MCP Gateway & Code Mode Contract

• Research substrate only; no unrestricted autonomous execution.
• Generated or submitted code is represented as inert metadata and is never executed on the host.
• Outbound network posture is default-deny until a scoped, short-lived operator grant exists.
• No blind imports, hidden tool execution, or automatic self-modification of production code.
• No claim of AGI, consciousness, sentience, artificial life, biological agency, or proven teleodynamic intelligence.
• Every advanced capability is bounded, reversible, auditable, and requires human review before protected mutation.

{
  "capabilityRequests": [
    {
      "expiresAt": "2026-06-03T00:30:00Z",
      "requestId": "tool-request-read-routes",
      "scope": "routes:read"
    },
    {
      "expiresAt": "2026-06-03T00:30:00Z",
      "requestId": "tool-request-network",
      "scope": ""
    }
  ],
  "capabilityState": "contract-only",
  "codeModeSessionContract": {
    "executeAllowed": false,
    "hostMutationAllowed": false,
    "searchAllowed": true,
    "secretAccessAllowed": false,
    "sessionId": "code-mode-contract-demo",
    "status": "documentation-only"
  },
  "denials": [
    {
      "denialId": "deny-network-default",
      "reason": "Default-deny egress blocks unscoped outbound network access.",
      "scope": "network:*"
    },
    {
      "denialId": "deny-missing-scope",
      "reason": "Grants require explicit capability scope.",
      "scope": ""
    }
  ],
  "generatedAt": "2026-06-03T00:00:00Z",
  "grants": [
    {
      "expiresAt": "2026-06-03T00:30:00Z",
      "grantId": "grant-routes-read",
      "scope": "routes:read",
      "shortLived": true,
      "validAtFixtureTime": true
    }
  ],
  "mcpGatewayProfile": {
    "defaultEgressPolicy": "deny",
    "deterministicApiLanes": [
      "discovery",
      "review",
      "audit",
      "export"
    ],
    "profileId": "mcp-gateway-default-deny",
    "typedSdkDiscovery": "/api/teleodynamic/mcp-gateway-contract.json"
  },
  "ok": true,
  "programmaticToolPlan": {
    "inertDocumentation": true,
    "liveExecution": false,
    "planId": "plan-inert-route-inspection",
    "steps": [
      "fetch route inventory",
      "compare capability state",
      "write audit stub"
    ]
  },
  "title": "MCP Gateway & Code Mode Contract",
  "toolExecutionAuditStub": {
    "auditId": "mcp-audit-stub-001",
    "publicSafe": true,
    "result": "not-executed",
    "secretsRedacted": true
  },
  "version": "2.7.0"
}