protect-mcp

MCP security gateway — per-tool policies, Ed25519-signed receipts, human approval gates. Shadow mode logs everything without blocking. Enforce mode applies policy. Every decision is cryptographically signed and verifiable offline.