tegwick
5f302c8b33
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
61 lines
2.4 KiB
Markdown
61 lines
2.4 KiB
Markdown
# SCOPE
|
||
|
||
> Refined after `statehub register` (2026-07-21). Normative intent in
|
||
> `INTENT.md`; architecture in `specs/ArchitectureBlueprint.md`.
|
||
|
||
## One-liner
|
||
|
||
Policy-governed Qonto domain **REST + MCP** assistant: sole bank-key consumer
|
||
and default-deny **no spend / no volume-cost** policy for multi-harness finance
|
||
awareness.
|
||
|
||
## Core idea
|
||
|
||
All agents and harnesses talk to **this service** for Qonto. None of them hold
|
||
the OpenBao bank secret. Policy is enforced here once, not reimplemented per
|
||
client.
|
||
|
||
## In scope
|
||
|
||
- Dual surfaces: streamable-HTTP MCP and JSON REST with a **shared policy kernel**
|
||
- Read capabilities: org/accounts/balances, transactions (bounded), CostRunRate
|
||
hints / snapshot helpers
|
||
- OpenBao consumption for `tenants/<tenant>/qonto-api` (dogfood: binky)
|
||
- Authn of callers (OIDC / workload identity) and optional flex-auth checks
|
||
- Audit metadata (actor, tool, allow/deny) without secret leakage
|
||
- Tests for default-deny and spend/volume-cost rejection
|
||
- Docs for harness client config (no bank secrets)
|
||
|
||
## Out of scope (v1 and hard)
|
||
|
||
- Payments, transfers, SEPA, card operations, invoicing create, plan changes
|
||
- Hosting or recommending the hosted Qonto OAuth MCP connector
|
||
- DATEV / StB / DUO bookkeeping replacement
|
||
- LLM provider routing (llm-connect)
|
||
- Agent scheduling (activity-core) or session runtime (agent-harness)
|
||
- Generic multi-MCP fleet gateway (may sit *in front* later; not this repo’s job)
|
||
- Storing bank credentials outside OpenBao
|
||
|
||
## Current state
|
||
|
||
| Artifact | Status |
|
||
| --- | --- |
|
||
| INTENT / SCOPE / AGENTS | present |
|
||
| Architecture blueprint | `specs/ArchitectureBlueprint.md` |
|
||
| Research notes | `research/2026-07-21-…` |
|
||
| Runtime implementation | REST + MCP, policy/auth gates, audit reconciliation implemented (see workplans) |
|
||
| Upstream custody | live in platform (`binky-qonto-api`, CCR-2026-0008) |
|
||
|
||
## Getting oriented
|
||
|
||
1. `INTENT.md` — why / boundaries
|
||
2. `specs/ArchitectureBlueprint.md` — how
|
||
3. `research/2026-07-21-mcp-gateway-and-governed-domain-assistant.md` — why this shape
|
||
4. `workplans/` — what to do next
|
||
5. `AGENTS.md` — State Hub protocol
|
||
|
||
## Local orientation brief policy — 2026-10-21
|
||
|
||
`.custodian-brief.md` is a local, ignored State Hub orientation snapshot. Refreshing
|
||
it does not require a Git commit. Authored workplans and the generated
|
||
WORK-RECORDS index keep their existing source and staged-generation contracts.
|