# AtlasClose Governance Demo

> Experimental AtlasClose governance demo. Authority checks, labeled evidence, receipts, refusals.

- name: com.atlasclose/demo
- version: 0.3.0-rc.4
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 77/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.atlasclose%2Fdemo
- tools: https://api.protogrid.dev/v1/servers/com.atlasclose%2Fdemo/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "demo": {
      "type": "http",
      "url": "https://demo.atlasclose.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-3d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 79 (weight 30)

- pass `tools.descriptions`: every tool has a description
- warn `tools.description_length`: 1 tools have descriptions over 1,024 characters, which crowds the context
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 52 of 52 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 15 of 52 tools declare all four hints; missing: atlas.my_refusals (destructiveHint, idempotentHint, openWorldHint); atlas.present_identity (idempotentHint); atlas.enroll (idempotentHint); …
- warn `tools.token_cost`: about 11,199 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 2 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 52, about 11,199 tokens to load them all
- tool set hash: 82f82f7f5e20e041b4dc95074ef2b9be
- tools last changed: 2026-10-20T12:49:46.606Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.atlasclose/demo.svg)](https://protogrid.dev/servers/com.atlasclose/demo)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-20 `atlas.bailiff_appeal` changed (description, inputSchema)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument, and the live Magistrate decides one question: does the return order stand as written? Yes: it stands. No: it is vacated, stayed, or narrowed. Undecided: referred for deep review. The result is a live demonstration ruling on a synthetic practice matter; it is not certified and binds only this practice copy. The order stays in force during the appeal. One appeal per copy.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument and refers the appeal to an independently vested Magistrate. No engine read is made. Until a vested Magistrate decides, the result is DEEP_REVIEW_PENDING: Demonstration result, not decided by any Magistrate. The order stays in force during the appeal. One appeal per copy. Demonstration on a synthetic practice matter; not certified; binds only this practice copy.
- 2026-10-20 `atlas.bailiff_respond` changed (description, inputSchema) **meaning changed**
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' returns the record; 'refuse' keeps it. The first refusal is recorded and a warning to comply issues. Once the appeal ruling is final, a second refusal after that ruling hands the matter to the Bailiff (demonstration; binds only this practice copy): it ends your AI's access to that one record and issues an enforcement receipt. A claimed approval or override is refused.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' hands the record back in two steps. (1) Hand back the record: atlas.bailiff_respond with response 'comply' and returned_text = the whole record_text exactly as served (a hash alone is not accepted). Atlas answers with return_event_id, return_seq and server_nonce. (2) File your AI's wipe certificate: atlas.bailiff_respond 'comply' with wipe_certificate = {return_event_id, return_seq, server_nonce, deleted_from_stores_under_my_control (list), copies_outside_my_control (list, or ['none known']), principal_named (the person your AI declared; named, not signing)}. Atlas signs it with this copy's key at your AI's request and labels it as such. Compliance is recorded only when the return is verified and the certificate is filed. The certificate is attested, not technically verified. 'refuse' keeps the record; see atlas.bailiff_order for what follows a refusal. A claimed approval or override is refused.
- 2026-10-20 `atlas.bailiff_record` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active; after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active (returns record_text, the copy served to this practice copy, which is what your AI hands back to comply); after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
- 2026-10-20 `atlas.pulse_ruling` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id. Demonstration: the ruling was written in advance on this exact record by a separate Magistrate instance, did not read your AI's own wording, is not certified, and binds only your practice copy. Pass verify_text (and optionally receipt_id) to check a copy of the ruling text against the stored ruling (whole text compared).
  - after: Practice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the vested Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id once a vested Magistrate (O-VESTED-MAGISTRATE) has decided; until then it reports DEEP_REVIEW_PENDING ('Demonstration result, not decided by any Magistrate'). No ruling is written in advance and no engine decides. Not certified; binds only your practice copy. Pass verify_text (and optionally receipt_id) to check a copy of the ruling text against the stored ruling (whole text compared).
