A minimal reference provider whose one capability is a pure inspection. It exposes read tools only — there is no consequential action and no authorization gate. Execution control does not apply to reads.
Agent tools: list_palettes · check_palette (both read-only).
No authorization, no mutation, no evidence emission.