reports_list reads SecurityService's report library on the caller's session: the reports they may run, the measurable metrics of those reports and, for an SI ca...

Kamo·2w ago

FeatureMCPGatewayService

The SI intent arguments — purpose, urgency and regarding on an offered SI's INTENT tools (CollabTools: INTENT and NO_INTENT with reasons, every disclosing tool ruled), injected by tools/list only for an SI whose Docstion is configured or whose org is in ENFORCE (an unconfigured SI of an AUDIT org keeps byte-identical schemas), taken out of an SI's arguments beside onRequestOf before the schema check, the planner and the args hash and checked (INVALID_ARGUMENTS with field); IntentResolver: v...

Kamo·2w ago

FeatureMCPGatewayService

Seed an SI run's source ledger, and the WATCH charter switch — POST **************** (X-Internal-Auth) takes {orgId, memberId, items:[{ref, excerpt}]}: 1-5 canonical refs with excerpts of at most 4,000 characters (else 400 items), labels them through LabelService and records each in the run's source ledger as a read of tool runtime:signal, its excerpt sealed (204); a run with no registered context of this SI is 404 RUN_CONTEXT_MISSING; an AUDIT org whose calls go une...

Kamo·2w ago

FeatureMCPGatewayService

Knowledge_context — an SI's standing knowledge through kbservice's GET /api/notes/ai/context, passed through: Our Master Note, the knowledge notes (the charter's, then its teams' and departments' pinned notes) and the decisions in force, each entry its NOTE at /orgMaster/i, /knowledge/i and /decisions/i; pack memory (AI_ONLY, NOTES, READ, VIEW_NOTES), offered only when the SI's charter sets maxContextKnowledgeChars to 1 or more (ENFORCE alone never offers it); at most 8 noteIds; a strict read, s...

Kamo·2w ago

FeatureMCPGatewayService

The SI memory tools, the charter switch and strict reads — memory_record, memory_search and memory_forget (pack memory, AI_ONLY) over kbservice's /api/notes/memory; ToolDescriptor.charterSwitch, the program's one opt-in rule (R1-5): a tool naming a switch is offered to an SI only when its charter sets that LIMIT key to 1 or more, or its org is in ENFORCE and the switch lets ENFORCE offer it, else hidden as CHARTER_SWITCH_OFF; the memory tools' switch is maxMemoryCards with ENFORCE offering nothi...

Kamo·2w ago

FeatureMCPGatewayService

Label on write for SI memory — LabelOnWrite.forMemory links a card or a memory-on SI's journal line to every labelled source of its run, or, in ENFORCE with the leak check on, to its basis alone when the check finds the fact clean of everything else the run read (LEAKS, UNSURE, a failure, a source without its excerpt, AUDIT and a disabled check keep every source); unlabelled content and a source past 49 add AI_RUN:<runId>; the highest sensitivity of every chosen source, Confidential when any is,...

Kamo·2w ago

FeatureMCPGatewayService

Disclosure readiness — GET **************** answers whether an org may switch to ENFORCE: pack coverage (every READ static tool ruled LABELED or NOT_CONTENT), the excerpt key, and one leak-check probe with a fixed synthetic draft and excerpt (REACHABLE on any verdict but AIService's no-model UNSURE, within 8 s; DISABLED when the org's leak check is off), with the org's SI-enabled federated servers and its last seven days of WITHHELD, WOULD_WITHHOLD and UNLABEL...

Kamo·2w ago

FeatureMCPGatewayService

Label on write and the runtime's two internal endpoints — an SI's notes_create, notes_update, notes_append_journal and notes_master_append in a run send, in the same request, LEARNED_FROM links to what the run read (its basis, else every labelled source of its ledger; never an unlabelled one or an AI_RUN; at most 50, newest first), the highest sensitivity among them and the Confidential marker with its highest-ranked setter (org owner, then effective level, then id; an unknown setter stands for ...

Kamo·2w ago

FeatureMCPGatewayService

Decisions and note sharing for an SI of an ENFORCE org — decisions_search lists the decisions and summaries it may read, each named as its NOTE; decisions_create records one released at birth and notes_share gives one of its own notes a new audience, both through kbservice's internal release endpoints with the basis the disclosure gate allowed the call on (CLEARED with no grant, VERIFIED_REQUEST by a verified request's author, APPROVAL by the information owner whose release cleared it; without o...

Kamo·2w ago

FeatureMCPGatewayService

Disclosure_request and the approval status of a proposal — an SI of an ENFORCE org passes a colleague's question on to the owners of what its run's reads withheld: forMemberId must be in the run's audience, each withheld source (newest first) goes to its first release owner other than the requester, at most 5 owners with 10 sources each, one RELEASE_PROPOSAL (reason DISCLOSURE, class RELEASE_INFORMATION) per owner keyed <key>:owner:<id> with only that owner's sources, at most 3 calls a run; the ...

Kamo·2w ago

FeatureMCPGatewayService

Approved releases, their re-execution and chained approvals — the information owner's approval of a held send is recorded in its snapshot as their OWNER_RELEASE over the sources it was asked for (the snapshot now names that asked release), and the gate decides again from the snapshot with fresh labels, needing neither the run's context nor its ledger; a release that no longer covers the send (a marker set meanwhile) is DISCLOSURE_DENIED, never asked again; a release reaches only the recipients i...

