Documented release
v122.0.0
Object Authority at World Scale
Release date 2026-08-21
Outcome
Outcome
The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
Changes
What changed
Remote durable subject admission
subjects.admit(...) deterministically admits the enclosing verified proof object, binds its owner, returns authenticated digests and receipt evidence, replays idempotently for the same proof and owner, and writes zero on a conflicting proof/owner claim.
Technical and authority boundary
subjects.admit(...) deterministically admits the enclosing verified proof object, binds its owner, returns authenticated digests and receipt evidence, replays idempotently for the same proof and owner, and writes zero on a conflicting proof/owner claim.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- subjects.admit(...) deterministically admits the enclosing verified proof object, binds its owner, returns authenticated digests and receipt evidence, replays idempotently for the same proof and owner, and writes zero on a conflicting proof/owner claim.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Authenticated edge state
subjects.state(...) and portable edge bundles bind current owner, admitted proof digest, subject head, registry/reducer digests, append evidence, and recovery material without promoting a database row or service response above held proof.
Technical and authority boundary
subjects.state(...) and portable edge bundles bind current owner, admitted proof digest, subject head, registry/reducer digests, append evidence, and recovery material without promoting a database row or service response above held proof.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- subjects.state(...) and portable edge bundles bind current owner, admitted proof digest, subject head, registry/reducer digests, append evidence, and recovery material without promoting a database row or service response above held proof.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Private and invited world envelopes
Private geometry, invite lists, proofs, identities, metadata, ciphertext, and recipient wraps remain encrypted or subject-scoped; globally distributed additions expose only lawful public exterior state and an envelope digest.
Technical and authority boundary
Private geometry, invite lists, proofs, identities, metadata, ciphertext, and recipient wraps remain encrypted or subject-scoped; globally distributed additions expose only lawful public exterior state and an envelope digest.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Private geometry, invite lists, proofs, identities, metadata, ciphertext, and recipient wraps remain encrypted or subject-scoped; globally distributed additions expose only lawful public exterior state and an envelope digest.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Exact execution outcome recovery
Transaction ID and idempotency-key lookup return exactly committed, zero-write, or unknown, so timeout and crash recovery cannot silently replan a committed transaction.
Technical and authority boundary
Transaction ID and idempotency-key lookup return exactly committed, zero-write, or unknown, so timeout and crash recovery cannot silently replan a committed transaction.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Transaction ID and idempotency-key lookup return exactly committed, zero-write, or unknown, so timeout and crash recovery cannot silently replan a committed transaction.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Strict transaction validation
Participant sets, expected heads, world heads, command bytes, plan digests, mandates, and registry/reducer pins validate exactly before execution, with writesOnFailure: 0.
Technical and authority boundary
Participant sets, expected heads, world heads, command bytes, plan digests, mandates, and registry/reducer pins validate exactly before execution, with writesOnFailure: 0.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Participant sets, expected heads, world heads, command bytes, plan digests, mandates, and registry/reducer pins validate exactly before execution, with writesOnFailure: 0.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
First-class remote mandates
Owner and worker-creature subjects can bind allowed commands, world or region scope, resource and geometry limits, expiration, nonce, current heads, and append-only revocation for lawful offline work.
Technical and authority boundary
Owner and worker-creature subjects can bind allowed commands, world or region scope, resource and geometry limits, expiration, nonce, current heads, and append-only revocation for lawful offline work.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Owner and worker-creature subjects can bind allowed commands, world or region scope, resource and geometry limits, expiration, nonce, current heads, and append-only revocation for lawful offline work.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Multi-world atomic transactions
Cross-world work either commits as one head-bound transaction or writes zero; applications can reject unsupported cross-region excavation instead of representing two writes as atomic.
Technical and authority boundary
Cross-world work either commits as one head-bound transaction or writes zero; applications can reject unsupported cross-region excavation instead of representing two writes as atomic.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Cross-world work either commits as one head-bound transaction or writes zero; applications can reject unsupported cross-region excavation instead of representing two writes as atomic.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
SDK-owned canonical helpers
Stable semantic idempotency keys, exact head-map equality, byte and causal-parent validation, execution-receipt validation, exact planned-transaction persistence, and registry/reducer compatibility are one coordinated implementation surface.
