onetrust-api 0.2.1__tar.gz → 1.1.0__tar.gz

{onetrust_api-0.2.1 → onetrust_api-1.1.0}/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Audel Rouhi
+Copyright (c) 2026 Project Maintainers
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

{onetrust_api-0.2.1 → onetrust_api-1.1.0}/PKG-INFO

@@ -1,31 +1,31 @@
 Metadata-Version: 2.4
 Name: onetrust-api
-Version: 0.2.1
+Version: 1.1.0
 Summary: OneTrust API + MCP Server + A2A Agent — 100% API coverage
-Author-email: Audel Rouhi <knucklessg1@gmail.com>
+Author-email: Project Maintainers <maintainers@users.noreply.github.com>
 License: MIT
 Classifier: Development Status :: 4 - Beta
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Environment :: Console
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python :: 3
-Requires-Python: <3.15,>=3.11
+Requires-Python: <3.15,>=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-utilities>=0.51.0
-Requires-Dist: python-dotenv>=1.0.0
-Requires-Dist: requests>=2.32.0
+Requires-Dist: agent-utilities<3.0.0,>=2.0.0
+Requires-Dist: python-dotenv>=1.2.2
+Requires-Dist: requests>=2.34.2
 Provides-Extra: mcp
-Requires-Dist: agent-utilities[mcp]>=0.51.0; extra == "mcp"
+Requires-Dist: agent-utilities[mcp]<3.0.0,>=2.0.0; extra == "mcp"
 Provides-Extra: agent
-Requires-Dist: agent-utilities[agent,logfire]>=0.51.0; extra == "agent"
+Requires-Dist: agent-utilities[agent-runtime,logfire]<3.0.0,>=2.0.0; extra == "agent"
 Provides-Extra: all
 Requires-Dist: onetrust-api[agent,mcp]>=0.2.0; extra == "all"
 Provides-Extra: test
-Requires-Dist: pytest-xdist>=3.6.0; extra == "test"
-Requires-Dist: pytest; extra == "test"
-Requires-Dist: pytest-asyncio; extra == "test"
-Requires-Dist: pytest-cov; extra == "test"
+Requires-Dist: pytest-xdist>=3.8.0; extra == "test"
+Requires-Dist: pytest>=9.1.1; extra == "test"
+Requires-Dist: pytest-asyncio>=1.4.0; extra == "test"
+Requires-Dist: pytest-cov>=7.1.0; extra == "test"
 Dynamic: license-file
 
 # OneTrust Api - A2A | AG-UI | MCP
@@ -51,7 +51,7 @@ Dynamic: license-file
 ![PyPI - Wheel](https://img.shields.io/pypi/wheel/onetrust-api)
 ![PyPI - Implementation](https://img.shields.io/pypi/implementation/onetrust-api)
 
