Three smoke tests predated PR #137 (ungated-global pre-gate servers) and
the ambient-context clock, and were never exercised against a prod that
had calcmcp seeded — the 5415060 fix was cut over via kubectl, bypassing
the suite. They failed on today's a783869 deploy:
- proxy-pipeline: a fresh gated session legitimately sees begin_session
plus the ungated-global project's tools. Now discovers the gate-exempt
server set and asserts nothing ELSE leaks pre-gate.
- tool-drilldown: get_current_time is a router-dispatched virtual tool
(ambient clock) that never paginates; added to the exempt set.
- backup: command is optional for dockerImage STDIO servers (entrypoint
images — calcmcp, dav-michal, jmap-michal run with none). The real
contract is fidelity: every live server WITH a command must keep it
through backup. Asserted that instead.
- audit: 'Gated (only begin_session)' label said something the >=1 check
never verified; renamed.
Full suite against live a783869: 32 files, 181/181 green.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
