reports_list reads SecurityService's report library on the caller's session: the reports they may run, the measurable metrics of those reports and, for an SI ca...

Kamo·2w ago

FeatureMCPGatewayService

The SI intent arguments — purpose, urgency and regarding on an offered SI's INTENT tools (CollabTools: INTENT and NO_INTENT with reasons, every disclosing tool ruled), injected by tools/list only for an SI whose Docstion is configured or whose org is in ENFORCE (an unconfigured SI of an AUDIT org keeps byte-identical schemas), taken out of an SI's arguments beside onRequestOf before the schema check, the planner and the args hash and checked (INVALID_ARGUMENTS with field); IntentResolver: v...

Kamo·2w ago

FeatureMCPGatewayService

Seed an SI run's source ledger, and the WATCH charter switch — POST **************** (X-Internal-Auth) takes {orgId, memberId, items:[{ref, excerpt}]}: 1-5 canonical refs with excerpts of at most 4,000 characters (else 400 items), labels them through LabelService and records each in the run's source ledger as a read of tool runtime:signal, its excerpt sealed (204); a run with no registered context of this SI is 404 RUN_CONTEXT_MISSING; an AUDIT org whose calls go une...

Kamo·2w ago

FeatureMCPGatewayService

Knowledge_context — an SI's standing knowledge through kbservice's GET /api/notes/ai/context, passed through: Our Master Note, the knowledge notes (the charter's, then its teams' and departments' pinned notes) and the decisions in force, each entry its NOTE at /orgMaster/i, /knowledge/i and /decisions/i; pack memory (AI_ONLY, NOTES, READ, VIEW_NOTES), offered only when the SI's charter sets maxContextKnowledgeChars to 1 or more (ENFORCE alone never offers it); at most 8 noteIds; a strict read, s...

Kamo·2w ago

FeatureMCPGatewayService

The SI memory tools, the charter switch and strict reads — memory_record, memory_search and memory_forget (pack memory, AI_ONLY) over kbservice's /api/notes/memory; ToolDescriptor.charterSwitch, the program's one opt-in rule (R1-5): a tool naming a switch is offered to an SI only when its charter sets that LIMIT key to 1 or more, or its org is in ENFORCE and the switch lets ENFORCE offer it, else hidden as CHARTER_SWITCH_OFF; the memory tools' switch is maxMemoryCards with ENFORCE offering nothi...

Kamo·2w ago

FeatureMCPGatewayService

Label on write for SI memory — LabelOnWrite.forMemory links a card or a memory-on SI's journal line to every labelled source of its run, or, in ENFORCE with the leak check on, to its basis alone when the check finds the fact clean of everything else the run read (LEAKS, UNSURE, a failure, a source without its excerpt, AUDIT and a disabled check keep every source); unlabelled content and a source past 49 add AI_RUN:<runId>; the highest sensitivity of every chosen source, Confidential when any is,...

Kamo·2w ago

FeatureMCPGatewayService

Disclosure readiness — GET **************** answers whether an org may switch to ENFORCE: pack coverage (every READ static tool ruled LABELED or NOT_CONTENT), the excerpt key, and one leak-check probe with a fixed synthetic draft and excerpt (REACHABLE on any verdict but AIService's no-model UNSURE, within 8 s; DISABLED when the org's leak check is off), with the org's SI-enabled federated servers and its last seven days of WITHHELD, WOULD_WITHHOLD and UNLABEL...

Kamo·2w ago

FeatureMCPGatewayService

Label on write and the runtime's two internal endpoints — an SI's notes_create, notes_update, notes_append_journal and notes_master_append in a run send, in the same request, LEARNED_FROM links to what the run read (its basis, else every labelled source of its ledger; never an unlabelled one or an AI_RUN; at most 50, newest first), the highest sensitivity among them and the Confidential marker with its highest-ranked setter (org owner, then effective level, then id; an unknown setter stands for ...

