"author:sheshisheri-hi" matching MCP servers:

Enables an MCP server to gate tools/call requests by requiring a per-send channel-policy attestation for outbound actions, checking ROPE-lite origin tags on sensitive arguments, and returning SEP-2643-shaped structured denials with retry handles and remediation hints when a call is blocked. It logs client-asserted audit context (such as turnId and userIntent) for correlation across allowed and denied calls, but never uses that receipt for allow/deny decisions.