[adrianwebb]

Outcome

Adopt the reviewed coordinator SDK catalog in the API:75tools/35resources, canonical workday plan/start inputs, governed team-profile authoring, and coordinator detail/audit reads. MCP protected-resource discovery advertises only configured scopes used by its exposed operations; general API metadata retains its own scopes.

Work authority

• Work item / Issue: Complete accounting transition observations for strict Agent acceptance #553 and Continue coached Atlas team delivery and persistent agent improvements from #428 sdk#429.
• Proposal / decision: N/A — owner-directed broken MCP boundary repair before real portfolio execution resumes.
• Assignment / checkpoint: Native MCP reads/renewal work; catalog adoption is needed before native team/proposal/workday mutations.
• Actor: Codex integrator.
• Human authority: adrianwebb directed supported MCP base operations and small slices, with no one-off client wrappers.
• Agent / capacity provider: External Codex; no new TreeSeed assignment.
• Exact base ref: staging 41e51cd
• Exact head ref: codex/coordinator-catalog553 dda08d5

Contributor mode:

• Agent-authored under human authority

Plan

Merge #591 first. Pin SDK protected staging3be2ed3324cfddf5405e3ff0303a11f561885e1b (#435–438 merged), retain exact Actions artifact installation, and exercise native MCP through the shared backend before resuming portfolio work.

Changes and commits

a1ff708 updates mutation-header coverage to governed profile editing because project administration is intentionally excluded from MCP.08514926 derives MCP discovery scopes from the same resolved operation registry and retains signed confirmation coverage using a coordinator workday operation. dda08d5 updates the dependency, lock and exact SDK artifact installer together. Ancestor native protocol changes belong to #591.

Verification

• SDK Complete governed external library publication without promoting divergent local staging #435–438 required checks pass and are merged; final protected source3be2ed3324cfddf5405e3ff0303a11f561885e1b has the identical source tree to reviewed head998dedc5e90fff09b4131f8ae76b9531d6271261.
• With that locally packed candidate, three MCP/Identity files pass19/19 (all declared tool schemas compile; missing/conflicting/forbidden headers and stale versions remain denied). Two protocol/workday-authority files pass24/24, including signed multi-round confirmation.
• Strict declaration build, file length, architecture and diff checks pass.
• Generic authoring request/query shapes remain a later schema gap. Exact merged-SDK Actions artifact installation, required consumer Actions, live catalog read-back and full native workflow proof are pending. No formal acceptance or simulated release pass claimed.
• I ran the narrowest relevant package verification and documented any checks that could not be run.

Risk and rollback

Withdraws raw custody/administration from MCP while adding governed coordinator tools. REST and CLI handlers remain shared. MCP discovery changes only its advertised scope subset and preserves resource/issuer authority. Revert this PR through normal delivery to restore the prior dependency/catalog; preserve retained products and credentials. Do not roll back successful scope policy by granting offline/admin access.

Completion summary

Reviewed SDK slices are ready for consumer adoption. Portfolio execution remains paused until the native MCP workflow proof; existing real API containment proposal12b52c0e-05a8-48b6-91cd-c4898bd534aa is the intended work, with group-driven estimates and implementation/review.

AGPL committer authorization

Existing base-owned authenticated GitHub author authorization applies; no allowlist or license changes.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.

Superseded candidate

Consolidated into #595 at 8747a50. This PR's source changes, focused checks and failed observations remain retained. The complete current MCP candidate runs the unchanged required verification/996-step component scene; do not merge this older partial candidate or rerun its redundant campaign. No implementation/product evidence is replaced.