// Explicit effects review for the previously unannotated adapters and reviewed current HTTP adapters. These hints
// describe the implemented operation; they never grant execution or proof authority.
// Read-only describes effects, not whether a tool computes a fresh result. Remote
// hosting alone is not open-world; destructive includes revoking current rights.
export const RECEIZ_MCP_REVIEWED_ANNOTATIONS = {
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_action_ledger: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Preview without confirmation; confirmed non-dry-run path writes local generated files and updates package.json via temporary-file rename over existing paths. Existing content can be replaced; SDK rejects delete operations.
    receiz_app_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Reads explicitly selected local project files and computes inspection/plan/explanation. Upgrade returns plan; no package install, command execution or network.
    receiz_app_check: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_app_contract_create: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads explicitly selected local project files and computes inspection/plan/explanation. Upgrade returns plan; no package install, command execution or network.
    receiz_app_explain: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads explicitly selected local project files and computes inspection/plan/explanation. Upgrade returns plan; no package install, command execution or network.
    receiz_app_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Preview without confirmation; confirmed non-dry-run path writes local generated files and updates package.json via temporary-file rename over existing paths. Existing content can be replaced; SDK rejects delete operations.
    receiz_app_repair: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_app_state_by_creator: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_app_state_by_id: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_app_state_by_namespace: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_app_state_by_url: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // POST publishes public proof projections; existing public_proof_records projection fields can be updated, and provenance event appended. Publication can replace previous projection data.
    receiz_app_state_publish: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_app_state_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads explicitly selected local project files and computes inspection/plan/explanation. Upgrade returns plan; no package install, command execution or network.
    receiz_app_upgrade: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_architecture_inspect: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Verifies supplied enclosing artifact then SDK admission; retains only process custody.
    receiz_artifact_admit: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Plans admitted append and retains process plan/confirmation; no sealed candidate/store commit. Resolves proof history, actor evidence and registry through host callbacks, bounded material/account scope applies.
    receiz_artifact_append_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls remote domain resolveAcceptedHead; read only.
    receiz_artifact_global_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls remote domain commitOfflineReconciliation; appends accepted global witness for existing sealed truth. Does not replace local source.
    receiz_artifact_reconcile_commit: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls remote domain planOfflineReconciliation; verifies and retains local plan, no remote staging/commit.
    receiz_artifact_reconcile_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls remote domain stageOfflineReconciliation; writes immutable bytes without accepted-head advance.
    receiz_artifact_reconcile_stage: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls commitArtifactTransition with host store; supported transitions may change current ownership/access/namespace state, while preserving history.
    receiz_artifact_transition_commit: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Calls host-held signer/sealer and store.stageCandidate; writes staged bytes, no accepted-head advance.
    receiz_artifact_transition_seal_and_stage: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Verifies complete supplied file through SDK verification; no mutable host store.
    receiz_artifact_verify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_asset_by_id: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_asset_by_url: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_authority_inspect: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Projects scopes, setup instructions or authorization URL only. Does not issue a session, token, or HTTP request.
    receiz_authorize_url: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // After complete instrument inspection and exact confirmation, claims cross-owner bearer transfer with recipient capability, consumes one-time claim and changes ownership/custody.
    receiz_bearer_instrument_claim: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Inspects supplied complete instrument bytes and deterministic binding through configured historical service; canonical inspection computes validity only and makes no custody transition or external recipient lookup.
    receiz_bearer_instrument_inspect: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed historical operation issues transferable bearer instrument, places subject in pending-transfer custody, changes canonical state/head and records transfer. Supports named recipient or open-bearer transfer to outside owners.
    receiz_bearer_instrument_issue: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // After exact confirmation and owner capability, cancels pending cross-owner transfer, clears pending custody and prevents recipient claim.
    receiz_bearer_transfer_cancel: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Historical SDK returns selected subject transfer plan; MCP stores plan in transferPlans. No issue/claim/cancel dispatch or recipient contact occurs in preview itself.
    receiz_bearer_transfer_preview: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Retrieves selected transfer record/status from configured historical account service. Canonical status computes expiration and returns metadata without mutating record or contacting recipient.
    receiz_bearer_transfer_status: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_bypass_scan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Canonical SDK builds capability/readiness diagnostics from configured options; no HTTP probe despite the probe label.
    receiz_capabilities: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Handler supplies only {local} to resolveLocalFirstSurface. No remote callback, memory or sync is supplied, so this tool path is local projection only.
