Reconciliation Report schema
{
"manifest_version": 1,
"status": "rejected",
"discovery_ok": true,
"diff": [
{
"tool_ref": "mcp://accounts.internal/read_account",
"field": "data_classes",
"declared": ["account.read", "account.write"],
"discovered": ["account.read"],
"code": "DECLARED_EXCEEDS_DISCOVERED",
"remedy": "Remove account.write from this tool's data_classes, or confirm the tool actually exposes it."
}
]
}
Diff codes
| Code | Hard (rejects) | Meaning |
|---|---|---|
UNKNOWN_TOOL | Yes | Declared a tool ref discovery never advertised |
DECLARED_EXCEEDS_DISCOVERED | Yes | Claimed a data class the tool doesn't expose |
DATA_CLASS_CONFLICT | Yes | A privileged tool conflicts with its declared classification |
DISCOVERY_UNAVAILABLE | No | The tool's discovery endpoint didn't respond — recoverable with override.reason |
Every diff entry names the exact tool_ref and a non-empty remedy — never a generic "manifest
invalid" with no actionable next step.