diff --git a/win32-x86_64/sha1sums.txt b/win32-x86_64/sha1sums.txt
index 9383a94..8c962e3 100644
--- a/win32-x86_64/sha1sums.txt
+++ b/win32-x86_64/sha1sums.txt
@@ -6,16 +6,16 @@ d592057c269d5be61487a20a68e931a4134adf0e *tclkit902.toml
 bcb78c47693c5d967baa4083de89f5d23188ecdf *tclsfe-x64.toml
 a6a23f2411f5a99eca7a1f7b7ee0c28c53f34523 *tclsh9.0.5-punk-bi-r1.exe
 f975f1c0812319efaaad9d4e4a0e3eb31f95dc33 *tclsh9.0.5-punk-bi-r1.toml
-6fa25cbe23474710ec853704f11fa223944c08e2 *tclsh9.0.5-punk-bi-r2.exe
-429c938a8d0dd7fd018314db19b30880bb4a55ee *tclsh9.0.5-punk-bi-r2.toml
+fc27580c3000444fb927b50e20a88633df160f9a *tclsh9.0.5-punk-bi-r2.exe
+d8c81c4e9802b091653ccbc2acecfa7facce5636 *tclsh9.0.5-punk-bi-r2.toml
 63bc8f57eab65c0ee2f8994916e82133e595ed21 *tclsh9.0.5-punk-r1.exe
 3e4f12ed67d5be02e271fa3f8e5b1e997569855d *tclsh9.0.5-punk-r1.toml
-5337179b8e0aef277f95a64a66317f1957235684 *tclsh9.0.5-punk-r2.exe
-964a6edd1c299edaf243a9ee7f7b2fe88ebedf73 *tclsh9.0.5-punk-r2.toml
+5657f632b2581908728d523fb16ed354e27c3fb0 *tclsh9.0.5-punk-r2.exe
+b59bef4a65125d12379ba4dbae2d855ee52322b3 *tclsh9.0.5-punk-r2.toml
 969ac1e1645db138304e93f72ab1b5e56727e48f *tclsh9.0.5-r1.exe
 f0d60e14c063c49fb1725a8ca058b315e12c1a22 *tclsh9.0.5-r1.toml
-16f5b2187ef1200cfe686e01f47fa7d302314964 *tclsh9.0.5-r2.exe
-ff5254b8a8ebc6abff9808edd28b7838a4e12aed *tclsh9.0.5-r2.toml
+8847b8418bf3b9e12873fffc5a2d1bbc9d903236 *tclsh9.0.5-r2.exe
+2a4ce4b640d2811fe8e35e5b379d48e46cb58b53 *tclsh9.0.5-r2.toml
 51d00ccc2e3c59e9b38c4607c928cb9d202d6c75 *tclsh901k.exe
 429aa753c5a5410e44fe0ec7aa6ab7b864824d9d *tclsh901k.toml
 ec9d058279c47e9abe27443793d864ffaf84a672 *tclsh901t.exe
diff --git a/win32-x86_64/tclsh9.0.5-punk-bi-r2.exe b/win32-x86_64/tclsh9.0.5-punk-bi-r2.exe
index 0f4cbaa..d64a43e 100644
Binary files a/win32-x86_64/tclsh9.0.5-punk-bi-r2.exe and b/win32-x86_64/tclsh9.0.5-punk-bi-r2.exe differ
diff --git a/win32-x86_64/tclsh9.0.5-punk-bi-r2.toml b/win32-x86_64/tclsh9.0.5-punk-bi-r2.toml
index 74425cd..d54ebba 100644
--- a/win32-x86_64/tclsh9.0.5-punk-bi-r2.toml
+++ b/win32-x86_64/tclsh9.0.5-punk-bi-r2.toml
@@ -1,8 +1,9 @@
-#punkshell runtime artifact metadata (G-117 schema v1) - generated by family_artifacts.tcl
-#sidecar copy: the embedded record carried inside the artifact's attached image
-#(punkbin-artifact.toml) plus the finished-binary facts (sha1, size, built).
-#The sidecar + sha1sums.txt remain the integrity authority.
-schema = 1
+#punkshell runtime artifact metadata (schema v2, class "runtime") - generated by
+#family_artifacts.tcl. Sidecar copy: the embedded record carried inside the
+#artifact's attached image (punkbin-artifact.toml) plus the finished-binary
+#facts (sha1, size, built). The sidecar + sha1sums.txt remain the integrity
+#authority.
+schema = 2
 