    receiz_card_history: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_command_scaffold: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Does not dispatch executor or commit proof state, but permitted plan registers runtime attemptStatus and activeByPlanIdentity entries and creates an execution permit. Marked conservatively non-read-only for this in-memory admission-state effect.
    receiz_command_simulate: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Runs in-process SDK conformance; qualification additionally reads selected repository. Conformance report has networkCalls:0, dbCalls:0; no repository writes or publication.
    receiz_conformance_run: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Resolves held secret/recipient materials and constructs encrypted grant envelope; no storage/publication/commit. bounded material/account scope applies.
    receiz_conversation_epoch_grants_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Resolves host-held artifacts, verifies and projects source family; no persistMaterial or committed-write invocation.
    receiz_conversation_source_family_open: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Canonical SDK builds capability/readiness diagnostics from configured options; no HTTP probe despite the probe label.
    receiz_doctor: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_domain_scaffold: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Projects scopes, setup instructions or authorization URL only. Does not issue a session, token, or HTTP request.
    receiz_ensure_tenant_session: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_history_trace: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_inspect_offline_file: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_inspect_proof_object: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_law_coverage: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_law_define: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_law_explain: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Runs isolated in-memory conformance fixtures; no live subject writes, external network or database operations.
    receiz_living_subject_conformance: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_marketplace_template_generate: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Resolves host-held artifacts, verifies and projects source family; no persistMaterial or committed-write invocation.
    receiz_material_source_parts_open: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Verifies embedded material capsule locally when complete; composite without held source URLs resolves external material transport. No mutation requested.
    receiz_material_url_open: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Current implementation unconditionally returns V112_TYPED_ARTIFACT_TOOL_REQUIRED before planning/executor dispatch. No mutation or network occurs on this code path.
    receiz_mcp_append_event: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Current implementation unconditionally returns V112_TYPED_ARTIFACT_TOOL_REQUIRED before planning/executor dispatch. No mutation or network occurs on this code path.
    receiz_mcp_commit_atomic_projection: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed permitted path invokes configured constitutionalExecutor and consumes runtime permit. Callback has no read-only/destructive/network effect restriction in its type or dispatcher, including verify-receipt. Conservative maximum-effect hints until executor contract narrows it.
    receiz_mcp_execute_command: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Projects scopes, setup instructions or authorization URL only. Does not issue a session, token, or HTTP request.
    receiz_mcp_login: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed permitted path invokes configured constitutionalExecutor and consumes runtime permit. Callback has no read-only/destructive/network effect restriction in its type or dispatcher, including verify-receipt. Conservative maximum-effect hints until executor contract narrows it.
    receiz_mcp_verify_receipt: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_merge_simulate: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Locally computes and verifies a fresh full live KaiSigil Groth16 coordinate. Retains monotonic sampler/proof worker in process; no durable user-state write or network. Idempotency hint is inapplicable to read-only effects; output varies with current coordinate.
    receiz_offline_kai_proof: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Explicit confirmation enrolls a new locally held signing key with the canonical public enrollment service, verifies its certificate, and exclusively persists local custody. Existing valid enrollment returns unchanged. Conservatively not idempotent across concurrent calls or remote success followed by local persistence failure.
    receiz_offline_seal_enroll: { readOnlyHint: false, destructiveHint: false, openWorldHint: true, idempotentHint: false },
    // Workspace and supplied text modes seal locally; file input mode first retrieves one authorized original from a host-pinned private platform origin. No open-ended external entity is selected. The canonical signer and output remain device-held. Fresh proof creation is not idempotent.
    receiz_offline_seal_file: { readOnlyHint: false, destructiveHint: false, openWorldHint: false, idempotentHint: false },
    receiz_offline_artifact_chunk: { readOnlyHint: true, destructiveHint: false, openWorldHint: false, idempotentHint: true },
    receiz_offline_crystal_append: { readOnlyHint: false, destructiveHint: false, openWorldHint: false, idempotentHint: false },
    receiz_offline_crystal_open: { readOnlyHint: true, destructiveHint: false, openWorldHint: false, idempotentHint: true },
    // Reads existing private enrollment and packaged resources; checks canonical certificate and optional admitted identity. No enrollment, write, or network.
    receiz_offline_seal_status: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads a workspace file and verifies its complete artifact bytes with the canonical offline verifier. No durable write or network.
    receiz_verify_uploaded_artifact: { readOnlyHint: true, destructiveHint: false, openWorldHint: false, idempotentHint: true },
    receiz_offline_verify_file: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_pack_open_preview: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Handler supplies only {local} to resolveLocalFirstSurface. No remote callback, memory or sync is supplied, so this tool path is local projection only.
