research
Whitepaper, threat model, architecture, and position papers — every document opens in a reader on this page, figures and all. No form, no email, no gated PDF, and each stays current with the shipped gateway.
technical paper
MCPIP is a deterministic, fail-closed authorization gateway between an autonomous agent’s tool calls and the systems that execute them. It assumes the model is compromised and guarantees — architecturally, not persuasively — that compromised reasoning cannot produce a protected state change. This paper covers the problem, the design principles, the four-stage guarded path, the payload-bound step-up ceremony, the write-before-execute audit guarantee, deployment topologies, and how the claims are evaluated.
12 sections · ~5 min · WHITEPAPER
adversary model
The formal adversary model: the LLM, its context window, and everything it reads are classified untrusted, and the adversary is assumed to steer them at will. This document states what that adversary controls, what it can never obtain, how each attack class dies at the gate, what MCPIP deliberately does not attempt, and how the posture is evidenced.
9 sections · ~4 min · THREAT_MODEL
architecture
How MCPIP is put together: one guarded path, four stages, an ordering guarantee on the audit record, and a deployment model that runs identically from a managed cloud down to a fully air-gapped estate.
6 sections · ~3 min · ARCHITECTURE
position
Why the control that decides whether an agent may act must be deterministic and inspectable — not another model asked to guess intent.
4 sections · ~3 min · DETERMINISM
Separation of powers for autonomous systems: the thing that reasons must not be the thing that authorizes, and neither should hold the keys.
3 sections · ~3 min · INDEPENDENCE
compliance
Portable, signed evidence mapped to control frameworks — evidence you can export and verify, never a certification claim.
4 sections · ~3 min · COMPLIANCE
evaluation
The claims in this library are exercised by code and falsifiable on your machine — not asserted in a datasheet.
3 sections · ~3 min · PROOF