feat(protected-content): from Creator to a readable object

.github/workflows/ci.yml

@@ -79,6 +79,12 @@ jobs:
           python3 scripts/update-hop-compare-test.py
       - name: Browser close handshake
         run: node --test scripts/browser-window-close-handshake.test.mjs
+      - name: library browser unit tests
+        run: node --test capsules/library/browser/src/*.test.mjs
+      - name: creator browser unit tests
+        run: node --test capsules/creator/browser/*.test.mjs
+      - name: reader browser unit tests
+        run: node --test capsules/elacity-reader/browser/*.test.mjs
 
   # One input for every ARM consumer. PRs restore their develop base's cache;
   # only a develop push can save a verified recipe result in this namespace.

TASKS.md

@@ -47,6 +47,41 @@ The [Browser acceptance contract](docs/BROWSER_ACCEPTANCE.md) defines B01–B16.
 - [ ] [B15: Updates and repair preserve a working installation](docs/BROWSER_ACCEPTANCE.md#b15).
 - [ ] [B16: Release only from repeatable product evidence](docs/BROWSER_ACCEPTANCE.md#b16).
 
+## Protected-content 0.7.1 follow-up (#42, #48, #49)
+
+The #49 cleanups, the #42 product surface (Creator app, protection on any file
+the Runtime accepts, the non-media object path end to end, the Elacity Reader
+viewer, session binding on the verified executable actor, audio as a
+first-class media rendition, and the CENC `pssh` header) and the #48 crypto
+review package are landed in source and recorded under Unreleased in
+[elastos/CHANGELOG.md](elastos/CHANGELOG.md). Plan and per-task briefs:
+[2026-09-08 protected-content 0.7.1 follow-up](docs/audits/2026-09-08-protected-content-0.7.1-followup-plan.md).
+Contract: [Protected content](docs/PROTECTED_CONTENT.md). What is and is not
+proven is in [state.md](state.md).
+
+Open:
+
+- [ ] Prove the three journeys on an installed home with funded principals:
+  Creator to Library to Player, Creator to Marketplace to Reader, and audio
+  playback. None has ever been run. The deferred proofs from the object,
+  reader and audio work all collapse into this one item; `state.md` records
+  what to run and what to look for.
+- [ ] Give protected audio a thumbnail. The player already prefers an image
+  track, then a poster, then controls alone, but nothing in the Runtime
+  populates `thumbnail_uri`, so protected audio always lands on the
+  controls-only frame. Needs a Runtime source for the poster — extracted cover
+  art, or a creator-supplied image — before the player's precedence can show.
+- [ ] Carry the media-integrity constraint into any frontend-only client.
+  CENC sample encryption is AES-128-CTR with no per-sample authentication tag,
+  which is inherent to the standard; tamper-evidence is the staged segment's
+  hash check, not the cipher. A client that fetches segments over a network
+  instead of reading Runtime-staged bytes must carry that check itself.
+  [Protected-content crypto review](docs/PROTECTED_CONTENT_CRYPTO_REVIEW.md)
+  documents it.
+- [ ] External cryptographic review itself remains open before any public dKMS
+  or production confidentiality claim. The #48 package is the input to that
+  review, not a substitute for it.
+
 ## Open verification controls
 
 The checks below stay open with their owning journey. They are not additional product scope. Use `scripts/public-install-operator-smoke.sh`, `scripts/public-install-identity-smoke.sh` and `scripts/audit-linux-runtime-portability.sh` at their applicable installed/release boundaries. Keep source/local Carrier setup proof green with `scripts/local-carrier-setup-smoke.sh`; publish the approved version's binary/artifact set so no-override public installed-path smokes use current code.

capsules/browser-engine-adapter/capsule.json

@@ -14,7 +14,7 @@
     "capabilities": [
       {
         "resource": "elastos://browser-engine/*",
-        "actions": ["read", "write"],
+        "actions": ["read", "write", "delete"],
         "operations": ["status", "readiness", "launch", "attach_stream", "close_page", "page_status", "diagnostics", "inspect", "input", "webrtc_signal"]
       }
     ],