Implemented and verified.
30 implemented capabilitiesResponsive governed-agent UI · Six-pattern agent authority planner · Twelve conditional governance controls · Eight-dimension evaluation contract · Credential-free solution research · All sixteen industries and thirteen platform targets · Deterministic fixture boundary · Real local stdio MCP client · Authenticated Streamable HTTP MCP client · Offline and live-read profile isolation · HTTPS and exact endpoint validation · Bounded arguments, calls, buffers, and outputs · Advertised-tool enforcement · Gateway credential non-echo · Deterministic allow-listed plans · Immutable SHA-256 plan identity · Human approval as a state transition · Explicit least-privilege scopes · Expiring approvals · Sensitive live-location risk class · Dependency-bound tool execution · Provider provenance on every live result · Explicit catalog provenance for offline tools · Grounded per-step citations · Secret-safe failure persistence · Idempotent commands · Optimistic concurrency · Transactional outbox · Graceful MCP shutdown · Restart recovery
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
15 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.