Describe this standalone Living Stack MCP server, its enforced boundaries, configured risk policy, and available capability classes. This does not inspect a customer session.

Create an isolated capability session with an immutable scope, goal, retention period, and hard between-action budget ceiling.

Read the current scope hash, lifecycle status, budget, pending authorization count, and ledger integrity for one session.

Add redacted, provenance-labeled context to the current session. Stored context remains historical until independently reverified.

Search only the current session context using deterministic lexical retrieval and return provenance plus receipt hashes.

Evaluate an intended action against server-owned risk policy and the session budget. The default policy denies external and destructive risks, and this server never executes the action itself.

Consume one prior authorization, reconcile reserved cost, and append a tamper-evident outcome with typed evidence references.

Determine whether a completion, working, integrity, or deployment claim has fresh successful typed evidence in the verified session ledger.

Redact and persist a bounded state object bound to the session scope and current ledger lineage.

Load a checkpoint only after session, scope, state hash, expiry, ledger integrity, and lineage checks pass.

Verify the event chain and return aggregate event, outcome, budget, and lifecycle data without raw private payloads.

Convert the verified lifecycle ledger into metadata-only OTLP/JSON trace data and sign the exact export with the local workspace Ed25519 identity. Raw context, goals, targets, summaries, and checkpoint state are excluded.

Freshly hash each declared file from a JSON manifest under a host-configured allowed root. Paths outside configured roots remain unresolved.

Mark a session closed while preserving its tamper-evident evidence history.