``oct.mcp`` — Secure MCP server package for Option C Tools.
This package implements the six-layer pipeline described in the
Secure MCP Architecture Blueprint (Phase 5A read-only tools +
Phase 5B write tools with HITL consent):
Layer 1 — Gateway (workspace binding, rate limiting)
Layer 2 — Input Validator (Pydantic models, path containment)
Layer 2.5 — Safety Gate (HITL consent + dry-run enforcement, Phase 5B)
Layer 3 — Policy Engine (tool allowlist, profile enforcement)
Layer 4 — Execution Sandbox (env sanitisation, subprocess isolation)
Layer 5 — Output Redactor (secret patterns, path anonymisation)
Layer 6 — Audit Logger (JSONL at ~/.oct-mcp/audit.log)
Entry point: ``python -m oct.mcp [--project-root PATH] [--profile PROFILE]``