READ-ONLY: WHO changed WHAT and WHEN — guest configuration changes and every other
audited action, read back from the PROVE ledger.
Newest first. This is how you answer "who changed this guest" or "what has this caller
done". `matched` counts entries passing your filters, `total` counts the whole ledger,
and `truncated` says so when `limit` cut rows. An entry with no principal returns null
plus a note: the ledger not capturing an identity is a fact about the log, never a claim
that nobody was responsible. This READS the chain; `audit_verify` PROVES it is intact.
Verify the tamper-evident audit ledger's hash chain — PROVE the log is intact.
Pass `expected_head` (the head() value you pinned off-box) to also catch tail
truncation, a forged tail-append, or a full file replacement — a forward walk
alone can't see those. Falls back to PROXIMO_AUDIT_EXPECTED_HEAD when omitted.
Call any Proximo tool by exact name, including ones not in this server's listed tools.
Get the argument shape from proximo_tool_schema first. Same gates as calling it directly:
dry-run PLAN, ledger entry, token ACL. A smaller doorway, not a looser one.
READ-ONLY: the estate map from local Tier-1 memory — NOT a live PVE read. Returns
total/by_kind/by_status/guest_summary counts (trust guest_summary for guest-count questions;
all counting is server-side) plus lean entity rows, stamped {source:'memory', as_of,
age_seconds}: the data is as old as the stamp says. With `since`, also diffs: appeared,
status_changed, and not_seen_since (last observed before the window — a fact, not a claim
the entity is gone). journal=N adds the newest N diagnosis digests ("when did this last
happen") — findings summaries only, never raw diagnostic output. Memory is on by default
(PROXIMO_MEMORY=0 opts out), fed opportunistically by list reads and diagnose/doctor runs,
derived and rebuildable. For live state use pve_list_guests / pve_cluster_resources.
Search Proximo's full tool catalog by keyword.
ESTATE QUESTIONS FIRST: if the question is what exists, how many, what changed, or when something last happened, call proximo_recall instead — it answers from local memory in one call, with no search and no schema lookup, and it stamps how old the answer is. Come here for everything else.
The facade is resident; 924 more tools on this server are searchable but not. Search for what you want ("guest power", "ceph pool", "firewall"), then call proximo_tool_schema on a result to get its arguments, then proximo_read (read-only tools) or proximo_call to run it. All terms must match.
Full description + JSON input schema for one tool found via proximo_find_tools.
READ-ONLY: run a read-only Proximo tool by exact name; refuses anything that can
mutate (use proximo_call for those). Same flow: get the shape from proximo_tool_schema
first.