morluto · morluto · Aug 3, 2026 · Aug 3, 2026 · Aug 3, 2026 · Aug 3, 2026
diff --git a/README.md b/README.md
@@ -389,7 +389,7 @@ REA handles the app analysis in steps 1–5. The agent performs step 6 with its
 | Electron analysis         |     4 | passive root-confined observation, bounded static application mapping, and evidence-backed static/runtime reconciliation                                                                                                                                                                                                         |
 | JavaScript runtime        |     2 | approved attach-only Node/Electron Inspector target discovery plus bounded script and execution-context observation without evaluation or instrumentation                                                                                                                                                                        |
 | Application workflows     |    12 | bounded cross-layer traces, unique-only version matching, historical-source to bundle mapping, static export return-shape comparison, approved Linux-isolated extracted-module replay, managed-runtime characterization, reconstruction coverage closure, deterministic obligation ledgers, and end-to-end readiness conformance |
-| Workspace and observation |    22 | target lifecycle, Evidence v2 bundle snapshots, aggregate navigation/address context, direct finite replay-machine evaluation, process/artifact/function comparison, evidence-linked residual-unknown lifecycle                                                                                                                  |
+| Workspace and observation |    23 | target lifecycle, Evidence v2 bundle snapshots, retained-bundle release, aggregate navigation/address context, direct finite replay-machine evaluation, process/artifact/function comparison, evidence-linked residual-unknown lifecycle                                                                                         |
 
 The public interface describes what the agent is trying to learn. Providers decide how to answer. macOS utilities handle common semantic inspection without launching Hopper; Hopper handles deeper native analysis; the process harness implements controlled behavioral capture.
 

diff --git a/README_ar.md b/README_ar.md
@@ -170,7 +170,7 @@ rea uninstall --purge-data
 | تحليل Electron        |     4 | مراقبة سلبية ضمن جذور canonical، ورسم ثابت ومحدود للتطبيق، ومطابقة ثابتة/وقت تشغيل قائمة على Evidence                                                                                                                                 |
 | وقت تشغيل JavaScript  |     2 | اكتشاف أهداف Node/Electron Inspector المعتمدة للاتصال فقط، ومراقبة محدودة للبرامج النصية وسياقات التنفيذ دون تقييم أو تجهيز                                                                                                           |
 | سير عمل التطبيقات     |    12 | تتبع محدود ومقارنة إصدارات فريدة ومقارنة ثابتة لأشكال قيم إرجاع الصادرات وإعادة تشغيل وحدات معزولة ومعتمدة على Linux وتوصيف وقت التشغيل المُدار وإغلاق تغطية إعادة البناء ودفاتر التزامات حتمية والتحقق الشامل من جاهزية إعادة البناء |
-| جلسة الملف التنفيذي   |    22 | فتح الأهداف وحزم الأدلة وتشغيل آلة إعادة محدودة ومقارنة العمليات والقطع والدوال وسجل المجهولات المتبقية                                                                                                                               |
+| جلسة الملف التنفيذي   |    23 | فتح الأهداف وحزم الأدلة وتحرير الحزم المحتفظ بها وتشغيل آلة إعادة محدودة ومقارنة العمليات والقطع والدوال وسجل المجهولات المتبقية                                                                                                      |
 
 ## استخدام REA مع وكلاء برمجة آخرين
 

diff --git a/README_ja.md b/README_ja.md
@@ -160,7 +160,7 @@ REA は手順 1〜5 のバイナリ解析を処理し、手順 6 はエージェ
 | Electron 解析          |   4 | canonical ファイルルート内の受動観察、有界な静的アプリマッピング、Evidence に基づく静的/実行時の照合                                                                                                                                        |
 | JavaScript ランタイム  |   2 | 承認済みのアタッチ専用 Node/Electron Inspector ターゲット検出と、評価や計装を行わない有界なスクリプト／実行コンテキスト観察                                                                                                                 |
 | アプリケーション       |  12 | 有界なクロスレイヤー追跡、一意限定のバージョン比較、静的なエクスポート戻り値形状比較、承認済み Linux 隔離 extracted-module replay、マネージドランタイム特性評価、再構築カバレッジ閉包、決定論的な義務台帳、エンドツーエンドの準備適合性検証 |
-| バイナリセッション     |  22 | `open_binary`、`binary_session`、証拠バンドル、有限リプレイ状態機械、プロセス／成果物／関数比較、残余未知レジストリ                                                                                                                         |
+| バイナリセッション     |  23 | `open_binary`、`binary_session`、証拠バンドル、保持バンドルの解放、有限リプレイ状態機械、プロセス／成果物／関数比較、残余未知レジストリ                                                                                                     |
 