    receiz_pitch_proof_by_witness_id: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads explicitly selected local project files and computes inspection/plan/explanation. Upgrade returns plan; no package install, command execution or network.
    receiz_project_inspect: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_proof_query: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Inspects supplied value or strictly verifies supplied complete artifact bytes using canonical pinned roots. Canonical SDK verification is local and does not call delegated verification endpoint.
    receiz_proof_trace: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // POST publishes public proof projections; existing public_proof_records projection fields can be updated, and provenance event appended. Publication can replace previous projection data.
    receiz_public_store_publish: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_public_store_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Returns constitutional context/proposal/coverage/scan or supplied payload projection. Law define does not admit a law; receipt replay returns a plan; scaffolds do not write files.
    receiz_receipt_replay: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Runs in-process SDK conformance; qualification additionally reads selected repository. Conformance report has networkCalls:0, dbCalls:0; no repository writes or publication.
    receiz_release_qualify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Runs in-process SDK conformance; qualification additionally reads selected repository. Conformance report has networkCalls:0, dbCalls:0; no repository writes or publication.
    receiz_release_verify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Projects scopes, setup instructions or authorization URL only. Does not issue a session, token, or HTTP request.
    receiz_required_scopes: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_runtime_blueprint: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns freshly constructed fixture object; neither persists a store nor performs an actual checkout.
    receiz_sandbox_checkout: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Returns freshly constructed fixture object; neither persists a store nor performs an actual checkout.
    receiz_sandbox_seed_store: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_scope_explain: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_sealed_kai_moment: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Resolves host-held artifacts, verifies and projects source family; no persistMaterial or committed-write invocation.
    receiz_source_carried_replay_open: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Current GET computes fixed Receiz conformance report then signs and persists history. File-backed history is replaced and trimHistory retains only HISTORY_LIMIT entries; SQL history entry is upserted. This is state-changing despite GET/read wording, within fixed Receiz conformance service.
    receiz_sports_conformance: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_brain_head: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_brain_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_brain_search: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_brain_stream: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_history: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_inventory: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // After exact confirmation and owner capability validation, overwrites stored planned mandate with active status/capability and activation Kai; persists owner workspace state.
    receiz_subject_mandate_activate: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_mandate_get: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // After confirmation, changes active/paused mandate statuses across the selected subject; revoke also cancels queued/leased jobs. Revokes or disables execution authority within private owner workspace.
    receiz_subject_mandate_pause: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Persists planned mandate in canonical adapter and stores plan in MCP map. Core unconditionally sets record.mandates[mandateDigest]; repeating same policy can overwrite an existing record/status with planned, so it is not merely a read-only preview.
    receiz_subject_mandate_plan: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // After confirmation, changes active/paused mandate statuses across the selected subject; revoke also cancels queued/leased jobs. Revokes or disables execution authority within private owner workspace.
    receiz_subject_mandate_revoke: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_memory_query: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_relationships: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed call maps to runtime.pause, changing queued/leased jobs to cancelled and preventing their execution within selected owner subject.
    receiz_subject_runtime_cancel: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Confirmed call adds a queued job under an active mandate in selected owner subject and persists it. Does not itself execute a tick or dispatch to external recipients.
    receiz_subject_runtime_enqueue: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_runtime_status: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_state: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the selected subject Twin with owner-bound context and computes model response/intent. Canonical local adapter marks access mutate=true and persists temporal transition evidence. It does not execute proposed world commands or send a message to another user.
    receiz_subject_twin_message: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Creates portable mind artifact, advances record.priorMindHead to its digest and persists a temporal transition. This export changes continuity state, but preserves predecessor linkage rather than deleting history.
    receiz_subject_twin_mind_export: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Checks supplied artifact digest and current subject identity, then returns plan digest and writes:0. Does not call importMind or stage/store the supplied artifact.
    receiz_subject_twin_mind_import_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_subject_twin_profile: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_transfer_preview: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_transfer_requires_confirmation: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Issues scoped owner mandate.
    receiz_v122_mandate_issue: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Revokes existing mandate.
    receiz_v122_mandate_revoke: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_mandate_state: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Executes admitted transaction across selected world participants; can change current state.
    receiz_v122_multi_world_execute: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_multi_world_plan: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_subject_access_binding: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Publishes admitted public key binding against expected head; can rotate/replace active access binding.
    receiz_v122_subject_access_key_publish: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Admits enclosing proof and creates initial subject state.
    receiz_v122_subject_admit: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads subject edge bundle then verifies supplied bundle verifier; does not import or alter state.
    receiz_v122_subject_export_edge_bundle: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Verifies edge bundle then POSTs /api/sdk/v1/subjects/import; additive verified import.
    receiz_v122_subject_import_edge_bundle: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_subject_state: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_value_plan_reserve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_value_plan_settlement: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_world_additions: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Executes admitted world transaction; domain reducers can change current ownership/access/value state.
    receiz_v122_world_execute_transaction: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_world_execution: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v122_world_execution_by_idempotency: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Constructs encrypted private command locally; no execution/publication.
    receiz_v122_world_plan_private: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Validation only; no transaction execution.
    receiz_v122_world_validate_transaction: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v123_auth_granted_scopes: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Confirmed exchange calls identity.exchangeProofAuthority and retains authority; server proof-authority issuance is mutation.
    receiz_v123_identity_exchange_proof_authority: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v123_subject_resolve_namespaces: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Confirmed canonical Reserve execution changes value state.
    receiz_v123_value_execute_reserve: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Confirmed canonical Settlement execution changes sender/recipient value state.
    receiz_v123_value_execute_settlement: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v123_value_execution_by_idempotency: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v123_world_plan_command_v122: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Direct SDK method dispatch shown at evidence line. Reads selected subject/scope/execution/addition state, or computes a plan without executing it.
    receiz_v123_world_plan_transaction_v122: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_domain_replay_proof_object_export: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Restores canonical proof-carried additions into SDK replay/checkpoint state; additive local mutation. bounded material/account scope applies.
    receiz_v124_domain_replay_proof_object_restore: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_domain_verified_additions: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_domain_verified_checkpoint: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_domain_verified_private_additions: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_domain_verified_replay: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Cancels retained staged operation via authenticated SDK runtime.
    receiz_v124_execution_cancel: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Executes staged admitted operation; can change ownership/value/participant heads. Review annotations for maximum supported effects, including non-marketplace runtime.
    receiz_v124_execution_execute: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Computes canonical operation plan and retains optional in-memory custody reference; no durable execution/staging.
    receiz_v124_execution_plan_atomic_operation: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_execution_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_execution_resolve_by_idempotency: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Stages execution through SDK runtime; retains staged handle. Staging writes without advancing accepted participant heads.
    receiz_v124_execution_stage: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Stages execution through SDK runtime; retains staged handle. Staging writes without advancing accepted participant heads.
    receiz_v124_execution_stage_prepared: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_identity_public_recipient_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Projects local Kai coordinate candidate; no network or persistent mutation.
    receiz_v124_kai_now: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Creates local proof-authority challenge value after preview/confirmation; no persistence callback or server registration.
    receiz_v124_proof_authority_challenge_create: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_runtime_authority_session_close: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_runtime_authority_session_open: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_runtime_authority_session_refresh: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_runtime_qualify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Publishes sealed source with held session through client.sources.publishSealedSourceV124; additive publication.
    receiz_v124_source_publish_sealed: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Calls the corresponding SDK client method; bounded material/account scope applies.
    receiz_v124_subject_namespaces_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Adds initial/evidence proof source without removing prior source.
    receiz_v125_attestation_application_apply: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_application_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_attestation_approval_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_approval_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_domain_resolve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_attestation_evaluation_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_evaluation_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Adds initial/evidence proof source without removing prior source.
    receiz_v125_attestation_evidence_apply: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_evidence_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_attestation_review_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_review_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_attestation_workflow_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_attestation_workflow_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_currentness_resolve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Adds initial/evidence proof source without removing prior source.
    receiz_v125_credential_issue_apply: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_issue_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_credential_lifecycle_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_lifecycle_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_presentation_create: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_presentation_handoff_resolve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_credential_presentation_verify: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Prepares verified transition commit set, retains only in-memory reference; does not call commit/store.
    receiz_v125_edge_value_commit_set_prepare: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Resolves held plan and canonically inspects participant role/rail; no write.
    receiz_v125_edge_value_plan_inspect: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Creates plan/recovery then invokes persistReceizV124McpMaterial; optional host persistence can write durably or externally. No new transfer occurs here.
    receiz_v125_edge_value_plan_reserve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Creates plan/recovery then invokes persistReceizV124McpMaterial; optional host persistence can write durably or externally. No new transfer occurs here.
