@lapxo/head 0.0.0-stage → 0.1.0

package/TARGET.bound

@@ -0,0 +1,443 @@
+bound-lock/1 about="A lot is drafted lines, one a line, each by=target and unsigned: nothing was asked." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/bad-lot value=lock
+bound-lock/1 about="A place is founded in an absolute folder: nothing was made." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/place-absolute value=lock
+bound-lock/1 about="A source the place compiles." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/access/source value=string
+bound-lock/1 about="A source the place compiles." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/source value=string
+bound-lock/1 about="A source the place compiles: an API it holds the document of, by the name the place gives it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/source value=string
+bound-lock/1 about="Access to {source} is kept in this keychain, its receipt landed without the secret: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/access-kept value=lock
+bound-lock/1 about="Admit another device into a place, once whoever holds its root says yes: the key its own key tool handed, under a name, covering what is given — without it, what a member is: asking, keeping what it read, proving access. What it claims to cover is not read." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit value=place|key|name|coverage
+bound-lock/1 about="Allow one offer that is not of class read, up to a number of times." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can value=source|operation|times
+bound-lock/1 about="An API already says what it offers, where it is reached and how access to it is proven. head reads that document once, compiles it into lines its place pins by digest, and from then on answers by those lines: which operation reads, what it asks, what it answered. It names no kind of source and no client: what it reads is said by the worlds it adopts, and what it asks through is what the client declares. [Connect any API](docs/connect-any-api.md) shows each level of access on a real public API.\n\nA person does three things. **Found a place**: a folder whose lock is the place, its root key kept in the keychain. **Connect a source**: hand head an API document, and an overlay beside it when it says too little; it is compiled once, pinned, and every offer is listed with its class. **Ask**: read an operation. head obtains access the first time, as the document declares it, calls only what reads, types the answer and lands a receipt.\n\nAccess comes at three levels, and the place says which. **None**: the document states a read needs nothing, and nothing is asked. **A declared flow**: the document, or its overlay, declares how access is obtained, as an Arazzo profile: a form, a one-time code, a choice, a provider's page. head runs it once per issuer and keeps only the token, in the keychain. **A secret entered by hand**: a key or a password, only where the place's root allows it, entered on head's own one-time page and never through the model.\n\nWhat head never does. It never guesses how access is proven: a document that does not state it is said so, and nothing is called. It never calls an operation that is not a read without the person's yes, nor past what the place allows; a place that would stand on another's lock as its parent is refused by name, since composing two places' policies is bound's. It never lets a secret reach the model, a file, an answer or an argument. And it never raises a ceiling to make room: what outgrows one is split by responsibility." at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/idea value=lock
+bound-lock/1 about="An MCP server that reads any API by its document: access asked once per issuer, every answer typed by the world that compiled it, every read kept with a signed receipt." at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/what value=lock
+bound-lock/1 about="An earlier call of {operation} on {source} landed its intent {intent} and no receipt: look at what it would have changed with closes={intent}, then act again." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/open value=lock
+bound-lock/1 about="An intent an earlier act left open, by the scope it was named under: once this read lands, it closes that intent with the read-s digest. Look at what the act would have changed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/closes value=string
+bound-lock/1 about="An overlay for the document, the same way; optional." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect/overlay value=string
+bound-lock/1 about="Answered from the receipt {scope} ({digest}), as the source answered it at {at}, within the reuse the place allows: nothing was called; nothing typed was kept of it, so the fold typed it again." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/reread value=lock
+bound-lock/1 about="Answered from what was kept for {scope} ({digest}), as the source answered it at {at}, within the reuse the place allows: nothing was called and nothing folded." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/reused value=lock
+bound-lock/1 about="Any API, read by its document" at=policy:head/docs by=target form=alphabet measure=text role=writes scope=docs/tagline value=lock
+bound-lock/1 about="Ask me before {operation} on {source} is called, every time. Plan this line for me to sign:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask/text value=lock
+bound-lock/1 about="Ask the person before an offer is called, every time." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask value=source|operation
+bound-lock/1 about="Call one offer that is not of class read, only as far as the person allowed it and after their yes when they asked to be asked. The intent lands before the call and the receipt after; a call that never answered stays open until a look closes it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act value=place|source|operation|args
+bound-lock/1 about="Clone, `npm ci && npm test`. A vector that gives you a different answer is the contribution: send it with what it printed. Lines land through the fold, never by hand; when a page and the lock disagree, the lock is right." at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/contributing value=lock
+bound-lock/1 about="Closed {intent} by this read ({digest}). It counts as done: act runs again only within what is still allowed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/closed value=lock
+bound-lock/1 about="Connect a source to a place from its document." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect value=place|source|document
+bound-lock/1 about="Connect a source to a place, once the person says yes: its document, and an overlay beside it, laid whatever its kind and compiled once by whichever world reads it — or open, with the line that pays it — into what the source offers and how access is proven, pinned by digest. Nothing is called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect value=place|source|document|overlay
+bound-lock/1 about="Connect any API" at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/page/connect-any-api/heading value=lock
+bound-lock/1 about="Connect {source} to the place {place} from {document} with the connect tool, then show me what it offers." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect/text value=lock
+bound-lock/1 about="Earlier, {source} answered the same request at {at}, under receipt {digest}." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history-earlier value=lock
+bound-lock/1 about="Found a place for my sources in a folder." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/place value=dir|name
+bound-lock/1 about="Found a place in a folder, once the person says yes: its root key made in the keychain, the lines it is born with — reads bounded, read-only — and its name in head-s index of places." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/place value=dir|name
+bound-lock/1 about="Found the place {name} in {dir} with the place tool. Ask me before you do." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/place/text value=lock
+bound-lock/1 about="History, not a current answer: what {source} answered to {operation} at {at}, under receipt {digest}. Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history value=lock
+bound-lock/1 about="How many times, at most." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/times value=string
+bound-lock/1 about="I allow {operation} on {source} up to {times} times. Plan this line for me to sign:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/text value=lock
+bound-lock/1 about="Its document: an https address or a file." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect/document value=string
+bound-lock/1 about="Its document: an https address, or an absolute file inside the place or a folder the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect/document value=string
+bound-lock/1 about="Keep a source read-only: whatever it offers beyond reads is never called, whatever else is allowed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/readonly value=source
+bound-lock/1 about="Keep {source} read-only. Plan this line for me to sign:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/readonly/text value=lock
+bound-lock/1 about="Land a lot plan signed, by its digest, while the place still stands on the base it was planned against." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/land value=lot
+bound-lock/1 about="No intent {intent} stands open for this source: nothing was closed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/nothing-open value=lock
+bound-lock/1 about="No place was named and the client shares no root: name the folder of a place." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-place value=lock
+bound-lock/1 about="No retained read of {operation} on {source} is held here for whom it would be read as. Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history-none value=lock
+bound-lock/1 about="No world typed that answer, so nothing of it was kept to show; the receipt stands as evidence of the read." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history-untyped value=lock
+bound-lock/1 about="Nothing was admitted: hand the lines the other device-s key tool answered, and a name." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-key value=lock
+bound-lock/1 about="One view of a place as bound folds it, for a client to hold beside the conversation." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=resource/view value=bound://view/{view}{?place,at}
+bound-lock/1 about="Open this page on this device to answer: {title}. What you enter goes to head on this device, never through the model." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/answer value=lock
+bound-lock/1 about="Open this page on this device to enter what {title} asks for. Nothing you type passes through the model; only the secret it yields is kept, in your keychain." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/enter value=lock
+bound-lock/1 about="Pick the origin head reaches {source} at in this place, once. None is a default." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/pick value=lock
+bound-lock/1 about="Propose lines for the person to sign: they are shown to the person with the place and the base they are made against; on a yes to exactly those, the person-s key signs them and they are folded as if landed. Nothing lands; the lot is kept by its digest." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/plan value=place|lines
+bound-lock/1 about="Prove access to a source ahead of any call, the way its document declares: the person-s own page, or its provider with a client registered for the visit; the secret is kept in this keychain and a receipt lands without it. Nothing is called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/access value=place|source|operation
+bound-lock/1 about="Prove access to a source the way it declares, ahead of any call: entered on head-s page or at its provider, never here." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/access value=place|source
+bound-lock/1 about="Prove access to {source} in {place} with the access tool. I will enter what it asks on head-s own page or at its provider, never here." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/access/text value=lock
+bound-lock/1 about="Read one view of a place as bound folds it; or what a source offers, as typed lines: at 0 where it is reached and the class of each offer, at 1 (the default) their forms and how access is proven; or, at 8 with an operation of class read, that operation once: the response comes back with the receipt the device key landed for it. Nothing else is ever called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look value=place|view|at|source|operation|args|closes|history
+bound-lock/1 about="Sign exactly these lines" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit/yes value=lock
+bound-lock/1 about="Signed by who configures the place — its root where this keychain holds it, else the person-s key; nothing landed. Lot {lot}, made against base {base}. What bound printed, folding it as if it landed:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/planned value=lock
+bound-lock/1 about="The digest plan answered for the lot." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/land/lot value=string
+bound-lock/1 about="The drafted lines, one a line, each by=target and unsigned: what the person would allow." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/plan/lines value=string
+bound-lock/1 about="The flow {source} declares stopped at {input}: its answer held nothing the flow goes on with. Nothing was kept and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/step-unanswered value=lock
+bound-lock/1 about="The folder of the new place, absolute." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/place/dir value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/access/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/card/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/place value=string
+bound-lock/1 about="The folder of the place, absolute; without one, the first root the client shares." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/plan/place value=string
+bound-lock/1 about="The folder of the place." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/access/place value=string
+bound-lock/1 about="The folder of the place." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect/place value=string
+bound-lock/1 about="The folder, absolute." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/place/dir value=string
+bound-lock/1 about="The key whose cells are asked; without one, every open cell." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/card/key value=string
+bound-lock/1 about="The keychain keeps a root for a place named {name} already: name this one otherwise." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/place-taken value=lock
+bound-lock/1 about="The lines that admit a key of this device in a place: its public key, its class, what it may sign and how deep. The key is made once in the keychain and never shown." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/key value=who
+bound-lock/1 about="The lines the other device-s key tool answered, or the line holding its public key." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit/key value=string
+bound-lock/1 about="The name it is known by." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/place/name value=string
+bound-lock/1 about="The name it is known by; without one, the folder-s." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/place/name value=string
+bound-lock/1 about="The name of a view the place signs; without one, the lines that stand." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/view value=string
+bound-lock/1 about="The name the place knows that device by." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit/name value=string
+bound-lock/1 about="The name the source is known by in the place." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect/source value=string
+bound-lock/1 about="The name the source is known by." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect/source value=string
+bound-lock/1 about="The operation, by the id the source offers it under." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask/operation value=string
+bound-lock/1 about="The operation, by the id the source offers it under." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/operation value=string
+bound-lock/1 about="The operation, by the id the source offers it under." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/operation value=string
+bound-lock/1 about="The operation, by the id the source offers it under." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/operation value=string
+bound-lock/1 about="The parameters by name, and body for what the operation is sent." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/args value=object
+bound-lock/1 about="The parameters of the operation, by name." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/args value=object
+bound-lock/1 about="The person asked to be asked first and this client cannot ask: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/cannot-ask value=lock
+bound-lock/1 about="The person did not finish entering what {source} asks for, or no page could be offered: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/entry-unfinished value=lock
+bound-lock/1 about="The person did not say yes: nothing was signed and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-yes value=lock
+bound-lock/1 about="The place holds nothing read of {source}: no line says where it is or what it offers." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unread value=lock
+bound-lock/1 about="The place moved since base {base}: nothing landed. Plan again." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/base-moved value=lock
+bound-lock/1 about="The read whose access is proven; without one, the first read the source offers." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/access/operation value=string
+bound-lock/1 about="The resolution: of a view, the one it is read at; of a source, 0, 1 or 8 to read one offer." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/at value=integer
+bound-lock/1 about="The response came back but its receipt did not land: {why}" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/not-landed value=lock
+bound-lock/1 about="The response from {source} ran past read/response-bytes: it was refused whole and nothing landed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/too-large value=lock
+bound-lock/1 about="The source, as the place names it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask/source value=string
+bound-lock/1 about="The source, as the place names it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/source value=string
+bound-lock/1 about="The source, as the place names it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/readonly/source value=string
+bound-lock/1 about="The source." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/access/source value=string
+bound-lock/1 about="The way {source} proves access asks its host for {input}, which head does not hand any flow: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/host-input value=lock
+bound-lock/1 about="The world compiled nothing {source} offers: nothing was pinned." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/nothing-offered value=lock
+bound-lock/1 about="This client cannot ask you: sign these lines yourself in {place} with your key, then land them." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/sign-yourself value=lock
+bound-lock/1 about="This device keeps keys for two roles only: head and person." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-role value=lock
+bound-lock/1 about="This device keeps no keychain head can reach: no key was made." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-keychain value=lock
+bound-lock/1 about="This device-s person key already attests {scope} in {place}, or the place states it itself: a second line of it is read only through a fold of this key-s lines, which bound does not publish. Nothing was signed; the place-s root can sign it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/attested-again value=lock
+bound-lock/1 about="This keychain keeps no root of {place}: whoever holds it connects sources and admits devices there. Nothing was asked." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-root value=lock
+bound-lock/1 about="This place signs no view of cells: nothing is open to ask." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-cells value=lock
+bound-lock/1 about="What is open for a key: each cell no reading has answered, its ceiling, its origins and the states it may take, in the order bound ranks them." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/card value=place|key
+bound-lock/1 about="What it may sign there, as scopes joined by |; without it, what a member may." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit/coverage value=string
+bound-lock/1 about="What the fold typed of that answer is no longer held here; the receipt stands as evidence of the read." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history-gone value=lock
+bound-lock/1 about="What {source} carries for this offer is not one request: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/carry-unsettled value=lock
+bound-lock/1 about="What {source} would have the person enter would go to another origin than {source} itself: refused, nothing was sent and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/cross-origin value=lock
+bound-lock/1 about="Why head" at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/idea/heading value=lock
+bound-lock/1 about="With an operation and its parameters: what was retained of that read, as of when it was made, instead of a current answer. Nothing is called; the place must allow it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/history value=boolean
+bound-lock/1 about="a device key attests; it never admits another key" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/head/class value=attest
+bound-lock/1 about="a device key attests; it never admits another key" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/person/class value=attest
+bound-lock/1 about="a document compiled once into a standing a place pins from its own store, and the demands a later document pays: split from the sources when connect reached its ceiling, never raised" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/compile value=src/compile/**
+bound-lock/1 about="a page of head: connecting a public API at each level of access, every example run against the real API" at=policy:head/docs by=target form=alphabet measure=id role=writes scope=docs/page/connect-any-api value=docs/connect-any-api.md
+bound-lock/1 about="a question answered before is answered from what was kept, in no whole second: nothing is called and nothing folded" at=policy:head/ceilings by=target form=interval measure=seconds role=reads scope=answer/kept value=0..0
+bound-lock/1 about="a signer over an encrypted file, for hosts with no keychain: only where a place declares it and every line it signs is marked so; never a default" at=policy:head/platform by=target form=alphabet measure=id role=demands scope=signer/encrypted-file value=declared|marked
+bound-lock/1 about="a view is lines of text" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=resource/view/mime value=text/plain
+bound-lock/1 about="a world head carries and adopts in every place it connects, pinned by its standing and its blob where its release publishes them; what it reads is said by its standing, never here" at=policy:head/worlds by=target form=alphabet measure=digest role=writes scope=world/topos-mcp/standing value=sha256:b3de7547323c523c1bb6847872a2602c9734950a7bd677607c981e7332f982c8
+bound-lock/1 about="a world head carries and adopts in every place it connects, pinned by its standing and its blob where its release publishes them; what it reads is said by its standing, never here" at=policy:head/worlds by=target form=alphabet measure=digest role=writes scope=world/topos-openapi/standing value=sha256:03d1d957c2df3086a0d11d2ee95eb028a5a8230b423ea72d3e9562f9bd031d4b
+bound-lock/1 about="act changes the world outside the place" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/hints value=destructive|openWorld
+bound-lock/1 about="an act of the place, by its identity, as bound committed it" at=policy:head/birth by=target form=alphabet measure=id role=demands scope=birth/view/act value=act
+bound-lock/1 about="answering a question takes at most this; slower reads red with its coordinate" at=policy:head/ceilings by=target form=interval measure=seconds role=reads scope=answer/seconds value=0..2
+bound-lock/1 about="asked again, key answers the same lines; the first ask makes the key" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/key/hints value=idempotent
+bound-lock/1 about="bound did not settle the place {source} compiles to: {why} Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unsettled value=lock
+bound-lock/1 about="bound is not installed beside head: nothing was folded." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unreachable value=lock
+bound-lock/1 about="bound refused to fold {place}: {why} Nothing was signed and nothing landed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unfolded value=lock
+bound-lock/1 about="bound-lock/1 at=policy:person/allows by=target form=interval measure=calls role=writes scope=allow/{source} value=0..0" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/readonly/line value=lock
+bound-lock/1 about="bound-lock/1 at=policy:person/allows by=target form=interval measure=calls role=writes scope=allow/{source}/{operation} value=0..{times}" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/line value=lock
+bound-lock/1 about="bound-lock/1 at=policy:person/asks by=target form=alphabet measure=status role=writes scope=ask/{source}/{operation} value=present" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask/line value=lock
+bound-lock/1 about="card reads and never writes" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/card/hints value=readOnly|idempotent
+bound-lock/1 about="connecting a source, from the ask to the pin, takes at most this; slower reads red with its coordinate" at=policy:head/ceilings by=target form=interval measure=seconds role=reads scope=connect/seconds value=0..10
+bound-lock/1 about="every file between head and what it does not own — each adapter of access or transport, each port, the protocol binding — measured alone" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/ports value=src/ports/**|src/index.ts|src/signer.ts
+bound-lock/1 about="every lot landed in a place head founds is one act, and land prints its result: the records it admitted, in one process" at=policy:head/birth by=target form=alphabet measure=id role=writes scope=birth/wire/act-result value=local-act@1
+bound-lock/1 about="every place head founds can be walked by bound: compared with a peer-s authenticated inventory, the regions that differ exchanged, the history converged by union" at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/wire/walk/contract value=whole-region@1
+bound-lock/1 about="every reader of a place head founds is a bounded process: it answers within this, or is stopped and its reading refused" at=policy:head/birth by=target form=interval measure=milliseconds role=writes scope=birth/reader/timeout value=0..60000
+bound-lock/1 about="every reader of a place head founds is handed everything connected, and the fold decides which reads what: one that reads a document and finds nothing of its own answers empty, completed; a document no world reads is open by name" at=policy:head/birth by=target form=alphabet measure=id role=writes scope=birth/reader/empty value=allow
+bound-lock/1 about="every tool and resource line has its module, and every module its line" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/unmatched value=0..0
+bound-lock/1 about="head answers calls and nothing else: no timer, no worker, no resident process" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/scheduled value=0..0
+bound-lock/1 about="head asks before it calls {operation} on {source}: {call}. Say yes only to this call; your yes is signed for it alone." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit-act value=lock
+bound-lock/1 about="head asks to admit the device {name} into {place}, covering {coverage}: it may sign only that there. Say yes only to this." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit-admit value=lock
+bound-lock/1 about="head asks to connect {source} to {place} from {document} {overlay}: compiled once and pinned; nothing is called. Say yes only to this." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit-connect value=lock
+bound-lock/1 about="head asks to found the place {name} in {dir}: a root key made in your keychain, reads bounded, nothing it may write. Say yes only to this." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit-place value=lock
+bound-lock/1 about="head asks you to sign {count} lines for {place}, made against base {base}:\n{lines}\nSay yes only to exactly these." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/elicit value=lock
+bound-lock/1 about="head carries no transport for {origin}: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-transport value=lock
+bound-lock/1 about="head is a host: it answers a protocol and names no verb of its own" at=policy:head/ceilings by=target form=interval measure=cli-verbs role=reads scope=cli/verbs value=0..0
+bound-lock/1 about="head keeps no planned lot {lot}." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-lot value=lock
+bound-lock/1 about="head may read {sources} in {place} until {until}: no read asks again before then, writes still do. Say yes only to exactly this." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/grant value=lock
+bound-lock/1 about="head names no client anywhere, adapters included: what it asks through is what the client declares, read by its capabilities" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/client-words value=0..0
+bound-lock/1 about="head names no kind of source outside its transport adapters: those words live in worlds" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/kind-words value=0..0
+bound-lock/1 about="head reads an API by the document its provider already publishes. Here is one way for each level of access: the first two run against a real public API and its real document, and the third as head does it for any document that declares a key.\n\n### No access: Open-Meteo\n\nOpen-Meteo's forecast needs no key, but its document ([forecast.yml](https://github.com/open-meteo/open-meteo/blob/main/openapi/forecast.yml)) does not say so, and head never guesses: an operation whose document says nothing about access is listed and never called. One overlay says what the provider says on its own site:\n\n```yaml\noverlay: 1.0.0\ninfo: { title: Open-Meteo forecast, read without a key, version: '1' }\nactions:\n  - target: \"$.paths['/v1/forecast'].get\"\n    description: the free forecast needs no key, as open-meteo.com says\n    update: { security: [] }\n```\n\nConnect `forecast.yml` as `weather` with that overlay beside it and read `get-v1-forecast` at a latitude and a longitude. The document names two servers, so the person picks one, once. The answer comes back typed by what the document declares, one value a line, with a signed receipt of the read (abridged):\n\n```text\nanswer/286b453612143d46/current/temperature_2m        number  11.9\nanswer/286b453612143d46/current_units/temperature_2m  text    °C\nanswer/286b453612143d46/current/wind_speed_10m        number  7.9\nread/weather/get-v1-forecast/286b453612143d46          digest  sha256:… signed by head\n```\n\n### A declared flow: Spotify\n\nSpotify's document ([the community OpenAPI description](https://github.com/sonallux/spotify-web-api)) declares OAuth 2.0 with an authorization code. head compiles it into the two steps it takes, the provider's page with PKCE and then the token exchange, and nobody writes a line of it. What it needs is yours: the client id of an app you registered with Spotify, signed into the place as `keys/access/music/oauth_2_0 client <id>`. Until then head says so and calls nothing.\n\n### A secret entered by hand\n\nWhen a document declares a bearer token or an API key and no way to obtain one, the key is a secret input. head asks for it on its own one-time page, never through the model, and only when the place's root allows a secret with `access/secret-inputs`. It is kept in the keychain, never in a file.\n\n### When the document says too little\n\nA login of its own (an email, a one-time code, a choice of account) is written once as an `x-access` flow, an Arazzo profile in an overlay, and every API of the same issuer refers to it with one `$ref`. The profile and its vectors are on topos-openapi's own page, `docs/x-access.md` in `@lapxo/topos-openapi`. Every API connected this way is read the same way afterwards: one access per issuer, each answer typed and kept." at=policy:head/docs by=target form=alphabet measure=text role=writes scope=prose/en/page/connect-any-api value=lock
+bound-lock/1 about="head runs on {supported}; this host is {platform}: nothing was done. Its secret store and browser opener are none head carries." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/platform value=lock
+bound-lock/1 about="head, for the key that signs what head read and did; person, for the key that signs what the person allows. Without one, head." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/key/who value=string
+bound-lock/1 about="head-s own key: it attests what it read, what the fold typed of it and was kept, what it did and the access it obtained, and nothing else" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/head/account value=head
+bound-lock/1 about="head-s own place — the index of the places it founded — is this folder, or ~/<home/folder> without it" at=policy:head/home by=target form=alphabet measure=id role=writes scope=home/env value=HEAD_HOME
+bound-lock/1 about="how a place is made walkable: the context a peer authenticates it by, folded and pinned" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/walk value=src/walk/**
+bound-lock/1 about="how a reader installs the package: this verb, then the name its manifest carries" at=policy:head/docs by=target form=alphabet measure=id role=writes scope=install value="npm install"
+bound-lock/1 about="how a secret is asked: only on head-s one-time page, never a form the model could see" at=policy:head/ask by=target form=alphabet measure=id role=writes scope=ask/secret-channels value=url|device
+bound-lock/1 about="how a yes is asked: only through what the client declares; a client that declares neither leaves the lines to the person to sign" at=policy:head/ask by=target form=alphabet measure=id role=writes scope=ask/consent-channels value=form|url
+bound-lock/1 about="how access is obtained and what an adapter is handed: split from the core when the core reached its ceiling, never raised" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/access value=src/access/**
+bound-lock/1 about="how an input is asked, richest first, the first the client declares taken: the client-s own form; head-s one-time page, sent by the client as an address; the same page opened by this device-s browser" at=policy:head/ask by=target form=alphabet measure=id role=writes scope=ask/channels value=form|url|device
+bound-lock/1 about="how deep its scopes go: <family>/<source>/<operation>, an operation id holding its own steps" at=policy:head/device by=target form=interval measure=id role=writes scope=device/head/resolution value=1..8
+bound-lock/1 about="how deep its scopes go: <family>/<source>/<operation>, an operation id holding its own steps" at=policy:head/device by=target form=interval measure=id role=writes scope=device/person/resolution value=1..8
+bound-lock/1 about="how many tools may configure a place: what asks never configures, and what configures is counted" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=tools/config value=0..4
+bound-lock/1 about="how to contribute, from this lock" at=policy:head/docs by=target form=alphabet measure=id role=demands scope=view/guide shape=CONTRIBUTING.md value=guide-at-zero
+bound-lock/1 about="look reads and never writes; asked twice of the same place it answers the same" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/look/hints value=readOnly|idempotent
+bound-lock/1 about="no answer of head carries a secret: only public halves and lines leave" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/secrets-out value=0..0
+bound-lock/1 about="open: no world reads {kind}. {document} was laid and taken back; nothing was connected. The line that pays it:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-world value=lock
+bound-lock/1 about="places/<name> value=<folder>, signed by the index-s root: where each place head founded lives" at=policy:head/home by=target form=alphabet measure=id role=writes scope=home/family value=places
+bound-lock/1 about="read/rate is spent for {source} this hour: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/rate value=lock
+bound-lock/1 about="red: {coordinate} took {seconds} s, over {scope} {ceiling}." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/red value=lock
+bound-lock/1 about="the SDK head reads lines through, as published" at=policy:head/pins by=target form=alphabet measure=digest needs=node_modules/@lapxo/topos role=reads scope=dep/topos shape=package value=sha256:21e030acdc0d825e183b30f94d400daf351b02f782d474635f246de9e6e12b83
+bound-lock/1 about="the Secret Service of a Linux session, through libsecret-s secret-tool" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/linux/store value=secret-tool
+bound-lock/1 about="the Windows Credential Manager, through Windows PowerShell-s password vault" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/win32/store value=credential-manager
+bound-lock/1 about="the authenticated histories a place received, each with its origin" at=policy:head/walk by=target form=alphabet measure=id role=demands scope=birth/view/evidence value=evidence
+bound-lock/1 about="the ceiling, in the place-s lock and signed by its root, of how many secrets a flow may ask the person on head-s page; without it, none" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/secrets value=access/secret-inputs
+bound-lock/1 about="the class a receipt-s at names, followed by when it was read" at=policy:head/receipts by=target form=alphabet measure=id role=writes scope=receipt/at value=receipt
+bound-lock/1 about="the command that opens this device-s browser at head-s page when the client cannot send the person an address; started directly, never through a shell" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/darwin/browser value=open
+bound-lock/1 about="the compiled standing at {file} no longer hashes to the digest the place pins:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/compiled-moved value=lock
+bound-lock/1 about="the coordinates a reader is given when only the view of answers reads its region: what a call answered" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/answers/coordinates value=.answers/**
+bound-lock/1 about="the coordinates a reader is given when the view of the place reads its region: what is connected" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/connected/coordinates value=connected/*
+bound-lock/1 about="the core: what answers every question — knows no source and no scheme; a host over bound, never a second fold" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/core value=src/core/**|src/flows/**|src/tools/**|src/resources/**
+bound-lock/1 about="the days one signed sentence lets head read the sources of a place, before the person is asked again" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/period value=90
+bound-lock/1 about="the depth of scopes the owner-s key reaches (value read from Lapxo/topos)" at=policy:world/founding by=target form=interval measure=resolution role=reads scope=keys/owner value=1..16
+bound-lock/1 about="the end an intent gets when a look closes it instead of its receipt" at=policy:head/acts by=target form=alphabet measure=id role=writes scope=act/closed value=closed
+bound-lock/1 about="the families of lines this place names, as topos declares them; its receipts are of the reader family (value read from Lapxo/topos)" at=policy:world/founding by=target form=alphabet measure=id role=reads scope=audit/wire/families value=audit|beat|block|cites|comments|concept|cost|dep|effect|fold|hazard|keys|law|license|lines|literal|offers|question|reader|region|render|roles|sample|session|take|test|tree|vector|view|write
+bound-lock/1 about="the family a place demands a reading in: needs/<kind>, paid once a world it adopts reads that kind into the place view" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/needs value=needs
+bound-lock/1 about="the family a read is kept under: read/<source>/<operation>/<request>" at=policy:head/receipts by=target form=alphabet measure=id role=writes scope=receipt/family value=read
+bound-lock/1 about="the family a typed answer is kept under: kept/<source>/<operation>/<request>/<basis>, the digest of the lines the fold typed, kept while the place stands on that basis" at=policy:head/receipts by=target form=alphabet measure=id role=writes scope=receipt/kept value=kept
+bound-lock/1 about="the family a typed answer is said in: answer/<request>, one line a value" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/answer value=answer
+bound-lock/1 about="the family access is kept under: access/<flow>/obtained|renewed|entered, a receipt without the secret, the flow its issuer-s where one issues it" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/family value=access
+bound-lock/1 about="the family an act is kept under: act/<source>/<operation>/<request>, its intent, and /done, its receipt" at=policy:head/acts by=target form=alphabet measure=id role=writes scope=act/family value=act
+bound-lock/1 about="the family of what a person allows: allow/<source>/<operation> times, allow/<source> a cap over all" at=policy:head/acts by=target form=alphabet measure=id role=writes scope=allow/family value=allow
+bound-lock/1 about="the family of what a person wants to be asked before" at=policy:head/acts by=target form=alphabet measure=id role=writes scope=ask/family value=ask
+bound-lock/1 about="the field a widening its root signs names who said yes in, by the key the place knows them by: the policy is the place-s, the witness is named" at=policy:head/places by=target form=alphabet measure=id role=writes scope=widening/witness value=witness
+bound-lock/1 about="the fields a line of this place may carry (value read from Lapxo/topos)" at=policy:world/founding by=target form=alphabet measure=id role=reads scope=audit/wire/fields value=scope|role|form|measure|value|by|at|needs|sig|epoch|shape|restsOn|condition|about|kind|view
+bound-lock/1 about="the fields this place-s native receipts project, as topos declares them, so bound renders receipts.bound with no other world (value read from Lapxo/topos)" at=policy:world/founding by=target form=alphabet measure=id role=reads scope=audit/wire/receipt-fields value=scope|role|measure|form|value|at
+bound-lock/1 about="the folder of a place a body is laid in while bound reads it, and taken from once it has" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/answers value=.answers
+bound-lock/1 about="the folder of a place everything connected is laid in, whatever its kind: the fold decides which world reads it" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/connected value=connected
+bound-lock/1 about="the forms its values are read through (value read from Lapxo/topos)" at=policy:world/founding by=target form=alphabet measure=id role=reads scope=audit/wire/forms value=interval|alphabet|ladder
+bound-lock/1 about="the hosts head keeps keys on, each in its own secret store and opening its one-time page with its own opener; on any other host every call is refused by name" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/supported value=darwin|linux|win32
+bound-lock/1 about="the instrument head runs, as published" at=policy:head/pins by=target form=alphabet measure=digest needs=node_modules/@lapxo/bound role=reads scope=dep/bound shape=package value=sha256:15236cbc9354a4c769a08a7acff962bcf9279a0d05c06beb16edef2db1c8aaaa
+bound-lock/1 about="the instrument head starts as a process for every fold, sign and land; nothing of it is imported" at=policy:project by=target form=alphabet measure=id role=writes scope=runs value=@lapxo/bound
+bound-lock/1 about="the key a place head founds is rooted in: made in the keychain under the place-s name, never a file, never the owner-s" at=policy:head/founding by=target form=alphabet measure=id role=writes scope=founding/root value=keys/root
+bound-lock/1 about="the keychain entry a source-s secret is kept under, one per place and source; a line names it, never holds it" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/account value=place/{place}/api/{source}
+bound-lock/1 about="the keychain entry the token an issuer grants is kept under, one per place and issuer: every source whose scheme names that issuer attaches it" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/issuer-account value=place/{place}/issuer/{issuer}
+bound-lock/1 about="the keychain service every device secret is kept under; a secret never leaves the keychain but through the signer" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/service value=@lapxo/head
+bound-lock/1 about="the language head's pages are said in" at=policy:head/docs by=target form=alphabet measure=id role=writes scope=lang value=en
+bound-lock/1 about="the ledger a place-s history is said to come from, named by the place" at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/walk/origin value={place}-ledger
+bound-lock/1 about="the line a place declares its act result by; head lands nothing where land would print none" at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/profile value=wire/act-result
+bound-lock/1 about="the lines of each file of the ports region, alone" at=policy:head/ceilings by=target form=interval measure=file-lines role=reads scope=ports/lines value=0..120
+bound-lock/1 about="the lines of the access region, together" at=policy:head/ceilings by=target form=interval measure=access-lines role=reads scope=access/lines value=0..100
+bound-lock/1 about="the lines of the adopt region, together" at=policy:head/ceilings by=target form=interval measure=adopt-lines role=reads scope=adopt/lines value=0..60
+bound-lock/1 about="the lines of the compile region, together" at=policy:head/ceilings by=target form=interval measure=compile-lines role=reads scope=compile/lines value=0..80
+bound-lock/1 about="the lines of the core region, together" at=policy:head/ceilings by=target form=interval measure=core-lines role=reads scope=core/lines value=0..800
+bound-lock/1 about="the lines of the places region, together: split from the places that also connected, never raised" at=policy:head/ceilings by=target form=interval measure=places-lines role=reads scope=places/lines value=0..90
+bound-lock/1 about="the lines of the sources region, together: split from the places that also founded, never raised" at=policy:head/ceilings by=target form=interval measure=sources-lines role=reads scope=sources/lines value=0..150
+bound-lock/1 about="the lines of the walk region, together" at=policy:head/ceilings by=target form=interval measure=walk-lines role=reads scope=walk/lines value=0..40
+bound-lock/1 about="the longest head waits on bound; a view that has not answered by then is no reading, and nothing is called" at=policy:head/bound by=target form=interval measure=milliseconds role=writes scope=bound/wait value=60000..60000
+bound-lock/1 about="the longest head-s one-time page waits for the person; a wait that runs out closes it with nothing, and nothing is called" at=policy:head/access by=target form=interval measure=milliseconds role=writes scope=access/wait value=0..120000
+bound-lock/1 about="the longest one request may take, its headers and its body; past it the request is stopped, its connection released, and nothing it sent back is read" at=policy:head/transport by=target form=interval measure=milliseconds role=writes scope=adapter/request/wait value=0..30000
+bound-lock/1 about="the macOS keychain, through the security command" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/darwin/store value=keychain
+bound-lock/1 about="the most bytes head reads of what one bound process prints; past it the process is stopped, and what it printed is no reading" at=policy:head/bound by=target form=interval measure=bytes role=writes scope=bound/printed value=0..16777216
+bound-lock/1 about="the most head reads of a world-s standing to learn its readers" at=policy:head/ceilings by=target form=interval measure=bytes role=reads scope=world/standing-bytes value=0..1048576
+bound-lock/1 about="the one adapter access runs by, whatever the kind: the steps a scheme-s flow declares, the inputs it asks as it declares them, the token it keeps and how it rides a request" at=policy:head/access by=target form=alphabet measure=id role=writes scope=access/adapter value=flow
+bound-lock/1 about="the one class of offer head reads; every other class is listed, never called" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/callable value=read
+bound-lock/1 about="the only files a kind of source, a scheme or a platform-s secret store is named in: one adapter each" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/adapters value=src/ports/adapters/**|src/ports/access/**|src/ports/stores/**|src/ports/keychain.ts
+bound-lock/1 about="the person-s key on this device: it signs what the person allows and when they must be asked, and nothing else" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/person/account value=person
+bound-lock/1 about="the place vocabulary head reads a source in: where it is reached, how access is proven, what it offers; no word of a kind of source" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/offers value=offers
+bound-lock/1 about="the protocol handler Windows opens an address with, started directly, never through cmd" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/win32/browser value=rundll32|url.dll,FileProtocolHandler
+bound-lock/1 about="the protocol head answers through, imported by one file only" at=policy:head/pins by=target form=alphabet measure=digest needs=node_modules/@modelcontextprotocol/sdk role=reads scope=dep/sdk shape=package value=sha256:63a3962282ff29d2ce532945c2edefd9b7c7195b8ec20c027e120e4498b0cb19
+bound-lock/1 about="the protocol is spoken by one file; everything else answers in lines" at=policy:head/ceilings by=target form=interval measure=count role=reads scope=surface/sdk-importers value=0..1
+bound-lock/1 about="the readme of head, in the one shape every place follows, every word of it a line of this lock; open and check are left out while a place outside the tree renders it: open would read the instrument's own demands as head's, and check counts cases from receipts head's vectors do not land yet" at=policy:head/docs by=target form=alphabet measure=id role=demands scope=view/readme shape=README.md value=hero|media|door|idea|figure|claims|learn|refuses|install|reading|how-they-rest|rested-on-by|pointers
+bound-lock/1 about="the receipts head-s repository carries: the observations at 8, the summary at 0, the region bytes at 1" at=policy:head/docs by=target form=alphabet measure=id role=demands scope=view/receipts shape=receipts.bound value=receipts@8|receipts@0|receipts@1
+bound-lock/1 about="the region a walk context is folded under" at=policy:head/walk by=target form=alphabet measure=id role=writes scope=walk/context/region value=region/context
+bound-lock/1 about="the resolution a source is looked at without one: its offers, their forms and how access is proven" at=policy:head/look by=target form=alphabet measure=id role=writes scope=look/default value=1
+bound-lock/1 about="the resolution at which look reads one offer: one response, under the read ceilings" at=policy:head/look by=target form=alphabet measure=id role=writes scope=look/call value=8
+bound-lock/1 about="the resolutions a place-s root signs at, explicit, as a walk authenticates every key by" at=policy:head/birth by=target form=interval measure=resolution role=writes scope=birth/keys/root value=1..8
+bound-lock/1 about="the roles a line of this place may have (value read from Lapxo/topos)" at=policy:world/founding by=target form=alphabet measure=id role=reads scope=audit/wire/roles value=reads|writes|demands
+bound-lock/1 about="the sentence a person signs once per place and period: allow/read sources, allow/read until; reads never ask while it stands" at=policy:head/access by=target form=alphabet measure=id role=writes scope=grant/family value=allow/read
+bound-lock/1 about="the session-s opener, started directly, never through a shell" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/linux/browser value=xdg-open
+bound-lock/1 about="the signer name a place declares for this key; the host binds it to head-s signer program" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/head/signer value=keychain
+bound-lock/1 about="the signer name a place declares for this key; the host binds it to head-s signer program" at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/person/signer value=keychain
+bound-lock/1 about="the tools that configure a place — found it, connect a source, prove access to it, admit a device — each answered from the places or the sources region, and no other; the surface grows only by this line" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tools/config value=place|connect|access|admit
+bound-lock/1 about="the transport an origin is reached by, chosen by its scheme; head carries one adapter per line" at=policy:head/transport by=target form=alphabet measure=id role=writes scope=adapter/https value=request
+bound-lock/1 about="the values and transforms a flow may name: extended by this line, never by a flow" at=policy:head/access by=target form=alphabet measure=id role=reads scope=wire/access-values value=$inputs|$steps|$response|$callback|$state|$verifier|$client|$scopes|$host|s256|base64url|base64
+bound-lock/1 about="the variable a host names its person-s home folder by" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/linux/home value=HOME
+bound-lock/1 about="the variable a host names its person-s home folder by" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/win32/home value=USERPROFILE
+bound-lock/1 about="the variable a host names its person-s home folder by, which head-s own folder sits under when no home is named for it" at=policy:head/platform by=target form=alphabet measure=id role=writes scope=platform/darwin/home value=HOME
+bound-lock/1 about="the view a place names to have bound compile its sources into the place vocabulary" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/view value=place
+bound-lock/1 about="the view a place names to have bound type what a source answered; without it, head hands no answer at all" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/answer value=answer
+bound-lock/1 about="the view of a place-s authenticated history: head reads its own receipts there, and the person-s attestations" at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/evidence value=evidence
+bound-lock/1 about="the worlds every place adopts when it connects; topos-mcp is pinned beside them for the tests and the offline vector, and adopted once bound composes readings (0.1.7), in head 0.1.1" at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=world/adopts value=topos-openapi
+bound-lock/1 about="unencrypted transport, which the adapter sends only to this device" at=policy:head/transport by=target form=alphabet measure=id role=writes scope=adapter/http value=request
+bound-lock/1 about="what a clone runs: it installs, and every vector of head runs against bound as published" at=policy:head/docs by=target form=alphabet measure=id role=writes scope=check value="npm ci && npm test"
+bound-lock/1 about="what a device a place admits covers unless whoever admits it says otherwise: it asks, keeps what it read and proves access; it widens nothing and calls nothing that changes the world" at=policy:head/places by=target form=alphabet measure=id role=writes scope=member/coverage value=read/**|kept/**|access/**
+bound-lock/1 about="what a place adopts: every world head carries; a lock as its parent is refused by name, its composition being bound-s; split from the compile region at its ceiling, never raised" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/adopt value=src/adopt/**
+bound-lock/1 about="what a place allows of answering a present read from a retained one: allow/reuse/<source> in seconds, the longest a retained answer may stand in for the source; without it every read calls" at=policy:head/access by=target form=alphabet measure=id role=writes scope=reuse/family value=allow/reuse
+bound-lock/1 about="what a place allows of inspecting retained reads: allow/history/<source> present; history is evidence of the read it came from, never a current answer" at=policy:head/access by=target form=alphabet measure=id role=writes scope=history/family value=allow/history
+bound-lock/1 about="what a place offers a peer it walks with: its policy and what it pins, never an identity" at=policy:head/walk by=target form=alphabet measure=id needs=allow/**|uses/**|dep/**|access/** role=demands scope=birth/view/walk value=walk@*
+bound-lock/1 about="what a place reads: a source connected and compiled once, access to it obtained" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/sources value=src/sources/**
+bound-lock/1 about="what a place-s walk context holds: the keys a peer authenticates it by, its wire and its origin" at=policy:head/walk by=target form=alphabet measure=id role=writes scope=walk/context/reads value=keys/**|wire/**|walk/origin
+bound-lock/1 about="what bound prints before the result of an act it committed: then the records it admitted, then its receipt" at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/act value="ACT "
+bound-lock/1 about="what head hands a flow that asks its host for the name it registers a client under ($host.client-name); a world never names its host, and a flow asking the host for anything else head does not declare is refused by name" at=policy:head/access by=target form=alphabet measure=id role=writes scope=host/client-name value=head
+bound-lock/1 about="what the first resolution shows of a source: where it is reached and the class of each offer" at=policy:head/look by=target form=alphabet measure=id role=writes scope=look/first value=origins|origin|class|tags
+bound-lock/1 about="where a place born before 0.1.0 kept a lock it adopted as its parent: a uses/<name> pinned from here makes head refuse the place by name" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/adopted value=.head/adopted
+bound-lock/1 about="where a place keeps each source compiled into a standing of its own, pinned by uses/<source> from its own store" at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=place/compiled value=.head/compiled
+bound-lock/1 about="where a place keeps its own walk context, laid beside its lock and pinned by walk/context" at=policy:head/walk by=target form=alphabet measure=id role=writes scope=walk/context/file value=.head/walk/context.bound
+bound-lock/1 about="where the bound package head pins is fetched from, verified by its digest" at=policy:head/pins by=target form=alphabet measure=id role=writes scope=sources/bound value=https://registry.npmjs.org/@lapxo/bound/-/bound-0.1.6.tgz
+bound-lock/1 about="where the sdk package head pins is fetched from, verified by its digest" at=policy:head/pins by=target form=alphabet measure=id role=writes scope=sources/sdk value=https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.1.tgz
+bound-lock/1 about="where the topos package head pins is fetched from, verified by its digest" at=policy:head/pins by=target form=alphabet measure=id role=writes scope=sources/topos value=https://registry.npmjs.org/@lapxo/topos/-/topos-0.1.12.tgz
+bound-lock/1 about="where topos-mcp 0.1.0 publishes its standing: bound fetches it there for every place that pins it, and head reads its readers from it, both by its digest" at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=sources/topos-mcp value=https://github.com/Lapxo/topos-mcp/releases/download/v0.1.0/standing.bound
+bound-lock/1 about="where topos-openapi 0.1.0 publishes its standing: bound fetches it there for every place that pins it, and head reads its readers from it, both by its digest" at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=sources/topos-openapi value=https://github.com/Lapxo/topos-openapi/releases/download/v0.1.0/standing.bound
+bound-lock/1 about="who is in a place: founding it with its root, admitting another device" at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/places value=src/places/**
+bound-lock/1 about="{count} lines landed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/landed value=lock
+bound-lock/1 about="{dir} is a place already: nothing was made." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/place-exists value=lock
+bound-lock/1 about="{document} was not read: an https address, or a file inside the place or a folder the client shares, is. Nothing was connected." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/document-unread value=lock
+bound-lock/1 about="{message}. The page comes back to this device once, and only the secret it yields is kept, in your keychain." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/visit value=lock
+bound-lock/1 about="{name} is admitted into {place}, covering {coverage}:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/admitted value=lock
+bound-lock/1 about="{name} is founded in {dir} and named in head-s index of places." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/born value=lock
+bound-lock/1 about="{operation} needs {param}: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/missing-param value=lock
+bound-lock/1 about="{operation} of {source} is of class read: look reads it at 8." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/is-read value=lock
+bound-lock/1 about="{operation} of {source} is of class {class}: listed, never called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/not-callable value=lock
+bound-lock/1 about="{operation} of {source} was read two ways: it is never called until one reading stands." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/split-offer value=lock
+bound-lock/1 about="{operation} on {source} did not answer: its intent {intent} stays open until a look closes it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/act-failed value=lock
+bound-lock/1 about="{operation} on {source} is allowed {allowed} times and was done {done}: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/not-allowed value=lock
+bound-lock/1 about="{origin} is not encrypted and is not this device: nothing was sent to it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/insecure-origin value=lock
+bound-lock/1 about="{place} admits a key named {name} already, or this key under another name: nothing was admitted." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/key-taken value=lock
+bound-lock/1 about="{place} covers {coverage} for the key that would sign; {scope} is not in it, so nothing was asked, called or signed. Whoever configures {place} can sign these lines:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/not-covered value=lock
+bound-lock/1 about="{place} does not allow retained reads of {source} to be inspected. Whoever configures it can sign this line:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/history-undeclared value=lock
+bound-lock/1 about="{place} was born before its wire named who witnesses a widening, so nothing its root signs as one lands there until it does. head proposes this lot — the wire it stands on withdrawn and said again with the witness, signed by the root alone: plan it, then land it; nothing is migrated:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unwitnessed value=lock
+bound-lock/1 about="{place} would stand on {parent} as its parent lock. Composing a parent-s policy with a child-s is bound-s to do, and this head does not: nothing was adopted, called or signed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/parent-lock value=lock
+bound-lock/1 about="{source} answered {status} to {operation}, and no world typed the answer here {why}: head hands no body." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/untyped value=lock
+bound-lock/1 about="{source} answered {status} to {operation}. What its document declares of the answer, one value a line:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/answered value=lock
+bound-lock/1 about="{source} declares no origin: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-origin value=lock
+bound-lock/1 about="{source} declares several origins ({origins}): the person picks one as region/{source} origin; none is a default, production least of all. Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/pick-origin value=lock
+bound-lock/1 about="{source} did not answer: nothing landed." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unreachable-source value=lock
+bound-lock/1 about="{source} did not grant access the way it declares: nothing was kept and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/login-refused value=lock
+bound-lock/1 about="{source} does not state how access to {operation} is proven: head never guesses it. Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/access-unstated value=lock
+bound-lock/1 about="{source} is a document of a profile the world does not read: {why}. It was laid and taken back; nothing was connected." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/document-unsupported value=lock
+bound-lock/1 about="{source} is a document the world could not parse: {why}. It was laid and taken back; nothing was connected." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/document-unparsed value=lock
+bound-lock/1 about="{source} is connected to {place}: {offers} offers, {reads} of them read; every other is listed, never called. Pinned as {pin}. How access is proven, and where it is reached:" at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/connected value=lock
+bound-lock/1 about="{source} is reached through a provider that needs a client the person registered: sign keys/access/{source}/<scheme> client with it. head invents none. Nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-client value=lock
+bound-lock/1 about="{source} names two different documents ({why}), and a source is one: neither was read. It was laid and taken back; nothing was connected." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/document-collision value=lock
+bound-lock/1 about="{source} offers no {operation}: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unknown-operation value=lock
+bound-lock/1 about="{source} proves access to {operation} by {kinds}, and none of them says how its token rides a request: nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/no-adapter value=lock
+bound-lock/1 about="{source} referred to {by} before it was here: compiled again, its pin now {pin}. Nothing was reconnected and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/resolved value=lock
+bound-lock/1 about="{source} refers to {refs}, which no document of this place declares yet: a demand, paid when the document that declares it is connected — {source} is then compiled again, never reconnected." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/unresolved value=lock
+bound-lock/1 about="{source} states its reads need no access: nothing was kept and nothing was called." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/access-anonymous value=lock
+bound-lock/1 about="{source} would ask you for {input}, a secret, and this place-s root allows no more on head-s page: nothing was asked and nothing was called. Its root may sign access/secret-inputs to allow it." at=policy:head/surface by=target form=alphabet measure=id role=writes scope=said/secret-unallowed value=lock
+bound-lock/1 at=policy:head/acts by=target form=alphabet measure=id role=writes scope=act/done value=done
+bound-lock/1 at=policy:head/authority by=owner epoch=1 form=alphabet measure=public-key role=writes scope=keys/owner sig="ed25519:era1:HIVD8P4NcWjPd0Fec8d1Ff52oPI+PMa6U+w8WHKAbj8sJtUWvG5Epmt/44DGRkGB455ByTtcMTK2jMGPN3EPBQ==" value="MCowBQYDK2VwAyEAIYI0be8OWhf3HcVceKpibjgZ+hbYJKYO5ayX8Kk16LE="
+bound-lock/1 at=policy:head/authority by=target form=alphabet measure=class role=writes scope=keys/owner value=authorize
+bound-lock/1 at=policy:head/authority by=target form=alphabet measure=coverage role=writes scope=keys/owner value=*
+bound-lock/1 at=policy:head/authority by=target form=alphabet measure=signer role=writes scope=keys/owner value=file
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=class role=writes scope=birth/keys/fold value=fold
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=class role=writes scope=birth/keys/reader value=read
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=demands scope=birth/view/answer value=answer@1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=demands scope=birth/view/place value=place@1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/access-values value=$inputs|$steps|$response|$callback|$state|$verifier|$client|$scopes|$host|s256|base64url|base64
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/at-classes value=origin|place|receipt|witness|policy
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/digest-algorithms value=sha256
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/era value=era1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/families value=audit|beat|block|cites|comments|concept|cost|dep|effect|fold|hazard|keys|law|license|lines|literal|offers|question|reader|region|release|render|roles|sample|session|take|test|tree|vector|view|write
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/fields value=scope|role|form|measure|value|by|at|needs|sig|epoch|shape|restsOn|condition|about|kind|view|witness
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/form/at value=class
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/form/epoch value=count
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/form/needs value=region
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/form/sig value=signature
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/forms value=interval|alphabet|ladder
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/reader-empty value=declared-empty@1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/reader-lifetime value=bounded-process@1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/region-measures value=coordinates
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/required value=scope|role|form|measure|value|by|at
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/roles value=reads|writes|demands|source|render|receipt
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/shapes value=decision|lock|package|reader|render|run|vector|view
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/signature-algorithms value=ed25519:era1
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/states value=absent|present|unread|withdraw
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=reads scope=birth/wire/templates value={cone}|{roots}
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=writes scope=birth/lang value=en
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=writes scope=birth/wire/act-result-context value=place:{place}
+bound-lock/1 at=policy:head/birth by=target form=alphabet measure=id role=writes scope=birth/wire/act-result-scope value=receipt/act
+bound-lock/1 at=policy:head/birth by=target form=interval measure=bytes role=writes scope=birth/reader/response-bytes value=0..16777216
+bound-lock/1 at=policy:head/birth by=target form=interval measure=bytes role=writes scope=birth/signer/response-bytes value=1048576..1048576
+bound-lock/1 at=policy:head/birth by=target form=interval measure=milliseconds role=writes scope=birth/signer/timeout value=30000..30000
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/at value=@
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/cells value=cells
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/key value=--key
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/land value=land
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/pin value="PIN "
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/read value=fold
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/sign value=sign
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/signer value=--signer
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/standing value=lines
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/topos value="TOPOS "
+bound-lock/1 at=policy:head/bound by=target form=alphabet measure=id role=writes scope=bound/view value=--as
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=count role=reads scope=literal/host value=0..0
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=count role=reads scope=literal/key value=0..0
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=count role=reads scope=literal/org value=0..0
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=count role=reads scope=literal/path value=0..0
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=duplicate-bodies role=reads scope=duplicate/src value=0..0
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=s role=reads scope=cost/act value=0..60
+bound-lock/1 at=policy:head/ceilings by=target form=interval measure=unreceipted needs=README.md role=reads scope=door/unreceipted value=0..0
+bound-lock/1 at=policy:head/cryptography by=target form=alphabet measure=id role=reads scope=wire/digest-algorithms value=sha256
+bound-lock/1 at=policy:head/cryptography by=target form=alphabet measure=id role=reads scope=wire/era value=era1
+bound-lock/1 at=policy:head/cryptography by=target form=alphabet measure=id role=reads scope=wire/signature-algorithms value=ed25519:era1
+bound-lock/1 at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/head/coverage value=read/**|kept/**|act/**|access/**
+bound-lock/1 at=policy:head/device by=target form=alphabet measure=id role=writes scope=device/person/coverage value=allow/**|ask/**
+bound-lock/1 at=policy:head/founding by=target form=alphabet measure=id role=writes scope=founding/algorithm value=ed25519:era1
+bound-lock/1 at=policy:head/founding by=target form=alphabet measure=id role=writes scope=founding/root-account value=place/{place}/root
+bound-lock/1 at=policy:head/home by=target form=alphabet measure=id role=writes scope=home/folder value=.config/head
+bound-lock/1 at=policy:head/home by=target form=alphabet measure=id role=writes scope=home/name value=home
+bound-lock/1 at=policy:head/journals by=target form=alphabet measure=class role=writes scope=keys/fold value=fold
+bound-lock/1 at=policy:head/journals by=target form=alphabet measure=class role=writes scope=keys/reader value=read
+bound-lock/1 at=policy:head/release by=target form=alphabet measure=id role=writes scope=release/blocks value=integrity|pins|cli|surface
+bound-lock/1 at=policy:head/release by=target form=alphabet measure=id role=writes scope=release/category/cli value=cli/**|cost/act
+bound-lock/1 at=policy:head/release by=target form=alphabet measure=id role=writes scope=release/category/integrity value=literal/host|literal/key|literal/org|literal/path|duplicate/src|door/unreceipted
+bound-lock/1 at=policy:head/release by=target form=alphabet measure=id role=writes scope=release/category/pins value=resolve-by-url|offline|the-stranger
+bound-lock/1 at=policy:head/release by=target form=alphabet measure=id role=writes scope=release/category/surface value=surface/**|tools/config|core/lines|access/lines|places/lines|sources/lines|compile/lines|adopt/lines|walk/lines|ports/lines
+bound-lock/1 at=policy:head/signer by=target form=interval measure=bytes role=writes scope=signer/response-bytes value=1048576..1048576
+bound-lock/1 at=policy:head/signer by=target form=interval measure=milliseconds role=writes scope=signer/timeout value=30000..30000
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/access/required value=source
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/ask/required value=source|operation
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/can/required value=source|operation|times
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/connect/required value=source|document
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/place/required value=dir
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=prompt/readonly/required value=source
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=surface/client-words/words value=claude|desktop|cursor|windsurf|vscode|copilot|chatgpt|continue.dev
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=surface/kind-words/words value=openapi|swagger|graphql|grpc|asyncapi|http|sql|mcp|csv|oauth|login|bearer|apikey|token|otp|handoff|browser|password
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/access/required value=source
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/act/required value=source|operation
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/admit/required value=key|name
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/connect/required value=source|document
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/land/required value=lot
+bound-lock/1 at=policy:head/surface by=target form=alphabet measure=id role=writes scope=tool/place/required value=dir
+bound-lock/1 at=policy:head/transport by=target form=alphabet measure=id role=writes scope=adapter/request/content-type value=content-type
+bound-lock/1 at=policy:head/transport by=target form=alphabet measure=id role=writes scope=adapter/request/json value=application/json
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/access value=access
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/anonymous value=anonymous
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/carry value=carry
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/class value=class
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/collision value=collision
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/form value=form
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/issuers value=issuers
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/keys value=keys/access
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/origin value=origin
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/origins value=origins
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/pick value=allow/origin
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/region value=region
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/scheme value=attach-template
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/split value=split
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/unparsed value=unparsed
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/unresolved value=unresolved
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/unstated value=unstated
+bound-lock/1 at=policy:head/vocabulary by=target form=alphabet measure=id role=writes scope=vocab/unsupported value=unsupported
+bound-lock/1 at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/wire/walk/fields value=scope|role|form|measure|value|by|at|epoch|condition|needs
+bound-lock/1 at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/wire/walk/metadata-fields value=at|by|condition|epoch|form|measure|role|scope|sig|value
+bound-lock/1 at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/wire/walk/projections value=0:inventory|1:summary|8:history
+bound-lock/1 at=policy:head/walk by=target form=alphabet measure=id role=writes scope=birth/wire/walk/resolutions value=0|1|8
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/at-classes value=origin|place|receipt|witness|policy
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/families value=audit|beat|block|cites|comments|concept|cost|dep|effect|fold|hazard|keys|law|license|lines|literal|offers|question|reader|region|release|render|roles|sample|session|take|test|tree|vector|view|write
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/fields value=scope|role|form|measure|value|by|at|needs|sig|epoch|shape|restsOn|condition|about|kind|view
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/form/at value=class
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/form/epoch value=count
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/form/needs value=region
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/form/sig value=signature
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/forms value=interval|alphabet|ladder
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/required value=scope|role|form|measure|value|by|at
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/roles value=reads|writes|demands|source|render|receipt
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/shapes value=decision|lock|package|reader|render|run|vector|view
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/states value=absent|present|unread|withdraw
+bound-lock/1 at=policy:head/wire by=target form=alphabet measure=id role=reads scope=wire/templates value={cone}|{roots}
+bound-lock/1 at=policy:head/worlds by=target form=alphabet measure=digest role=writes scope=world/topos-mcp/blob value=sha256:6d802285520ab4bc1b908bdfbf24216f62b154fa57fc4ab7ebd7f8c53c81c760
+bound-lock/1 at=policy:head/worlds by=target form=alphabet measure=digest role=writes scope=world/topos-openapi/blob value=sha256:931f99f5c8d4ea1a1945ad8dc4d9ee9bae6d0ac5c79996b7c04e67e719fcff0c
+bound-lock/1 at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=sources/topos-mcp-blob value=https://github.com/Lapxo/topos-mcp/releases/download/v0.1.0/6d802285520ab4bc1b908bdfbf24216f62b154fa57fc4ab7ebd7f8c53c81c760.tar.gz
+bound-lock/1 at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=sources/topos-openapi-blob value=https://github.com/Lapxo/topos-openapi/releases/download/v0.1.0/931f99f5c8d4ea1a1945ad8dc4d9ee9bae6d0ac5c79996b7c04e67e719fcff0c.tar.gz
+bound-lock/1 at=policy:head/worlds by=target form=alphabet measure=id role=writes scope=world/shape value=dist/index.js
+bound-lock/1 at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/checks value=test/**|vectors/**|samples/**
+bound-lock/1 at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/project value=package.json|LICENSE
+bound-lock/1 at=policy:project by=target form=alphabet measure=coordinates role=reads scope=region/source value=src/**
+bound-lock/1 at=policy:project by=target form=alphabet measure=id role=writes scope=license value=MIT
+bound-lock/1 at=policy:project by=target form=alphabet measure=id role=writes scope=name value=@lapxo/head
+bound-lock/1 at=policy:project by=target form=alphabet measure=id role=writes scope=version value=0.1.0