ArcForges · deku2026 · Sep 21, 2026 · Sep 21, 2026 · Sep 21, 2026
@@ -3,9 +3,9 @@
 useDefault = true
 
 [[allowlists]]
-description = "Verified SHA-256 of protobuf 2.15.0 api_pb.js in five immutable reviewed profiles"
+description = "Verified SHA-256 of protobuf 2.15.0 api_pb.js in six immutable reviewed profiles"
 targetRules = ["generic-api-key"]
 condition = "AND"
-paths = ['''^eng/provenance/artifact-profiles/ai-worker-r[12345]\.json$''']
+paths = ['''^eng/provenance/artifact-profiles/ai-worker-r[123456]\.json$''']
 regexTarget = "line"
 regexes = ['''^\s*"node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/api_pb\.js": "73e489001027c703bc0224ae73f78ecefe028e88284bd06952e8603c3d81472c",?\s*$''']
@@ -17,7 +17,7 @@ npm run build
 
 These commands need no Cloudflare account. Default tests run pure offline units in Node. Workflow engine and bundle runtime tests are separate explicit local opt-in commands, never CI gates. The build produces `artifacts/candidate/`, including the deployable bundle, configuration, hashes, provenance, licenses and runtime SBOM.
 
-The toolchain pins TypeScript **7.0.2**, Wrangler **4.131.2** and `@arcforges/proto` **1.0.0-ci.25.1**. See [development](docs/development.md) for tool compatibility, local health testing and dependency updates.
+The toolchain pins TypeScript **7.0.2**, Wrangler **4.131.2** and `@arcforges/proto` **1.0.0-ci.44.1**. See [development](docs/development.md) for tool compatibility, local health testing and dependency updates.
 
 ## Hello Agent
 

@@ -6,6 +6,6 @@ The deployed bundle consumes `@arcforges/proto` under Apache-2.0 and `@bufbuild/
 
 Cloudflare Wrangler, Vitest integration, Workerd, TypeScript, Biome and Prettier are development/build tools with their own licenses recorded in installed packages and the lockfile. They are not an additional production AI service. Model weights are hosted by Workers AI and are not bundled or redistributed here; Cloudflare model/account terms apply to actual inference.
 
-The actual Worker includes an esbuild MIT helper, and its archive includes a generated Wrangler MIT README. Complete Evan Wallace and Cloudflare terms are retained under `third-party/` and copied into every candidate. The full Buf Apache-2.0 document, including Copyright 2021-2026 Buf Technologies, Inc., and original Google Protocol Buffers BSD terms are retained separately. Both protobuf 2.14.1 and 2.15.0 are present in the current bundle and runtime SBOM; their varint headers retain Copyright 2008 Google Inc.
+The actual Worker includes an esbuild MIT helper, and its archive includes a generated Wrangler MIT README. Complete Evan Wallace and Cloudflare terms are retained under `third-party/` and copied into every candidate. The full Buf Apache-2.0 document, including Copyright 2021-2026 Buf Technologies, Inc., and original Google Protocol Buffers BSD terms are retained separately. The current bundle and runtime SBOM contain one deduplicated protobuf 2.15.0 runtime; its varint header retains Copyright 2008 Google Inc.
 
 The source provenance checker and its failure tests are an explicitly reviewed AGPL-3.0-only port from ArcForges Cloud. Their immutable upstream identity and adapted target hashes are recorded under `eng/provenance/records/`. The source notice summary and complete records accompany candidate provenance; a summary never replaces full licence terms. See [the owning process](docs/provenance.md).
@@ -11,7 +11,7 @@
 | Cloudflare Vitest plugin           | 1.1.9                  | Local Workerd/Workflow integration                                              |
 | Vitest                             | 4.1.11                 | Plugin requires Vitest 4.1; latest Vitest 5 is not a compatible upgrade         |
 | Biome / Prettier                   | 2.5.14 / 3.9.8         | Lint/format without depending on the removed TypeScript JavaScript compiler API |
-| ArcForges proto / protobuf runtime | 1.0.0-ci.25.1 / 2.15.0 | Published Contracts messages, not sibling source                                |
+| ArcForges proto / protobuf runtime | 1.0.0-ci.44.1 / 2.15.0 | Published Contracts messages, not sibling source                                |
 
 `npm ci --ignore-scripts` restores the committed dependency graph on Windows and Linux without lifecycle scripts. The selected tools work with this installation mode. `package-lock.json` includes transitive/platform packages for reproducibility; do not shorten it by hand. Platform-independent source checks run once on Linux CI; no Windows duplicate or macOS job is required.
 

