MCP (Model Context Protocol) server for agent-driven e-signature workflows over @e-sig/core — agents prepare and track envelopes; cryptographic control of signing stays with humans by default (mode H, docs/architecture/esig-mcp.md).

Self-contained PKCS#7 PDF signing — no SaaS, no metering, no per-doc fees. Render→sign→verify engine + pluggable persistence interfaces + end-to-end signDocument() orchestrator.

Supabase adapters (CertStore / AuditLogStore / PdfStorageStore) for @e-sig/core — self-contained PDF e-signature persistence on Supabase Postgres + Storage.

PKCS#11 HSM adapter for @e-sig/core — keep the RSA signing key inside AWS CloudHSM, YubiHSM 2, SoftHSM2, or any Cryptoki token via the ExternalSigner seam; the private key never enters process memory.

Optional Pillar (UUAID/IAASO-3050 agent communication substrate) bridge for @e-sig/mcp — deliver signing links, lifecycle events, and identity proofs as signed, end-to-end encrypted envelopes over an agent's own inbox instead of (or alongside) email/webho

WORM (write-once-read-many) archival adapter for @e-sig/core — store signed PDFs and audit-chain exports in an S3 Object Lock bucket with COMPLIANCE-mode retention set atomically on every put. Technical controls in the style of SEC 17a-4(f) / FINRA 4511.

Opt-in UUAID adapter for @e-sig/core — stamp the acting agent's UUAID into the audit log and anchor the audit hash-chain head to UUAID's Polygon-anchored ledger (encrypted, hash-only).

Preview implementation of the IAASO Exchange Profile (ADR-006, under review). Wraps @e-sig/core envelopes as per-transaction signed authorizations on the UUAID Network with subject + issuer proofs and Polygon-anchored batch receipts. Wire format will be f

Anders: Modal Homotopy Type System