Kamo·2w ago

FeatureMCPGatewayService

Decisions and note sharing for an SI of an ENFORCE org — decisions_search lists the decisions and summaries it may read, each named as its NOTE; decisions_create records one released at birth and notes_share gives one of its own notes a new audience, both through kbservice's internal release endpoints with the basis the disclosure gate allowed the call on (CLEARED with no grant, VERIFIED_REQUEST by a verified request's author, APPROVAL by the information owner whose release cleared it; without o...

Kamo·2w ago

FeatureMCPGatewayService

Disclosure_request and the approval status of a proposal — an SI of an ENFORCE org passes a colleague's question on to the owners of what its run's reads withheld: forMemberId must be in the run's audience, each withheld source (newest first) goes to its first release owner other than the requester, at most 5 owners with 10 sources each, one RELEASE_PROPOSAL (reason DISCLOSURE, class RELEASE_INFORMATION) per owner keyed <key>:owner:<id> with only that owner's sources, at most 3 calls a run; the ...

Kamo·2w ago

FeatureMCPGatewayService

Approved releases, their re-execution and chained approvals — the information owner's approval of a held send is recorded in its snapshot as their OWNER_RELEASE over the sources it was asked for (the snapshot now names that asked release), and the gate decides again from the snapshot with fresh labels, needing neither the run's context nor its ledger; a release that no longer covers the send (a marker set meanwhile) is DISCLOSURE_DENIED, never asked again; a release reaches only the recipients i...

Kamo·2w ago

FeatureMCPGatewayService

The disclosure gate — an SI's call of a disclosing tool is judged after CP04's interaction gate and before any approval: the run's source ledger, the records the call carries and its basis (which must be what the run read, else BASIS_NOT_READ in ENFORCE) are labelled now and decided with DisclosurePolicy, the verified request as a VERIFIED_REQUEST grant and a held snapshot's releases as OWNER_RELEASE; in ENFORCE the run's other uncleared reading goes to the bounded leak check (LeakPrefilter, Lea...

Kamo·2w ago

FeatureMCPGatewayService

The basis argument — an SI of an ENFORCE org sees the optional basis (up to 20 sourceRefs, KIND:id) on every disclosing tool, static or dynamic; the pipeline takes an SI's basis out of a disclosing tool's arguments in every mode before the schema check, the planner and the args hash, checks it as its schema would (a malformed item is INVALID_ARGUMENTS) and keeps its refs for the disclosure gate; an AUDIT org's list is byte-identical; DISCLOSURE_DENIED (error, DENIED) and BASIS_NOT_READ (error, I...

Kamo·2w ago

FeatureMCPGatewayService

An SI's task writes, lead notes, master-note entries and workstation typing write their disclosure plans — a task reaches its participants after the call as its TASK label names them (creator, list owner, assignee, and the supervisor of an SI owner or assignee; an update and a comment read the label, a create and an assignment name who they leave, the assignment carrying the task without its old assignee), a lead note the organization through the lead label's required rights, who-i-am the public...

Kamo·2w ago

FeatureMCPGatewayService

An SI's sends write their disclosure plans — chat lines and mentions reach the conversation's members (a support conversation's visitor too), mail the members its addresses reach and every other address (a shared mailbox included) aliased by the lead it is about, a reply or forward carrying the original's thread, a text or call the number aliased by its lead or contact (a colleague call the colleague), an invitation the invited colleagues, a join the meeting's participants and guests with an emp...

Kamo·2w ago

FeatureMCPGatewayService

CRM, document, calendar, call and notification reads name their records — each lead, account, contact and document by its id, each event (an occurrence by its series) and meeting as its CALENDAR_EVENT, each call row by its callLogId (none: unlabeled), each notification as the record it is about when its source is one; in an EXTERNAL or MIXED run of an ENFORCE org leads_get asks for the lead's external projection (fieldAudience=EXTERNAL); federated and workstation reads are one unlabeled item; Co...

Kamo·2w ago

FeatureMCPGatewayService

Notes, tasks, KB and RAG reads name their records — each listed or read note is its NOTE, each task its TASK, each article its KB_ARTICLE by the row id (the output's articleId stays the guid), each RAG passage its note or article and each link target its article; in a filtered run of an ENFORCE org rag_search narrows the search to the run's audience from its context and the org graph (audienceMembers, audienceExternal), never the model's choice, and the audience filter still drops what RAGServic...

Kamo·2w ago

FeatureMCPGatewayService

Chat, mail and SMS reads name their records — every listed or read conversation is its CHAT_SESSION (a support conversation too), every message its EMAIL_THREAD by the threadKey mail summaries and full reads now carry (none: unlabeled), every text conversation its SMS_THREAD; the nine tools leave PENDING_ITEMS, and a result of a tool that names its items but named none (an empty list) is no withheld record (KamoCollab CP07 Task 18)

Kamo·2w ago

October 11, 2026

FeatureMCPGatewayService

The config pack — config_catalog, config_current, config_lookup and config_propose, a person's reads (HUMAN_ONLY, READ, AI Workforce, any of the four hiring and configuring rights) that ask SecurityService's configure endpoints with the caller's OTK, AIService's voice options with the *** and the knowledge base under the caller's own right and app; a refusal reaches the model by its reason; the four tools are not content (CP10 D27), Js gains anyObject, anyObjectList and uuidList, and config_ j...

Kamo·2w ago

FeatureMCPGatewayService

Tool Plane Docstion foundations: SI charter views (Docstion, personality, escalation route members), recipient preferences client, attention and delegation counters, the offer rule, the DEFERRED and REROUTED statuses and the six audit columns (KamoCollab CP12 Task 23)

Kamo·2w ago

FeatureMCPGatewayService

The audience filter on an SI's reads — ToolOutcome.items and ContentItem, ContentReadTools (every READ tool labeled or not content, pre-checks and counts), the pre-check before the handler and the filter after it (ENFORCE removes what the run's audience may not know and answers a withheld record as "Not found."; AUDIT changes nothing and records WOULD_WITHHOLD), the source ledger and withheld store, read stamps through CallLedger.readOutcome, and cached work links (KamoCollab CP07 Task 17)

Kamo·2w ago

FeatureMCPGatewayService

The DDL file for the tool audit's six Docstion columns (KamoCollab CP12 Task 4)

Kamo·2w ago

FeatureMCPGatewayService

The disclosure ledger completeness check, GET **************** every gate-stamped SI call has exactly one matching event, no SI send skipped the gate, no SI event lost its audit row (KamoCollab CP08 Task 11)

Kamo·2w ago

FeatureMCPGatewayService

Every channel's planner writes its interaction plan — an SI's team-chat line and new DM, internal mail (members its recipients reach, the original's sender as a reply), colleague call, meeting invitation, calendar invitation and work given to a colleague carry the communication policy's answer for each colleague, through emailservice's member mailboxes (KamoCollab CP04 Task 22)

Kamo·2w ago

FeatureMCPGatewayService

Labels with the principal-private fallback, the source ledger with encrypted excerpts, withheld items and held decisions; mount the platform key (KamoCollab CP07 Task 16)

LabelService resolves labels through CP05's DisclosureLabelClient over the six owners (60 s cache per org and ref; inherited refs to depth 3); a ref no owner la...

Kamo·2w ago

FeatureMCPGatewayService

The org graph and its eviction, the disclosure settings cache, Redis hash operations and the run context endpoints (KamoCollab CP07 Task 15)

Kamo·2w ago

FeatureMCPGatewayService

The communication policy's interim gate — an SI's call that contacts colleagues is judged by MediaService after FORBIDDEN and before the charter's approval: COLLAB_DENIED explains itself, REQUIRES_APPROVAL asks one INTERACTION_POLICY approval (a verified request may stand in), an approval opens its CONTACT grants, AUDIT hits are reported, and an org with no policy is asked once a minute (KamoCollab CP04 Task 21)

Kamo·2w ago

FeatureMCPGatewayService

DisclosureLedgerStep writes each disclosing call's ledger event at the gate, before or after the send, and DisclosingTools lists the disclosing tools (KamoCollab CP08 Task 10)

Kamo·2w ago

FeatureMCPGatewayService

Declare the disclosure recorder, carry the policy columns, and pre-mint the audit id in a CallLedger (KamoCollab CP08 Task 9)

DisclosureLedgerConfig declares DisclosureRecorder, with **************** joining @EnableJpaRepositories in the same commit. mcp_tool_call_audit gains policy_de...

