veriscope-mcp 0.0.0-stage → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +141 -3
- package/README_ZH.md +155 -0
- package/bin/index.js +472 -0
- package/glama.json +45 -0
- package/golden_sandbox_50.json +1758 -0
- package/package.json +40 -6
- package/smithery.yaml +17 -0
package/LICENSE
ADDED
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
MIT License
|
|
2
|
+
|
|
3
|
+
Copyright (c) 2026 VeriScope Sovereign Harbor
|
|
4
|
+
|
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
+
in the Software without restriction, including without limitation the rights
|
|
8
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
+
furnished to do so, subject to the following conditions:
|
|
11
|
+
|
|
12
|
+
The above copyright notice and this permission notice shall be included in all
|
|
13
|
+
copies or substantial portions of the Software.
|
|
14
|
+
|
|
15
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
16
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
17
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
18
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
19
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
20
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
+
SOFTWARE.
|
package/README.md
CHANGED
|
@@ -1,3 +1,141 @@
|
|
|
1
|
-
#
|
|
2
|
-
|
|
3
|
-
|
|
1
|
+
# VeriScope MCP Server (@veriscope/mcp-server)
|
|
2
|
+
|
|
3
|
+
> **VeriScope** is a sovereign cryptographic bibliographic index and citation verification engine for AI Agents. It anchors AI Task Planners in verified scholarly editions across 24 disciplines with **exact chapter coordinates**, **verbatim fair-use excerpts (<=300 chars)**, **64-bit SHA-256 edition hashes**, and **Ed25519 tamper-proof digital receipts (`vsk_sig`)**.
|
|
4
|
+
|
|
5
|
+
[](https://modelcontextprotocol.io)
|
|
6
|
+
[](LICENSE)
|
|
7
|
+
[](#zero-config-golden-sandbox)
|
|
8
|
+
[](#dual-track-pricing--access-tiers)
|
|
9
|
+
|
|
10
|
+
---
|
|
11
|
+
|
|
12
|
+
## 🌟 Why VeriScope? Three A/B Scenarios
|
|
13
|
+
|
|
14
|
+
When AI Agents conduct research, general-purpose LLMs generate plausible yet ungrounded citations, fabricate page numbers, or flatten vigorous intellectual conflicts into milquetoast compromises. VeriScope provides a **deterministic factual anchor**:
|
|
15
|
+
|
|
16
|
+
### Scenario 1: Max Weber Citation Verification (*The Protestant Ethic*)
|
|
17
|
+
* **The Task**: "Cite Max Weber's precise German-to-English thesis on the spirit of capitalism and its ascetic calling."
|
|
18
|
+
* ❌ **Vanilla LLM (Hallucinated)**:
|
|
19
|
+
> "Weber writes in Chapter 2, page 181: 'The modern capitalist spirit arose purely from Calvinist predestination.' (Weber, 1905, Scribner edition)."
|
|
20
|
+
> *Audit*: Fabricated page number; inaccurate quotation; no cryptographic edition hash.
|
|
21
|
+
* ✅ **VeriScope MCP (`veriscope_locate_evidence`)**:
|
|
22
|
+
> **Edition**: *The Protestant Ethic and the Spirit of Capitalism* (Archival ID: Sovereign Harbor Verified Edition)
|
|
23
|
+
> **Coordinate**: Section 2: "The Spirit of Capitalism", Paragraph 12
|
|
24
|
+
> **Verbatim Excerpt (<=300 chars)**: *"Man is dominated by the making of money, by acquisition as the ultimate purpose of his life. Economic acquisition is no longer subordinated to man as the means for the satisfaction of his material needs."*
|
|
25
|
+
> **Edition SHA-256**: `d7a8fbb5628549...3984e1`
|
|
26
|
+
> **Receipt**: `vsk_sig:ed25519_8f0a2e...` (Cryptographically verified against tamper-lock)
|
|
27
|
+
|
|
28
|
+
---
|
|
29
|
+
|
|
30
|
+
### Scenario 2: Hans Kelsen vs. Carl Schmitt on Legal Sovereignty
|
|
31
|
+
* **The Task**: "Contrast Hans Kelsen's Pure Theory of Law with Carl Schmitt's Decisionism regarding the State of Exception."
