Governed candidate corpus · review pending
Agentic systems and MCP
Tool protocols, capability boundaries, sandboxing, context degradation, coordination, deadlock, memory, injection, and evaluation traces.
Primary stress point
A successful tool call or benchmark trajectory does not establish least authority, resistance to prompt injection, reliable coordination, or safe autonomous operation.
Canonical factory depth
9 of 30 governed factory records are active canonical releases. The candidate corpus remains below the public line until each record independently passes exact-hash review and release.
Canonical public layer
Records that passed the gate
MCP tool result contracts
A source-bounded comparison record for mcp tool result contracts within agentic systems and mcp.
Inspect claims and provenance →
Human denial control for tool invocations
A source-bounded concept record for the human denial control the Model Context Protocol recommends for tool invocations, within agentic systems and MCP.
Inspect claims and provenance →
MCP client server roles
A source-bounded concept record for mcp client server roles within agentic systems and mcp.
Inspect claims and provenance →
MCP resource discovery
A source-bounded concept record for mcp resource discovery within agentic systems and mcp.
Inspect claims and provenance →
MCP tool input schemas
A source-bounded measurement record for mcp tool input schemas within agentic systems and mcp.
Inspect claims and provenance →
Context window position effects
A source-bounded mechanism record for context window position effects within agentic systems and mcp.
Inspect claims and provenance →
MCP capability negotiation
A source-bounded mechanism record for mcp capability negotiation within agentic systems and mcp.
Inspect claims and provenance →
MCP prompt templates
A source-bounded mechanism record for mcp prompt templates within agentic systems and mcp.
Inspect claims and provenance →
MCP tool discovery
A source-bounded method record for mcp tool discovery within agentic systems and mcp.
Inspect claims and provenance →
Below the public line
Draft inventory remains private until canonical release.
The public surface exposes aggregate capacity only. Draft identifiers, titles, routes, claims, source packets, and review blockers are excluded from crawlable pages and registries.
Withheld records
21
Withheld typed edges
25
Domain contract
The registry exposes the boundary, not just the content.
Graph records
30
Typed edges
34
Public canonical
9
Withheld
21
Read the governing architecture in the Epistemic Publication System.