AuthorizationService and purpose validation, built on the InvestigationContext type core already carries. Empty until task 03.

The MCP tool surface. Sees orchestration only, never a connector.

The one controlled path from a pseudonym back to a subject id: authenticated, purpose-bound, audited, with optional four-eyes approval. A library with no transport; never reachable from an MCP tool.