Graph Kernel Full Integration Architecture

The Graph Kernel is the **sole admissibility authority** for context retrieval. All paths to `memory_turns` must go through Graph Kernel verification. This document defines the integration architecture across all systems. | Component | Graph Kernel Integration | Status | |-----------|-------------------------|--------| | cc-graph-kernel | Core implementation | ✅ Complete | | cc-agent-service | Python client + hook | ✅ Complete | | cc-agent-sdk | MCP tools (4 tools) | ✅ Complete | | cc-rag-plus-plus | Partial (21 bypass paths) | ⚠️ Needs Migration | | Cloud Agents | GraphKernelHook available | ✅ Complete | **Endpoint**: `https://graph-kernel-xxxxxxxx.run.app` (Cloud Run) **Local**: `http://localhost:8001` | File | Function | Direct Query | Replacement | |------|----------|--------------|-------------| | `mcp/orbit_mcp_server.py` | `orbit_search()` | `.table("memory_turns")` | `SliceEnforcingClient` | | `mcp/orbit_mcp_server.py` | `orbit_context()` | `.table("memory_turns")` | `SliceEnforcingClient` | | `slice/anchor.py` | `resolve_explicit()` | `.table("memory_turns")` | Validate via Graph Kernel | | `slice/anchor.py` | `resolve_from_session()` | `.table("memory_turns")` | Graph Kernel validation | | `ingestion/primitive_enricher.py` | Insert | Direct insert | Add provenance metadata | | `ingestion/prompt_ingester.py` | Insert | Direct insert | Add provenance metadata | | `ingestion/embedder.py` | Update | Metadata update | Graph Kernel enrichment API | | `ml/cognitivetwin_v3/ingest/supabase_extractor.py` | `extract_all_turns()` | Bulk extract | Filter via Graph Kernel | | `retrieval/query.py` | `MemoryRetriever.search()` | Default search | Require explicit mode | | `retrieval/query.py` | `_text_search()` | Fallback search | Add admissibility marking | | `retrieval/query.py` | `get_similar_conversations()` | RPC search | Filter by slice | The Agent SDK provides 4 Graph Kernel tools in `core/cc-agent-sdk/src/tools/graph_kernel.ts`: