hayatepy · yhay81 · Jul 30, 2026 · Jul 30, 2026
diff --git a/data/ecosystem.toml b/data/ecosystem.toml
@@ -1,8 +1,8 @@
 schema_version = 1
 as_of = "2026-07-30"
 source_repository = "hayatepy/.github"
-source_commit = "1496dc87b780ff81470518df468a18bd6783ebce"
-compatibility_url = "https://github.com/hayatepy/.github/blob/1496dc87b780ff81470518df468a18bd6783ebce/docs/COMPATIBILITY.md"
+source_commit = "039e629e1b4dfa3ec767cfd209e32f6028dd8f56"
+compatibility_url = "https://github.com/hayatepy/.github/blob/039e629e1b4dfa3ec767cfd209e32f6028dd8f56/docs/COMPATIBILITY.md"
 
 [[packages]]
 name = "hayate"
@@ -36,13 +36,13 @@ source_commit = "938751d0f225def770d6ae47e1da3da40829c8d1"
 
 [[packages]]
 name = "hayate-mcp"
-version = "0.12.0"
+version = "0.12.1"
 status = "Published alpha"
 role = "MCP 2026-07-28 Streamable HTTP and discovery"
 use_when = "Expose MCP tools on ASGI or native Cloudflare Workers."
 repository = "https://github.com/hayatepy/hayate-mcp"
 pypi = "https://pypi.org/project/hayate-mcp/"
-source_commit = "175e6ed85a5e9af3e2fd9fcbf8886594bd2f6723"
+source_commit = "249b2df4bc41a0603e168b22c53815e31d2d5711"
 
 [[packages]]
 name = "hayate-openapi"
@@ -99,4 +99,4 @@ status = "Reference application"
 role = "Executable production integration"
 use_when = "Review tested trust boundaries and deployment choices before shipping."
 repository = "https://github.com/hayatepy/golden-app"
-source_commit = "cfa07c1d129b588b3c539a6d6c9fcdd443cefbf7"
+source_commit = "87e8e907c769ffc5ff24926470eb1ec7641f63b5"
diff --git a/docs/contribute.md b/docs/contribute.md
@@ -25,7 +25,7 @@ conventional ASGI, MCP or agent backends, and Cloudflare Workers. It records
 time to first test, local request, deployment, dependency footprint, and every
 maintainer intervention.
 
-[Read the bounded program and apply](https://github.com/hayatepy/.github/blob/main/docs/DESIGN_PARTNERS.md){ .md-button }
+[Apply through the public GitHub form](https://github.com/hayatepy/.github/issues/new?template=design_partner.yml){ .md-button }
 
 ## Security
 

diff --git a/docs/ecosystem/index.md b/docs/ecosystem/index.md
@@ -4,22 +4,22 @@
 
 Choose packages by the boundary your application needs. The core stays small; capabilities are explicit packages with their own release and evidence.
 
-This snapshot is dated **2026-07-30** and is pinned to [`hayatepy/.github` at `1496dc87b780`](https://github.com/hayatepy/.github/tree/1496dc87b780ff81470518df468a18bd6783ebce). Every package is pre-1.0; check the compatibility snapshot before combining versions.
+This snapshot is dated **2026-07-30** and is pinned to [`hayatepy/.github` at `039e629e1b4d`](https://github.com/hayatepy/.github/tree/039e629e1b4dfa3ec767cfd209e32f6028dd8f56). Every package is pre-1.0; check the compatibility snapshot before combining versions.
 
 | Project | Version | Responsibility | Release state |
 |---|---:|---|---|
 | [`hayate`](https://github.com/hayatepy/hayate) | [`0.15.2`](https://pypi.org/project/hayate/) | Core framework and native ASGI, Workers, and Lambda adapters | Published alpha |
 | [`create-hayate`](https://github.com/hayatepy/create-hayate) | [`0.13.2`](https://pypi.org/project/create-hayate/) | Composable applications with drift-checked first-party TypeScript clients | Published alpha |
 | [`hayate-auth`](https://github.com/hayatepy/hayate-auth) | [`0.10.4`](https://pypi.org/project/hayate-auth/) | Sessions, API keys, OAuth, passkeys, and authorization server | Published alpha; independent audit pending |
-| [`hayate-mcp`](https://github.com/hayatepy/hayate-mcp) | [`0.12.0`](https://pypi.org/project/hayate-mcp/) | MCP 2026-07-28 Streamable HTTP and discovery | Published alpha |
+| [`hayate-mcp`](https://github.com/hayatepy/hayate-mcp) | [`0.12.1`](https://pypi.org/project/hayate-mcp/) | MCP 2026-07-28 Streamable HTTP and discovery | Published alpha |
 | [`hayate-openapi`](https://github.com/hayatepy/hayate-openapi) | [`0.8.1`](https://pypi.org/project/hayate-openapi/) | OpenAPI 3.1, Scalar, and generated zero-runtime TypeScript clients | Published alpha |
 | [`hayate-sql`](https://github.com/hayatepy/hayate-sql) | [`0.1.1`](https://pypi.org/project/hayate-sql/) | Checked SQL contracts and typed query facades | Published alpha |
 | [`hayate-fetch`](https://github.com/hayatepy/hayate-fetch) | [`0.1.3`](https://pypi.org/project/hayate-fetch/) | Portable outbound WHATWG-style fetch | Published alpha |
 | [`hayate-admin`](https://github.com/hayatepy/hayate-admin) | `0.2.0` | Explicit checked-SQL operational administration | Pre-release source |
 | [`hayate-htmx`](https://github.com/hayatepy/hayate-htmx) | `0.2.0` | Hypermedia, Jinja, htmx, fragments, and SSE | Pre-release source |
 | [`golden-app`](https://github.com/hayatepy/golden-app) | `0.1.0` | Executable production integration | Reference application |
 
