The auditable MCP backend for agents — tools as declarative YAML pipelines: event-sourced, replayable, approval-gated.