This example shows the governance seam for an MCP-style tool call.
It does not require the MCP SDK to run. The reviewPlannedToolCall handler is transport-neutral so it can be adapted to any MCP server implementation.
node src/server.js --smoke- A client asks to run a tool.
- The server builds an action envelope from the tool name and input.
- A mock reviewer issues an approval lease for read-only actions.
- The tool executes only if the lease is valid.
- The server records an outcome receipt and proof bundle.
Production OSuite users can replace the mock reviewer with osuite.review(...) or an OSuite MCP connector.