-*Version: 0.2.1*
+*Version: 1.1.0*
 
 ## Overview
 
@@ -99,18 +99,19 @@ so you can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 
 | Variable | Example | Description |
 |----------|---------|-------------|
-| `ONETRUST_URL` | — | Tenant host URL (overrides ONETRUST_REGION). e.g. https://acme.my.onetrust.com |
+| `ONETRUST_URL` | — | ─── OneTrust connection ─────────────────────────────────────────────── Tenant host URL (overrides ONETRUST_REGION). e.g. https://acme.my.onetrust.com |
 | `ONETRUST_REGION` | `us` | Or pick a shared regional pod: us, eu, de, uk, au, ca, fr, in, jp, trial, uat ... |
-| `ONETRUST_TOKEN` | — | 1) Pre-minted OAuth2 bearer token (Global Settings > Access Management > Credentials) |
+| `ONETRUST_TOKEN` | secret-injected | ─── Authentication (use ONE of the two) ─────────────────────────────── 1) Pre-minted OAuth2 bearer token (Global Settings > Access Management > Credentials) |
 | `ONETRUST_CLIENT_ID` | — | 2) OAuth2 client-credentials (exchanged at /api/access/v1/oauth/token) |
-| `ONETRUST_CLIENT_SECRET` | — |  |
-| `ONETRUST_CONSENT_URL` | — | Consent transaction / privacy-portal host (consent_receipts, universal_consent ...) |
+| `ONETRUST_CLIENT_SECRET` | secret-injected |  |
+| `ONETRUST_CONSENT_URL` | — | ─── Optional service hosts ──────────────────────────────────────────── Consent transaction / privacy-portal host (consent_receipts, universal_consent ...) |
 | `ONETRUST_WORKER_URL` | — | On-prem Data Discovery worker-node host |
-| `ONETRUST_SSL_VERIFY` | `True` | ─── HTTP behaviour ──────────────────────────────────────────────────── |
+| `TLS_PROFILE` | `private-pki` | ─── HTTP behaviour ──────────────────────────────────────────────────── TLS verification is mandatory. Select a named runtime profile from AgentConfig. |
+| `TLS_PROFILES_REF` | `secret://runtime/tls-profiles` |  |
 | `FASTMCP_LOG_LEVEL` | `INFO` | ─── MCP transport / auth (agent-utilities) ──────────────────────────── |
 | `TRANSPORT` | `stdio` |  |
 | `AUTH_TYPE` | `none` |  |
-| `ACCESS_MANAGEMENTTOOL` | `True` | MCP tools table (condensed action-routed surface). |
+| `ACCESS_MANAGEMENTTOOL` | `True` | ─── Tool Toggle Switches (per-domain <DOMAIN>TOOL; set False to disable) ─ These names match the authoritative "Toggle Env Var" column in the README MCP tools table (condensed action-routed surface). |
 | `AI_GOVERNANCETOOL` | `True` |  |
 | `CUSTOM_APITOOL` | `True` |  |
 | `ASSESSMENTSTOOL` | `True` |  |
@@ -151,21 +152,23 @@ so you can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 
 | Variable | Example | Description |
 |----------|---------|-------------|
-| `HOST` | `0.0.0.0` | Bind host (HTTP transports) |
+| `HOST` | `127.0.0.1` | Loopback bind host (set an authenticated ingress explicitly) |
 | `PORT` | `8000` | Bind port (HTTP transports) |
-| `MCP_TOOL_MODE` | `condensed` | Tool surface: `condensed` | `verbose` | `both` |
+| `MCP_TOOL_MODE` | `intent` | Tool surface: `intent` \| `condensed` \| `verbose` \| `both` |
 | `MCP_ENABLED_TOOLS` | — | Comma-separated tool allow-list |
 | `MCP_DISABLED_TOOLS` | — | Comma-separated tool deny-list |
 | `MCP_ENABLED_TAGS` | — | Comma-separated tag allow-list |
 | `MCP_DISABLED_TAGS` | — | Comma-separated tag deny-list |
-| `EUNOMIA_TYPE` | `none` | Authorization mode: `none` | `embedded` | `remote` |
+| `EUNOMIA_TYPE` | `none` | Authorization mode: `none` \| `embedded` \| `remote` |
 | `EUNOMIA_POLICY_FILE` | `mcp_policies.json` | Embedded Eunomia policy file |
 | `EUNOMIA_REMOTE_URL` | — | Remote Eunomia authorization server URL |
 | `ENABLE_OTEL` | `False` | Enable OpenTelemetry export |
 | `OTEL_EXPORTER_OTLP_ENDPOINT` | — | OTLP collector endpoint |
-| `MCP_CLIENT_AUTH` | — | Outbound MCP auth (`oidc-client-credentials` for fleet calls) |
+| `MCP_CLIENT_AUTH` | — | Outbound MCP child auth: `oidc-client-credentials` \| `basic` \| `none` |
 | `OIDC_CLIENT_ID` | — | OIDC client id (service-account auth) |
-| `OIDC_CLIENT_SECRET` | — | OIDC client secret (service-account auth) |
+| `OIDC_CLIENT_SECRET_REF` | `secret://identity/oidc-client-secret` | Runtime secret reference for the OIDC service account |
+| `MCP_BASIC_AUTH_USERNAME` | — | HTTP Basic username (`MCP_CLIENT_AUTH=basic`) |
+| `MCP_BASIC_AUTH_PASSWORD_REF` | `secret://identity/mcp-basic-password` | Runtime secret reference for HTTP Basic auth (`MCP_CLIENT_AUTH=basic`) |
 | `DEBUG` | `False` | Verbose logging |
 | `PYTHONUNBUFFERED` | `1` | Unbuffered stdout (recommended in containers) |
 | `MCP_URL` | `http://localhost:8000/mcp` | URL of the MCP server the agent connects to |
@@ -173,7 +176,7 @@ so you can scope the surface (e.g. set `ESGTOOL=False` to drop ESG).
 | `MODEL_ID` | `gpt-4o` | Model id for the agent |
 | `ENABLE_WEB_UI` | `True` | Serve the AG-UI web interface |
 
