Eidolon runtime 1.3.0 — 2026-09-16 (Escrow Nexus, sphere client, genesis trust root)

Frozen Eidolon runtime consumed by scripts/bundle-eidolon-runtime.mjs, pinned by name and SHA-256. Not a Cipher release: install Cipher from the v* releases.

Why a new runtime. --version 1.3.0. Since cipher-runtime-20260912 (1.0.0): the sphere custody client (sphere list|claim|transfer|import|export|sync|mailbox|queue|burn|reissue-key|verify|trust), Escrow Nexus (escrow deposit|list|show|retrieve|verify|delete — sealed, time-locked documents bound to the vault key, one JSON line per call, the document travels as a file), and the genesis trust root of 2026-09-16 compiled in (sphere trust → issuer 6dad3cb1…3e31f8, genesis root 89fb26b1…f0053e, anchor eidolon-anchor-1). Built from the private core at 6ce7437 (public tree v1.3.0).

Asset	Built on	SHA-256
cipher-runtime (Linux x86_64)	WSL Ubuntu 22.04.5, glibc 2.35 (measured floor 2.35), CPython 3.10.12	09740ff57befb8c6a075ce78a0a71e596ebcada1f22e074386fbe5e6337d5879
cipher-runtime.exe (Windows x64)	Windows 11, CPython 3.12.14	648b748c35d619e8f22ccdcb85fb85b1dfacbf602127d9ce86139d19c4cf00ca

Verified on both platforms against a throwaway data dir, never against production: --version, sphere trust (pinned issuer and root), escrow deposit with a time lock → list shows it locked with release_after → retrieve refused with error_code: locked → an unlocked deposit retrieved byte for byte → verify, delete --confirm; keybundle and ceremony still answer --help. The Linux binary carries requests/urllib3/certifi (machine lock) and httpx (anchor).

Verify a download with sha256sum -c SHA256SUMS.