-[Open the tested compatibility snapshot](https://github.com/hayatepy/.github/blob/1496dc87b780ff81470518df468a18bd6783ebce/docs/COMPATIBILITY.md)
+[Open the tested compatibility snapshot](https://github.com/hayatepy/.github/blob/039e629e1b4dfa3ec767cfd209e32f6028dd8f56/docs/COMPATIBILITY.md)
 
 ## hayate
 
@@ -49,7 +49,7 @@ Add first-party identity or protect an HTTP or MCP resource server.
 
 Expose MCP tools on ASGI or native Cloudflare Workers.
 
-**Current evidence:** Published alpha, version `0.12.0` · [source at `175e6ed85a5e`](https://github.com/hayatepy/hayate-mcp/tree/175e6ed85a5e9af3e2fd9fcbf8886594bd2f6723)
+**Current evidence:** Published alpha, version `0.12.1` · [source at `249b2df4bc41`](https://github.com/hayatepy/hayate-mcp/tree/249b2df4bc41a0603e168b22c53815e31d2d5711)
 
 [Repository](https://github.com/hayatepy/hayate-mcp) · [PyPI](https://pypi.org/project/hayate-mcp/)
 
@@ -97,6 +97,6 @@ Build progressively enhanced server-rendered applications without a JavaScript S
 
 Review tested trust boundaries and deployment choices before shipping.
 
-**Current evidence:** Reference application, version `0.1.0` · [source at `cfa07c1d129b`](https://github.com/hayatepy/golden-app/tree/cfa07c1d129b588b3c539a6d6c9fcdd443cefbf7)
+**Current evidence:** Reference application, version `0.1.0` · [source at `87e8e907c769`](https://github.com/hayatepy/golden-app/tree/87e8e907c769ffc5ff24926470eb1ec7641f63b5)
 
 [Repository](https://github.com/hayatepy/golden-app)
diff --git a/docs/evidence/compatibility.md b/docs/evidence/compatibility.md
@@ -4,7 +4,7 @@ The current public snapshot is dated **2026-07-30**. All packages remain
 pre-1.0, so compatible versions must be selected from evidence rather than
 assumed from package names.
 
-[Open the immutable compatibility snapshot](https://github.com/hayatepy/.github/blob/1496dc87b780ff81470518df468a18bd6783ebce/docs/COMPATIBILITY.md){ .md-button .md-button--primary }
+[Open the immutable compatibility snapshot](https://github.com/hayatepy/.github/blob/039e629e1b4dfa3ec767cfd209e32f6028dd8f56/docs/COMPATIBILITY.md){ .md-button .md-button--primary }
 
 ## Golden runtime lock
 
@@ -25,6 +25,8 @@ assumed from package names.
   client and validates it against a real Hayate ASGI process.
 - `create-hayate 0.13.2` propagates the client, its types, and drift checks
   into generated projects.
+- `hayate-mcp 0.12.1` passes the official 70-case MCP 2026-07-28
+  conformance suite, real Workerd execution, and release provenance checks.
 - Its [release workflow](https://github.com/hayatepy/create-hayate/actions/runs/30502570222)
   resolved and imported all 52 supported backend compositions before publishing
   the signed, attested wheel.
@@ -34,9 +36,9 @@ assumed from package names.
   evidence JSON SHA-256 is
   `f207dcd979c695508c4bf672432848e5469ebf4ab1b58b0f2c4fecb8e004af05`.
 - The [golden application main
-  run](https://github.com/hayatepy/golden-app/actions/runs/30494459938)
+  run](https://github.com/hayatepy/golden-app/actions/runs/30504943669)
   executes authenticated path, query, JSON, multipart, delete, and error
-  flows through the compiled client.
+  flows through the compiled client and locks `hayate-mcp 0.12.1`.
 
 The generated [family map](../ecosystem/index.md) pins each listed project to
 the source commit used for this site snapshot.