Add HTTP transport alongside stdio for remote MCP client connectivity.
Each session gets isolated McpServer + transport (CVE-2026-25536 defense).

New files:
- src/http-transport.ts: HTTP server with CORS, rate limiting, PRM
- src/session-manager.ts: session lifecycle, TTL eviction, isolation

Endpoints: POST /mcp (JSON-RPC), DELETE /mcp (terminate session),
GET /health, GET /.well-known/oauth-protected-resource (conditional PRM)

Security (DD-123): localhost-only default, CORS deny-all, 1MB body limit,
per-session + per-IP rate limiting, Host/Origin validation, server timeouts

CLI flags: --transport, --port, --host, --cors-origins,
--authorization-servers, --public-url, --trust-proxy

Tests: 25 new (session manager + HTTP transport integration)

Wire validateKernelConstraints() into issue() and verify pipelines.
Fail-closed: violations reject before signing (issue) or before
schema validation (verify).

Changes:
- issue.ts: constraint check after claims build, before Zod parse
- verify-local.ts: constraint check after signature, before schema
- verify.ts: constraint check after decode, before Zod parse
- errors.ts: E_CONSTRAINT_VIOLATION error code + factory function
- verify-local.ts: E_CONSTRAINT_VIOLATION added to VerifyLocalErrorCode
- verify.ts: 'constraint_violation' added to VerifyFailure reasons

New: docs/specs/KERNEL-CONSTRAINTS.md normative specification
Tests: 11 new (issue + verify constraint boundary tests)

Add integrator kit templates for ecosystem partners and a CLI
conformance harness for running fixtures against validators.

Integrator kits:
- template/: base kit with README, integration guide, security FAQ
- mcp/, a2a/, acp/, x402/, content-signals/: ecosystem scaffolds

Conformance harness (scripts/conformance-harness.ts):
- Runs fixtures from specs/conformance/fixtures/ against validators
- JSON (default) or pretty output format
- Deterministic ordering, stable report schema
- Exit code 0 = pass, 1 = failures
- Core adapter: validates 10 fixture categories via @peac/schema

- Update performance baselines with Zod 4 benchmarks (measured)
- Create OWASP Top 10 for Agentic Applications alignment mapping (ASI-01 through ASI-10)
- Verify audit-gate allowlist freshness (3 active entries, all within 30-day ceiling)
- All 10 OWASP ASI risks mapped to specific PEAC mitigations with test file citations

….11.0

Bump all 63 workspace packages to 0.11.0. CHANGELOG documents:
- Zod 4 migration (DD-120): breaking for TS consumers compiling against exported schemas
- MCP Streamable HTTP transport (DD-119, DD-123): session-isolated, CVE-2026-25536 mitigated
- Kernel constraint enforcement in pipelines (DD-121): fail-closed, new constraint_violation reason
- Integrator Kit + conformance harness (DD-108, DD-122)
- OWASP Top 10 for Agentic Applications alignment (ASI-01 through ASI-10)
- Performance baselines updated with Zod 4 benchmarks

Gates: 76 build targets, 4174 tests, lint/typecheck/format clean, guard.sh + check-planning-leak.sh pass

Session management hardening:
- Per-IP session creation limit (default 10/IP) prevents one IP from
  exhausting the global session pool (maxSessions)
- SessionEntry now tracks clientIp for per-IP accounting
- ipSessionCount map incremented on create, decremented on terminate/evict
- Startup banner shows per-IP limit alongside global limit

PRM startup validation:
- Empty authorization_servers entries filtered (whitespace-only rejected)
- Explicit warnings when --authorization-servers set without --public-url
  or vice versa (prevents silent misconfiguration)
- PRM document uses filtered authServers array

Trust-proxy integration test:
- trust-proxy=loopback test: XFF parsed from 127.0.0.1 connections

Benchmark metadata:
- Added cpu, git_ref, warmup/measurement iterations, notes to
  tests/perf/baseline-results.json for reproducibility

Tests: 4189 passing (171 files), 77 builds, all gates clean

…e versioning)

- Fix CI: regenerate errors.generated.ts after E_CONSTRAINT_VIOLATION addition
- Multi-client concurrent isolation regression test (CVE-2026-25536 stop-ship)
- Trust-proxy: formal peer_ip vs client_ip definition with JSDoc
- Trust-proxy: negative spoofing test (untrusted peer XFF ignored)
- PRM language precision: "implemented but disabled by default" in banner/CHANGELOG
- Zod single-major CI gate: scripts/check-zod-single-major.mjs
- Conformance report versioning: format_version 1.1.0, tooling block (git_sha, node_version)
- Benchmark reproducibility: atomic writes, warmup/measurement iteration constants
- MCP compliance matrix: S10/S11 (XFF spoofing, per-IP cap), C7/C8 (per-IP, concurrent isolation)
- PR merge order documented in CHANGELOG Notes

- Bump specs/kernel/errors.json version to 0.11.0 (E_CONSTRAINT_VIOLATION added)
- Fix report.schema.json $id: add www. prefix to match all other schemas
- Fix peac-v0.9.2.json $id: peac.org -> www.peacprotocol.org (canonical domain)

# Conflicts:
#	docs/specs/KERNEL-CONSTRAINTS.md
#	packages/mcp-server/src/cli.ts
#	packages/mcp-server/src/http-transport.ts
#	packages/mcp-server/src/session-manager.ts
#	packages/mcp-server/tests/http/http-transport.test.ts
#	packages/mcp-server/tests/http/session-manager.test.ts
#	scripts/conformance-harness.ts
#	scripts/guard.sh
#	tests/perf/baseline-results.json