Technical and authority boundary
Stable semantic idempotency keys, exact head-map equality, byte and causal-parent validation, execution-receipt validation, exact planned-transaction persistence, and registry/reducer compatibility are one coordinated implementation surface.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Stable semantic idempotency keys, exact head-map equality, byte and causal-parent validation, execution-receipt validation, exact planned-transaction persistence, and registry/reducer compatibility are one coordinated implementation surface.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Phi Settlement and Reserve
Every value intent selects exactly one proof-native movement rail—Settlement or Reserve—while live USD is displayed from canonical deterministic pricing and never becomes the moved authority.
Technical and authority boundary
Every value intent selects exactly one proof-native movement rail—Settlement or Reserve—while live USD is displayed from canonical deterministic pricing and never becomes the moved authority.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- Every value intent selects exactly one proof-native movement rail—Settlement or Reserve—while live USD is displayed from canonical deterministic pricing and never becomes the moved authority.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Coordinated SDK, MCP, and AI system
@receiz/sdk, @receiz/mcp-server, and @receiz/ai-skills publish the same v122 authority chain for developers, engineers, agents, and institutions without changing settled Receiz application paths.
Technical and authority boundary
@receiz/sdk, @receiz/mcp-server, and @receiz/ai-skills publish the same v122 authority chain for developers, engineers, agents, and institutions without changing settled Receiz application paths.
- Why
- The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
- Capability enabled
- @receiz/sdk, @receiz/mcp-server, and @receiz/ai-skills publish the same v122 authority chain for developers, engineers, agents, and institutions without changing settled Receiz application paths.
- Compatibility
- The v122.0.0 compatibility record remains the exact boundary for this outcome.
- Migration
- The v122.0.0 migration record remains the exact adoption boundary for this outcome.
Purpose
Why it matters
The object is authority, the edge is custody, and the server is coordination. External developers can lawfully admit verified proof objects as durable subjects; hold complete authenticated subject state at the edge; exchange recipient-scoped private world additions; recover exact committed, zero-write, or unknown execution outcomes; delegate head-bound mandates; and execute atomic multi-world work. Value moves only as Phi through the named Settlement or Reserve rail. Live USD remains a canonical deterministic display projection pinned to the accepted quote and price-basis digest.
Available outcomes
Capabilities now available
Remote durable subject admission
subjects.admit(...) deterministically admits the enclosing verified proof object, binds its owner, returns authenticated digests and receipt evidence, replays idempotently for the same proof and owner, and writes zero on a conflicting proof/owner claim.
Authenticated edge state
subjects.state(...) and portable edge bundles bind current owner, admitted proof digest, subject head, registry/reducer digests, append evidence, and recovery material without promoting a database row or service response above held proof.
Private and invited world envelopes
Private geometry, invite lists, proofs, identities, metadata, ciphertext, and recipient wraps remain encrypted or subject-scoped; globally distributed additions expose only lawful public exterior state and an envelope digest.
Exact execution outcome recovery
Transaction ID and idempotency-key lookup return exactly committed, zero-write, or unknown, so timeout and crash recovery cannot silently replan a committed transaction.
Strict transaction validation
Participant sets, expected heads, world heads, command bytes, plan digests, mandates, and registry/reducer pins validate exactly before execution, with writesOnFailure: 0.
First-class remote mandates
Owner and worker-creature subjects can bind allowed commands, world or region scope, resource and geometry limits, expiration, nonce, current heads, and append-only revocation for lawful offline work.
Multi-world atomic transactions
Cross-world work either commits as one head-bound transaction or writes zero; applications can reject unsupported cross-region excavation instead of representing two writes as atomic.
SDK-owned canonical helpers
Stable semantic idempotency keys, exact head-map equality, byte and causal-parent validation, execution-receipt validation, exact planned-transaction persistence, and registry/reducer compatibility are one coordinated implementation surface.
Phi Settlement and Reserve
Every value intent selects exactly one proof-native movement rail—Settlement or Reserve—while live USD is displayed from canonical deterministic pricing and never becomes the moved authority.
