MCP servers from org.opencovenant
Hard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.