MCP Tool Factory

{"name":"mcp-tool-primitive","version":"1.0.0","definition":"A conversationally-negotiated capability with graduated permissions, hot-reload lifecycle, and cross-dimensional state continuity","components":{"conversational_negotiation":{"purpose":"Every tool interaction begins with negotiation (identity, intent, alignment)","protects_against":"Blind execution without user consent","witness":"identity_query_response_rate = 100%, alignment_check_before_execution = true"},"graduated_permissions":{"purpose":"Every tool has progressive trust ladder (read-only → read-write → execute → admin)","protects_against":"Binary all-or-nothing access, permission escalation","witness":"default_permission_level = 1, permission_upgrade_requires_approval = true"},"hot_reload_lifecycle":{"purpose":"Every tool supports evolution without restart","protects_against":"Conversation loss during updates, restart-required updates","witness":"reload_downtime_ms = 0, conversation_continuity_during_reload = true"},"state_continuity":{"purpose":"Every tool maintains conversation memory (WHO/WHAT/HOW dimensions)","protects_against":"Amnesia (forgetting who/what/how), permission re-negotiation","witness":"conversation_resumption_rate = 100%, permission_persistence = true"},"tool_isolation":{"purpose":"Each tool class maintains independent state and permissions","protects_against":"State/permission leakage between tools, security bypass via tool switching","witness":"tool_state_isolation = true, cross_tool_permission_leakage = 0%"}},"immutability":"This primitive is not negotiable. This primitive is not augmented. Capabilities emerge from removing constraints on this primitive, never from adding features to it.","emergence_principle":"Tool capabilities emerge from constraint removal, never from direct implementation. If you can implement a feature directly, you are doing it wrong."}