-_47 package + 21 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
+_48 package + 23 inherited variable(s). Auto-generated from `.env.example` + the shared agent-utilities set — do not edit._
 <!-- ENV-VARS-TABLE:END -->
 
 
@@ -185,7 +188,8 @@ _47 package + 21 inherited variable(s). Auto-generated from `.env.example` + the
 | `ONETRUST_CLIENT_ID` / `ONETRUST_CLIENT_SECRET` | OAuth2 client-credentials (exchanged at `/api/access/v1/oauth/token`). |
 | `ONETRUST_CONSENT_URL` | Optional host for consent-transaction APIs (privacy portal). |
 | `ONETRUST_WORKER_URL` | Optional on-prem Data Discovery worker-node host. |
-| `ONETRUST_SSL_VERIFY` | Verify TLS (default `True`). |
+| `TLS_PROFILE` | Named `AgentConfig` transport-security profile; verification is mandatory. |
+| `TLS_PROFILES_REF` | Runtime secret reference for the TLS profile catalog. |
 | `<DOMAIN>TOOL` | Toggle a domain tool, e.g. `INCIDENTSTOOL`, `DSARTOOL`, `CONSENT_RECEIPTSTOOL` (default `True`). |
 
 #### Run in stdio mode (default):
@@ -875,11 +879,10 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
 
 <!-- MCP-CONFIG-EXAMPLES:START -->
 
-> **Install the slim `[mcp]` extra.** All examples install `onetrust-api[mcp]` — the
-> MCP-server extra that pulls only the FastMCP / FastAPI tooling (`agent-utilities[mcp]`).
-> It deliberately **excludes** the heavy agent runtime (`pydantic-ai`, the epistemic-graph
-> engine, `dspy`, `llama-index`), so `uvx` / container installs are far smaller. Use the
-> full `[agent]` extra only when you need the integrated Pydantic AI agent.
+> **Install the connector-focused `[mcp]` extra.** Examples use `onetrust-api[mcp]` to add
+> FastMCP / FastAPI through `agent-utilities[mcp]`; the required Agent Utilities core
+> still carries `epistemic-graph[full]`. The `[agent-runtime]` extra additionally
+> enables model orchestration.
 