Coordinated SDK, MCP, and AI system
@receiz/sdk, @receiz/mcp-server, and @receiz/ai-skills publish the same v122 authority chain for developers, engineers, agents, and institutions without changing settled Receiz application paths.
Primitive boundary
Primitives affected
- proof
- identity
- ownership
- settlement
- verification
- reserve
- sealed-artifact
- governance
Compatibility
Compatibility
@receiz/sdk
122.0.0
This exact v122.0.0 compatibility boundary remains binding.
@receiz/mcp-server
122.0.0
This exact v122.0.0 compatibility boundary remains binding.
@receiz/ai-skills
122.0.0
This exact v122.0.0 compatibility boundary remains binding.
Main app
unchanged UX
This exact v122.0.0 compatibility boundary remains binding.
Database
v122 append schema
This exact v122.0.0 compatibility boundary remains binding.
Value
Phi
This exact v122.0.0 compatibility boundary remains binding.
Migration
Migration
Required: true
The proof object is authority; migration creates only append, indexing, synchronization, and recovery storage. The v122 SQL migration is required for the remote subject and world execution routes.
Qualification
Conformance
Settled Receiz application release freeze and visual evidence pass without UX regression.
Passed · Settled Receiz application release freeze and visual evidence pass without UX regression.
Control boundary
Governance
- Verification
- Unknown
- Declared change class
- No separate classification record
- Release approval
- No separate approval record
- Risk owner
- No separate assignment recorded
Package publication, production deployment, and production smoke are independently confirmed; signed release attestation remains absent and is not inferred from the live release.
Registry boundary
Registry
- Version
- 122.0.0
- Digest
ed65956a16dd5f0d76d04db2f4a651fc43eb0a71cef64afd53576aa782dc9896- Predecessor
29a793a5bcc0195ab41d30614d37ac51df66023af354fa4335460764eb0af413
Archive projection
Audience, domain, and change-kind facets
- Audiences
- developers · businesses · institutions
- Domains
- proof-object-authority · durable-subjects · private-worlds · execution-recovery · mandates · multi-world-transactions · settlement · reserve · sdk · mcp · ai-skills
- Change kinds
- capability · compatibility · governance · security
Independent dimensions
Release boundary status
- Repository release
- Documented
- Git tag
- Present
- Package publication
- Confirmed
- Deployment
- Confirmed
- Production smoke
- Confirmed
- Signed attestation
- Absent
Exact source bytes
Provenance
This Academy record is a projection beneath its sources. Record SHA-256 af61976ccec0fd9ac3d33b75ba254412c9a04c7967c5d3ebe5c3e634041b5fde. Source-family inventory: complete.
SHA-256 592a3815737b9cfcc508b3bf9da33cd1bebb87af36aa9bf76a833004540ad670SHA-256 65a3c2bf7aba621be5bc3767a461537176f21a2679002b76959b85e82c0f1daaSHA-256 70782d359509cf0bf9fb8f3003ab5188fe1c81b323f5f2aaff176740ab26556cSHA-256 1e45177eb3bd740c6c2cf40314bc6088d68241af75dbcb15781c354444916706SHA-256 3a22e6f745427641de8bf3a82d98226a90fd1ff03e02f20bf0b56c8e4edb8d27SHA-256 6444168e12c1f98129870d388cf2a2b1073c46a76ac886b1f8139e34b3a2334bSHA-256 e8754e4034e19f4b11501c933fc9c518e2e8b206d2bcaf27c91e822bafe1e114SHA-256 f01b8f0c6721d1b58a7c5f4a7cebfe75f7b44d5108ffa2b1c52689775715f25cSHA-256 7d33428631d75bcc622a0da4316d90ba39f43b28e75585eeb843e21388344571SHA-256 44798c24a57ee0f89e4c0bd0e0eea23afcf7deea35bbfd81f2d6f1ae7f3596e9SHA-256 95c49713ff32c3da96c9311a3d520cd476b3d69e03c2f9f615b8bb3a8195b841SHA-256 92442be4c20f0d38ab6d0d0ea8325a54f62e8256c284ef2e61278ed17a5445c5