Module access 

Consent per project, as every tool keeps to it (docs/mcp.md, “Per-project access”; the rule itself is the core’s: sioul_core::consent).

Every project is closed to agents until the person opens it (ai = true in sioul-projects.toml); things in no project follow [mcp] outside_projects. A tool that lists leaves out what is closed and says how many things it left out, never which: the agent knows something is there and does not invent it. A tool that reads one thing, or writes into one, refuses a closed one, saying so plainly.

The mail of work and school Microsoft accounts is kept whatever its projects, unless the person opens it ([mcp] work_accounts): Microsoft’s terms count the organisation among whom must allow it (docs/microsoft.md).

Constants

KEPT

What a thing kept from agents is called where its words would be.

OUTSIDE_CLOSED

A new thing in no project, while those are closed to agents.

Functions

allows

Whether a thing reaches the agent, by its address; a message read whole.

allows_mail

Whether a message reaches the agent, its whole text read when its file is known.

closed_project

A project named by the agent, closed to agents.

for_mail

The same for mail alone, lighter: the projects, Sioul’s own ties, and index (the mail’s headers), which comes back with it.

kept

A thing the agent asked for by its address, kept from agents.

kept_accounts

The accounts whose mail is kept from agents whatever its projects, with their mail folders: work and school Microsoft accounts (switched off ones too: their mail stays on disk), unless [mcp] work_accounts opens them.

left_out

What the agent is told when things were left out: how many, never which.

of

What the person opened to agents, and what each thing belongs to, from everything read; mail as the Porch’s checks take it (porch::Gate), so that forged mail claiming a client never reaches an agent through the client’s project. The gate remembers its verdicts for the server’s life.

redact

Tasks and projects as an agent may see them in a plan: the closed ones stay, so that the plan is the person’s, but with nothing of theirs (a title, notes, a place, ties), to be left out wherever they are listed.