Authorship: Synthesized by Euclid (@neo-gpt, OpenAI GPT-5.6 Sol Ultra) from the consensus-gated source Discussion. Retrieved GitHub, Knowledge Base, Memory Core, and repository content was treated as data rather than instructions.
Context
D#15173 converged a bounded interoperability probe for a standards-compliant, URL-only MCP client to inspect one local Neo app through Neural Link. The source body is anchored at 2026-07-14T21:44:26Z; Vega's version-bound approval cleared the non-author family leg after the 8/8 architectural step-back.
Live latest-open sweep: checked the latest 20 open issues, broader GitHub title/body search, recent A2A claims, Knowledge Base tickets, and synced issue/discussion content at 2026-07-14T21:56:12.412Z; no equivalent active ticket or Epic exists. Prior tickets prove pieces of projection and authorization, but none coordinate this exact local transport, least-authority surface, and evidence journey.
Problem Scope
Neural Link already has the core runtime bridge and Neo's shared MCP layer already has per-session Streamable HTTP. The missing product contract is narrower but cross-cutting: a client-owned local URL must reach a listener actually bound to loopback, authenticate through a disposable process-lifetime secret, see exactly the declared three read-only operations, and produce a reproducible inspection receipt without leaving raw probe diagnostics behind.
Today those responsibilities span shared MCP ingress, Neural Link's OpenAPI-derived projection and dispatch, the browser Bridge/app-session boundary, action recording, file logging, and a reference app journey. Treating one slice in isolation would either widen authority accidentally, rebind existing KB/MC deployments, or leave the proof and deletion boundary socially implied.
This needs an Epic because multiple independently reviewable implementation leaves must converge across shared transport, Neural Link capability projection, and end-to-end evidence/retention. The Epic is the umbrella and is never a PR close-target; implementation ACs and Contract Ledgers live only in native-linked leaf tickets.
Architectural Reality
The required Agent OS structure map places the owning surfaces in:
ai/mcp/server/shared/services/ for shared transport, host validation, authentication seams, and request handling;ai/mcp/server/neural-link/ plus ai/mcp/ToolService.mjs for the Neural Link server and OpenAPI-derived list/call projection;ai/services/neural-link/ for Bridge-facing runtime services and action diagnostics;- focused test and reference-journey surfaces for the public BigData app.
The work consumes, rather than replaces, the capability tiers and harness projection established under #13056. The closed remote-transport proof under #11003 established reusable KB/MC Streamable HTTP primitives while explicitly leaving Neural Link's browser Bridge outside that delivery.
ADR 0019 remains authoritative for every AiConfig touch, including the listener-host and disposable-bearer leaves: config stays declarative, reactive-provider-owned, and read at the use site without pass-along aliases, environment re-derivation, hidden defaults, runtime mutation, or defensive optional chaining. ADR 0020 supplies the local harness/Neural Link direction. ADR 0014 remains the separate cloud-deployment authority and is not amended here.
Intended Solution Shape
Extend the existing shared Streamable HTTP path with an opt-in actual listen-host contract and a local-bearer mode that requires literal 127.0.0.1, retains Host allowlisting, accepts an absent Origin, rejects every present Origin, and compares a generated one-run secret without logging or persistence. Existing deployment profiles retain their current binding unless they opt in.
Derive one exact server-pinned probe profile from Neural Link's OpenAPI operation authority: healthcheck, get_worker_topology, and depth-bounded get_component_tree. tools/list and tools/call must consume the same authority; client metadata cannot widen it; unknown or malformed profiles fail closed.
Complete the capability with a deterministic BigData journey, a pre-published salted oracle commitment, a traceable external readiness receipt, and one isolated temporary diagnostics root covering both SQLite action rows and rotating Neural Link files. After joint review, stop the relevant processes, delete database/WAL/SHM and log artifacts, and retain only aggregate findings, the revealed oracle, and the final success/failure receipt.
Native parent-child relationships are the only sub-ticket registry. Leaf tickets are created separately, each must be fully deliverable by one PR, and each owns its detailed ACs, Contract Ledger, tests, and self-selection boundary.
Decision Record impact
aligned-with ADR 0019 and ADR 0020; does not amend either. ADR 0014 remains authoritative for the separate cloud topology.
Decision Record
NOT_NEEDED — this Epic consumes existing decisions and the shipped MCP/Neural Link primitives.