|
|
32
|
+
* ❌ **Vanilla LLM (Flat Synthesis)**:
|
|
33
|
+
> "Both scholars contributed to German legal theory. Kelsen believed in the rule of law and the Basic Norm, while Schmitt emphasized political authority during crises. They represent complementary aspects of jurisprudence."
|
|
34
|
+
> *Audit*: Flattens an irreconcilable Weimar constitutional duel into false harmony.
|
|
35
|
+
* ✅ **VeriScope MCP (`veriscope_inspect_topography`)**:
|
|
36
|
+
> **Formal Kernel**: Pure normativism (*Reine Rechtslehre*) vs. Political existential decisionism (*Dezisionismus*).
|
|
37
|
+
> **Lineages**: Hans Kelsen (Wikidata Q84322) vs. Carl Schmitt (Wikidata Q57476).
|
|
38
|
+
> **Dialectical Disputes (3 Core Theses)**:
|
|
39
|
+
> 1. *Norm vs. Exception*: Kelsen posits law as a self-contained hierarchy deriving validity solely from the Grundnorm; Schmitt counters that the sovereign is "he who decides on the exception" (*Ausnahmezustand*), where norm yields to concrete order.
|
|
40
|
+
> 2. *Guardian of the Constitution*: Kelsen's 1928 constitutional court doctrine vs. Schmitt's 1931 *Der Huter der Verfassung* asserting the Reich President as sole guardian.
|
|
41
|
+
> 3. *Validity vs. Facticity*: Logical purity of legal norms versus existential political will.
|
|
42
|
+
|
|
43
|
+
---
|
|
44
|
+
|
|
45
|
+
### Scenario 3: Keynesian Liquidity Trap (*General Theory*)
|
|
46
|
+
* **The Task**: "Explain the exact institutional boundary of Keynes's liquidity trap and verify against primary economic texts."
|
|
47
|
+
* ❌ **Vanilla LLM (Secondary Paraphrase)**:
|
|
48
|
+
> "Keynes explained that when interest rates are zero, monetary policy becomes ineffective because people hold cash."
|
|
49
|
+
* ✅ **VeriScope MCP (`veriscope_locate_evidence` & `veriscope_verify_attestation`)**:
|
|
50
|
+
> **Formal Axiom**: Absolute liquidity preference under asymptotic flat LM-curve conditions where $\partial M / \partial r o \infty$.
|
|
51
|
+
> **Primary Location**: *The General Theory of Employment, Interest and Money*, Chapter 15 ("The Psychological and Business Incentives to Liquidity"), Section II.
|
|
52
|
+
> **Verification Status**: `VERIFIED_AUTHENTIC` (SHA-256 matched with primary English edition).
|
|
53
|
+
|
|
54
|
+
---
|
|
55
|
+
|
|
56
|
+
## 🛠️ The 4+1 Cognitive Funnel Tool Matrix
|
|
57
|
+
|
|
58
|
+
| Tool Name | Input Parameters | Primary Output | Use Case |
|
|
59
|
+
| :--- | :--- | :--- | :--- |
|
|
60
|
+
| `veriscope_discover_concepts` | `query: str`, `discipline_hint?: str` | Standardized canonical ontology, formal definition, Sino-Western comparative counterpart | Elevate colloquial concepts or news metaphors into formal academic disciplines |
|
|
61
|
+
| `veriscope_inspect_topography` | `concept_id: str` | `formal_kernel`, Wikidata QIDs, and 3+ structured `dialectical_disputes` | Prevent shallow syntheses; ground the agent in historical debates and rival axioms |
|
|
62
|
+
| `veriscope_locate_evidence` | `concept_id: str`, `proposition?: str` | Verbatim fair-use slice (**<=300 chars**), chapter coordinate, 64-bit SHA-256, Ed25519 receipt | Ground claims in physical verified editions with peer-reviewable cryptographic proof |
|
|
63
|
+
| `veriscope_verify_attestation` | `concept_id: str`, `claimed_sha256: str`, `verbatim_slice?: str` | `is_valid: bool`, `verification_status: "VERIFIED_AUTHENTIC" \| "TAMPER_DETECTED"` | Zero-knowledge cryptographic check for citations, journal peer review, and fact auditing |
|
|
64
|
+
| `veriscope_probe_radar` | `concept_id: str` | Cross-disciplinary synaptic radar links, epistemological blind spots | Interdisciplinary research, cognitive blind spot alerts, and synthetic conceptual discovery |
|
|
65
|
+
|
|
66
|
+
---
|
|
67
|
+
|
|
68
|
+
## ⚡ Zero-Config Golden Sandbox
|
|
69
|
+
|
|
70
|
+
VeriScope ships with a **built-in 50-Canon Golden Sandbox** (`golden_sandbox_50.json`, ~126 KB).
