revisão e complementação da documentação do projeto

This commit is contained in:
Marcos Lohmann
2026-09-14 14:54:28 -03:00
parent 868d885cb6
commit f8d9b6cdcd
35 changed files with 767 additions and 8 deletions

View File

@@ -0,0 +1,20 @@
# ADR-002: MCP Gateway as the sole PEP
**Status:** Accepted.
**Source:** this ADR is the canonical record of this decision. For implementation and validation context, see `RI/docs/AS-BUILT.md` and, where applicable, the relevant contract in `RI/docs/interfaces/`.
## Context
Where to apply enforcement.
## Decision
MCP Gateway is the sole PEP; it never delegates the ALLOW/DENY decision to the LLM.
## Alternatives Considered
Distributed enforcement in each MCP Server.
## Consequences
Centralizes EP-05; domain servers (EP-06) do not reimplement authz.