Expose and verify the gateway-safe MCP workflow

[yia-mw-agent]

Parent

• PRD: Dedicated FAVA Data Repo MCP Tunnel for ChatGPT #67

What to build

Expose a conservative MCP tool workflow for the dedicated ChatGPT gateway and verify it end to end through MCP behavior. ChatGPT should be able to discover scopes, recall promoted thoughts, retrieve a thought, save a draft, propose truth through the Trust Gate, and sync shared truth. Admin or destructive tools should not be available by default in this gateway profile.

This slice should preserve one shared semantic tool registry across normal stdio and gateway mode so tool schemas and behavior do not drift. Any gateway-specific filtering should be explicit, tested, and visible through MCP list-tools behavior.

Acceptance criteria

• Gateway list-tools exposes the ChatGPT-safe workflow needed for scope discovery, recall, thought retrieval, draft save, truth proposal, and sync.
• Existing stdio list-tools behavior remains unchanged outside gateway mode.
• Gateway mode blocks admin/destructive operations such as rollback-style or forget-style actions unless separately enabled by explicit configuration.
• Gateway calls require explicit trail_name where scoped tools need it, and error clearly when it is missing.
• End-to-end MCP tests cover list-tools, recall, save draft, propose truth, and sync through the gateway runtime or profile.
• Tests cover missing or invalid startup configuration and blocked admin/destructive tool access.

Blocked by

• Add a dedicated ChatGPT gateway runtime #64