# SHiRE ↔ FlexiForge Tool Contract

FlexiForge is a local deterministic geometry tool. SHiRE may analyse, recommend and prepare a job, but it may not silently approve geometry generation or export.

## Required lifecycle

`REQUEST → SUGGESTIONS → RAY DESIGN APPROVAL → FORGE → VALIDATE → RAY EXPORT APPROVAL → VERIFIED SHiREVAULT EXPORT`

## Local service

- Host: `127.0.0.1`
- Port: `8876` (kept separate from the existing SHiRE Brain service on `8765`)
- Health: `GET /api/health`
- Create guided job: `POST /api/shire/jobs`

## Safety boundaries

- No Blender or BlenderMCP invocation.
- No public network binding by default.
- Geometry forge is blocked without an immutable design approval token.
- SHiREVault export is blocked without validation plus a separate export token.
- Export resolves `/SHiREVault`, verifies it is backed by a non-root mount, verifies write access, and stops rather than falling back locally.
- The canonical ARMOR OS backup destination remains the network drive at `/SHiREVault/Backup/OSBackups`.
