aziel-runtimeBLOCK

"try primary workers.dev exec (POST /mcp or POST /v1/fraggate/call)",

adds: "Cap-7 factory exec (geo-target, session-stick, egress-rotate) and the AZNet/AZBrowser pair hook",

\`open → policy → exec(slug, op, payload) → receipt → close\`

| GET | \`/v1/mesh\` | QNM rollup: enabled?, bearers, nodes (human mesh users + cited human uses), live_nodes (human mesh users + site_live_viewers), software_nodes ({slug}-worker roster). Suite-prese

"Optional max payload size in bytes for later exec (integer 1..1048576). Overlay only; not the exec body. Out of range refuses bad_policy.",

for (const url of ["http://127.0.0.1/", "http://169.254.169.254/latest/meta-data", "https://example.onion/", "javascript:alert(1)"]) {

**Instruction scrub:** Sentinel `POISON` / SweepGate block-keys catch a short list of override phrases. Not a second door. Residual jailbreak phrasing that does not match the regex is **LOW**.

Poison. Marks such as inject-payload, jailbreak-ignore, exfiltrate, and explicit poison tokens. These are APG

Poison. Marks such as inject-payload, jailbreak-ignore, exfiltrate, and explicit poison tokens. These are APG

export function beaconView(beacon) {

if (!beacon || typeof beacon !== "object") return null;

presence: beacon.presence,

tip_hash: String(beacon.tip_hash || "").trim().toLowerCase(),

function checkBeacon(beacon) {

const secret = "AZP-SECRET-payload-9f3c2a-do-not-log";

const secret = "session-compromise-payload";

const secret = "AZP-SECRET-privacy-token";

const SECRET = "redline-operator-secret-value";

const secret = "AZP-SECRET-relay-must-not-see";

import { canonicalize, sha256Hex } from "../../session-core.js";

import { LATTICE_GENESIS, planLattice, verifyLattice, LatticeError } from "../../dual-lattice.js";

import { assembleTriadDecision } from "../../memory/triad.js";

import { score as evidenceScore } from "../../memory/providers/generic-evidence.js";

import { USE_CASES } from "../../memory/calibration-manifest.js";

`--fixture` is the no-second-device mode. The printed `mobile_join` URL is `http://192.168.1.10:8781/mobile/`. `0.0.0.0` is the listen bind. `--advertise` is the address the phone uses. GET does not a