internal/

Package aitools exposes AgentProvenance's read surface, the inline policy gate, and the context-write surface as AI-callable tools.

Package attest provides capture-time, off-host-verifiable signing for evidence - the difference between an audit log and an audit log a defender can trust after host compromise.

Package dashboard serves a local, read-only web view over the verifiable provenance graph: the runs, their merged timeline, the unified signals/risks, the verify+signature status, and -- the signature view -- the causality DAG (LLM intent -> action -> policy -> risk), which a flat event stream cannot show.

Package mcpserver exposes AgentProvenance's AI tool surface over the Model Context Protocol (MCP, spec revision 2025-06-18) as a stdio JSON-RPC 2.0 server.

Package signals is the unified, graph-attached signal model - the single row type that every observability dimension lands on.