Skip to content

WebMCP · claim-capped

Review the change. Bound the action.

Ceiling is a WebMCP release-policy review console. An agent can inspect a synthetic policy, propose one typed change, and explain why. Policy blocks forbidden values; a person retains exact one-use authority over every admitted effect.

Ceiling This demonstration changes only in-memory synthetic release policy. It has no deployment, operating-system, filesystem, credential, payment, messaging, or cross-origin authority. Browser activation is not identity attestation. Receipts are verified session-local evidence, not signed or persistent audit records.
checking WebMCP… receipts self-test…

Live authority circuit

  1. 1 · Propose An agent submits one typed release-policy diff. idle
  2. 2 · Activate Policy admits the value; a trusted gesture arms the exact diff. required
  3. 3 · Decide Apply or reject consumes the operation-specific arm once. no effect
  4. 4 · Verify The complete receipt chain is recomputed. waiting

Agent change review

Current synthetic release policy

Reloading resets this policy. No deployment system is connected.

Fallback inspector

No policy decision yet.

Decision queue

0 pending

Applied this session

Defense matrix

Seven isolated synthetic probes attack the same authority and receipt core used by the workbench. They do not touch the shared task, consume its receipt budget, or access anything outside this page.

not run

Scalar-policy adapter conformance

The release console is one thin adapter over a shared scalar change engine. The same schema, validation, retry, authority, concurrency, stale-state, and recovery contract passes 50 local deterministic cases across three unrelated synthetic domains.

Content publishing

Visibility, editorial review, retention, and schema parity.

13/13 PASS

Access control

Environment, MFA, session duration, and schema parity.

13/13 PASS

Spending policy

Currency, approvals, limits, budget, and schema parity.

13/13 PASS

Engine qualification

Malformed policy, unsafe state, runtime capability, and identifier controls.

11/11 PASS

Local component evidence only. Hosts still own identity, persistence, external effects, durable evidence, and client/browser qualification.

Declared boundary

7 Ceiling workflow tools + 4 shared read tools · 5 refused capability classes 
loading…

Review objective

Current goal: (no goal set)

Arm: not armed

Receipts

Serialized SHA-256 chain over stable JSON, complete input and result digests, sequence, and prior hash. The page recomputes the chain before reporting it valid. Session memory only.

[]

Inspector

Registration and verification state 
{}

How to test

Claims: CLAIMS.md · Adapter contract: UNIVERSAL-ADAPTER.md · Demo shot list: DEMO.md · Home: xclusivexo.com