    receiz_v125_edge_value_plan_settlement: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Creates plan/recovery then invokes persistReceizV124McpMaterial; optional host persistence can write durably or externally. No new transfer occurs here.
    receiz_v125_edge_value_recovery_create: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Despite send-confirm/receive naming and consent gate, SDK settleReceizEdgeValueTransferV125 verifies/recoveries ALREADY committed portable transitions and projects their receipt; no store/transfer callback. bounded material/account scope applies.
    receiz_v125_edge_value_reserve_receive: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Despite send-confirm/receive naming and consent gate, SDK settleReceizEdgeValueTransferV125 verifies/recoveries ALREADY committed portable transitions and projects their receipt; no store/transfer callback. bounded material/account scope applies.
    receiz_v125_edge_value_reserve_send_confirm: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Despite send-confirm/receive naming and consent gate, SDK settleReceizEdgeValueTransferV125 verifies/recoveries ALREADY committed portable transitions and projects their receipt; no store/transfer callback. bounded material/account scope applies.
    receiz_v125_edge_value_settlement_receive: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Despite send-confirm/receive naming and consent gate, SDK settleReceizEdgeValueTransferV125 verifies/recoveries ALREADY committed portable transitions and projects their receipt; no store/transfer callback. bounded material/account scope applies.
    receiz_v125_edge_value_settlement_send_confirm: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Verifies resolved portable transition set; admits only in-memory custody reference, no durable commit.
    receiz_v125_edge_value_transition_set_verify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Invokes configured external provider through admitted execution runtime and persists durable outcome; provider may perform destructive actions. Marketplace profile separately denies dispatch.
    receiz_v125_external_execution_execute: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_external_execution_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Recovers existing outcome from configured external execution store and verifies canonical outcome; provider is not invoked and no persistence call occurs.
    receiz_v125_external_execution_resolve: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Recovers existing outcome from configured external execution store and verifies canonical outcome; provider is not invoked and no persistence call occurs.
    receiz_v125_external_execution_verify: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // callLawfulAction sends registerLaw/admit/deriveValueHead to authenticated lawful-action transport; adds canonical law/admission/value head.
    receiz_v125_lawful_action_admit: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // callLawfulAction sends registerLaw/admit/deriveValueHead to authenticated lawful-action transport; adds canonical law/admission/value head.
    receiz_v125_lawful_action_law_register: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // callLawfulAction sends registerLaw/admit/deriveValueHead to authenticated lawful-action transport; adds canonical law/admission/value head.
    receiz_v125_lawful_action_value_head_derive: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_pbi_ceremony_approve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_pbi_ceremony_challenge_create: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Consumes one-use ceremony through replayGuard, then retains result reference; invalidates further redemption.
    receiz_v125_pbi_ceremony_challenge_redeem: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_pbi_ceremony_receipt_issue: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_pbi_ceremony_receipt_verify: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_subject_discovery_resolve: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_subject_introduction_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_subject_introduction_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_subject_message_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_subject_message_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_subject_presence_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_subject_presence_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical host applies sealed source transition using custody-bound signer/sealer/store; persists resulting source references. Supported lifecycle changes can revoke, close, withdraw, deny, block, or change current state despite append-only history.
    receiz_v125_subject_relationship_apply: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical host resolves source material and persists plan/result using persistReceizV124McpMaterial (optional durable/external host). Even resolve/verify names and writesPerformed:0 mean zero proof-head writes, not zero reference-store writes.
    receiz_v125_subject_relationship_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_wallet_public_ledger: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_webhook_events_catalog: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_webhook_receiver_scaffold: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Creates a remote webhook endpoint registration and associated signing secret; additive endpoint creation.
    receiz_webhook_register_endpoint: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Confirmed branch inserts idempotency key into runtime.webhookReplayIds Set, changing admission behavior of later calls. It does not deliver the event or call a remote replay service.
    receiz_webhook_replay: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Replaces the registered endpoint secret through remote rotate-secret operation, invalidating prior signing configuration.
    receiz_webhook_rotate_secret: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // POSTs to configured Receiz test-event service, which reads endpoint secret, constructs signed delivery payload and updates last-tested state. Current route returns delivery instructions; it does not actually dispatch HTTP to the registered endpoint.
    receiz_webhook_send_test_event: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Pure local inspection, verification, preview, code-string scaffold or metadata projection. No output files written and no network dispatched.
    receiz_webhook_verify_payload: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_world_additions: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed execution admits and persists commands/transactions across locally owned participants. Supported inventory.use can remove an item or decrement quantity; other commands can change relationships/inventory. Canonical adapter enforces same admitted owner across affected IDs.
