Gatekeeper: SEALED. Oracle: APPROVE-WITH-CHANGES (B1-B3 folded in). Phases: unified catalog + mcp_read w/ render.rs content policy; .prompt REPL + staged live tab-completion + mcp_prompt meta-tool; CallToolResult bounding; capability gating via McpRuntime::server_features.