mirror of
https://github.com/jjbrunton/Sauci.git
synced 2026-10-31 18:19:43 +00:00
jjbrunton
01bb8225ae
Add concise routed context, task-aware agent roles, focused skills, and structured learning promotion.\n\nUnify local development and workspace tooling, add layered test and E2E verification, harden MCP authentication, and gate deployment behind verification and explicit production promotion.
12 lines
548 B
Markdown
12 lines
548 B
Markdown
# Internal MCP service
|
|
|
|
Hono service exposing privileged administrative tools.
|
|
|
|
- Treat the service-role key and `SAUCI_MCP_API_KEY` as secrets.
|
|
- Fail closed when MCP authentication is missing outside explicit local mode.
|
|
- Every mutation validates inputs, authorizes the operation, and writes audit
|
|
evidence where the product contract requires it.
|
|
- Read operations preserve least privilege and avoid excessive user data.
|
|
- Add unit/API coverage for tool contract or auth changes.
|
|
- Verify lint, tests, typecheck, build, and `/health` locally.
|