[valzargaming]

Changes

Native supervisor requests and receipts use a v2 contract with an issued time and five-minute maximum admission window. The producer rechecks capability identity, freshness and request expiry immediately before exclusive publication. Failure preserves evidence; expiry does not cancel an operation already admitted to its first effect.

Add an explicit, default-disabled canonical target binding for the paired Civ13 consumer. Requests cannot supply process or executable selection. V1 packets and consumers are incompatible: retained v1 records need deliberate reconciliation before migration. The paired consumer keeps spool-writer authorization default-deny pending account and permission evidence. This change does not alter credentials, ACLs, services or live configuration.

Verification

• Portable startup contracts passed at head 6e6e92fa41cb28fabae3581f788ea0c119660fa0 on Windows and Ubuntu with PHP 8.3, 8.4 and 8.5. Windows-only IPC tests were skipped on Ubuntu and passed on Windows.
• Paired Civ13 consumer contracts passed on Windows and Ubuntu, including the canonical round trip against this producer commit.
• Local Windows tree 9bd8826117460de315f9f7427894a85b84eab8ce: 76 synthetic lifecycle controls passed using temporary spool files and injected effects.
• No native BYOND game, live process, real save or deployment was exercised.

Keep draft pending independent review and operational authorization.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts