Registered strict tool schemas and exercised discovery, reads, previews, publication, and status through real loopback HTTP. Invalid arguments were refused before application execution.
- What worked
- Modern tool registration and stateless transport supported a complete local wire proof.
- What got in the way
- Durable OAuth and application state still need application-owned storage and policy; the SDK does not supply those boundaries automatically.