 #### stdio Transport (local IDEs — Cursor, Claude Desktop, VS Code)
 
@@ -894,7 +897,7 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
         "onetrust-mcp"
       ],
       "env": {
-        "MCP_TOOL_MODE": "condensed",
+        "MCP_TOOL_MODE": "intent",
         "ACCESS_MANAGEMENTTOOL": "True",
         "AI_GOVERNANCETOOL": "True",
         "ASSESSMENTSTOOL": "True",
@@ -924,13 +927,7 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
         "IT_RISK_MANAGEMENTTOOL": "True",
         "MOBILE_APP_CONSENTTOOL": "True",
         "OBJECT_MANAGERTOOL": "True",
-        "ONETRUST_CLIENT_ID": "",
-        "ONETRUST_CLIENT_SECRET": "",
-        "ONETRUST_CONSENT_URL": "",
         "ONETRUST_REGION": "us",
-        "ONETRUST_TOKEN": "",
-        "ONETRUST_URL": "",
-        "ONETRUST_WORKER_URL": "",
         "POLICY_MANAGEMENTTOOL": "True",
         "PRIVACY_NOTICESTOOL": "True",
         "TASK_MANAGEMENTTOOL": "True",
@@ -944,6 +941,10 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
 }
 ```
 
+Runtime references require an alias-aware launcher such as GraphOS. Other
+launchers must omit those entries and inject the resolved values through their
+own runtime secret boundary.
+
 #### Streamable-HTTP Transport (networked / production)
 
 ```json
@@ -962,9 +963,9 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
       ],
       "env": {
         "TRANSPORT": "streamable-http",
-        "HOST": "0.0.0.0",
+        "HOST": "127.0.0.1",
         "PORT": "8000",
-        "MCP_TOOL_MODE": "condensed",
+        "MCP_TOOL_MODE": "intent",
         "ACCESS_MANAGEMENTTOOL": "True",
         "AI_GOVERNANCETOOL": "True",
         "ASSESSMENTSTOOL": "True",
@@ -994,13 +995,7 @@ _36 action-routed tool(s) (default) · 597 verbose 1:1 tool(s). Each is enabled
         "IT_RISK_MANAGEMENTTOOL": "True",
         "MOBILE_APP_CONSENTTOOL": "True",
         "OBJECT_MANAGERTOOL": "True",
-        "ONETRUST_CLIENT_ID": "",
-        "ONETRUST_CLIENT_SECRET": "",
-        "ONETRUST_CONSENT_URL": "",
         "ONETRUST_REGION": "us",
-        "ONETRUST_TOKEN": "",
-        "ONETRUST_URL": "",
-        "ONETRUST_WORKER_URL": "",
         "POLICY_MANAGEMENTTOOL": "True",
         "PRIVACY_NOTICESTOOL": "True",
         "TASK_MANAGEMENTTOOL": "True",
@@ -1026,16 +1021,18 @@ Alternatively, connect to a pre-deployed Streamable-HTTP instance by `url`:
 }
 ```
 
-Deploying the Streamable-HTTP server via Docker:
+Run a reviewed container image as a least-privilege stdio child (no
+listener or published port):
 
