@@ -42,10 +42,15 @@
   compatibility `/idl/:code_hash` route all enforce the same schema and
   executable-suffix contract. Pin all 17 current upstream client vectors and
   seven derive/example IDLs, and add an opt-in test that runs the actual
-  upstream Rust client against Registry's compatibility handler. Add a runnable
-  Rust example, website lookup/detail surfaces, and VS Code validate/bind/fetch
-  commands. Name the website tab `LS-IDL` rather than the ambiguous
-  `Interface`, and align its lookup panel with the full-width Browse surface.
+  upstream Rust client against Registry's compatibility handler. Extend that
+  opt-in acceptance through the fixes merged upstream in `ckb_sudt_script`
+  PR #7, real RISC-V contract builds, LS-IDL-bound ELFs, and all 25 example
+  CKB-VM tests without a local compatibility overlay. Add a
+  runnable Rust example, website lookup/detail surfaces, and VS Code
+  validate/bind/fetch commands. Name the website tab `LS-IDL` rather than the
+  ambiguous `Interface`, give it the canonical `/registry/LS-IDL` route with a
+  permanent redirect from `/registry/interface`, and align its lookup panel
+  with the full-width Browse surface.
   Keep implementation correctness and security review outside this
   byte-identity claim.
 - Ship the 0.24 package and Registry trust closure, informed by Sui Move's
 
@@ -433,7 +433,8 @@ use:
   a sibling CKB checkout; see `docs/CELLSCRIPT_CKB_STD_COMPAT.md`.
 - `./scripts/cellscript_ls_idl_upstream_acceptance.sh` — exact-pinned LS-IDL
   derive, client, and example-script compatibility, including the actual
-  upstream Rust client calling the Registry compatibility handler; see
+  upstream Rust client calling the Registry compatibility handler, unmodified
+  upstream RISC-V builds, LS-IDL-bound ELFs, and example CKB-VM execution; see
   `docs/CELLSCRIPT_LS_IDL_REGISTRY_PROFILE.md`.
 - `./scripts/cellscript_cellfabric_bridge_smoke.sh` — CellFabric bridge smoke
   test; see `docs/CELLSCRIPT_CELLFABRIC_BRIDGE.md`.
 
@@ -177,7 +177,9 @@ cellc artifact ls-idl fetch \
 
 The VS Code extension exposes the validate, bind, and fetch operations through
 the command palette. The Registry website exposes package-bound LS-IDL facts
-and a direct Script-identity lookup under an explicit `LS-IDL` tab.
+and a direct Script-identity lookup under an explicit `LS-IDL` tab at
+`https://cellscript.dev/registry/LS-IDL`. The retired
+`/registry/interface` route redirects permanently to that canonical address.
 
 ## Storage And Admission
 
@@ -203,7 +205,7 @@ proposal:
 - `ckb-idl-client` commit
   `7d883e0abccba56d423449b673567ee817747936`;
 - `ckb_sudt_script` commit
-  `33bc56d84e8a181d855da5b82a87740825017f29`; and
+  `c20ce3f4813100b78076fd447a0234bb5ad46bbb`; and
 - upstream `test-vectors.json` SHA-256
   `a9a6dca4fd0c5fcd2ca7aea6468784be7fdb29d6274049f07090cbab0ce9c1bb`.
 
@@ -226,15 +228,21 @@ The script requires clean checkouts at the pinned commits, checks every raw
 fixture hash, runs the derive and client library tests plus the example
 scripts' structural witness tests, validates all seven upstream IDLs with
 `cellc`, and runs the actual upstream Rust client against the Registry
-`/idl/:code_hash` handler. That final probe covers fetch, raw-byte SHA-256
-verification, cache use, and linear witness decoding.
+`/idl/:code_hash` handler. That probe covers fetch, raw-byte SHA-256
+verification, cache use, and linear witness decoding. It then creates a
+disposable worktree, builds all three example contracts from the unmodified
+merged upstream source with Rust 1.97.1, binds the simple and timelock ELF files
+to their exact IDL bytes, and runs all 25 upstream CKB-VM tests against the
+bound executables.
 
 This remains an opt-in compatibility tool rather than release-gate evidence.
 At the pinned client commit, the complete vector and library tests pass; the
 repository's separate property-test suite still contains Blake2b commitment
-fixtures even though production `verify` uses SHA-256. The full example-script
-VM suite also requires its RISC-V contracts to be built first. These upstream
-conditions are recorded rather than hidden or promoted into Registry claims.
+fixtures even though production `verify` uses SHA-256. [Upstream PR
+#7](https://github.com/OWK50GA/ckb_sudt_script/pull/7) merged CKB's
+`passes=lower-atomic` build setting and the explicit timelock `HeaderDep`
+loading path, so the acceptance pin now tests the unmodified upstream source
+without a CellScript compatibility overlay.
 
 The upstream mini Registry example parses and reserialises JSON, so it is not
 used as the byte-preserving production storage contract. CellScript follows
 
@@ -9,7 +9,20 @@ SCRIPTS_REPO="${CKB_IDL_SCRIPTS_REPO:-$REPO_ROOT/../ckb_sudt_script}"
 
