diff --git a/.npmignore b/.npmignore
new file mode 100644
index 0000000..8c2d154
--- /dev/null
+++ b/.npmignore
@@ -0,0 +1,28 @@
+.github/
+.verifrax/
+.vscode/
+docs/
+tests/
+fixtures/
+evidence/
+bodies/
+compliance/
+id/
+integrations/
+interfaces/
+ledger/
+observability/
+policies/
+policy/
+runtime/
+CHANGELOG.md
+CITATION.cff
+CONTRACT.md
+CONTRIBUTING.md
+DEATH.md
+FAILURE.md
+GOVERNANCE.md
+SECURITY.md
+SCOPE.md
+STATUS.md
+VERSION.md
diff --git a/bin/corpiform b/bin/corpiform
new file mode 100755
index 0000000..b1c4541
--- /dev/null
+++ b/bin/corpiform
@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+COMMAND="${1:-help}"
+
+case "$COMMAND" in
+  help|--help|-h)
+    cat <<'USAGE'
+CORPIFORM — deterministic execution-control substrate
+
+Usage:
+  corpiform help
+  corpiform doctor
+  corpiform inspect
+  corpiform freeze
+  corpiform kill
+  corpiform rotate-keys
+
+Commands:
+  help         Show this help surface
+  doctor       Run non-invasive integrity checks
+  inspect      Print current system inspection data
+  freeze       Permanently freeze future execution
+  kill         Permanently terminate the system
+  rotate-keys  Record signing-key rotation event
+
+Boundary:
+  This package is a shell-based execution substrate.
+  It is not a JS library API.
+  It does not mint authority.
+  It executes or refuses under explicit authority.
+USAGE
+    ;;
+  doctor)
+    exec tools/doctor.sh
+    ;;
+  inspect)
+    exec tools/inspect.sh
+    ;;
+  freeze)
+    exec tools/freeze.sh
+    ;;
+  kill)
+    exec tools/kill.sh
+    ;;
+  rotate-keys)
+    exec tools/rotate_keys.sh
+    ;;
+  *)
+    echo "REFUSE: unknown command '$COMMAND'" >&2
+    echo "Use: corpiform help" >&2
+    exit 1
+    ;;
+esac
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..575cdc2
--- /dev/null
+++ b/package.json
@@ -0,0 +1,44 @@
+{
+  "name": "@verifrax/corpiform",
+  "version": "0.1.3",
+  "description": "Deterministic execution-control substrate for authority-gated actions in the Verifrax stack.",
+  "license": "Apache-2.0",
+  "private": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Verifrax/CORPIFORM.git"
+  },
+  "homepage": "https://github.com/Verifrax/CORPIFORM#readme",
+  "bugs": {
+    "url": "https://github.com/Verifrax/CORPIFORM/issues"
+  },
+  "files": [
+    "bin",
+    "execution",
+    "receipts",
+    "denials",
+    "revocation",
+    "seals",
+    "tools",
+    "README.md",
+    "LICENSE",
+    "PACKAGE_BOUNDARY.md"
+  ],
+  "keywords": [
+    "verifrax",
+    "corpiform",
+    "authority",
+    "execution",
+    "deterministic",
+    "receipt",
+    "denial",
+    "shell"
+  ],
+  "bin": {
+    "corpiform": "bin/corpiform"
+  },
+  "scripts": {
+    "test": "./bin/corpiform help >/dev/null",
+    "smoke": "./bin/corpiform help"
+  }
+}