    }
+  ]
+}
+PS C:\Users\DEADBYTE\Downloads\deadbyte-mcp-v0.4.6>

package/proof/TARGET-V047-RUNTIME-MANIFEST-PASS.sha256

@@ -0,0 +1 @@
+5f1b9da95309aebb8e5875a2f0dfdaaaf837f60afb141fa93856f6624d6a5f91  proof/TARGET-V047-RUNTIME-MANIFEST-PASS.txt