 [artifact]
 name = "tclsh9.0.5-punk-bi-r2.exe"
@@ -11,9 +12,9 @@ variant = "punk-bi"
 working_name = "tclsh9.0.5-punk-bi.exe"
 revision = 2
 target = "win32-x86_64"
-sha1 = "6fa25cbe23474710ec853704f11fa223944c08e2"
-size = 9386774
-built = "2026-07-24T03:20:12Z"
+sha1 = "fc27580c3000444fb927b50e20a88633df160f9a"
+size = 9337554
+built = "2026-08-06T09:19:07Z"
 #build_id: offline correlation key re-joining a renamed copy to its record;
 #identical in the embedded and sidecar copies (a deterministic identity digest,
 #not an integrity key - sha1 above is the integrity fact).
@@ -25,7 +26,7 @@ origin = "https://www.gitea1.intx.com.au/jn/punkbin"
 #verification layer.
 packager = "Julian Noble <julian@precisium.com.au>"
 project = "punkshell"
-project_url = "unrecorded"
+project_url = "https://www.gitea1.intx.com.au/jn/punkshell"
 #license: summary for the distributed artifact; component license texts ride
 #inside the attached image (tcl_library/license.terms etc).
 license = "TCL"
@@ -39,6 +40,10 @@ piperepl_opt_out = "TCLSH_PIPEREPL=0"
 attached_batteries = ["Thread 3.0.7", "vfs 1.5.0", "tcllib 2.0", "tcllibc 2.0", "Tk 9.0.2", "tklib 0.9"]
 
 [provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
 suite = "suite_tcl90"
 toolchain = "zig 0.16.0"
 optimize = "ReleaseFast"
diff --git a/win32-x86_64/tclsh9.0.5-punk-r2.exe b/win32-x86_64/tclsh9.0.5-punk-r2.exe
index bb8e007..4cb06d7 100644
Binary files a/win32-x86_64/tclsh9.0.5-punk-r2.exe and b/win32-x86_64/tclsh9.0.5-punk-r2.exe differ
diff --git a/win32-x86_64/tclsh9.0.5-punk-r2.toml b/win32-x86_64/tclsh9.0.5-punk-r2.toml
index 7e4cd0f..c8ad141 100644
--- a/win32-x86_64/tclsh9.0.5-punk-r2.toml
+++ b/win32-x86_64/tclsh9.0.5-punk-r2.toml
@@ -1,8 +1,9 @@
-#punkshell runtime artifact metadata (G-117 schema v1) - generated by family_artifacts.tcl
-#sidecar copy: the embedded record carried inside the artifact's attached image
-#(punkbin-artifact.toml) plus the finished-binary facts (sha1, size, built).
-#The sidecar + sha1sums.txt remain the integrity authority.
-schema = 1
+#punkshell runtime artifact metadata (schema v2, class "runtime") - generated by
+#family_artifacts.tcl. Sidecar copy: the embedded record carried inside the
+#artifact's attached image (punkbin-artifact.toml) plus the finished-binary
+#facts (sha1, size, built). The sidecar + sha1sums.txt remain the integrity
+#authority.
+schema = 2
 
 [artifact]
 name = "tclsh9.0.5-punk-r2.exe"
@@ -11,9 +12,9 @@ variant = "punk"
 working_name = "tclsh9.0.5-punk.exe"
 revision = 2
 target = "win32-x86_64"
-sha1 = "5337179b8e0aef277f95a64a66317f1957235684"
-size = 6614636
-built = "2026-07-24T03:20:12Z"
+sha1 = "5657f632b2581908728d523fb16ed354e27c3fb0"
+size = 6589788
+built = "2026-08-06T09:19:07Z"
 #build_id: offline correlation key re-joining a renamed copy to its record;
 #identical in the embedded and sidecar copies (a deterministic identity digest,
 #not an integrity key - sha1 above is the integrity fact).
@@ -25,7 +26,7 @@ origin = "https://www.gitea1.intx.com.au/jn/punkbin"
 #verification layer.
 packager = "Julian Noble <julian@precisium.com.au>"
 project = "punkshell"
-project_url = "unrecorded"
+project_url = "https://www.gitea1.intx.com.au/jn/punkshell"
 #license: summary for the distributed artifact; component license texts ride
 #inside the attached image (tcl_library/license.terms etc).
 license = "TCL"
@@ -39,6 +40,10 @@ piperepl_opt_out = "TCLSH_PIPEREPL=0"
 attached_batteries = ["Thread 3.0.7", "vfs 1.5.0", "tcllib 2.0", "tcllibc 2.0"]
 