@@ -17,14 +17,14 @@ Used records are immutable. Changed material or intent requires a new reviewed r
 - The canonical AGPL document is matched to a pinned authoritative template, without inventing its historical acquisition path.
 - The existing binding declaration is reproduced by pinned Wrangler with `--include-runtime=false`. Its owned configuration and small MIT template are recorded; the declaration is absent from the deployed Worker.
 - The source checker, its failure tests and policy/template structure are an explicitly reviewed AGPL port from merged Cloud source. They execute as owned AI tooling with no sibling import or runtime dependency.
-- The artifact profile binds every actual bundler input, output, external runtime import, source-map body and generator/package identity, including both protobuf versions. The 37 parsed modules from protobuf 2.14.1 and 60 from 2.15.0 were independently reproduced against their published bytes. Their upstream compiler was TypeScript 6.0.3; this audit-only compiler is separate from AI's pinned TypeScript 7.0.2 and is not added to its dependency graph.
-- The esbuild helper, generated Wrangler README, Buf copyright, explicit Google BSD varint/descriptor scope, Contracts legal texts and original licences are retained in the actual candidate. Parsed material that is not emitted is distinguished from the 43 source bodies actually carried by its source map.
+- The artifact profile binds every actual bundler input, output, external runtime import, source-map body and generator/package identity, including the deduplicated protobuf 2.15.0 runtime. Its 66 parsed modules retain prior reviewed bytes: 60 already at 2.15.0 and six codegenv2 modules identical to their prior nested 2.14.1 copies. Their upstream compiler was TypeScript 6.0.3; this audit-only compiler is separate from AI's pinned TypeScript 7.0.2 and is not added to its dependency graph.
+- The esbuild helper, generated Wrangler README, Buf copyright, explicit Google BSD varint/descriptor scope, Contracts legal texts and original licences are retained in the actual candidate. Parsed material that is not emitted is distinguished from the 31 source bodies actually carried by its source map.
 
 ## Candidate and continuing verification
 
 `npm run check` includes source audit and failure tests. Normal tooling tests are offline source/policy fixtures without a candidate build. `npm run types` and the CI diff check reproduce the tracked declaration. The candidate job builds once and checks provenance; deployment performs one trust-handoff check. `test:artifact`, `test:runtime` and `test:bundle` remain explicit local diagnostics. Real model execution is not a CI or publication gate.
 
-The candidate includes `provenance.json`, the full active records, source identity, source NOTICE and complete applicable legal texts. The verifier checks the Worker against its independently reviewed hash, the closed parsed/emitted graph, source-map bodies and mappings, generated README template, locked package graph, exact deployment-configuration transformation and runtime SBOM. Recomputing the outer manifest cannot authorize changed code, missing notices, new resources or altered source records. SBOM root identity uses `@arcforges/ai`, independent of checkout directory names. Both protobuf runtime versions and their dependency edges must remain represented.
+The candidate includes `provenance.json`, the full active records, source identity, source NOTICE and complete applicable legal texts. The verifier checks the Worker against its independently reviewed hash, the closed parsed/emitted graph, source-map bodies and mappings, generated README template, locked package graph, exact deployment-configuration transformation and runtime SBOM. Recomputing the outer manifest cannot authorize changed code, missing notices, new resources or altered source records. SBOM root identity uses `@arcforges/ai`, independent of checkout directory names. The exact current protobuf runtime and both direct/transitive dependency edges must remain represented.
 
 Deployment verifies the same candidate again and promotes it without rebuilding. Source checks, optional local runtime observations and provider deployment completion remain separate; public-release byte downloads are not routine checks. A newly observed dependency, upstream revision, generated resource, legal-text change or configuration requires a newly reviewed profile and superseding record before promotion. Models hosted by Workers AI and development-tool implementations are not bundled by this Worker.
 

@@ -2,8 +2,8 @@ AI source provenance
 
 Original material retains its recorded licence and full legal text.
 
-ai-worker-bundle-r5
-https://github.com/ArcForges/AI @ 943169b9e363393d76c5faf9fbb5ec9990b94c34
+ai-worker-bundle-r6
+https://github.com/ArcForges/AI @ 41241c4fb93cdef6c538d051fbc0a19f3194696f
 AGPL-3.0-only
 Worker: Copyright ArcForges contributors, AGPL-3.0-only. Contracts: ArcForges contributors, Apache-2.0. Protobuf runtimes: Copyright 2021-2026 Buf Technologies, Inc., Apache-2.0; varint/descriptor material: Copyright 2008 Google Inc., BSD-3-Clause. Helpers: Copyright 2020 Evan Wallace, MIT. Generated README: Copyright 2020 Cloudflare, Inc., MIT. Complete respective texts and source-bound records accompany the actual candidate.