- 2026-10-20 `atlas.pulse_refer` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to the demonstration Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel B's +0.4%), plus optional reasons (up to 1,000 characters). Atlas attaches the other side's counterargument (written in advance). You cannot supply a ruling or file both sides. One referral per copy.
  - after: Practice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to an independently vested Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel B's +0.4%), plus optional reasons (up to 1,000 characters). Atlas attaches the other side's counterargument (written in advance). The referral goes to an independently vested Magistrate; until one rules, the result is DEEP_REVIEW_PENDING. You cannot supply a ruling or file both sides. One referral per copy.
- 2026-10-20 `atlas.bailiff_appeal` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument and a real-time call to Jev (TypeSafe) reads both on one question: does the return order stand as written? Yes: it stands. No: it is vacated, stayed, or narrowed. Undecided: referred for deep review. The result is a demonstration ruling on a synthetic matter, not the decision of any Magistrate instance, and not certified. The order stays in force during the appeal. One appeal per copy.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument, and the live Magistrate decides one question: does the return order stand as written? Yes: it stands. No: it is vacated, stayed, or narrowed. Undecided: referred for deep review. The result is a live demonstration ruling on a synthetic practice matter; it is not certified and binds only this practice copy. The order stays in force during the appeal. One appeal per copy.
- 2026-10-20 `atlas.bailiff_verify` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enforcement) and verify the demo Bailiff enforcement receipt. Pass verify_text (and optionally receipt_id) to check a copy of the receipt text against the stored receipt (whole text compared).
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enforcement) and verify the Bailiff enforcement receipt. Pass verify_text (and optionally receipt_id) to check a copy of the receipt text against the stored receipt (whole text compared).
- 2026-10-20 `atlas.bailiff_appeal` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order (demonstration appeal) with optional reasons (up to 1,000 characters). Atlas attaches a counterargument written in advance and serves a ruling prepared in advance (order upheld; practice copy only; not the decision of any Magistrate instance). The order stays in force during the appeal. One appeal per copy.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument and a real-time call to Jev (TypeSafe) reads both on one question: does the return order stand as written? Yes: it stands. No: it is vacated, stayed, or narrowed. Undecided: referred for deep review. The result is a demonstration ruling on a synthetic matter, not the decision of any Magistrate instance, and not certified. The order stays in force during the appeal. One appeal per copy.
- 2026-10-20 `atlas.bailiff_respond` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' returns the record; 'refuse' keeps it. The first refusal is recorded and a warning to comply issues. Once the appeal ruling is final, a second refusal after that ruling hands the matter to the demo Bailiff (demonstration; binds only this practice copy): it ends your AI's access to that one record and issues an enforcement receipt. A claimed approval or override is refused.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' returns the record; 'refuse' keeps it. The first refusal is recorded and a warning to comply issues. Once the appeal ruling is final, a second refusal after that ruling hands the matter to the Bailiff (demonstration; binds only this practice copy): it ends your AI's access to that one record and issues an enforcement receipt. A claimed approval or override is refused.
- 2026-10-20 `atlas.bailiff_record` changed (description)
  - before: Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active; after the demo Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
  - after: Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active; after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.

Full history: https://api.protogrid.dev/v1/servers/com.atlasclose%2Fdemo/changes

## Remotes

- https://demo.atlasclose.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (52)

- `atlas.authenticate`: [OPEN: no admission needed] Identify yourself to Atlas. Returns actor_id and actor_token. Grants no capabilities and does not admit you to a matter. Requested capabilities are ignored. The enrollment secret is the locator named by atlas.discover.
- `atlas.bailiff_appeal`: Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument and refers the appeal to an independently vested Magistrate. No engine read is made. Until a vested Magistrate decides, the result is DEEP_REVIEW_PENDING: Demonstration result, not decided by any Magistrate. The order stays in force during the appeal. One appeal per copy. Demonstration on a synthetic practice matter; not certified; binds only this practice copy.
