{
  "schema": "hsimc.t736.ecosystem.mcp-contract-preview.v1",
  "artifact": "HRI-HSIMC-T736-COMPLETE-WORK-ECOSYSTEM-KICKOFF-C0-001",
  "status": "DECLARATION_ONLY_NOT_MCP_SERVER",
  "protocol_design_reference": "2026-07-28",
  "installed_protocol_version": null,
  "endpoint": null,
  "conformance": "NOT_RUN",
  "host_client_server_rule": "Host owns the client integration and model interaction; LLM output is not itself an authenticated tool call. A server-to-server handoff needs an explicit client/host/worker boundary.",
  "per_request_metadata": [
    "io.modelcontextprotocol/protocolVersion",
    "io.modelcontextprotocol/clientCapabilities",
    "io.modelcontextprotocol/clientInfo (recommended, not security identity)"
  ],
  "durable_application_fields": [
    "work_ref",
    "operation_id",
    "authority_ref",
    "input_refs",
    "idempotency_key",
    "payload_sha256",
    "deadline",
    "evidence_return_ref"
  ],
  "resource_candidates": [
    {
      "uri": "hsimc://t736/ecosystem/catalogue",
      "backing_document": "https://hsimc.tech/rd/t736/ecosystem/data/catalog.json",
      "served_by_mcp": false
    },
    {
      "uri": "hsimc://t736/ecosystem/architecture",
      "backing_document": "https://hsimc.tech/rd/t736/ecosystem/data/architecture.json",
      "served_by_mcp": false
    }
  ],
  "tool_candidates": [
    {
      "name": "context.search",
      "effect": "read authorized, fresh context",
      "inputSchema": {
        "type": "object",
        "properties": {
          "query": {
            "type": "string",
            "maxLength": 2048
          },
          "work_ref": {
            "type": "string",
            "minLength": 1
          },
          "scope_ref": {
            "type": "string",
            "minLength": 1
          },
          "limit": {
            "type": "integer",
            "minimum": 1,
            "maximum": 20
          }
        },
        "required": [
          "query",
          "work_ref",
          "scope_ref"
        ],
        "additionalProperties": false
      },
      "implemented": false
    },
    {
      "name": "observation.capture",
      "effect": "sensing/privacy side effects; gate before capture",
      "inputSchema": {
        "type": "object",
        "properties": {
          "work_ref": {
            "type": "string",
            "minLength": 1
          },
          "operation_id": {
            "type": "string",
            "minLength": 1
          },
          "authority_ref": {
            "type": "string",
            "minLength": 1
          },
          "capture_profile_ref": {
            "type": "string",
            "minLength": 1
          }
        },
        "required": [
          "work_ref",
          "operation_id",
          "authority_ref",
          "capture_profile_ref"
        ],
        "additionalProperties": false
      },
      "implemented": false
    },
    {
      "name": "operation.propose",
      "effect": "produce a proposal; cannot execute",
      "implemented": false
    },
    {
      "name": "operation.execute",
      "effect": "bounded physical attempt after policy, state, budget and reservation gates",
      "input_schema_ref": "https://hsimc.tech/rd/t736/ecosystem/schemas/work-envelope.schema.json",
      "implemented": false
    },
    {
      "name": "operation.readback",
      "effect": "inspect operation and independently sourced effect evidence",
      "implemented": false
    }
  ],
  "gates": [
    "resource listing is not tool implementation",
    "authenticate principal independently",
    "validate protocol version and body metadata",
    "target authorization and current state",
    "bounded time/cost/resource occupancy",
    "durable idempotency and payload match",
    "independent evidence before acceptance",
    "legacy protocol compatibility tested per installed client/server"
  ],
  "source_ids": [
    "SRC-MCP",
    "SRC-MCP-TRANSPORT"
  ]
}