{"upl":"UPL-TECH-26-395542-EN","title":"Worker_demi_proxy_V5_8_8_MCP","author":"Skydle","publisher":"UplitAU Pty Ltd","environment":"real","payment_verified":true,"tier":"starter","payment":"eth","payment_ref":"0x5ee0af1b8902f0f651e4b32bfaffb8592b86631ba9fb20725b7eb95a06aa3627","amount_aud":"9.00","timestamp":"2026-10-16T22:55:15.087Z","registered_at":"2026-10-16T22:55:15.166Z","language":"en","file_name":"Worker_demi_proxy_V5_8_8_MCP(1).js","file_sha256":"73cf84fd4d786ac5529213a59c88b312e8ce31fc04f47ff95a7df9d73f587d95","extract_sha256":"e4dd731ce862ae483a72deb121c81b5fe9dc50d9d92858290d7cee85d0859cef","derived_from":"UPL-TECH-26-294654-EN","description":null,"demi_core":{"core_statement":"Worker V5.8.8 of the DEMI Registry demi-proxy (Cloudflare Worker, deployed 13 October 2026) fixes AI package section D formatting, adds a CAPSULE_URL default and an OpenAI domain-challenge endpoint, while preserving byte-identical registration code from V5.8.7.","propositions":"T1: Read-only MCP server at POST /mcp using stateless Streamable HTTP and JSON-RPC 2.0, no authentication, public data only | T2: Five MCP tools (get_ai_package, get_record, lookup_record, verify_fingerprint, list_children), all marked readOnlyHint, sealed/hidden records return public minimum only | T3: lookup_record accepts UPL code, file SHA-256 or Ethereum transaction hash | T4: verify_fingerprint checks hash only, never the file, covering main and other fingerprinted files | T5: GET /registry/{UPL}/children lists later stages; index.json and lookup supply all addresses so no assistant constructs one itself | T6: CAPSULE_URL defaults to ramsmile.com/demicapsule | T7: GET /.well-known/openai-apps-challenge serves the OpenAI domain token | T8: GET /mcp returns 405","constraints":"Cloudflare Worker runtime | JSON-RPC 2.0 over stateless Streamable HTTP | No registration, payment or record-mutation operations permitted | No API keys required by callers | Registration code byte-identical to V5.8.7 (UPL-TECH-26-294654-EN) | Anchored index unchanged | Basis for DEMI Capsule plugin v1.0.5 (UPL-TECH-26-144456-EN), currently under directory review","mechanisms":"T1: Send POST /mcp with a valid JSON-RPC 2.0 request; confirm stateless response and no auth challenge | T2: Call each of the five tools and confirm readOnlyHint flag and correct public-minimum response for sealed/hidden records | T3: Call lookup_record with each of the three input types and verify correct record returned | T4: Call verify_fingerprint with a hash and confirm file content is never requested or returned | T5: Call GET /registry/{UPL}/children and confirm all address fields (page, record, AI package, certificate, children) are present without manual construction | T6: Check CAPSULE_URL environment variable absent or empty and confirm default resolves to ramsmile.com/demicapsule | T7: GET /.well-known/openai-apps-challenge and confirm OpenAI domain token in response | T8: GET /mcp and confirm HTTP 405 returned — all five tools verified locally and live via Claude custom connector on 13 October 2026","boundaries":"Cannot register records, process payments or mutate any registry data | No authentication or key management for callers | Anchored index structure is not modified in this version | OPEN: rate limiting strategy not defined; index migration from single KV key to a database not yet implemented; owner-key check for the Vault not yet built"},"core_withheld":false,"core_publication_basis":"Self-registration: UplitAU registering its own work from its own wallet. The author is known to the Registry operator because they are the same party; the Ethereum payment itself identifies no one.","costs":{"claude_aud":null,"openai_aud":null,"service_aud":null,"total_aud":null},"landing_page":"https://registry.demicapsule.com/registry/UPL-TECH-26-395542-EN/index.html","visibility":"listed","product":"capsule","core_requested":true,"provenance_manifest":null,"activation_reference":"DEMI:1042:UPL-TECH-26-395542-EN:Q","ai_fetchable":true,"amount_eth":0.002445,"payment_value_aud":9,"payment_rate_aud_per_eth":3681,"payment_rate_source":"etherscan ethprice","core_sha256":"4b03a15ff6ba123b647715d841c33d9cd0cc6c793db7753f211372b44d533dd0","core_status":"formed","anchor_tx":"0x2b2b3c54d17b5f6a7e62f91565ba74dfe9d6894c8dd31da3d3b229b15b117935","anchor_submitted_at":"2026-10-16T22:55:20.136Z","anchor":{"status":"confirmed","tx_hash":"0x2b2b3c54d17b5f6a7e62f91565ba74dfe9d6894c8dd31da3d3b229b15b117935","etherscan_url":"https://etherscan.io/tx/0x2b2b3c54d17b5f6a7e62f91565ba74dfe9d6894c8dd31da3d3b229b15b117935","block_number":26208224,"block_time_utc":"2026-10-16T22:55:23.000Z","submitted_at":"2026-10-16T22:55:20.136Z","digest":"ea051160137f5321084561dad1a41b06c066c139f03afdcb772c0268b69edf14","snapshot_url":"https://registry.demicapsule.com/registry/anchor/ea051160137f5321084561dad1a41b06c066c139f03afdcb772c0268b69edf14.json"}}