IMPLEMENTED, TESTED (library + live kernel lifecycle on the build host); NOT DEPLOYED at MCPGate or the hosted gateway; enforcer fixes F13-1..4 ARE live
| Clean-room verifier | INTACT 24/24 checks (program text as SHA-256 commitment) |
|---|---|
| Offline attack lab | 29/29 blocked |
| Live lifecycle | authorized run EXECUTED rc=0; replay, forged and post-quarantine authorizations denied without a process |
| Enforcer bypasses fixed (live) | 4 (F13-1..F13-4) |
| Tests | 27 passed in 28.92s |
| verify_authorization, p50 | 0.7767 ms |
See REPRODUCTION.md to verify it yourself.