 ## 他のコーディングエージェントで使う
 

diff --git a/README_ko.md b/README_ko.md
@@ -160,7 +160,7 @@ REA는 1–5단계의 바이너리 분석을 처리합니다. 6단계는 에이
 | Electron 분석       |   4 | canonical 파일 루트 내 수동 관찰, 제한된 정적 앱 매핑, Evidence 기반 정적/런타임 조정                                                                                                                          |
 | JavaScript 런타임   |   2 | 승인된 연결 전용 Node/Electron Inspector 대상 탐색과 평가·계측 없는 제한된 스크립트 및 실행 컨텍스트 관찰                                                                                                      |
 | 애플리케이션        |  12 | 제한된 교차 계층 추적, 고유 일치 버전 비교, 정적 export 반환 형태 비교, 승인된 Linux 격리 extracted-module replay, 관리형 런타임 특성화, 재구성 커버리지 폐쇄, 결정론적 의무 원장, 엔드투엔드 준비 적합성 검증 |
-| 바이너리 세션       |  22 | `open_binary`, `binary_session`, 증거 번들, 유한 replay 상태 머신, 프로세스·아티팩트·함수 비교, 잔여 미지수 레지스트리                                                                                         |
+| 바이너리 세션       |  23 | `open_binary`, `binary_session`, 증거 번들, 보존 번들 해제, 유한 replay 상태 머신, 프로세스·아티팩트·함수 비교, 잔여 미지수 레지스트리                                                                         |
 
 ## 다른 코딩 에이전트에서 사용하기
 

diff --git a/README_zh.md b/README_zh.md
@@ -160,7 +160,7 @@ REA 负责第 1–5 步中的二进制分析。第 6 步由智能体使用其常
 | Electron 分析     |    4 | 限定 canonical 文件根的被动观察、有界静态应用映射，以及基于 Evidence 的静态/运行时对账                                                                                      |
 | JavaScript 运行时 |    2 | 经批准的只附加 Node/Electron Inspector 目标发现，以及不执行求值或插桩的有界脚本和执行上下文观察                                                                             |
 | 应用工作流        |   12 | 有界跨层追踪、唯一匹配跨版本图比较、静态导出返回形状比较、经批准的 Linux 隔离 extracted-module replay、托管运行时表征、重建覆盖闭合、确定性义务账本和端到端就绪性一致性验证 |
-| 二进制会话        |   22 | `open_binary`、`binary_session`、证据包、有限重放状态机、进程、制品与函数比较、残余未知项注册表                                                                             |
+| 二进制会话        |   23 | `open_binary`、`binary_session`、证据包、保留包释放、有限重放状态机、进程、制品与函数比较、残余未知项注册表                                                                 |
 
 ## 与其他编程智能体一起使用
 

diff --git a/docs/mcp-contracts.md b/docs/mcp-contracts.md
@@ -87,6 +87,12 @@ workspace `resource_link` blocks. Workspace resources preserve revision and
 `previous_revision_digest` commitments; persistent workspace files remain
 subject to configured read/write roots.
 
+Retained bundle URIs are session-scoped and are invalidated by
+`release_evidence_bundle` or session close. When retention reaches its bounded
+capacity, release an unneeded digest and retry; for cross-session recovery use
+`export_evidence_bundle` followed by `import_evidence_bundle` and
+`snapshot_evidence_bundle` in the new session.
+
 `export_evidence_bundle` is file-only and requires `path`; existing files
 require `overwrite: true`. Use `snapshot_evidence_bundle` and then
 `resources/read` when the complete bundle is needed within the current session.
@@ -98,8 +104,11 @@ explicitly retains them.
 
