Return provenance-bound candidates. Fetch original evidence before concluding.

Return latest non-reference records, ordered by recorded event time.

Fetch registered evidence and verify the exact candidate hash when supplied.

Check exact evidence integrity and count, never semantic claim support.

Return read-only policy and record-integrity findings for canonical JSONL.

Return a path-free publication receipt for the running MCP process.

Validate input and create an immutable pending draft, never a canonical record.

Each new source registration contains only path, source_id, and source_type. The path must be project-contained and is hash-bound at preparation and commit. A canonical human approval record must already exist and cover this record's study and kind.

Append exactly one approved pending draft and refresh derived indexes.

This is a mutating, non-idempotent host-approved tool. It accepts no record body and no model-supplied approval boolean. It refuses a replay, any change to the canonical ledger or staged source files, or an invalid human scope approval. Canonical append success is reported separately from derived-index refresh status.

Return metadata for one pending immutable ingest draft without its content.

Return the fixed governance roster and non-executing host contract.

Return one immutable registered role manifest and its canonical hash.

Return the internal versioned prompt contract for one registered role.

Validate a proposed agent task without dispatching or approving it.

Validate a returned decision against its exact task packet.

Evaluate deterministic claim gates; this never grants user approval.

Prepare, but do not execute, a host-owned agent dispatch.

Bind a validated passing scope decision to exact governed task hashes.

Prepare the isolated fixed four-reviewer critical batch.

Validate a host decision without writing it to the canonical ledger.

Assess necessity, bounded work, elapsed time, difficulty, and cost evidence.

Evaluate declarative preflight; never authorize or execute a host tool call.

Resolve failure handling without accepting an off/unrecorded mode.

Prepare the mandatory minimum tombstone; storage remains host-owned.

Report derived-index health without modifying canonical research records.

Inspect the declared research profile without executing any route.

List reviewed local SentenceTransformer models without contacting a registry.

Prepare but never execute a hash-bound local semantic setup plan.

Validate a parallel batch without starting agents, models, or network.