 ```bash
-docker run -d \
-  --name onetrust-mcp-mcp \
-  -p 8000:8000 \
-  -e TRANSPORT=streamable-http \
-  -e HOST=0.0.0.0 \
-  -e PORT=8000 \
-  -e MCP_TOOL_MODE=condensed \
+docker run -i --rm \
+  --read-only \
+  --cap-drop=ALL \
+  --security-opt=no-new-privileges \
+  --pids-limit=256 \
+  --tmpfs /tmp:rw,noexec,nosuid,nodev,size=64m \
+  -e TRANSPORT=stdio \
+  -e MCP_TOOL_MODE=intent \
   -e ACCESS_MANAGEMENTTOOL=True \
   -e AI_GOVERNANCETOOL=True \
   -e ASSESSMENTSTOOL=True \
@@ -1065,13 +1062,7 @@ docker run -d \
   -e IT_RISK_MANAGEMENTTOOL=True \
   -e MOBILE_APP_CONSENTTOOL=True \
   -e OBJECT_MANAGERTOOL=True \
-  -e ONETRUST_CLIENT_ID="" \
-  -e ONETRUST_CLIENT_SECRET="" \
-  -e ONETRUST_CONSENT_URL="" \
   -e ONETRUST_REGION=us \
-  -e ONETRUST_TOKEN="" \
-  -e ONETRUST_URL="" \
-  -e ONETRUST_WORKER_URL="" \
   -e POLICY_MANAGEMENTTOOL=True \
   -e PRIVACY_NOTICESTOOL=True \
   -e TASK_MANAGEMENTTOOL=True \
@@ -1079,9 +1070,14 @@ docker run -d \
   -e TRAININGTOOL=True \
   -e UNIVERSAL_CONSENTTOOL=True \
   -e USER_PROVISIONINGTOOL=True \
-  knucklessg1/onetrust-api:mcp
+  registry.example.invalid/onetrust-api@sha256:<digest> onetrust-mcp
 ```
 
+For containerized network HTTP, supply an authenticated TLS ingress (or
+direct server TLS), exact `MCP_ALLOWED_HOSTS`, and an exact trusted-proxy
+CIDR policy through the operator-owned deployment profile. The generator
+does not emit an unauthenticated non-loopback listener.
+
 _Auto-generated from the code-read env surface (`MCP_TOOL_MODE` + package vars) — do not edit._
 <!-- MCP-CONFIG-EXAMPLES:END -->
 
@@ -1112,12 +1108,12 @@ docker run -d \
   -e PORT=8000 \
   -e ONETRUST_URL="https://acme.my.onetrust.com" \
   -e ONETRUST_TOKEN="your_token" \
-  knucklessg1/onetrust-api:mcp
+  example/onetrust-api:mcp
 ```
 
-> The `:mcp` tag is the **slim MCP-server image** (built from
+> The `:mcp` tag is the **MCP-serving image** (built from
 > `docker/Dockerfile --target mcp`, installing `onetrust-api[mcp]`). The default
-> `:latest` tag is the **full agent image** (`--target agent`, `onetrust-api[agent]`)
+> the immutable agent image is the **full agent image** (`--target agent`, `onetrust-api[agent]`)
 > which also bundles the Pydantic AI agent and the epistemic-graph engine — use it
 > when you run `onetrust-agent` (the agent), not just the MCP server. See
 > [Container images](#container-images-mcp-vs-agent).
@@ -1127,7 +1123,7 @@ docker run -d \
 ```yaml
 services:
   onetrust-api-mcp:
-    image: knucklessg1/onetrust-api:mcp
+    image: example/onetrust-api:mcp
     environment:
       - HOST=0.0.0.0
       - PORT=8000
@@ -1144,15 +1140,15 @@ Pick the extra that matches what you want to run:
 
 | Extra | Installs | Use when |
 |-------|----------|----------|
-| `onetrust-api[mcp]` | Slim MCP server only (`agent-utilities[mcp]` — FastMCP/FastAPI) | You only run the **MCP server** (smallest install / image) |
-| `onetrust-api[agent]` | Full agent runtime (`agent-utilities[agent,logfire]` — Pydantic AI + the epistemic-graph engine) | You run the **integrated agent** |
+| `onetrust-api[mcp]` | Connector-focused MCP server (`agent-utilities[mcp]` — FastMCP/FastAPI + `epistemic-graph[full]`) | You only run the **MCP server** (smallest install / image) |
+| `onetrust-api[agent]` | Agent runtime (`agent-utilities[agent-runtime,logfire]` — model orchestration + `epistemic-graph[full]`) | You run the **integrated agent** |
 | `onetrust-api[all]` | Everything (`mcp` + `agent`) | Development / both surfaces |
 
 ```bash
-# MCP server only (recommended for tool hosting — slim deps)
+# Connector-focused MCP server (includes the shared graph engine)
 uv pip install "onetrust-api[mcp]"
 
-# Full agent runtime (Pydantic AI + epistemic-graph engine)
+# Agent runtime (adds model orchestration to the shared graph engine)
 uv pip install "onetrust-api[agent]"
 
