MCP integration

Expose bundle references—not unrestricted enterprise retrieval.

An ECG MCP surface should accept structured intent and return policy-scoped evidence artifacts with explicit obligations and expiration.

Architecture proposal

Typed tools

Resolve, inspect, verify, and replay through narrowly scoped tool contracts.

Keep large or sensitive evidence outside prompts when a signed reference is sufficient.

Carry purpose, principal, workload, and obligations across the tool boundary.

Current limitationMCP is an integration surface, not a substitute for source authorization or execution governance.