MCP tools over the lictor orchestrator: scan, plan, execute, validate_pack, build_payload, scaffold_exploit, suggest_facts - validated SERVER-side (the pack armor, the corpus guard, the trail). The LLM proposes; augure disposes; lictor executes; the trail records.