Project account custody onto the shared host contracts

[0thernet]

Summary

Pin the frozen ALGAL host-contract revision (9922202a) and add two data-only records on top of it — neither grants authority, changes admission, retries a provider call, or writes state:

• Store::host_lifecycle(account, now) — a read-only algal.host-lifecycle.v1 projection of one account's custody slot, implemented as a store child module so it reuses the same connection, decoders, and quota-window binding as the existing store code. A lease whose owning process can no longer be proven alive projects as uncertain with pendingIntent bound to the exact stored run digest xcb recover requires — never settled or failed — and the record self-verifies through algal::host_contract::parse_host_lifecycle before returning. The projection runs on open_read_only (query-only connection), which itself proves non-mutation.
• context_recipe_host_profile() plus the committed fixture crates/xcb-runtime/tests/fixtures/context-recipe-host-profile.json — an offline algal.host-profile.v1 for the context-recipe host: the managed-program executor profile under the pinned evaluator, real recipe/managed-call limits, reconcile-required uncertain-effect policy, and honest probes (only the committed coordination replay carries passed evidence; live dispatch and custody recovery are not-run).

The provider quota-window vocabulary is now one shared definition (xcb_core::usage::account_windows): a window that can block a lease is the same window the projection reports, in subscription-quota units — never API dollars or token counters.

Test plan

• cargo test --workspace --locked — 34 binaries, all pass
• cargo clippy --workspace --all-targets --locked -- -D warnings — clean
• cargo fmt --all -- --check — clean
• bun run check — versions, typecheck, convex, 1094 bun tests, dist build, package smoke all pass
• New tests in crates/xcb-runtime/src/host_contract_tests.rs: ready/running/uncertain/stopped states, pendingIntent retention and digest binding, tampered/unsorted/missing-intent rejection, snapshot before/after plus an identical projection through open_read_only, live subscription-window share, fixture byte-parity with the builder, replay-evidence and evaluator-rev pinning

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
xcb	Ready	Preview	Sep 28, 2026 6:23am UTC