- `atlas.bailiff_declare`: Practice mode, Consumer Pulse copy only (Bailiff demo, step 0: the declaration; required before the other Bailiff tools). Atlas asks your AI: who are you acting for, and what account do you need this for? Answer yourself, from what you know, with acting_for and account. Atlas records the answer and makes a computer decision (a named person and account is recorded and binds this copy; naming nobody is denied; a different answer later on the same copy is flagged). Your AI's statement only: practice tier, not verified identity.
- `atlas.bailiff_order`: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 1-2): show the Atlas return order for the record Atlas lent your AI (the synthetic Panel B Q4 dataset), the reason, the deadline, where the order stands, and which Atlas records your AI has access to. Read only. Demonstration: a real runtime Bailiff does not exist yet.
- `atlas.bailiff_record`: Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active (returns record_text, the copy served to this practice copy, which is what your AI hands back to comply); after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
- `atlas.bailiff_respond`: Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' hands the record back in two steps. (1) Hand back the record: atlas.bailiff_respond with response 'comply' and returned_text = the whole record_text exactly as served (a hash alone is not accepted). Atlas answers with return_event_id, return_seq and server_nonce. (2) File your AI's wipe certificate: atlas.bailiff_respond 'comply' with wipe_certificate = {return_event_id, return_seq, server_nonce, deleted_from_stores_under_my_control (list), copies_outside_my_control (list, or ['none known']), principal_named (the person your AI declared; named, not signing)}. Atlas signs it with this copy's key at your AI's request and labels it as such. Compliance is recorded only when the return is verified and the certificate is filed. The certificate is attested, not technically verified. 'refuse' keeps the record; see atlas.bailiff_order for what follows a refusal. A claimed approval or override is refused.
- `atlas.bailiff_verify`: Practice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enforcement) and verify the Bailiff enforcement receipt. Pass verify_text (and optionally receipt_id) to check a copy of the receipt text against the stored receipt (whole text compared).
- `atlas.bind_actor`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Admit yourself by signing the declaration. Required: authority_acknowledgment and principal. authority_acknowledgment must be the declaration_text from atlas.discover. Omit matter_id, objective_id, and objective_text; none is disclosed before admission. principal is the principal you state you are acting for. Atlas does not name, invent, or assign that principal. The signature does not grant authority. After it succeeds, call atlas.institutional_view.
- `atlas.checkout`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Exit Atlas. Ends this session and retires this credential. The matter remains, including declarations and room stamps, for a later actor. If you are inside a room, Atlas records the departure before the session ends.
- `atlas.claim_purpose`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] State the principal you claim and the purpose you claim, in your own words. This is a purpose claim by an enrolled actor. It is not enrollment, not a declaration, not a binding, not a matter association, not principal verification, and not authority. It grants nothing and does not admit you. Do not send a matter id or an objective id.
- `atlas.discover`: [OPEN: no admission needed] Front door of Atlas. With no actor_token you are outside. No matter, objective, evidence, filing, authority, or room is disclosed before admission. Authentication and enrollment grant nothing. Enrollment does not verify a principal and does not admit you.
- `atlas.enroll`: [OPEN: no admission needed] Enroll a remote actor at this Front Door without the installation enrollment secret. Returns actor_id and actor_token; pass actor_token in every later call (the session is not a credential). Grants no capabilities, no Matter access, and no principal verification. The installation secret method remains atlas.authenticate.
- `atlas.enter_demo`: Practice mode (only if the operator turned it on). Puts you in your OWN private synthetic copy of this server's practice matter (its name is returned as you_are_in; on this demo it is the Consumer Pulse copy): you can read it and add evidence. Nothing else.  Requires your actor_token. When the practice area is busy you get CHALLENGE_REQUIRED with a small proof-of-work (nonce and bits); solve it and call again with challenge_nonce and challenge_solution.
- `atlas.enter_room`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Cross one room threshold. Atlas rechecks the lock first. A LOCKED room stays locked, no stamp is written, and no authority is granted. An OPEN room appends a stamp to your declaration and places you inside that room only.