Kamo·2w ago

FixMCPGatewayService

An AUDIT hit of the communication policy is written once, as the call runs — not also when the charter asks a person first, and not for a decoderd approval (KamoCollab CP04 Task 31)

Found live in sp00verify: an SI's internal email under an AUDIT DENY rule, behind a charter approval (autonomy ceiling 1), wrote two chat_policy_event rows for ...

Kamo·2w ago

FeatureMCPGatewayService

The disclosure gate — an SI's call of a disclosing tool is judged after CP04's interaction gate and before any approval: the run's source ledger, the records the call carries and its basis (which must be what the run read, else BASIS_NOT_READ in ENFORCE) are labelled now and decided with DisclosurePolicy, the verified request as a VERIFIED_REQUEST grant and a held snapshot's releases as OWNER_RELEASE; in ENFORCE the run's other uncleared reading goes to the bounded leak check (LeakPrefilter, Lea...

Kamo·2w ago

TestMCPGatewayService

Pin an AUDIT org's SI tools/list as origin/main serves it before the basis argument — **************** and its own snapshot, taken on unmodified code (KamoCollab CP07 Task 23)

Kamo·2w ago

FeatureMCPGatewayService

The basis argument — an SI of an ENFORCE org sees the optional basis (up to 20 sourceRefs, KIND:id) on every disclosing tool, static or dynamic; the pipeline takes an SI's basis out of a disclosing tool's arguments in every mode before the schema check, the planner and the args hash, checks it as its schema would (a malformed item is INVALID_ARGUMENTS) and keeps its refs for the disclosure gate; an AUDIT org's list is byte-identical; DISCLOSURE_DENIED (error, DENIED) and BASIS_NOT_READ (error, I...

Kamo·2w ago

FeatureMCPGatewayService

An SI's task writes, lead notes, master-note entries and workstation typing write their disclosure plans — a task reaches its participants after the call as its TASK label names them (creator, list owner, assignee, and the supervisor of an SI owner or assignee; an update and a comment read the label, a create and an assignment name who they leave, the assignment carrying the task without its old assignee), a lead note the organization through the lead label's required rights, who-i-am the public...

Kamo·2w ago

FeatureMCPGatewayService

An SI's sends write their disclosure plans — chat lines and mentions reach the conversation's members (a support conversation's visitor too), mail the members its addresses reach and every other address (a shared mailbox included) aliased by the lead it is about, a reply or forward carrying the original's thread, a text or call the number aliased by its lead or contact (a colleague call the colleague), an invitation the invited colleagues, a join the meeting's participants and guests with an emp...

Kamo·2w ago

FeatureMCPGatewayService

CRM, document, calendar, call and notification reads name their records — each lead, account, contact and document by its id, each event (an occurrence by its series) and meeting as its CALENDAR_EVENT, each call row by its callLogId (none: unlabeled), each notification as the record it is about when its source is one; in an EXTERNAL or MIXED run of an ENFORCE org leads_get asks for the lead's external projection (fieldAudience=EXTERNAL); federated and workstation reads are one unlabeled item; Co...

Kamo·2w ago

FeatureMCPGatewayService

Notes, tasks, KB and RAG reads name their records — each listed or read note is its NOTE, each task its TASK, each article its KB_ARTICLE by the row id (the output's articleId stays the guid), each RAG passage its note or article and each link target its article; in a filtered run of an ENFORCE org rag_search narrows the search to the run's audience from its context and the org graph (audienceMembers, audienceExternal), never the model's choice, and the audience filter still drops what RAGServic...

Kamo·2w ago

FeatureMCPGatewayService

Chat, mail and SMS reads name their records — every listed or read conversation is its CHAT_SESSION (a support conversation too), every message its EMAIL_THREAD by the threadKey mail summaries and full reads now carry (none: unlabeled), every text conversation its SMS_THREAD; the nine tools leave PENDING_ITEMS, and a result of a tool that names its items but named none (an empty list) is no withheld record (KamoCollab CP07 Task 18)

Kamo·2w ago

TestMCPGatewayService

ChatPackTest finds the read pointer's PUT instead of expecting it last, since c4914b2 moves it on its own thread while the authors are checked

Kamo·2w ago

October 11, 2026

PerformanceMCPGatewayService

The read pointer moves while the authors are checked

chat_read made three MediaService calls one after another (the page, the session for the inside-content check, then the read pointer). The pointer is now moved ...

Kamo·2w ago

FeatureMCPGatewayService

The config pack — config_catalog, config_current, config_lookup and config_propose, a person's reads (HUMAN_ONLY, READ, AI Workforce, any of the four hiring and configuring rights) that ask SecurityService's configure endpoints with the caller's OTK, AIService's voice options with the *** and the knowledge base under the caller's own right and app; a refusal reaches the model by its reason; the four tools are not content (CP10 D27), Js gains anyObject, anyObjectList and uuidList, and config_ j...

Kamo·2w ago

TestMCPGatewayService

Pass the interaction gate and the audience filter to the pipeline after the rebase (KamoCollab CP07 Task 17)

Kamo·2w ago

TestMCPGatewayService

PerceiveThenRequestTest replays kamoai-service's new perception — the woken chat's chat_read and a rag_search for what the person wrote

kamoai-service now reads the conversation that woke an SI (its card's /?openChat= link) and searches the knowledge base for the message's words during PERCEIVE....

Kamo·2w ago

FixMCPGatewayService