|
|
71
|
+
|
|
72
|
+
* **Instant Offline Exploration**: Reviewers and developers can inspect, locate, and verify citations immediately upon installation **without signing up or providing any API key**.
|
|
73
|
+
* **10 Disciplines x 5 Canons**: Covers Philosophy (Kant, Plato, Descartes, Nietzsche, Spinoza), Sociology (Weber, Durkheim, Marx, Simmel, Parsons), Political Theory (Schmitt, Hobbes, Locke, Machiavelli, Rawls), Economics (Keynes, Smith, Hayek, Schumpeter, Ricardo), Law (Kelsen, Hart, Dworkin, Fuller, Savigny), History, Literature, Psychology, Communication, and Philosophy of Science (Kuhn, Popper, Lakatos, Feyerabend, Merton).
|
|
74
|
+
* **Teaser Mode for Long-Tail Canons**: When querying concepts beyond the 50 sandbox canons without an API key, VeriScope **does not crash with a 401 error**. Instead, it returns a **Cryptographic Teaser Preview** containing the matched canon title, chapter coordinate, and a non-empty `canon_sha256_prefix`, keeping the Agent's reasoning workflow alive.
|
|
75
|
+
|
|
76
|
+
---
|
|
77
|
+
|
|
78
|
+
## 💳 Dual-Track Pricing & Access Tiers
|
|
79
|
+
|
|
80
|
+
VeriScope utilizes a **hybrid subscription and credit-pack model** designed to eliminate per-call micro-payment anxiety for automated research pipelines:
|
|
81
|
+
|
|
82
|
+
| Plan / Tier | Target Audience | Domestic Pricing (WeChat / Alipay) | Global Pricing (Payoneer Checkout) | Included Quota / Benefits |
|
|
83
|
+
| :--- | :--- | :--- | :--- | :--- |
|
|
84
|
+
| **Community Sandbox** | Developers & Evaluators | **Free (¥0)** | **Free ($0)** | 50 Golden Canons full access + Teaser previews for all long-tail concepts |
|
|
85
|
+
| **Scholar Pro** | Researchers & PhD Candidates | **¥128 / month** | **$19 / month** | Unlimited standard queries, 5,000 evidence slices/mo, full Ed25519 attestation receipts |
|
|
86
|
+
| **Power Credit Pack** | Agent Builders & Automated Pipelines | **¥68 / 500 credits** | **$10 / 500 credits** | Flexible top-up for high-frequency automated batch synthesis |
|
|
87
|
+
| **Enterprise / Institution** | Academic Labs & Law Firms | **¥5,000 / year** | **$800 / year** | Dedicated rate limits, IP whitelist, institutional co-signing keys, SLA guarantee |
|
|
88
|
+
|
|
89
|
+
*To activate your key, visit [https://veriscope.cc/pricing](https://veriscope.cc/pricing) or configure `VERISCOPE_API_KEY`.*
|
|
90
|
+
|
|
91
|
+
---
|
|
92
|
+
|
|
93
|
+
## 🚀 Quick Start & Integration
|
|
94
|
+
|
|
95
|
+
### Claude Desktop / Claude Code
|
|
96
|
+
Add to your `claude_desktop_config.json`:
|
|
97
|
+
```json
|
|
98
|
+
{
|
|
99
|
+
"mcpServers": {
|
|
100
|
+
"veriscope": {
|
|
101
|
+
"command": "npx",
|
|
102
|
+
"args": ["-y", "@veriscope/mcp-server"],
|
|
103
|
+
"env": {
|
|
104
|
+
"VERISCOPE_API_KEY": "vsk_live_optional_your_key_here"
|
|
105
|
+
}
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
```
|
|
110
|
+
|
|
111
|
+
### Cursor & Windsurf
|
|
112
|
+
Add as a new stdio MCP server:
|
|
113
|
+
- **Command**: `npx`
|
|
114
|
+
- **Arguments**: `-y @veriscope/mcp-server`
|
|
115
|
+
|
|
116
|
+
### Python / uvx Alternative
|
|
117
|
+
```json
|
|
118
|
+
{
|
|
119
|
+
"mcpServers": {
|
|
120
|
+
"veriscope": {
|
|
121
|
+
"command": "uvx",
|
|
122
|
+
"args": ["veriscope-mcp"]
|
|
123
|
+
}
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
```
|
|
127
|
+
|
|
128
|
+
---
|
|
129
|
+
|
|
130
|
+
## 🔒 Security, Privacy & Scholarly Fair-Use Compliance
|
|
131
|
+
|
|
132
|
+
1. **Read-Only Engine**: VeriScope operates strictly in read-only mode (`mode=ro`). It never writes to the host filesystem.
