Mint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).

Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.

Mint a post-quantum receipt for an arbitrary consequential agent action. Optional attestation: triggered_by_type (human/agent/script), triggered_by_source (api/cli/cron), decision_model (the LLM model used). Allowlisted to safe chars.

Verify a Trust Gate receipt from the certificate alone (offline). require_pq=True (default via OAO_REQUIRE_PQ) FAILS if the ML-DSA-65 or SLH-DSA legs are missing -- defends against signature-stripping downgrade attacks.

Two-phase decision gate. PREVIEW phase returns a risk assessment and preview_id without acting. COMMIT phase requires that preview_id back, verifies inputs match, mints a tamper-evident receipt, and returns an execution permit. Stateless. Optional attestation: triggered_by_type, triggered_by_source, decision_model.

Egress classification check. Scans a data sample for sensitivity markers (heuristic) and classifies as PUBLIC / INTERNAL / CONFIDENTIAL / RESTRICTED. Blocks RESTRICTED-class egress. Returns classification, retention info, and a tamper-evident receipt.

Vendor exit readiness drill. Checks local signing key, local model access (Ollama), and local data export capability. Returns step-by-step results and a tamper-evident receipt. Informational -- no side effects.