Approve the contract you can see.
Edit a scoped Fix contract, inspect the exact command and SHA-256 approval hash, authorize it once, then try to replay it.
The interaction now has a portable host transport.
MCP Apps-capable hosts can render dynamic Attune surfaces beside the conversation while the same server-side collectors validate every response. Other hosts keep native, text, or Markdown fallbacks.
What is real: the production contract vocabulary, canonical JSON ordering, hash algorithm, and fail-closed state transitions. What is intentionally absent: MCP, workflow execution, subprocesses, persistence, probes, and file writes.
Fix preview
Review the exact scoped command. Nothing has executed.
Contract
- Goal
- Scope
- Workflow
SHA-256:
Safety constraints
Authorize only the exact hashed command above. Approval is one-time.