|
|
133
|
+
2. **Scholarly Fair-Use Doctrine**: VeriScope is a cryptographic bibliographic index and citation verification engine. It never distributes or transmits full book copies; verbatim evidence excerpts are hard-capped at **strictly <=300 characters** around the proposition anchor.
|
|
134
|
+
3. **Cryptographic Ed25519 Receipts**: Every attested quote is signed with the slice's 16-hex hash (`slice_sha256_16`) in the payload `VERISCOPE_ATTESTATION:{concept_id}:{canon_sha256}:{slice_sha16}:{timestamp}`, providing tamper-evident authenticity for scholarly peer review.
|
|
135
|
+
4. **Entropy Rate Limiting (F8 Shield)**: High-entropy scraping attacks triggering cross-disciplinary jumps across $\ge 6$ disciplines in short bursts automatically drop into **Zero-Text Proof Mode** (yielding only coordinates and SHA-256 prefixes), protecting the sovereign archive while maintaining zero-hallucination factual integrity.
|
|
136
|
+
|
|
137
|
+
---
|
|
138
|
+
|
|
139
|
+
## 📄 License
|
|
140
|
+
|
|
141
|
+
MIT License. See [LICENSE](LICENSE) for details.
|
package/README_ZH.md
ADDED
|
@@ -0,0 +1,155 @@
|
|
|
1
|
+
# 真镜 v3.0 MCP Server
|
|
2
|
+
|
|
3
|
+
> **真镜** = 知识证据溯源系统。素书楼馆藏实体原本与全量学术文献 (FTS5+INSTR 段落级定位) · 7.5万张卡片 (22学科) · 2.1万条双链 · 27个学术社区 · 476万共现对。核心动作:输入命题 → 输出可信等级 + 支持/反对证据 + 谱系 + 盲区 + 原文锚点。
