ProfRandom92 · ProfRandom92 · Jun 15, 2026 · Jun 15, 2026 · Jun 15, 2026 · Jun 15, 2026
diff --git a/Cargo.toml b/Cargo.toml
@@ -5,6 +5,30 @@ edition = "2021"
 description = "Experimental terminal context client for deterministic Context Packs."
 license = "MIT"
 repository = "https://github.com/ProfRandom92/comptext-cli"
+readme = "README.md"
+keywords = ["cli", "context", "agents", "json", "deterministic"]
+categories = ["command-line-utilities", "development-tools"]
+exclude = [
+    ".agent/**",
+    ".agents/**",
+    ".codex/**",
+    ".comptext/**",
+    ".github/**",
+    "Cargo.toml.orig",
+    "CREATE_REPO.md",
+    "MANIFEST.json",
+    "PROJEKT.md",
+    "context/**",
+    "mcp/**",
+    "prompts/**",
+    "reports/**",
+    "reviews/**",
+    "reviews.smoke-backup-*/**",
+    "scripts/**",
+    "tasks/**",
+    "templates/**",
+    "proposals/**",
+]
 
 [[bin]]
 name = "ctxt"

diff --git a/README.md b/README.md
@@ -20,7 +20,7 @@ It does not execute external agents, use network, call providers, apply proposal
 ![External agents: disabled](https://img.shields.io/badge/external%20agents-disabled-lightgrey)
 ![Apply: disabled](https://img.shields.io/badge/apply-disabled-lightgrey)
 ![Subagent runtime: disabled](https://img.shields.io/badge/subagent%20runtime-disabled-lightgrey)
-![MCP server: not implemented](https://img.shields.io/badge/MCP%20server-not%20implemented-lightgrey)
+![MCP-style stdio: local-only](https://img.shields.io/badge/MCP--style%20stdio-local--only-lightgrey)
 ![Windows: validated](https://img.shields.io/badge/windows-validated-blue)
 ![v0.1.0: release candidate](https://img.shields.io/badge/v0.1.0-release%20candidate-purple)
 ![Contracts: deterministic](https://img.shields.io/badge/contracts-deterministic-brightgreen)
@@ -29,7 +29,7 @@ It does not execute external agents, use network, call providers, apply proposal
 
 > **Safety boundary**
 >
-> `ctxt` is local-first. Network is denied by default. Provider calls are not part of the documented workflow. External agent execution is disabled. Proposal and review artifacts are evidence, not instructions to auto-apply. Subagent role contracts are available, but subagents do not execute. No MCP server implementation is claimed.
+> `ctxt` is local-first. Network is denied by default. Provider calls are not part of the documented workflow. External agent execution is disabled. Proposal and review artifacts are evidence, not instructions to auto-apply. Subagent role contracts are available, but subagents do not execute. The MCP-style stdio adapter is local-only and experimental; no production MCP support or full MCP compliance is claimed.
 
 CompText `ctxt` v0.1.0 is a release candidate until the release is tagged.
 
@@ -157,7 +157,7 @@ For the local runtime experiment, see [docs/RUNTIME_CONTRACT.md](docs/RUNTIME_CO
 | Run artifact inspection | Available | Local evidence inspection |
 | Local validation | Available | `validate --run` contract |
 | Binary/media context-pack exclusion | Available | README assets do not break context packing |
-| MCP server | Not implemented | No server availability claim |
+| MCP-style stdio adapter | Experimental local-only | No production MCP support or full MCP compliance claim |
 | Provider gateway | Not implemented | No live provider gateway claim |
 | External agent execution | Disabled | Contracts and discovery do not execute agents |
 | Proposal or review application | Disabled | Artifacts are not auto-applied |
@@ -231,7 +231,7 @@ flowchart LR
     allowed --> reads["Bounded Artifact Reads"]
     allowed --> validation["Validation"]
     allowed --> approval["User Approval"]
-    disabled["Disabled"] --> gates["Network / Providers / Agents / Auto Apply / MCP"]
+    disabled["Disabled"] --> gates["Network / Providers / Agents / Auto Apply / Production MCP"]
 
