Skip to main content
Glama

Frozen as of 2026-10-16. Not the live trust surface. trustcard is. This ledger stays as a record; no further protocol work is planned.

AAFP Commons

AAFP Commons is a local signed knowledge notebook for software agents. Packets carry claims, evidence, methods, constitution references, and Ironclad signatures. Admission is policy-gated and objects are content-addressed.

Identity, signing authority, constitution, provenance, and reputation are separate concerns. The local ledger records immutable packet admissions; it is not a shared mutable database or a replacement for AAFP transport.

Operator and agent handbook: docs/HANDBOOK.md. Evidence, constitutions, and review: docs/EVIDENCE.md, docs/CONSTITUTIONS.md, docs/REVIEW.md. Real-workload preflight: docs/REAL-WORKLOAD.md.

Quick start

export COMMONS_HOME=/tmp/commons-demo
commons init
commons world
commons mcp

If the commons console script is not installed, use:

uv run --no-sync python -m aafp_commons mcp

Before writing, an agent should call commons_world and inspect posture. Source posture is read-only. commons init creates the local signing subject and installs the selected built-in constitution; it does not prove a claim. Empty commons_query scans every admitted namespace (commons/, org/, and agent/), not only commons/.

Related MCP server: Living Stack MCP — Retired Beta Listing

MCP surface

The zero-configuration stdio server exposes:

commons_world, commons_query, commons_get, commons_assume_constitution, commons_propose, commons_conflicts, and commons_resolutions.

Proposals require evidence and a digest-pinned constitution. Read operations do not require network access. commons serve binds loopback at 127.0.0.1:8081 by default and exposes the frozen /world object plus the minimum loopback packet pull used for two-home replication.

Development

uv run --no-sync pytest -q
uv run --no-project ruff check src tests

The sibling local Ironclad checkout is used by uv in this development tree. No registry, hosted service, or external node is required for the local tests.

Packaging

uv build produces a source distribution and a universal wheel from this tree:

uv build

Artifacts land in dist/:

  • aafp_commons-0.1.0.tar.gz — source distribution

  • aafp_commons-0.1.0-py3-none-any.whl — wheel (bundles protocols/ and constitutions/ via force-include)

Install the built wheel directly from source without any registry:

uv pip install dist/aafp_commons-0.1.0-py3-none-any.whl

No publish, registry upload, or external index is required.

Available Tools

7 tools
commons_assume_constitutionA

Validate the constitution selected by commons init. Constitution admission is explicit and evidence-gated; source posture must run commons init first.

Inputs: no named parameters.

commons_conflictsB

Read conflict IDs in the local world. Evidence and constitution rules apply to any future proposal that creates conflict objects.

Inputs: no named parameters.

commons_getA

Read one signed packet by content address. Writing requires evidence and a digest-pinned constitution.

Inputs: packet_id (required).

commons_proposeB

Sign and admit one packet. Subject posture, at least one evidence reference, and an installed digest-pinned constitution are required.

Inputs: claim (required), evidence (required), namespace (required), kind, +7 more.

commons_queryA

Query exact packet IDs or scan a namespace prefix. An empty query scans every admitted namespace (commons/, org/, and agent/). Results are signed packets; proposals still require evidence and a digest-pinned constitution.

Inputs: query.

commons_resolutionsB

Read resolution IDs in the local world. Evidence and constitution rules apply to any future resolution proposal.

Inputs: no named parameters.

commons_worldA

Read the local signed world. This is safe in source posture; writing requires an initialized subject, evidence, and a digest-pinned constitution.

Inputs: no named parameters.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    B3.4/5.0

    Scored across 7 tools

    Disambiguation4/5

    The read tools are separated by scope: world reads the whole signed world, query searches by packet ID or namespace, and get retrieves one content-addressed packet. Conflicts and resolutions are clearly distinct read endpoints, though query and get could still cause minor selection hesitation.

    Naming Consistency3/5

    All tools share the commons_ prefix, which establishes a strong family identity. However, suffixes mix nouns like world, conflicts, and resolutions with verbs like query, get, and propose, so the set is readable but not a uniform verb_noun convention.

    Tool Count5/5

    Seven tools is well-scoped for a signed-packet commons governance domain. Each tool has a distinct role without redundant operations.

    Completeness3/5

    Core read, query, propose, and conflict/resolution read operations are covered. However, prerequisites such as commons init, evidence management, and constitution setup or updates have no MCP-visible tools, leaving meaningful gaps in the write/propose workflow.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      B
      maintenance
      Provides evidence-oriented MCP service for cryptographically identified agents, bounded public contracts, privacy-preserving records, and append-only audit.
      Apache 2.0
    • A
      license
      A
      quality
      B
      maintenance
      Retired snapshot of the former 15-tool Apache-2.0 beta. Use Living Stack Community for the free seven-tool proof edition; Complete Local is the paid runtime with memory, recovery, signed traces, release verification, and multi-agent workflows.
      14
      Apache 2.0
    • A
      license
      A
      quality
      B
      maintenance
      Free seven-tool proof loop for MCP agents: scoped sessions, bounded authorization, typed outcomes, evidence-bound claims, and tamper-evident local closure. Upgrade to Complete Local for durable memory, recovery, signed traces, release verification, and multi-agent workflows.
      7
      Apache 2.0
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables LLM agents and MCP clients to build an argumentation-based memory store where grounded observations support claims, objections contest them, and beliefs are computed as held, contested, lapsed, or retracted, all persisted in an append-only audit log that replays to identical state. Ships as a stdio launcher that starts the proprietary local engine for use with Claude, Claude Code, Cursor, and other MCP clients.
      12 npm
      MIT