    receiz_world_command_execute: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Computes a plan over selected local participants and stores it in MCP commandPlans/transactionPlans for later execution. No world transition is committed, but plan-registration runtime state changes.
    receiz_world_command_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Validates held command plan and heads; canonical adapter computes local temporal proof with mutate=false. Does not commit snapshot or world transition. Local proof worker performs computation only.
    receiz_world_command_validate: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads remote configured SDK service projections. proof.query uses POST as query transport; no write is requested by the adapter.
    receiz_world_public_snapshot: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_world_receipt: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Reads or computes selected subject/world/job state within admitted local owner workspace. Brain stream traverses a finite held snapshot. Canonical adapter uses access(mutate=false); externally hosted scoped account alone does not make these open-world.
    receiz_world_replay: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Confirmed execution admits and persists commands/transactions across locally owned participants. Supported inventory.use can remove an item or decrement quantity; other commands can change relationships/inventory. Canonical adapter enforces same admitted owner across affected IDs.
    receiz_world_transaction_execute: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Computes a plan over selected local participants and stores it in MCP commandPlans/transactionPlans for later execution. No world transition is committed, but plan-registration runtime state changes.
    receiz_world_transaction_plan: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Read the authenticated owner’s current market mandate; this does not activate or execute it.
    receiz_twin_market_mandate: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // List recent market intents belonging to the authenticated owner; this does not approve or execute an intent.
    receiz_twin_market_intents: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Read the authenticated owner’s imported Mind turn count and last import time; this does not import a Mind artifact.
    receiz_twin_import_mind_summary: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Read the authenticated owner’s current or pending twin promotion approval. Loading its world context can create missing profile and agent records; this tool does not approve promotion.
    receiz_twin_approval: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Preview and, after exact confirmation, update the authenticated owner’s market mandate. The marketplace-phi execution profile permits only an explicit paused status; active USD market mandates are rejected.
    receiz_twin_save_market_mandate: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // List webhook endpoint configuration belonging to the authenticated developer owner; returns secret hints, not endpoint secrets, and does not send deliveries.
    receiz_webhook_endpoints_list: { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
    // Preview and, after exact confirmation, delete the selected webhook endpoint belonging to the authenticated developer owner.
    receiz_webhook_endpoints_delete: { readOnlyHint: false, destructiveHint: true, openWorldHint: false },
    // Canonical admission requires exact genesis and rejects a conflicting existing subject; it adds initial sealed truth.
    receiz_subject_local_admit: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
    // Canonical snapshot import rejects an initialized workspace; it cannot replace existing subjects or sources.
    receiz_subject_local_snapshot_import: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },
};
// These clarifications describe observed effects without changing dispatch or consent.
export const RECEIZ_MCP_REVIEWED_DESCRIPTIONS = {
    receiz_twin_market_mandate: "Read the authenticated owner’s current market mandate; this does not activate or execute it.",
    receiz_twin_market_intents: "List recent market intents belonging to the authenticated owner; this does not approve or execute an intent.",
    receiz_twin_import_mind_summary: "Read the authenticated owner’s imported Mind turn count and last import time; this does not import a Mind artifact.",
    receiz_twin_approval: "Read the authenticated owner’s current or pending twin promotion approval. Loading its world context can create missing profile and agent records; this tool does not approve promotion.",
    receiz_twin_save_market_mandate: "Preview and, after exact confirmation, update the authenticated owner’s market mandate. The marketplace-phi execution profile permits only an explicit paused status; active USD market mandates are rejected.",
    receiz_webhook_endpoints_list: "List webhook endpoint configuration belonging to the authenticated developer owner; returns secret hints, not endpoint secrets, and does not send deliveries.",
    receiz_webhook_endpoints_delete: "Preview and, after exact confirmation, delete the selected webhook endpoint belonging to the authenticated developer owner.",
};
export function applyReceizMcpToolAnnotations(tools) {
    return tools.map(tool => {
        const reviewed = RECEIZ_MCP_REVIEWED_ANNOTATIONS[tool.name];
        if (!reviewed)
            return tool;
        const description = RECEIZ_MCP_REVIEWED_DESCRIPTIONS[tool.name];
        return {
            ...tool,
            ...(description ? { description: `${description} ${tool.description}` } : {}),
            annotations: { ...tool.annotations, ...reviewed },
        };
    });
}
//# sourceMappingURL=toolAnnotations.js.map