 ## Aggregate native context
 
-`get_navigation_context` combines the selected document, current address, and
-current/containing procedure. A cursor outside a procedure is represented as
+`get_navigation_context` composes the selected document, current address, and
+current/containing procedure. Its capability inventory exposes a
+`current_selection` mode and an `explicit_document` mode; the latter works when
+the caller supplies `document` and the provider lacks `current_document`. A
+cursor outside a procedure is represented as
 `procedure: null`. `inspect_address_context` requires an explicit address and
 returns bounded name, procedure, comment, inline-comment, and bookmark facets;
 unsupported facets are local `unavailable` outcomes. The scalar getters remain

diff --git a/docs/product-catalog.json b/docs/product-catalog.json
@@ -11,7 +11,7 @@
     "skill_version": "23"
   },
   "tools": {
-    "total": 114,
+    "total": 115,
     "families": [
       {
         "id": "direct",
@@ -167,7 +167,7 @@
       {
         "id": "session",
         "surface": "session",
-        "count": 22,
+        "count": 23,
         "tools": [
           "binary_session",
           "build_call_path",
@@ -186,6 +186,7 @@
           "list_unknowns",
           "open_binary",
           "record_unknown",
+          "release_evidence_bundle",
           "run_replay_machine",
           "snapshot_evidence_bundle",
           "update_unknown",
@@ -665,16 +666,16 @@
   "runtime_catalog": {
     "counts": {
       "cli_commands": 67,
-      "mcp_tools": 114,
+      "mcp_tools": 115,
       "mcp_prompts": 6,
       "mcp_resources": 2,
       "mcp_resource_templates": 11
     },
     "digests": {
-      "tools_sha256": "58bc4f72c5f8de4328728ead9f3a28ec5548484b7b9cf2ed85cf0edcc689a63c",
+      "tools_sha256": "4623a3b42560c4aaea746e16a4c1feab7714b479f43401b2e8e1ad0bbb1b4746",
       "prompts_sha256": "3886a3bf55a448def79e3eb429e6a56eb2ba075423c5cb1e5747642b389ef8fe",
       "resources_sha256": "e0e872276ebf6f88e916ef24930a99eed27ce4c93e494e60820e9bd8cc8497c3",
-      "combined_sha256": "e83a177f5eca63bbad17886a61f5a1a376d44afe862c51c56e5d38339f7d41f8",
+      "combined_sha256": "6b2470559f830c70f2b1a1453fd8cf1264f690b6f6718342deb04406aefa9fe1",
       "providers_sha256": "918ccd6b8ae442cd5844dcfde55086f458176241c8d166c1e9dd0f242ccd2bb0"
     }
   }

diff --git a/docs/testing.md b/docs/testing.md
@@ -6,14 +6,15 @@ allowed dependencies, and runtime cost are visible from their paths.
 
 ## Behavioral depths
 
-| Depth       | Location               | What it proves                                                                                        |
-| ----------- | ---------------------- | ----------------------------------------------------------------------------------------------------- |
-| Module      | `src/**/*.test.ts`     | One domain, service, or adapter through its narrow public surface                                     |
-| Composition | `tests/composition/**` | Provider-neutral session and registry wiring; filesystem access is limited to fixture materialization |
-| Boundary    | `tests/boundary/**`    | Exactly one production filesystem, process, network, browser, CLI, MCP, or provider boundary          |
-| Acceptance  | `tests/acceptance/**`  | A complete compiled CLI or MCP workflow                                                               |
-| Conformance | `tests/conformance/**` | Shared provider contracts, parameterized by declared capabilities and explicit opt-outs               |
-| Evaluation  | `tests/evaluation/**`  | Deterministic evaluator parsing, scoring, and report generation                                       |
+| Depth        | Location                | What it proves                                                                                        |
+| ------------ | ----------------------- | ----------------------------------------------------------------------------------------------------- |
+| Module       | `src/**/*.test.ts`      | One domain, service, or adapter through its narrow public surface                                     |
+| Composition  | `tests/composition/**`  | Provider-neutral session and registry wiring; filesystem access is limited to fixture materialization |
+| Boundary     | `tests/boundary/**`     | Exactly one production filesystem, process, network, browser, CLI, or provider boundary               |
+| MCP boundary | `tests/boundary/mcp/**` | MCP transport and tool-contract boundaries with isolated sessions and explicit cleanup                |
+| Acceptance   | `tests/acceptance/**`   | A complete compiled CLI or MCP workflow                                                               |
+| Conformance  | `tests/conformance/**`  | Shared provider contracts, parameterized by declared capabilities and explicit opt-outs               |
+| Evaluation   | `tests/evaluation/**`   | Deterministic evaluator parsing, scoring, and report generation                                       |
 
