"author:writ-agent" matching MCP servers:

Policy gateway for AI agent tool calls: checks every MCP, shell and file call against one provio.yaml (allow / deny / ask / redact) before it runs, pins MCP tool definitions against rug pulls, and records each decision in a tamper-evident, signed ledger.