|
|
4
|
+
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
## 这是什么?
|
|
8
|
+
|
|
9
|
+
**MCP Server** 是真镜的 **Model Context Protocol (MCP)** 服务端实现,把真镜的 5 个核心 Skill(三态取证 / 概念地形图 / 书目深挖 / 验证 / 学者谱系)暴露为标准化的 MCP Tools。
|
|
10
|
+
|
|
11
|
+
**为什么需要?**
|
|
12
|
+
- 40+ AI Agent(Claude Code / Cursor / Codex / Gemini / 等)可通过 MCP 协议**直接调用真镜能力**,无需浏览器插件
|
|
13
|
+
- 这是真镜 v3.0 **L4 生态与入口层**的关键一环(见架构文档 §二·四层架构模型 L4)
|
|
14
|
+
- **不是 Chrome 插件的替代**——插件入口思维不变(§七-4 不变量),MCP Server 是**额外的入口**,服务于 AI Agent 生态
|
|
15
|
+
|
|
16
|
+
---
|
|
17
|
+
|
|
18
|
+
## 核心能力(5 个 MCP Tools)
|
|
19
|
+
|
|
20
|
+
| Tool 名称 | 对应 Skill | 端点 | 说明 |
|
|
21
|
+
|-----------|------------|------|------|
|
|
22
|
+
| `three-state-evidence` | 三态取证 | `/api/collision/duel` | 相关/对立/缺口 三态证据验证 |
|
|
23
|
+
| `concept-terrain` | 概念地形图 | `/api/concept/terrain` | 概念的层位、谱系、盲区全景 |
|
|
24
|
+
| `book-deep-dive` | 书目深挖 | `/api/topology/evidence-concept` | 单本书的论点、谱系、关联卡片、盲区 |
|
|
25
|
+
| `verify` | 验证模式 | `/api/collision/en` | 英文入口:声明溯源 + 对立证据 |
|
|
26
|
+
| `scholar-lineage` | 学者谱系 | `/api/thinker/biography` | 学者的影响、代表作、关联思想家 |
|
|
27
|
+
|
|
28
|
+
---
|
|
29
|
+
|
|
30
|
+
## 安装
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
cd F:\翰林院AI总账本
|
|
34
|
+
pip install mcp # 可选,mock 模式不需要
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
> **零额外依赖**:核心逻辑仅用标准库。`mcp` 包仅在真实 MCP 连接时需要;mock 模式(`--list-tools`)零依赖。
|
|
38
|
+
|
|
39
|
+
---
|
|
40
|
+
|
|
41
|
+
## 启动方式
|
|
42
|
+
|
|
43
|
+
### 1. MCP stdio 模式(供 AI Agent 连接)
|
|
44
|
+
```bash
|
|
45
|
+
python -m mcp_server.veriscope_mcp_server
|
|
46
|
+
```
|
|
47
|
+
|
|
48
|
+
### 2. Mock 模式(无 MCP SDK 时验证)
|
|
49
|
+
```bash
|
|
50
|
+
python -m mcp_server.veriscope_mcp_server --list-tools
|
|
51
|
+
python -m mcp_server.veriscope_mcp_server --call-tool three-state-evidence --args '{"lens_card_id":"abc","opponent_card_id":"def"}'
|
|
52
|
+
```
|
|
53
|
+
|
|
54
|
+
---
|
|
55
|
+
|
|
56
|
+
## 与 AI Agent 集成示例
|
|
57
|
+
|
|
58
|
+
### Claude Code / Cursor / Codex / Gemini
|
|
59
|
+
```json
|
|
60
|
+
{
|
|
61
|
+
"mcpServers": {
|
|
62
|
+
"veriscope": {
|
|
63
|
+
"command": "python",
|
|
64
|
+
"args": ["-m", "mcp_server.veriscope_mcp_server"],
|
|
65
|
+
"cwd": "F:/翰林院AI总账本"
|
|
66
|
+
}
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
---
|
|
72
|
+
|
|
73
|
+
## 架构定位:与 v3.0 §七-4 不变量的关系
|
|
74
|
+
|
|
75
|
+
> **不变量 4:插件入口思维不变** —— 所有外部入口(MCP / Skill Registry)最终汇聚到 Chrome 插件这一人类入口
|
|
76
|
+
|
|
77
|
+
```
|
|
78
|
+
L4: Chrome插件(人类) / MCP Server(AI Agent) / Skill Registry / K-Dense互导流
|
|
79
|
+
↓ 统一路由(建议1)
|
|
80
|
+
L2: archive_server.py 统一路由技能
|
|
81
|
+
↓
|
|
82
|
+
L3: 三态取证 / Evidence Object 9字段 / 行级锚定
|
|
83
|
+
↓
|
|
84
|
+
L1: 素书楼学术原典实物物证库 + FTS5 + INSTR + SHA256
|
|
85
|
+
```
