# Tasks

- [x] Define the report contract, checks, statuses and read allowances (FR: report, bounds).
- [x] Add the bounded reader and the service that composes existing owners (FR: compose, fail toward unknown).
- [x] Add CLI and MCP adapters with `--fail_on` exit status 3 (FR: exit status).
- [x] Add domain, reader and service tests listed under acceptance.
- [x] Verify real fixtures with `npm run verify:release-exposure`.
- [x] Document current behavior in the release exposure guide.
- [x] Accept decimal `--max-file-bytes` tokens through `cliDecimalField`.
- [x] Bind unpacked ASAR member reads to their inventoried digests.