[ELRdn]

Guilduo now accepts private PNG/JPEG/WebP task references and results through Web and MCP, including image replies from Human reviews. Up to six registered Agent stages retain reports and returned images, enforce Registry-required Human checks, and separate final acceptance from Quest completion and scoring. Recurrence shares date/reward/reminder rules.

The featured Guild decision card displays incoming images directly on PC and mobile and opens the existing viewer in one tap. Recognized Guilduo result links navigate within the mounted app, preserving replies, unsent images, explicit confirmation and URL/history. Activity reads the stored Handoff state and actual event actor; Agent-state labels follow the current locale.

Validation and production:

• Real Claude Desktop → Codex MCP relay completed with both saved owner approvals. Both registered Agents read the original and returned saved results; all three PNG originals match byte-for-byte and by SHA-256. The final Handoff is accepted; the source QA Quest remains active, unscored and not done. This verifies unchanged-image transfer, not image editing.
• Refreshed host metadata exposes all 63 tools, including image and relay tools in this conversation. No Agent impersonation or extra OAuth permissions were used.
• Six-stage fixtures require all six saved Human approvals and reject a seventh stage without mutation. Seven focused domain/HTTP tests pass. The HTTP browser verifier passes 36 image/navigation/activity checks, including malformed/missing actors and retained drafts. Type checks, design check and build pass.
• Owner-reported Pixel 9 acceptance covers replies/attachments, inline images, enlargement, Push receipt/request navigation and TalkBack. The later result-link change is verified by automated PC/mobile browser checks; a fresh physical-device run is not claimed.

Final CI passed on c190d1d: 824 tests passed, 0 failed and 4 skipped, Claude package checks 5/5, all 36 HTTP browser checks and the existing launch/accessibility/entry/sync verifiers. Web deployment passed on the same commit and confirmed ready at 2026-10-31 09:03:17 UTC / 18:03:17 JST. Cache and actual upload-archive guards passed (107 current / 21 retained assets). The public entry serves allForAdhd-C0-WCknF.js with the recorded-actor guard; the previous allForAdhd-DMDNkAWc.js still returns HTTP 200. Authenticated production Guild startup passed, and the 17:16 Claude operation now visibly names the saved Claude actor while the 17:33 Codex operation still names Codex.

The D1/Worker image/relay deployment remains on 257add3 with migration 0018, private R2 and Images binding; no Worker change is needed for the UI follow-ups. Detailed evidence and chronology: docs/practical-v1.md.

Stripe Live, Credits, commercial Jev, advertising and paid-launch approval retain separate configuration/acceptance gates. Cross-owner denial is verified in fixtures, not with another real person's production account. The unchanged dependency lockfile has 20 recorded advisories (4 moderate / 15 high / 1 critical); dependency remediation is outside this change.

Keep this PR open and unmerged as requested. Production uses the verified branch through the existing manual workflow with cache and retained-asset guards.