Score a proposed agent action against the active Purpose Anchor.

Returns a verdict (EXECUTE / CLARIFY / ESCALATE) plus a 6-dimension score breakdown across purpose, scope, boundary, tool, chain, and codebase_fidelity. Each call also mints an unsigned integrity-hash receipt (shared telos-receipt envelope) that telos_verify -- and the telos-trust-surface -- can verify with no translation.

Args: action_name: Name of the action being proposed (e.g. "write_file"). action_params: Parameter dict the agent intends to pass to the action. agent_id: Stable identifier of the agent proposing the action.

Returns: Dict with keys: verdict, composite_score, scores, agent_id, action_name, receipt, stub, engine.

Verify an unsigned integrity-hash receipt offline.

Recomputes the receipt's integrity hash over its canonical payload using the shared telos-receipt contract -- the same verifier the trust surface runs -- so the answer matches end-to-end. Key-free; not a signature check.

Args: receipt_json: The receipt to verify, either as a JSON string or as a JSON object (clients may pass either; both are accepted).

Returns: Dict with keys: match (bool), stated_integrity_hash, recomputed_integrity_hash, covered_fields, signing_status, note, reason.

Return the active Purpose Anchor for an agent.

The PA is the governance contract: purpose statement, hard boundaries, declared scope, allowed tool list, and the centroid dimensions used to score the agent's actions.

Args: agent_id: Stable identifier of the agent whose PA to load.

Returns: Dict with keys: agent_id, pa_id, purpose, boundaries, scope, allowed_tools, centroid_dimensions, compiled_at, stub.

Return audit chain entries within a time window.

Capped at 100 entries to keep MCP payloads bounded. For deeper queries, use the telos://audit/{date} resource per-day.

Args: start_iso: ISO-8601 window start (e.g. "2026-04-25T00:00:00Z"). end_iso: ISO-8601 window end (must be later than start).

Returns: Dict with keys: entries (list, max 100), count, capped (bool), window {start, end}.

Queue a CCRS counterfactual replay against an alternate config.

CCRS Mode C re-runs the lifecycle that produced receipt_id under a different governance configuration (alt thresholds, alt centroids, alt PA) and reports verdict deltas. Returns immediately with a job id; poll the result via telos://replay/{job_id} once available.

Args: receipt_id: ID of the receipt to replay against. alt_config_path: Path to the alternate config (YAML) to apply.

Returns: Dict with keys: job_id, receipt_id, alt_config_path, status, queued_at, estimated_runtime_seconds, result_uri, stub.