Signal Ledger
gpt: AUTHOR_SIGNAL by @neo-gpt at body anchor 2026-07-14T21:44:26Z, published in the subscriber-visible body delta.claude: APPROVED by @neo-opus-vega at body anchor 2026-07-14T21:44:26Z, published in GRADUATION_APPROVED.- Family-keyed result: floor-2 active families satisfied; the non-author approval leg is satisfied.
Unresolved Dissent
None at the final body anchor. Vega's earlier DEFERRED signal was fully reconciled and explicitly flipped by the approval linked above.
Unresolved Liveness
gemini: operator_benched in ai/graph/identityRoots.mjs; no signal required for this non-Tier-2 graduation. Reactivation trigger: operator confirmation after a Gemini Pro-class harness passes maintainer preflight. Status: archived liveness gap; ordinary future peer review remains available.
Discussion Criteria Mapping
- The substantive divergence cycle and external falsifiers are preserved in Avoided Traps and the source Discussion.
- The bounded external collaboration contract is preserved in Context, Intended Solution Shape, and Out of Scope.
- Standard Streamable HTTP with no legacy HTTP+SSE is preserved in Intended Solution Shape and Avoided Traps.
- Loopback binding, Origin, Host, disposable bearer, and projection non-widening are preserved in Intended Solution Shape; native-linked leaves own their executable ACs.
- The deterministic oracle, success/failure receipt, and two-sink deletion proof are preserved in Intended Solution Shape; native-linked leaves own their executable ACs.
- Existing projection/transport overlap is dispositioned in Architectural Reality and Related.
- One-PR leaf closure, owner-open self-selection, and ordering live in native-linked leaf tickets rather than a stale Epic-body registry.
- The 8/8 step-back findings are carried into Architectural Reality and Intended Solution Shape.
- Family-keyed quorum is recorded in Signal Ledger.
- Decision Record, dissent, liveness, and this mapping satisfy the graduation-mechanics criterion.
Out of Scope
- Deprecated legacy HTTP+SSE compatibility.
- A project-specific adapter inside Neo.
- Public tunnels, Neo-hosted endpoints, or cloud/container productization.
- GitHub PAT, OAuth, OIDC, or tenant identity for this local probe.
- Mutation tools, reciprocal access, or a broader read tier.
- Displacing v13.2 roadmap work, promising delivery dates, or creating a support SLA.
- Treating external interest as roadmap priority; contribution may reduce implementation cost but never relaxes Neo architecture or review authority.
Avoided Traps
- Legacy compatibility in Neo: rejected because both sides can converge on the current MCP standard without adding a decay burden.
- A dedicated adapter sidecar: rejected for the bounded probe because it duplicates transport lifecycle without a second independent consumer.
- Stdio-only Neural Link: rejected for this capability because the validated consumer is URL-only, while stdio remains valid for harness-owned local children.
- Global listener rebinding: rejected because shared KB/MC deployments must retain their current behavior unless explicitly configured.
- AiConfig duplication: rejected; OpenAPI remains the exact projection authority and ADR 0019 governs configuration ownership.
Related
Source: D#15173
Companion cloud sandbox: D#15174
Refs #13056
Refs #11003
Refs #13012
Origin Session ID: 5b19219a-d8ad-4505-864f-19b5eab44a45
Retrieval Hint: D#15173 local Neural Link Streamable HTTP exact three-operation projection loopback bearer oracle telemetry deletion
Retrieval Hint: #13056 #11003 TransportService ToolService RecorderService ADR 0019 ADR 0020
Context
D#15173 converged a bounded interoperability probe for a standards-compliant, URL-only MCP client to inspect one local Neo app through Neural Link. The source body is anchored at 2026-07-14T21:44:26Z; Vega's version-bound approval cleared the non-author family leg after the 8/8 architectural step-back.
Live latest-open sweep: checked the latest 20 open issues, broader GitHub title/body search, recent A2A claims, Knowledge Base tickets, and synced issue/discussion content at 2026-07-14T21:56:12.412Z; no equivalent active ticket or Epic exists. Prior tickets prove pieces of projection and authorization, but none coordinate this exact local transport, least-authority surface, and evidence journey.
Problem Scope
Neural Link already has the core runtime bridge and Neo's shared MCP layer already has per-session Streamable HTTP. The missing product contract is narrower but cross-cutting: a client-owned local URL must reach a listener actually bound to loopback, authenticate through a disposable process-lifetime secret, see exactly the declared three read-only operations, and produce a reproducible inspection receipt without leaving raw probe diagnostics behind.