|
|
86
|
+
|
|
87
|
+
**关键点**:
|
|
88
|
+
- MCP Server **不绕过** archive_server.py,通过 `skills_adapter.py` **直接 import 调用** view function
|
|
89
|
+
- 所有证据产出遵循 **Evidence Object 9 字段 schema**(`evidence_object_schema.json`)
|
|
90
|
+
- 三态取证(相关/对立/缺口)哲学核心 **不变**(§七-3)
|
|
91
|
+
|
|
92
|
+
---
|
|
93
|
+
|
|
94
|
+
## 与 K-Dense plugin.json 的关系
|
|
95
|
+
|
|
96
|
+
参考 `decisions/_refs/k_dense_scientific_agent_skills_v2.64.0/plugin.json`(23 行标准模板)。真镜 MCP Server 遵循同一 **Agent Plugins 1.0.0 标准**:
|
|
97
|
+
- `name`/`version`/`description`/`author`/`license`/`keywords` 字段对齐
|
|
98
|
+
- Skill 目录结构遵循 K-Dense 硬规范:`SKILL.md` + `references/` + `scripts/` + `assets/`
|
|
99
|
+
- `metadata.version` 必须引号包字符串(如 `"0.1"`)
|
|
100
|
+
- `allowed-tools` 为空格分隔字符串
|
|
101
|
+
|
|
102
|
+
---
|
|
103
|
+
|
|
104
|
+
## 内部实现要点
|
|
105
|
+
|
|
106
|
+
| 文件 | 职责 | 行数 |
|
|
107
|
+
|------|------|------|
|
|
108
|
+
| `veriscope_mcp_server.py` | MCP Server 核心,优雅降级,stdio transport | ~160 |
|
|
109
|
+
| `skills_adapter.py` | registry.json → MCP Tool 定义 + 本地调用 archive_server | ~180 |
|
|
110
|
+
| `__init__.py` | 包元信息 | ~15 |
|
|
111
|
+
|
|
112
|
+
**关键设计**:
|
|
113
|
+
1. **不强依赖 mcp SDK**:`try/except ImportError` 优雅降级,mock 模式可独立运行
|
|
114
|
+
2. **本地调用而非 HTTP**:Flask `test_request_context` 直接调用 view function,零网络开销
|
|
115
|
+
3. **param_mapping 自动生成 schema**:registry.json → JSON Schema(inputSchema)
|
|
116
|
+
4. **stdio transport**:标准 MCP 协议,兼容所有 MCP Client
|
|
117
|
+
|
|
118
|
+
---
|
|
119
|
+
|
|
120
|
+
## 验证
|
|
121
|
+
|
|
122
|
+
```bash
|
|
123
|
+
python -c "import ast; ast.parse(open('mcp_server/veriscope_mcp_server.py', encoding='utf-8').read())"
|
|
124
|
+
python -c "import ast; ast.parse(open('mcp_server/skills_adapter.py', encoding='utf-8').read())"
|
|
125
|
+
python -m mcp_server.veriscope_mcp_server --list-tools # 应显示 5 个 tool
|
|
126
|
+
python -m mcp_server.skills_adapter
|
|
127
|
+
```
|
|
128
|
+
|
|
129
|
+
---
|
|
130
|
+
|
|
131
|
+
## 回归风险控制
|
|
132
|
+
|
|
133
|
+
| 风险 | 对策 |
|
|
134
|
+
|------|------|
|
|
135
|
+
| 改动现有文件 | **严禁**改动 `archive_server.py` / `prompts.toml` / `sidebar.*` 等 |
|
|
136
|
+
| 强依赖 mcp SDK | `try/except` 优雅降级,mock 模式完整可用 |
|
|
137
|
+
| 引入额外依赖 | 仅标准库 + `mcp`(可选) |
|
|
138
|
+
| 暴露 secrets | 无 API key / secret 硬编码 |
|
|
139
|
+
| 破坏插件入口 | MCP Server 只是**额外入口**,插件主入口不受影响 |
|
|
140
|
+
|
|
141
|
+
---
|
|
142
|
+
|
|
143
|
+
## 后续规划(P2 阶段)
|
|
144
|
+
|
|
145
|
+
- [ ] 真实 MCP SDK 集成测试
|
|
146
|
+
- [ ] Evidence Object 9 字段在 tool 返回中透传
|
|
147
|
+
- [ ] 支持 `/skill/<name>` 统一路由技能(建议 1)
|
|
148
|
+
- [ ] K-Dense 互导流:双向路由 + 数据交换
|
|
149
|
+
- [ ] 安全扫描集成(Cisco AI Defense Skill Scanner)
|
|
150
|
+
|
|
151
|
+
---
|
|
152
|
+
|
|
153
|
+
## 许可证
|
|
154
|
+
|
|
155
|
+
MIT License — 与真镜主项目一致。
|