     classDef safe fill:#ecfdf5,stroke:#059669,color:#111827
     classDef blocked fill:#fef2f2,stroke:#dc2626,color:#111827
@@ -250,7 +250,7 @@ flowchart LR
 | Proposal apply | Disabled | Proposal artifacts are untrusted evidence |
 | Review apply | Disabled | Review artifacts are untrusted evidence |
 | Subagent runtime execution | Disabled | Subagent role contracts are available only as definitions |
-| MCP server | Not implemented | No MCP server implementation claim |
+| MCP-style stdio adapter | Local-only experiment | No production MCP support or full MCP compliance claim |
 | Provider gateway | Not implemented | No provider gateway claim |
 | Hooks and plugins | Disabled for this flow | Not required for release-candidate validation |
 | Arbitrary shell | Out of scope | Use declared local validation commands |

diff --git a/RELEASE_NOTES_v0.1.0.md b/RELEASE_NOTES_v0.1.0.md
@@ -1,27 +1,44 @@
 # CompText CLI v0.1.0 Release Notes
 
-Status: Release candidate, tag only after CI green.
+Status: GitHub pre-release candidate only. Tag only after CI is green.
 
-CompText CLI `ctxt` is a local-first Rust CLI for deterministic, schema-oriented review workflow contracts. The v0.1.0 release candidate focuses on stable local evidence, explicit disabled gates, and contract-first startup behavior.
+CompText CLI `ctxt` is a local-first Rust CLI for deterministic, schema-oriented review workflow contracts. The v0.1.0 release candidate focuses on local evidence, explicit disabled gates, and contract-first startup behavior.
+
+This release candidate is not published to crates.io yet.
 
 ## Highlights
 
 - Local-first Rust CLI `ctxt`.
 - Deterministic JSON contracts for machine-readable runtime state.
 - Startup, readiness, review workflow, and capability contracts.
 - Proposal, review, run, and validation artifact inspection contracts.
+- Experimental local runtime contract covering command output, JSON behavior, bounded local reads, and MCP-style stdio errors.
+- DSL validation for the `local-fixture-v1` subset only.
+- Encode JSON shape coverage for the current symbolic command vocabulary.
+- Clean trace heuristic coverage for traces without deterministic finding phrases.
+- Release-readiness blocker cleanup for clippy, Cargo package metadata, package exclusions, and README MCP wording.
 - README brand assets for the v0.1.0 release-candidate presentation.
 - Binary README and media assets are excluded from context packing.
 - Offline/local-first safety boundary by default.
 
 ## Boundaries
 
-- No MCP server implementation claim.
+- GitHub pre-release candidate only; no crates.io publish has occurred.
+- MCP-style local stdio adapter only.
+- No production MCP support claim.
+- No full MCP compliance claim.
 - No external agent execution claim.
 - No provider gateway or live provider claim.
 - No proposal or review auto-apply claim.
 - No claim of hidden network activity.
 
+## Runtime Contract Scope
+
+- `ctxt parse`, `ctxt encode`, `ctxt batch`, `ctxt dsl validate`, `ctxt evidence hash`, `ctxt mcp serve --allowed-root`, and `ctxt detect-illegible-cot` are documented as local runtime surfaces.
+- DSL validation is limited to `local-fixture-v1`; it does not execute skills, tools, tasks, providers, shell commands, OAuth flows, network resources, or MCP tool definitions.
+- MCP behavior is limited to the local stdio adapter contract and JSON-RPC-style error shapes under an explicit allowed root.
+- Correctness claims are bounded to local command outputs, JSON contracts, deterministic hashes, exact exit codes, smoke tests, and `cargo test`.
+
 ## Validation Commands
 
 ```powershell