 [provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
 suite = "suite_tcl90"
 toolchain = "zig 0.16.0"
 optimize = "ReleaseFast"
diff --git a/win32-x86_64/tclsh9.0.5-r2.exe b/win32-x86_64/tclsh9.0.5-r2.exe
index 2607a50..b354ab1 100644
Binary files a/win32-x86_64/tclsh9.0.5-r2.exe and b/win32-x86_64/tclsh9.0.5-r2.exe differ
diff --git a/win32-x86_64/tclsh9.0.5-r2.toml b/win32-x86_64/tclsh9.0.5-r2.toml
index 95bbb92..515ab87 100644
--- a/win32-x86_64/tclsh9.0.5-r2.toml
+++ b/win32-x86_64/tclsh9.0.5-r2.toml
@@ -1,8 +1,9 @@
-#punkshell runtime artifact metadata (G-117 schema v1) - generated by family_artifacts.tcl
-#sidecar copy: the embedded record carried inside the artifact's attached image
-#(punkbin-artifact.toml) plus the finished-binary facts (sha1, size, built).
-#The sidecar + sha1sums.txt remain the integrity authority.
-schema = 1
+#punkshell runtime artifact metadata (schema v2, class "runtime") - generated by
+#family_artifacts.tcl. Sidecar copy: the embedded record carried inside the
+#artifact's attached image (punkbin-artifact.toml) plus the finished-binary
+#facts (sha1, size, built). The sidecar + sha1sums.txt remain the integrity
+#authority.
+schema = 2
 
 [artifact]
 name = "tclsh9.0.5-r2.exe"
@@ -11,9 +12,9 @@ variant = "plain"
 working_name = "tclsh9.0.5.exe"
 revision = 2
 target = "win32-x86_64"
-sha1 = "16f5b2187ef1200cfe686e01f47fa7d302314964"
-size = 6611524
-built = "2026-07-24T03:20:12Z"
+sha1 = "8847b8418bf3b9e12873fffc5a2d1bbc9d903236"
+size = 6586680
+built = "2026-08-06T09:19:07Z"
 #build_id: offline correlation key re-joining a renamed copy to its record;
 #identical in the embedded and sidecar copies (a deterministic identity digest,
 #not an integrity key - sha1 above is the integrity fact).
@@ -25,7 +26,7 @@ origin = "https://www.gitea1.intx.com.au/jn/punkbin"
 #verification layer.
 packager = "Julian Noble <julian@precisium.com.au>"
 project = "punkshell"
-project_url = "unrecorded"
+project_url = "https://www.gitea1.intx.com.au/jn/punkshell"
 #license: summary for the distributed artifact; component license texts ride
 #inside the attached image (tcl_library/license.terms etc).
 license = "TCL"
@@ -37,6 +38,10 @@ piperepl = false
 attached_batteries = ["Thread 3.0.7", "vfs 1.5.0", "tcllib 2.0", "tcllibc 2.0"]
 
 [provenance]
+#class: build-origin class (schema v2): suite-built | third-party | local.
+#NOTE for line-based consumers: '[artifact] class' above is the first 'class ='
+#line in the record by construction - whole-text single-key scans see that one.
+class = "suite-built"
 suite = "suite_tcl90"
 toolchain = "zig 0.16.0"
 optimize = "ReleaseFast"
diff --git a/win32-x86_64/tools/punkres-x86_64-windows-0.3.1.exe b/win32-x86_64/tools/punkres-x86_64-windows-0.3.1.exe
index 23ffd9a..939dddb 100644
Binary files a/win32-x86_64/tools/punkres-x86_64-windows-0.3.1.exe and b/win32-x86_64/tools/punkres-x86_64-windows-0.3.1.exe differ
diff --git a/win32-x86_64/tools/punkzip-x86_64-windows-2.4.0.exe b/win32-x86_64/tools/punkzip-x86_64-windows-2.4.0.exe
index eae3dbf..9075301 100644
Binary files a/win32-x86_64/tools/punkzip-x86_64-windows-2.4.0.exe and b/win32-x86_64/tools/punkzip-x86_64-windows-2.4.0.exe differ
diff --git a/win32-x86_64/tools/sha1sums.txt b/win32-x86_64/tools/sha1sums.txt
index eb8c58c..4eebd5a 100644
--- a/win32-x86_64/tools/sha1sums.txt
+++ b/win32-x86_64/tools/sha1sums.txt
@@ -1,5 +1,5 @@
-166cd17628f6f9457f927eb67d34c9f01c5c5646 *punkres-x86_64-windows-0.3.1.exe
-2008b51ffa26e31faa0e76ea1e229ee1cec16395 *punkzip-x86_64-windows-2.4.0.exe
+85df432eda82451b10b107a9bd8a1b00aa32fc86 *punkres-x86_64-windows-0.3.1.exe
+8b4d756d9490637751e842b90bbeda6cf763f2c2 *punkzip-x86_64-windows-2.4.0.exe
 667b17ee6f015b6cf2edddcee7ff875e24eef26c *zig-x86_64-windows-0.14.1.zip
 d02b2e4321297a0b7347c13a2e54bf866c2d62a5 *zig-x86_64-windows-0.14.1.zip.minisig
 63cb16fa103734414ee981fa1e9567c41f26e965 *zig-x86_64-windows-0.15.1.zip