Enforcement sessions
Begin sessions, record MCP tools, pass enforcement_check before checkpoints.
What you will learn
- enforcement_begin
- Record staging+confidence
- Pass enforcement_check
Prerequisites
Surface
| MCP | enforcement_begin · enforcement_status · enforcement_record · enforcement_check |
|---|
What this feature does
Enforcement mode `enforce` requires an active session. afterMCPExecution hooks should call enforcement_record. Minimum: one staging_* and one confidence_* tool recorded.
How to call it
Call these MCP tools through your AGS / tower-gov host — enforcement_begin, enforcement_status, enforcement_record, enforcement_check.. Prefer scan/get before validate/diff, and enforce only when the change set is ready.
- enforcement_begin
- staging_enforce
- confidence_enforce
- enforcement_check
- commit_checkpoint
{ "mode": "enforce", "note": "auth middleware slice" }What success looks like
enforcement_status non-null
enforcement_check ok:true
Common failure modes
Checkpoint without begin
Only one of staging/confidence recorded
Wrong repo root → status null