mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-06 06:24:12 +00:00
revisão e complementação da documentação do projeto
This commit is contained in:
20
docs/adr/ADR-002-enforcement-at-the-gateway.en-us.md
Normal file
20
docs/adr/ADR-002-enforcement-at-the-gateway.en-us.md
Normal file
@@ -0,0 +1,20 @@
|
||||
# ADR-002: MCP Gateway as the sole PEP
|
||||
|
||||
**Status:** Accepted.
|
||||
**Source:** this ADR is the canonical record of this decision. For implementation and validation context, see `RI/docs/AS-BUILT.md` and, where applicable, the relevant contract in `RI/docs/interfaces/`.
|
||||
|
||||
## Context
|
||||
|
||||
Where to apply enforcement.
|
||||
|
||||
## Decision
|
||||
|
||||
MCP Gateway is the sole PEP; it never delegates the ALLOW/DENY decision to the LLM.
|
||||
|
||||
## Alternatives Considered
|
||||
|
||||
Distributed enforcement in each MCP Server.
|
||||
|
||||
## Consequences
|
||||
|
||||
Centralizes EP-05; domain servers (EP-06) do not reimplement authz.
|
||||
Reference in New Issue
Block a user