Class McpSkillAccessPolicy

java.lang.Object
com.soklet.McpSkillAccessPolicy

@ThreadSafe public final class McpSkillAccessPolicy extends Object
Immutable policy separating Skills access from discovery.

Discovery checks access first and invokes the discovery evaluator only for accessible registrations. An accessible but undiscoverable registration is omitted from listing but remains eligible for direct access. Direct skill lookup and file reads freshly evaluate access; an earlier list is not a grant. Denial supplies no grant through that registration, rather than vetoing a shared file independently granted through another accessible owner.

Evaluators receive canonical registrations and must support concurrent invocation. The immutable policy does not make captured application state thread-safe. Callback failures and null results fail closed; no partially authorized result is published. Policies retain reference identity and do not inspect evaluator capabilities for equality or diagnostic rendering.

Author:
Mark Allen