 Colocated domain tests may import only their owning domain and inward
 dependencies. They do not construct sessions or servers and do not start
@@ -42,16 +43,17 @@ manual; Vitest covers only deterministic evaluator logic.
 `npm test` runs every deterministic project once. The narrower feedback loops
 are:
 
-| Command                   | Scope                                                                                                    |
-| ------------------------- | -------------------------------------------------------------------------------------------------------- |
-| `npm run test:fast`       | Domain, service, adapter, composition, boundary, and conformance projects                                |
-| `npm run test:boundary`   | Boundary and process-global projects                                                                     |
-| `npm run test:acceptance` | Complete CLI and MCP acceptance workflows                                                                |
-| `npm run test:changed`    | Changed tests in non-serial projects via Vitest's import graph                                           |
-| `npm run test:watch`      | Changed domain, service, adapter, composition, boundary, conformance, and evaluation tests in watch mode |
-| `npm run test:watch:all`  | Changed tests from every deterministic project in watch mode                                             |
-| `npm run check:changed`   | Cached static checks followed by changed tests                                                           |
-| `npm run check:pr`        | Static, generated-document, and complete deterministic PR gate                                           |
+| Command                   | Scope                                                                                                                  |
+| ------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
+| `npm run test:fast`       | Domain, service, adapter, composition, boundary, MCP boundary, and conformance projects                                |
+| `npm run test:boundary`   | Boundary, MCP boundary, and process-global projects                                                                    |
+| `npm run test:mcp`        | MCP boundary project only                                                                                              |
+| `npm run test:acceptance` | Complete CLI and MCP acceptance workflows                                                                              |
+| `npm run test:changed`    | Changed tests in non-serial projects via Vitest's import graph                                                         |
+| `npm run test:watch`      | Changed domain, service, adapter, composition, boundary, MCP boundary, conformance, and evaluation tests in watch mode |
+| `npm run test:watch:all`  | Changed tests from every deterministic project in watch mode                                                           |
+| `npm run check:changed`   | Cached static checks followed by changed tests                                                                         |
+| `npm run check:pr`        | Static, generated-document, and complete deterministic PR gate                                                         |
 
 Changed-test selection is a fast feedback aid, not release evidence. It can
 miss behavior connected through runtime registration, generated data, shell

diff --git a/docs/verification/managed-conformance-manifest.json b/docs/verification/managed-conformance-manifest.json
@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "manifest_id": "ecm_c1609d2cc959477e200df1a368ade5e3d68ad6fd4041009b78a5778a3b76e9bc",
+  "manifest_id": "ecm_bdccc0a41764d8c182b92a1c9b25e0f08a4b6e8224b35cb83904079a93547d4c",
   "verifier": {
     "id": "rea-managed-conformance",
     "version": "1"
@@ -14,7 +14,7 @@
   "skill_digests": [
     {
       "skill_id": "reverse-engineer-anything",
-      "sha256": "1398947e9119a5a9af08514413d8cfdd8dcdc9373ebab1ba6eb525126db5ffff"
+      "sha256": "94132dd32216783a2e6ed65a5e78e6a0ad645c22ee7ebaf1f1f4ddf6fd110daf"
     }
   ],
   "claims": [