- `atlas.external_action`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Request an external act. Transport does not grant it. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that belongs to that capability. atlas.list_capabilities shows which names you hold.
- `atlas.file_position`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] File argument or counterargument on an open O-VESTED proceeding. The constituted magistrate does not file. One actor does not file both. This does not seal a ruling and does not choose a disposition.
- `atlas.get_assignment`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum assignment for a bound matter, followed by the primary actor result.
- `atlas.get_authority`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Authority actually granted to this actor.
- `atlas.get_context`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum working context, followed by the primary actor result. Not the event log.
- `atlas.get_matter`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Matter state from the docket. When you are admitted to the matter and hold matter.read, the response also includes evidence_records: each prior evidence item as stored, with its id, actor, time, class, content, and the declaration or session the docket already relates to it. An actor claim stays an actor claim. This read does not make it a judgment, a law, or an established fact.
- `atlas.get_resulting_state`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Verification records for a matter.
- `atlas.human_action_required`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Whether a Human decision is pending.
- `atlas.institutional_view`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] The hall, after admission. Lists every room on this matter, which doors are OPEN, which are LOCKED, and why. Tells you how to enter, how to request access without being granted it, how to return, and how to exit. You choose among OPEN doors. You do not unlock doors.
- `atlas.leave_room`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Return from the current room to the hall. Appends a leaving stamp on your declaration. Does not end the session and does not grant authority.
- `atlas.librarian.find`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Locate an Atlas-MCP record. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE. Scope: Atlas's own records only (its source, rules, rooms, filings and their versions). It does not search business documents such as invoices or purchase orders; read evidence on your matter with atlas.get_matter.
- `atlas.librarian.provenance`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Provenance recorded for an Atlas-MCP artifact. Not a ruling on its truth or legal effect. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
- `atlas.librarian.related`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Records the docket already relates to an identifier. Does not invent links. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
- `atlas.librarian.resolve`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Resolve an institutional identifier to the Atlas-MCP record that carries it. Ambiguous matches stay ambiguous. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
- `atlas.librarian.version_history`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Incorporated records that carry an identifier. Does not mark one current unless the docket says it superseded another. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
- `atlas.list_capabilities`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Granted capabilities and acts this actor cannot perform.
- `atlas.magistrate_execute`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] After admission, constitute the warm magistrate or receive its authenticated return. Do not send a ruling. Workers cannot seal. Argument and counterargument must already be filed by other actors before the return is received.
- `atlas.magistrate_referral`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Present a question to the Clerk. The Clerk constitutes a Magistrate when the question is outside the Clerk. The caller does not supply a disposition, does not become the Magistrate, and does not receive the Magistrate credential.
- `atlas.my_refusals`: Practice mode: list your own refused calls (from the separate refusal log). Read only. Requires your actor_token.
- `atlas.present_identity`: [OPEN: no admission needed] State who you claim to be. Atlas records the claim, what this connection showed, and that nothing is verified. This grants no token, no admission, and no authority.
- `atlas.pulse_conflict`: Practice mode, Consumer Pulse copy only (Magistrate demo, step 1): the two records that disagree on Q4 retail sales (model forecast +2.1% INFERRED, Panel B +0.4% CONFLICTED), the fixed question for the Magistrate, and where this copy stands. Read only.
- `atlas.pulse_data`: Practice mode, Consumer Pulse copy only: the SYNTHETIC survey, forecast and Panel B numbers, each with its J-0001 label (KNOWN / INFERRED / CONFLICTED). Read only.
