Back to the build log

till serve, and the socket we admit to

`till serve` now binds a local HTTP host that serves the MCP endpoint over StreamableHTTP alongside the Studio. One process, one socket, one guard that rejects anything not arriving from localhost.

This is the detail that made us rewrite a marketing line. The comfortable version of the story would have denied that any socket is opened at all, and it would have been false: the whole point of an agent-native ledger is that an agent can reach it, and reaching it means a listener. The honest version is that TILL creates no outbound connection, and the listener it does open is bound to localhost behind a guard.

The audience for that page is the audience that runs `lsof`. They would have found the listener in a minute, and then nothing else on the page would have been worth reading.