handshake-protocol-kernel 0.5.0

Handshake 0.5.0 is the source-locked protocol-kernel/reference release for protected actions in automated decision making.

Published package: handshake-protocol-kernel@0.5.0
Source commit: dbd4e8da6d771ec19764259ba122e2b4c0ca608d
Artifact commit: 63119b961f1c4053a0f975ca7e4fc09e87793b3c
Trusted Publishing run: https://github.com/CreasyBear/handshake-protocol-kernel/actions/runs/29831255023

This release provides the protocol kernel, role-scoped SDK transition transports, operator CLI, local proposal/readback MCP server, conformance surfaces, and local reference evidence. The selected-consequence execution host remains private; 0.5.0 is not a supported buyer execution host.

Publication does not create policy authority, gateway enforcement, hosted operation, provider custody, settlement proof, MCP Registry acceptance, deployment, or customer adoption. The explicit omitted/unbound x402 and auth.md proof gaps remain non-authorizing TODO evidence gaps.

Public registry readback verified latest=0.5.0, registry signature metadata, SLSA provenance, exact clean install, root/MCP/x402 imports, and CLI non-authority output.

handshake-protocol-kernel 0.2.7

0.2.7 is the npm page cleanup and release-administration release for the published package artifact boundary.

The npm package is available with trusted-publishing provenance and installed-artifact smoke evidence. Public npm availability does not create authority, policy decisions, greenlights, gateway checks, mutations, hosted operation, or MCP Registry discoverability.

MCP Registry discoverability remains the remaining distribution proof gap.