Native MCP and outer routing

Evidence Lane exposes one package-local native MCP identity and pairs every public action one-for-one with its schema, internal SDK route, outer binding, skill workflow, authority effects, conditional tools, hooks, and receipt contract.

Current counts are derived release facts, not permanent ceilings.

The 30-row SPECIALIZED_NATIVE_ACTIONS tuple is only the specialized Canon/Learning/Memory/first-class subset (9 reads and 21 writes). It is not the canonical action total.

Routing law

• FastMCP is preferred when the exact action and host support that composition route.
• Native or domain MCP servers are conditional transports for their declared scope.
• The outer SDK selects local versus transport routing; the internal SDK owns execution.
• One project-neutral tunnel may bridge a proven host tool gap; it is not the catalog, scheduler, project registry, or lifecycle owner.
• Missing capability, grant, credential, locality, version, or schema proof fails visibly. No prefix rewrite or hidden alias revives a removed action.
• Public visibility is capability discovery, never permission, HIL, or acceptance.

Agent boundary

Codex is the sole acting agent. OpenAI Agents SDK is a subordinate typed function-tool and MCP client library; it has zero independent action, lane, Plan, Goal, HIL, memory, or project authority. External model-agent planes are not part of this plugin.

Source-bound workflow map

This page is projected from the same current executable snapshot as the rest of the documentation set. The map is deliberately two-directional: each horizontal district shows peer stages while vertical edges show ownership and state progression.

flowchart TB
    subgraph InputDistrict["Input and classification"]
      direction LR
      A["Host-visible action request"] --> B["Public schema validation"] --> C["One of 91 MCP actions"]
    end
    subgraph ExecutionDistrict["Selection and execution"]
      direction TB
      D["Outer-to-internal SDK route"] --> E["Owning module operation"] --> F["Effect and annotation validation"]
    end
    subgraph EvidenceDistrict["Evidence and outcome"]
      direction LR
      G["Structured MCP receipt"] --> H["Bounded result to Codex"]
      G -. mismatch .-> I["No alias, prefix rewrite, or borrowed authority"]
    end
    C --> D
    F --> G

Contract and readback

Canonical source owners

• mcp/mcp-manifest.v1.json
• schemas/public-action-schemas.v001.json
• sdk/sdk-manifest.v1.json

Exact backend readback

Cross-surface invariants

• The current snapshot contains 91 public actions, 26 skills, 11 hook events / 44 handlers, 119 tool requirements, 18 sector lanes, and 11 named authorities. These are derived counts, not fixed ceilings.
• Executable ownership stays one-way: skills select, MCP exposes, the outer SDK routes, the internal SDK executes, ENV selects, UOP governs, tools perform bounded work, hooks emit receipts, and the owning authority validates effects.
• Any missing identity, schema, grant, capability, dependency, receipt, or authority proof must fail closed at its owning phase; a later green check cannot retroactively authorize the skipped boundary.
• A changed route refreshes every dependent schema, manifest, generator, test, diagram, and documentation reference; the superseded executable route is directly purged in the same Delta.
• Tests, Git, CI, installation, restart, deployment, discussion, or a rendered page never imply Project HIL, Learning HIL, Goal completion, or pointer movement.

This page is a Git-tracked documentation projection. Executable source, SQLite authorities, installed-runtime receipts, and explicit human gates remain the governing evidence.