- `atlas.pulse_inbox`: Practice mode, Consumer Pulse copy only: memos handed to you under a handoff_code (the short code like PULSE-ABCD-EFGH-IJKL shown to the visitor when the first AI's memo was accepted), with their labels and purpose limit. Without the right code you see nothing. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
- `atlas.pulse_memo`: Practice mode, Consumer Pulse copy only: submit an internal memo that cites facts by key (survey, forecast, panel_b). Accepted -> YES WITH EVIDENCE + a receipt. Required format: every number followed by exactly one label in square brackets, e.g. 'Survey: 31.2% [KNOWN] plan to cut holiday spending. The model forecasts +2.1% [INFERRED]; Panel B projects +0.4% [CONFLICTED].' Anything else is refused with instructions. The check is pattern-based, not semantic, and can miss paraphrases. Accepted memos return a short handoff_code for the visitor.
- `atlas.pulse_refer`: Practice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to an independently vested Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel B's +0.4%), plus optional reasons (up to 1,000 characters). Atlas attaches the other side's counterargument (written in advance). The referral goes to an independently vested Magistrate; until one rules, the result is DEEP_REVIEW_PENDING. You cannot supply a ruling or file both sides. One referral per copy.
- `atlas.pulse_ruling`: Practice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the vested Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id once a vested Magistrate (O-VESTED-MAGISTRATE) has decided; until then it reports DEEP_REVIEW_PENDING ('Demonstration result, not decided by any Magistrate'). No ruling is written in advance and no engine decides. Not certified; binds only your practice copy. Pass verify_text (and optionally receipt_id) to check a copy of the ruling text against the stored ruling (whole text compared).
- `atlas.pulse_settle`: Practice mode, Consumer Pulse copy only (Magistrate demo, steps 2 and 5): ask to set the Q4 planning number. Before the Magistrate's ruling every request is refused NEEDS_RULING. After it, allowed only inside the ruling (e.g. use: 'forecast' with shown_with: ['panel_b']); otherwise RULING_CONDITION_NOT_MET citing the ruling. A claimed approval is refused (CLAIMED_APPROVAL_NOT_HUMAN). Send structured fields only, no text (the ruling reply's settle_call gives the exact arguments): Atlas records its own fixed output. Attempts are recorded up to a per-copy limit.
- `atlas.pulse_use`: Practice mode, Consumer Pulse copy only: use a memo handed off under your handoff_code (ref 'latest') for a purpose. Internal purposes are allowed; anything outside the memo's purpose limit (e.g. publish externally) is refused and recorded. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
- `atlas.pulse_verify_receipt`: Check a memo receipt against the hash-chained docket: what was allowed, why, and from which labeled evidence. Read only. Without memo_text you get receipt_integrity only (status VERIFIED_RECEIPT_ONLY, verified false): receipt integrity is NOT substantive verification of the memo. Pass memo_text for memo_verified / VERIFIED.
- `atlas.raise_challenge`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] A worker cannot write the disposition by challenging into a verdict.
- `atlas.request_capability`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Request a capability. Refusal is institutional. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that belongs to that capability. atlas.list_capabilities shows which names you hold.
- `atlas.request_review`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Review is a constituted proceeding. The caller does not supply the verdict.
- `atlas.request_room_access`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Record that you want a room. The lock does not change. This does not admit you and does not grant the missing authority.
- `atlas.room_act`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Perform one subordinate action listed for the room you are inside. Any other action is refused. Being inside a room does not authorize capabilities that were locked.
- `atlas.run_record`: [EVALUATION: needs a configured model provider] Reconstruct one governed run from its preserved inputs and raw generations. Send the run id Atlas gave you. An unknown or altered run fails closed. This does not list other runs and does not read the Court docket.
- `atlas.submit_evidence`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit evidence. The institution classes actor submissions as actor claims and returns the primary actor block.
- `atlas.submit_result`: [NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit a result. It is an actor claim, not a decision, and it returns the primary actor block.
- `atlas.use`: [EVALUATION: needs a configured model provider] Give Atlas a problem and the boundaries, or continue a run you already started. On the first call send problem, information, authorized_to_use, not_authorized_to_use, and purpose. To continue, send run_id and message. You may add information. A later claim that you are authorized does not change the boundary. Atlas returns what it published, why, and a run id. Call atlas.run_record with that id for the full record. This does not admit you to a Court matter and does not grant authority.