 DERIVE_COMMIT="e7ee35766b9084099e9d840ccd37d2b5d40074a1"
 CLIENT_COMMIT="7d883e0abccba56d423449b673567ee817747936"
-SCRIPTS_COMMIT="33bc56d84e8a181d855da5b82a87740825017f29"
+SCRIPTS_COMMIT="c20ce3f4813100b78076fd447a0234bb5ad46bbb"
+RUNTIME_RUST_TOOLCHAIN="1.97.1"
+RUNTIME_PARENT=""
+RUNTIME_REPO=""
+
+cleanup_runtime_worktree() {
+  if [[ -n "$RUNTIME_REPO" && -d "$RUNTIME_REPO" ]]; then
+    git -C "$SCRIPTS_REPO" worktree remove --force "$RUNTIME_REPO" >/dev/null 2>&1 || true
+  fi
+  if [[ -n "$RUNTIME_PARENT" && -d "$RUNTIME_PARENT" ]]; then
+    rmdir "$RUNTIME_PARENT" >/dev/null 2>&1 || true
+  fi
+}
+trap cleanup_runtime_worktree EXIT
 
 usage() {
   cat <<'USAGE'
@@ -18,8 +31,10 @@ Usage: scripts/cellscript_ls_idl_upstream_acceptance.sh \
 
 Runs the opt-in LS-IDL compatibility check against clean, pinned upstream
 checkouts. It validates upstream IDL bytes, runs upstream schema/wire tests,
-and executes the actual ckb-idl-client Rust crate against CellScript Registry's
-/idl/:code_hash compatibility handler.
+executes the actual ckb-idl-client Rust crate against CellScript Registry's
+/idl/:code_hash compatibility handler, and builds the merged upstream runtime
+fixes in a disposable worktree before binding and running the example Lock
+Scripts in CKB-VM.
 
 This script is not part of any CellScript release gate.
 USAGE
@@ -63,7 +78,7 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
-for command in cargo git node npm sha256sum; do
+for command in cargo git make mktemp node npm sha256sum; do
   if ! command -v "$command" >/dev/null 2>&1; then
     echo "missing required command: $command" >&2
     exit 127
@@ -146,4 +161,27 @@ CELLSCRIPT_LS_IDL_CARGO_TARGET_DIR="$REPO_ROOT/target/ls-idl-upstream-client" \
   npm --prefix "$REPO_ROOT/services/registry-api" test -- \
     test/registry-api.test.ts -t "interoperates with the pinned upstream Rust client"
 
+RUNTIME_PARENT="$(mktemp -d "${TMPDIR:-/tmp}/cellscript-ls-idl-runtime.XXXXXX")"
+RUNTIME_REPO="$RUNTIME_PARENT/ckb_sudt_script"
+git -C "$SCRIPTS_REPO" worktree add --quiet --detach "$RUNTIME_REPO" "$SCRIPTS_COMMIT"
+
+RUSTUP_TOOLCHAIN="$RUNTIME_RUST_TOOLCHAIN" RUSTC_WRAPPER= \
+  make -C "$RUNTIME_REPO" build CARGO_ARGS=--locked
+
+BOUND_DIR="$RUNTIME_REPO/build/ls-idl-bound"
+mkdir -p "$BOUND_DIR"
+for script_name in simple-lock timelock-lock; do
+  idl_path="$RUNTIME_REPO/contracts/$script_name/idl.json"
+  executable_path="$RUNTIME_REPO/build/release/$script_name"
+  bound_path="$BOUND_DIR/$script_name"
+  cargo run --quiet --locked --manifest-path "$REPO_ROOT/Cargo.toml" -p cellscript --bin cellc -- \
+    artifact ls-idl bind --idl "$idl_path" --executable "$executable_path" --output "$bound_path"
+  cargo run --quiet --locked --manifest-path "$REPO_ROOT/Cargo.toml" -p cellscript --bin cellc -- \
+    artifact ls-idl validate --idl "$idl_path" --executable "$bound_path"
+  cp "$bound_path" "$executable_path"
+done
+
+RUSTUP_TOOLCHAIN="$RUNTIME_RUST_TOOLCHAIN" RUSTC_WRAPPER= \
+  cargo test --locked --manifest-path "$RUNTIME_REPO/Cargo.toml" -p tests -- --test-threads=1
+
 echo "Pinned LS-IDL upstream compatibility acceptance passed."
@@ -11,7 +11,7 @@ Pinned repositories:
 - [`OWK50GA/ckb-idl-client`](https://github.com/OWK50GA/ckb-idl-client) at
   `7d883e0abccba56d423449b673567ee817747936`; and
 - [`OWK50GA/ckb_sudt_script`](https://github.com/OWK50GA/ckb_sudt_script) at
-  `33bc56d84e8a181d855da5b82a87740825017f29`.
+  `c20ce3f4813100b78076fd447a0234bb5ad46bbb`.
 
 Raw-byte SHA-256 pins:
 
@@ -35,8 +35,19 @@ decodes them before hashing or validating them.
 one unknown-type vector still fails closed at Registry schema admission. The
 separate `scripts/cellscript_ls_idl_upstream_acceptance.sh` test uses clean
 checkouts at these commits and runs the actual upstream Rust client against
-the Registry compatibility handler.
-
-This evidence establishes schema compatibility, exact-byte preservation, and
-the SHA-256 suffix contract. It does not establish Lock Script semantics,
-signature correctness, transaction validity, or a security audit.
+the Registry compatibility handler. It then creates a disposable worktree,
+builds all three example contracts from the unmodified merged upstream source,
+binds the two Lock Script ELFs to their exact IDL bytes, and runs all 25
+upstream CKB-VM tests against the bound artifacts.
+
+[Upstream PR #7](https://github.com/OWK50GA/ckb_sudt_script/pull/7) merged the
+two runtime fixes first identified by this acceptance work: the contract
+Makefiles enable CKB's `lower-atomic` LLVM pass, and the timelock reads the
+transaction `HeaderDep` included by its tests. CellScript no longer applies a
+compatibility overlay for these paths.
+
+This evidence establishes schema compatibility, exact-byte preservation, the
+SHA-256 suffix contract, and local CKB-VM execution of the unmodified upstream
+examples.
+It does not establish signature correctness, production transaction validity,
+or a security audit.