How MCPG is built — a thin protocol-authority host, an operator-defined backend layer, and a plugin system that loads every cross-cutting concern across a stable binary boundary.

Every tool call flows through one lifecycle — who is calling (access), are they allowed (policy), does a human need to sign off (approvals), and what gets recorded (audit). One umbrella, fail-closed by default.