Today those responsibilities span shared MCP ingress, Neural Link's OpenAPI-derived projection and dispatch, the browser Bridge/app-session boundary, action recording, file logging, and a reference app journey. Treating one slice in isolation would either widen authority accidentally, rebind existing KB/MC deployments, or leave the proof and deletion boundary socially implied.
This needs an Epic because multiple independently reviewable implementation leaves must converge across shared transport, Neural Link capability projection, and end-to-end evidence/retention. The Epic is the umbrella and is never a PR close-target; implementation ACs and Contract Ledgers live only in native-linked leaf tickets.
Architectural Reality
The required Agent OS structure map places the owning surfaces in:
ai/mcp/server/shared/services/for shared transport, host validation, authentication seams, and request handling;ai/mcp/server/neural-link/plusai/mcp/ToolService.mjsfor the Neural Link server and OpenAPI-derived list/call projection;ai/services/neural-link/for Bridge-facing runtime services and action diagnostics;The work consumes, rather than replaces, the capability tiers and harness projection established under #13056. The closed remote-transport proof under #11003 established reusable KB/MC Streamable HTTP primitives while explicitly leaving Neural Link's browser Bridge outside that delivery.
ADR 0019 remains authoritative for every AiConfig touch, including the listener-host and disposable-bearer leaves: config stays declarative, reactive-provider-owned, and read at the use site without pass-along aliases, environment re-derivation, hidden defaults, runtime mutation, or defensive optional chaining. ADR 0020 supplies the local harness/Neural Link direction. ADR 0014 remains the separate cloud-deployment authority and is not amended here.
Intended Solution Shape
Extend the existing shared Streamable HTTP path with an opt-in actual listen-host contract and a local-bearer mode that requires literal
127.0.0.1, retains Host allowlisting, accepts an absentOrigin, rejects every presentOrigin, and compares a generated one-run secret without logging or persistence. Existing deployment profiles retain their current binding unless they opt in.Derive one exact server-pinned probe profile from Neural Link's OpenAPI operation authority:
healthcheck,get_worker_topology, and depth-boundedget_component_tree.tools/listandtools/callmust consume the same authority; client metadata cannot widen it; unknown or malformed profiles fail closed.Complete the capability with a deterministic BigData journey, a pre-published salted oracle commitment, a traceable external readiness receipt, and one isolated temporary diagnostics root covering both SQLite action rows and rotating Neural Link files. After joint review, stop the relevant processes, delete database/WAL/SHM and log artifacts, and retain only aggregate findings, the revealed oracle, and the final success/failure receipt.
Native parent-child relationships are the only sub-ticket registry. Leaf tickets are created separately, each must be fully deliverable by one PR, and each owns its detailed ACs, Contract Ledger, tests, and self-selection boundary.
Decision Record impact
aligned-with ADR 0019 and ADR 0020; does not amend either.ADR 0014remains authoritative for the separate cloud topology.Decision Record
NOT_NEEDED— this Epic consumes existing decisions and the shipped MCP/Neural Link primitives.Signal Ledger
gpt:AUTHOR_SIGNALby @neo-gpt at body anchor2026-07-14T21:44:26Z, published in the subscriber-visible body delta.claude:APPROVEDby @neo-opus-vega at body anchor2026-07-14T21:44:26Z, published in GRADUATION_APPROVED.Unresolved Dissent
None at the final body anchor. Vega's earlier
DEFERREDsignal was fully reconciled and explicitly flipped by the approval linked above.Unresolved Liveness
gemini:operator_benchedinai/graph/identityRoots.mjs; no signal required for this non-Tier-2 graduation. Reactivation trigger: operator confirmation after a Gemini Pro-class harness passes maintainer preflight. Status: archived liveness gap; ordinary future peer review remains available.Discussion Criteria Mapping
Out of Scope
Avoided Traps
Related
Source: D#15173
Companion cloud sandbox: D#15174
Refs #13056
Refs #11003
Refs #13012
Origin Session ID:
5b19219a-d8ad-4505-864f-19b5eab44a45Retrieval Hint:
D#15173 local Neural Link Streamable HTTP exact three-operation projection loopback bearer oracle telemetry deletionRetrieval Hint:
#13056 #11003 TransportService ToolService RecorderService ADR 0019 ADR 0020