{"ok": true, "status": "ok", "requestId": "edb1997b-3144-4fc1-9a8c-e6cedf619dd8", "version": "v2", "generatedAt": "2026-05-25T00:00:00Z", "errors": [], "items": [], "data": {"ok": true, "version": "2.7.0", "generatedAt": "2026-06-03T00:00:00Z", "capabilityState": "contract-only", "title": "MCP Gateway & Code Mode Contract", "mcpGatewayProfile": {"profileId": "mcp-gateway-default-deny", "defaultEgressPolicy": "deny", "typedSdkDiscovery": "/api/teleodynamic/mcp-gateway-contract.json", "deterministicApiLanes": ["discovery", "review", "audit", "export"]}, "capabilityRequests": [{"requestId": "tool-request-read-routes", "scope": "routes:read", "expiresAt": "2026-06-03T00:30:00Z"}, {"requestId": "tool-request-network", "scope": "", "expiresAt": "2026-06-03T00:30:00Z"}], "grants": [{"grantId": "grant-routes-read", "scope": "routes:read", "expiresAt": "2026-06-03T00:30:00Z", "validAtFixtureTime": true, "shortLived": true}], "denials": [{"denialId": "deny-network-default", "scope": "network:*", "reason": "Default-deny egress blocks unscoped outbound network access."}, {"denialId": "deny-missing-scope", "scope": "", "reason": "Grants require explicit capability scope."}], "codeModeSessionContract": {"sessionId": "code-mode-contract-demo", "status": "documentation-only", "searchAllowed": true, "executeAllowed": false, "hostMutationAllowed": false, "secretAccessAllowed": false}, "programmaticToolPlan": {"planId": "plan-inert-route-inspection", "steps": ["fetch route inventory", "compare capability state", "write audit stub"], "inertDocumentation": true, "liveExecution": false}, "toolExecutionAuditStub": {"auditId": "mcp-audit-stub-001", "result": "not-executed", "publicSafe": true, "secretsRedacted": true}}, "meta": {"version": "v2", "generatedAt": "2026-05-25T00:00:00Z"}}