CASE-LEVEL KICKOFF · C0-001 · 2026-10-09
MCP-ready is an engineering contract.协议可寻址、工作可持续、执行有边界。
Stateless requests. Durable work. Local authority.请求不依赖上一次连接状态；工作、权限、重试和物理效果必须能够持续接续。
Place the roles correctly / 放对角色
| Role | Responsibility |
|---|---|
| Human + e-Person role | Define work, approved scope and accountable handover / 明确工作范围与交接 |
| Host + MCP client | Coordinate model context and issue validated protocol calls / 组织模型上下文、发送协议调用 |
| MCP server / adapter | Expose specified resources and bounded tools / 暴露明确资源和有界工具 |
| Local executor / supplier | Validate current state and authority; perform and report a bounded attempt / 检查现场状态与权限、执行并回执 |
| Independent observation / acceptance owner | Verify the effect and accept or reject the result / 核验真实效果并接受或拒绝 |
A chip is not an MCP server. A URL returning JSON is not proof of protocol conformance. A model output is not an authenticated tool call. Connecting two sites requires the explicit Host/client or orchestration boundary—not a presumed direct LLM-to-LLM execution channel.
Request fields and business state / 请求字段与业务状态
The MCP 2026-07-28 base specification carries protocol version and client capabilities per request. Cross-request application state is referenced by explicit IDs. Self-reported client information is not authentication. Those protocol facts do not remove locks, work history, retention rules or authorization checks.
部署时核对实际 Client/Server 的协议版本与兼容策略；不能把旧 initialize 流程或新请求语义未经测试就混在同一条通路。工作记录与设备占用仍属持久业务状态。
Protocol: version + client capabilities (+ client info) Work: work_ref + revision + operation_id Scope: authenticated principal + role + authority_ref Limits: deadline + cost ceiling + local-state preconditions Retry: idempotency_key + immutable payload hash Return: effect observations + evidence_return_ref
Work, scope and retry fields are HSIMC case-design requirements—not claimed as standardized MCP fields.
Proposed surface / 拟接入表面
| Candidate | Meaning | State |
|---|---|---|
| context.search | read authorized, fresh context | NOT IMPLEMENTED HERE |
| observation.capture | sensing/privacy side effects; gate before capture | NOT IMPLEMENTED HERE |
| operation.propose | produce a proposal; cannot execute | NOT IMPLEMENTED HERE |
| operation.execute | bounded physical attempt after policy, state, budget and reservation gates | NOT IMPLEMENTED HERE |
| operation.readback | inspect operation and independently sourced effect evidence | NOT IMPLEMENTED HERE |
Retry is not repeat execution / 重试不是再做一次
Persist the operation and payload binding before an effectful attempt. A repeated key with the same payload returns/reconciles the prior operation; a changed payload under the same key is rejected. After a timeout with an unknown physical effect, inspect/reconcile before retrying. Do not claim exactly-once physical actuation merely from network idempotency.
拒绝重复键对应不同负载；对未知效果先回读或人工核验，不盲目再执行。用资源占用和背压防止并行请求抢占同一设备；期限过后不执行旧命令。断开网络也不能自动证明物理动作已停止。
Conformance gates / 实现后的验收门槛
| Gate | Required evidence |
|---|---|
| Protocol | Discover/read/call/error, version and metadata compatibility; strict schemas |
| Authority | Unauthenticated, expired, revoked and out-of-scope calls rejected |
| Isolation | Tasks and principals do not inherit state or rights from one connection |
| Recovery | Restart/duplicate/timeout/UNKNOWN_EFFECT tested without extra unintended action |
| Effect | Independent observation linked to the exact operation before acceptance |
Continue through HSIMC回到同一个 HSIMC 工作与现实架构
This public directory defines reference components, inputs, outputs and acceptance targets. It does not grant execution authority, bind a Runtime, create a vector database, activate an MCP endpoint, reserve a supplier or accept an order. 目录不等于已验证的整套系统；当前实例、权限、可用时间和交付均需各自证据。