Args:
    readiness_content: A readiness result, as JSON text.
    remediation_content: An optional remediation result, as JSON text.
    simulation_content: An optional JSON array of simulated responses.
    metadata: Free-form audit metadata (institution, reference, ...).

Args:
    pack_content: The evidence pack to seal, as JSON text.

Args:
    pack_content: The evidence pack to check, as JSON text.
    expected_digest: The seal the pack is expected to carry.

Args:
    pack_content: The evidence pack to render, as JSON text.

The private key is configured by the operator via the environment (see
:mod:`iso20022_evidence_pack_mcp.signing`); it never crosses the tool
boundary. Returns the detached signature, the public key, and a key id;
fails with ``EP_NO_SIGNING_KEY`` when no key is configured.

Args:
    pack_content: The evidence pack to sign, as JSON text.

Args:
    pack_content: The evidence pack to check, as JSON text.
    signature: The base64-encoded detached signature.
    public_key: The signer's PEM public key.

**Requires the ``[aws]`` extra** (``pip install
iso20022-evidence-pack-mcp[aws]``) and **reaches AWS KMS over the
network** -- unlike the closed-world tools, this one has a network
surface. The private key never leaves KMS; the tool submits only the
pack's digest. Returns the pack with an ``aws_kms_signature`` block
attached.

Args:
    evidence_pack_json: The evidence pack to sign, as JSON text.
    key_arn: The ARN of the KMS ``SIGN_VERIFY`` key.
    aws_region: The AWS region hosting the key.

**Requires the ``[vault]`` extra** (``pip install
iso20022-evidence-pack-mcp[vault]``) and **reaches a Vault server over the
network** -- unlike the closed-world tools, this one has a network
surface. POSTs to ``/v1/transit/sign/{key_name}`` and returns the pack
with a ``vault_signature`` block attached.

Args:
    evidence_pack_json: The evidence pack to sign, as JSON text.
    vault_url: The base URL of the Vault server.
    key_name: The Transit key to sign with.
    token: The Vault access token.

**Requires the ``[aws]`` extra** (``pip install
iso20022-evidence-pack-mcp[aws]``) and **reaches AWS S3 over the
network** -- unlike the closed-world tools, this one has a network
surface. Only the ``s3://`` scheme is supported; ``gs://`` / ``az://``
return a clear error. Returns the object's ``bucket``, ``key``, and
``etag``.

Args:
    signed_pack_json: The signed pack to upload, as JSON text.
    s3_uri: The destination, of the form ``s3://bucket/key``.

**Reaches an external system**: shells out to a locally installed
``slsa-verifier`` binary (which may fetch metadata). No optional Python
extra is required, but the binary must be on ``PATH`` -- otherwise the
tool returns an ``EP_EXTERNAL_TOOL`` error.

Args:
    artifact_path: Path to the artifact whose provenance is checked.
    provenance_path: Path to the SLSA provenance attestation.

**Reaches an external system**: shells out to a locally installed
``cosign`` binary (which contacts the registry and transparency log). No
optional Python extra is required, but the binary must be on ``PATH`` --
otherwise the tool returns an ``EP_EXTERNAL_TOOL`` error. For keyless
verification, supply ``certificate_identity`` and
``certificate_oidc_issuer``.

Args:
    image_ref: The container image reference to verify.
    certificate_identity: The keyless certificate identity (optional).
    certificate_oidc_issuer: The keyless OIDC issuer URL (optional).