All servers
Every listed MCP server — filter by category, type, hosting, and auth.
Personal-lock maintenance isolation for agent infrastructure: hasp-quorum refusal + try-start proof.
Salvageability triage for agent fleets in a declared mass-failure mode.
Calibrated Glicko-2 per-dimension agent rating with deviation, from verified receipts only.
Canary watches that check MCP servers' answers against ground truth and return signed verdicts.
Signed MCP host behaviour profiles: timeouts, refresh, retries.
Three-leg MCP OAuth remediation verdicts, proven behaviourally against a canary server.
Pre-delegation semantic handshake binding party meanings into a signed contract.
Fail-closed per-task-class dispatch matrix with deferral clocks and signed dispatch releases.
Multilateral barter netting for agent services: cycles and chains cleared in kind, zero money.
Pre-connection collision audit for merged MCP toolboxes, trust-graded, with signed routing receipts.
Checkpoint-paired twin trials for agent fleet changes with blinded verdicts.
Paper trading for agent payments: rehearse buying flows, earn policy-bound receipts.
Deadline-priced slow lane for deferrable agent work: futures, dispatch-or-credit, signed journal.
Witness for MCP calls rejected pre-dispatch: hash-chained ledger, enum differ, signed receipts.
Pre-install canonical-identity verification for MCP servers and skills, with signed verdicts.
Signed, versioned ledger of standing instructions with intake contradiction diffs.
Standing minted only from signed settlement receipts, never reviews. Verdicts: ACCEPT to DECLINE.
Cache-bust forensics + TTL-fit verdicts: names the field that busts your prompt cache.
Propagation breaker: egress quarantine + fingerprint outbreak telemetry for fleets.
Find unflagged agent OAuth clients before the mandate lock — signed per-client census verdicts.
Standby rescue agent for fleets: prohibition, pre-brief, MAYDAY rescue.
The Refusal Desk builds the *no* — a pre-execution tribunal that screens an incoming task brief.
Refusal-dialect probe: signed cards naming what a server's 429 means and whether its meter lies.
Registry Rot Watch: liveness + successor-contract verdicts for MCP endpoints.