Observability Engine

Enforce log/metric/anomaly policies with observe_* tools.

What you will learn

• observe_get
• observe_plan
• observe_enforce

Prerequisites

• Mount PluginHost and merge MCP tools

Surface

What this feature does

Observability Engine requires telemetry contracts for governed services — agents must attach observe evidence when policies demand it.

How to call it

Call these MCP tools through your AGS / tower-gov host — observe_get, observe_validate, observe_enforce, observe_plan.. Prefer scan/get before validate/diff, and enforce only when the change set is ready.

1. observe_get
2. observe_plan
3. Apply remediation
4. observe_enforce

{
  /* Example MCP call — fill args from schema_get / docs */
  "tool": "observe_get",
  "arguments": {}
}

What success looks like

observe_enforce ok

Policy matches live state

Common failure modes

Config enabled but requiredFiles missing

Enforce without validate

Plan ignored

Related reference

• Configuration
• Architecture