Kamo·2w ago

FeatureMCPGatewayService

The link reference text names the six kinds CP05 appends (KamoCollab CP05 Task 7)

Kamo·2w ago

FeatureMCPGatewayService

A team chat line is SEND_INTERNAL_MESSAGE, free while no charter layer names it (KamoCollab CP04 Task 20)

Defect 5: ChatPack plans a CHAT post as SEND_INTERNAL_MESSAGE (support stays SEND_WEBCHAT_MESSAGE), chat_send/chat_mention declare it in alsoClasses, and chat_f...

Kamo·2w ago

FeatureMCPGatewayService

DDL for the SI tool-call policy verdict columns (KamoCollab CP08 T2)

Three nullable ADD COLUMN IF NOT EXISTS on mcp_tool_call_audit: policy_decision, policy_rule, disclosure_event_id (spec §5.1, D11; master §6.10). Hand-applied b...

Kamo·2w ago

October 4, 2026

FeatureMCPGatewayService

Phone_call says plainly when the org's outbound policy blocks a number, and names text or email instead (SP93 T12)

K6 refuses a number the phone server's toll-fraud guards block with 409 BLOCKED_BY_OUTBOUND_POLICY (SP93 T11). phone_call now answers it as its own status, with...

Kamo·3w ago

FeatureMCPGatewayService

A verified request from someone who may approve is the approval: an ON_REQUEST row, the action at once, its outcome on K3b (SP95 T34)

When the charter asks for approval and the AI cites a verified request (onRequestOf), K3 is asked with mode ON_REQUEST, the requester and the reference. An APPR...

Kamo·3w ago

FeatureMCPGatewayService

An AI may cite the request it acts on (onRequestOf), checked by reading it; a run's taint says where it came from (SP95 T31)

Every AI write that may need approval takes the optional onRequestOf (chat:<conversation>/<message>, task:<item>, task:<item>/comment:<id>) on tools/list. The p...

Kamo·3w ago

FeatureMCPGatewayService

Rag_search takes audience PUBLIC, the search the public may read (SP95 T12)

An AI on a phone call answers an anonymous caller, so it searches only the published articles the public may read, never notes (spec D12). The optional audience...

Kamo·3w ago

FeatureMCPGatewayService

Approvals_request sends a class a tool performs to that tool; the charter stamp keeps tools fresh (SP95 T10)

approvals_request refuses an action class a catalogue tool performs with INVALID_ARGUMENTS USE_TOOL {tool, tools, actionClass}, or NO_TOOL_FOR_YOU when the call...

Kamo·3w ago

September 29, 2026

FeatureMCPGatewayService

Phone_call calls a colleague by memberId, as PLACE_INTERNAL_CALL (SP95 T9)

A colleague is named by memberId, never by number: the planner reads their SecurityService call card and dials the cell, else the phone, else the work number on...

Kamo·4w ago

September 27, 2026

FeatureMCPGatewayService

Documents, translation and OCR packs

docs_search, docs_read, translate_text and ocr_document (spec 4.20). A document is routed by DocsService's description before any byte is fetched: text is decod...

Kamo·4w ago

FeatureMCPGatewayService

The AI's workstation — computer_* tools with auto-wake and lease, workstation pack

Kamo·4w ago

FeatureMCPGatewayService

Approvals pack — decision-only approvals and approval status

approvals_request asks the AI's approver through kamoai-service K3 with toolName null (nothing is re-executed on APPROVE); a class the charter forbids is refuse...

Kamo·4w ago

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing