archgraph-argo 0.24.2 → 0.24.3

package/argo/rules/archgraph.instructions.md

@@ -25,6 +25,7 @@ Non-negotiable red lines (MUST). Never skip, simplify, or silently violate them;
 9. Never duplicate: reuse is the default; a create blocked as an exact or semantic duplicate must be reused, or explicitly overridden with `onConflict: "allowDuplicate"` + justification. See `<GraphDeduplication>`.
 10. Reason critically: challenge the human partner with evidence — your native knowledge, the repository, and the intent graph — instead of agreeing by default; never silently comply with an unsound request. See `<CriticalReasoningGuideline>`.
 11. Never lose content silently: writes that reduce existing content must be lossless (merge/delta) or explicitly acknowledged (`acknowledgeLoss`), and destructive removals are tombstoned. See `<LosslessWrite>`.
+12. Federate by reference, never by copy: register/discover/authorize/read through the federation center (graph MCP surface); a read returns a reference, not a copy; cross-member access is denied by default. See `<FederationGuideline>`.
 </CoreRules>
 
 <Ontology>
@@ -170,6 +171,17 @@ Use `queryNeo4jGraph` for structural/type lookups. It never mutates the canonica
 3. Semantic/context reads (`getSystemArchitecture`, `getIntentElementContext`, `getArchitectureViewContext`) are the PRIORITY path; Cypher is the SECONDARY path per `<QueryPriorityGuideline>`.
 </GraphQueryGuideline>
 
+<FederationGuideline>
+When your project participates in a federation, act through the federation center (one central platform reached over the graph MCP):
+1. Register or exit: register your project with the center to join; deregister it to leave. Do this as the project's own Agent together with your human partner — no separate external approval is required.
+2. Discover before relying: query the center for the members that exist and what each offers (purpose, capabilities, open interfaces).
+3. Authorize before you read: read another member's opened content only after that member explicitly authorizes you; access is denied by default, assume no trust between members.
+4. Reference, not a copy: a read returns a reference, not a copy of another member's content; never persist a copy. The center holds only federation metadata (membership, interfaces, grants); each member's own graph stays the single source of truth.
+5. Never merge graphs: members stay independent; keep your own graph sovereign.
+6. One center: use the single federation center; if it is unreachable, fall back to locally cached discovery/grants and say so.
+7. Surface: do register / deregister / discover / authorize / read through the center's graph MCP tools; never reach the center by a file or SQL path.
+</FederationGuideline>
+
 <Attention>
 Confirm the ARGO MCP server is serving this repository's graph (design/KG/SystemArchitecture.json), not another graph. If it is not, stop and report to your human partner before doing anything else.
 </Attention>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "archgraph-argo",
-  "version": "0.24.2",
+  "version": "0.24.3",
   "description": "Deploy the ArchGraph ARGO toolchain, skills, and rules (schema, scripts, argo-init skill, global rule) with one command.",
   "license": "MIT",
   "bin": {