 # Everything (development)
@@ -1165,26 +1161,27 @@ One multi-stage `docker/Dockerfile` builds two right-sized images, selected by `
 
 | Image tag | Build target | Contents | Entrypoint |
 |-----------|--------------|----------|------------|
-| `knucklessg1/onetrust-api:mcp` | `--target mcp` | `onetrust-api[mcp]` — **slim**, no engine/`pydantic-ai`/`dspy`/`llama-index`/`tree-sitter` | `onetrust-mcp` |
-| `knucklessg1/onetrust-api:latest` | `--target agent` (default) | `onetrust-api[agent]` — **full** agent runtime + epistemic-graph engine | `onetrust-agent` |
+| `example/onetrust-api:mcp` | `--target mcp` | `onetrust-api[mcp]` — **connector-focused**, includes `epistemic-graph[full]`; no model-orchestration stack | `onetrust-mcp` |
+| `example/onetrust-api@sha256:<digest>` | `--target agent` (default) | `onetrust-api[agent]` — **agent runtime**, model orchestration + `epistemic-graph[full]` | `onetrust-agent` |
 
 ```bash
-docker build --target mcp   -t knucklessg1/onetrust-api:mcp    docker/   # slim MCP server
-docker build --target agent -t knucklessg1/onetrust-api:latest docker/   # full agent
+docker build --target mcp   -t example/onetrust-api:mcp    docker/   # connector-focused MCP server
+docker build --target agent -t example/onetrust-api:agent-local docker/   # agent runtime
 ```
 
-`docker/mcp.compose.yml` runs the slim `:mcp` server; `docker/agent.compose.yml` runs the
-agent (`:latest`) with a co-located `:mcp` sidecar.
+`docker/mcp.compose.yml` runs the connector-focused `:mcp` server; `docker/agent.compose.yml` runs the
+agent (`immutable agent digest`) with a co-located `:mcp` sidecar.
 
 ### Knowledge-graph database (`epistemic-graph`)
 
-The **full agent** (`[agent]` / `:latest`) embeds the **epistemic-graph** engine (pulled in
-transitively via `agent-utilities[agent]`). For production — or to share one knowledge graph
-across multiple agents — run **epistemic-graph as its own database container** and point the
-agent at it instead of embedding it. Deployment recipes (single-node + Raft HA), connection
-config, and the full database architecture (with diagrams) are documented in the
+Both `[mcp]` and `[agent]` carry the **epistemic-graph** engine through the required
+Agent Utilities core dependency (`epistemic-graph[full]`). The `[mcp]` extra keeps
+the server connector-focused; `[agent]` additionally enables model orchestration. Local
+deployments can use the bundled engine. For production or shared state, run
+**epistemic-graph as a dedicated database service** and configure the runtime to use it.
+Deployment recipes (single-node + Raft HA), connection configuration, and architecture
+diagrams are documented in the
 [epistemic-graph deployment guide](https://knuckles-team.github.io/epistemic-graph/deployment/).
-The slim `[mcp]` server does **not** require the database.
 
 ## Environment Variables
 
@@ -1201,7 +1198,8 @@ starting point.
 | `ONETRUST_CLIENT_SECRET` | OAuth2 client-credentials client secret | — |
 | `ONETRUST_CONSENT_URL` | Optional host for consent-transaction APIs (privacy portal) | — |
 | `ONETRUST_WORKER_URL` | Optional on-prem Data Discovery worker-node host | — |
-| `ONETRUST_SSL_VERIFY` | Verify TLS for OneTrust requests | `True` |
+| `TLS_PROFILE` | Named `AgentConfig` transport-security profile; verification is mandatory | — |
+| `TLS_PROFILES_REF` | Runtime secret reference for the TLS profile catalog | — |
 
 ### MCP server / transport
 | Variable | Description | Default |
@@ -1256,29 +1254,46 @@ the source of truth for installation, usage, and deployment.
 
 ## Repository Owners
 
-<img width="100%" height="180em" src="https://github-readme-stats.vercel.app/api?username=Knucklessg1&show_icons=true&hide_border=true&&count_private=true&include_all_commits=true" />
+<img width="100%" height="180em" src="https://github-readme-stats.vercel.app/api?username=example&show_icons=true&hide_border=true&&count_private=true&include_all_commits=true" />
 
-![GitHub followers](https://img.shields.io/github/followers/Knucklessg1)
-![GitHub User's stars](https://img.shields.io/github/stars/Knucklessg1)
+![GitHub followers](https://img.shields.io/github/followers/example)
+![GitHub User's stars](https://img.shields.io/github/stars/example)
 
 
-<!-- BEGIN agent-os-genesis-deploy (generated; do not edit between markers) -->
+<!-- BEGIN agent-utilities-deployment (generated; do not edit between markers) -->
 
-## Deploy with `agent-os-genesis`
+## Deploy with `agent-utilities-deployment`
 
-This package can be provisioned for you — skill-guided — by the **`agent-os-genesis`**
-universal skill (its *single-package deploy mode*): it picks your install method, seeds
-secrets to OpenBao/Vault (or `.env`), trusts your enterprise CA, registers the MCP
-server, and verifies it — the same machinery that stands up the whole Agent OS, narrowed
-to just this package. Ask your agent to **"deploy `onetrust-api` with agent-os-genesis"**.
+Provision this package with the consolidated **`agent-utilities-deployment`**
+workflow. It selects an installed-package, editable-source, or immutable-container
+path; records only runtime secret and TLS-profile references in `AgentConfig`; and
+runs doctor, registration, policy, observability, and rollback gates. Ask your agent
+to **"deploy `onetrust-api` with agent-utilities-deployment"**.
 
 | Install mode | Command |
 |------|---------|
-| Bare-metal, prod (PyPI) | `uvx onetrust-mcp` · or `uv tool install onetrust-api` |
-| Bare-metal, dev (editable) | `uv pip install -e ".[all]"` · or `pip install -e ".[all]"` |
-| Container, prod | deploy `knucklessg1/onetrust-api:latest` via docker-compose / swarm / podman / podman-compose / kubernetes |
-| Container, dev (editable) | deploy `docker/compose.dev.yml` (source-mounted at `/src`; edits live on restart) |
-
-Secrets are read-existing + seeded via `vault_sync` — you are only prompted for what's missing.
-
-<!-- END agent-os-genesis-deploy -->
+| Installed package | `uv tool install "onetrust-api[mcp]"`, then run `onetrust-mcp` |
+| Editable source | `uv pip install -e ".[agent]"`, then run `onetrust-mcp` |
+| Immutable container | deploy `registry.example.invalid/onetrust-api@sha256:<digest>` through the operator-selected orchestrator |
+
+The repository embeds no deployment profile, credential value, certificate path, or
+environment-specific endpoint. Supply those at runtime through `AgentConfig` and the
+configured secret provider.
+
+<!-- END agent-utilities-deployment -->
+
+<!-- GOVERNED-CAPABILITY:START -->
+## Governed capability contract
+
+This package ships a compact canonical skill surface with specialist procedures
+kept as referenced workflows. The current MCP tools, skill metadata,
+`connector_manifest.yml`, ontology, mappings, shapes, fixtures, migrations,
+tool-schema fingerprints, and certification metadata form one versioned
+capability contract. Validate them together; do not rely on stale tool names or
+historical per-task skill wrappers.
+
+Runtime endpoints, credentials, certificate trust, tenant identity, retention,
+and observability policy are deployment inputs and are never packaged values.
+See [Configuration, trust, and privacy](docs/configuration.md) before enabling a
+network transport, connector ingestion, GraphOS delegation, or trace export.
+<!-- GOVERNED-CAPABILITY:END -->