The TEST-only MCP goal authorizes this development/test delivery. App-Firewall PR 6740 targets test: dev integration would deploy DEV outside this scope. No DEV or production runtime deployment was dispatched.
Azure pipeline 347 run 26364 succeeded at 2026-10-07T05:32:21Z for 52ee0331e8bc603c8d22eb0e9f5cb50968320e76. Its merged tree equals the reviewed source. The apply receipt reports gateway ConfigMap/Deployment/Ingress updated, thewell-mcp-gateway-peers headless Service created in d03849-skan-ag-test, existing gateway Service/ServiceAccount unchanged, and successful rollout. TEST apply retains resources without pruning. No new storage, identity or permissions were granted.
Reviewed nginx configuration SHA-256: 060a1296cc34944fe8349b00049c0cd1a39f12f1d230376c7317fa5d625a567f. MCP and discovery paths route to the backend and overwrite the HTTPS assertion. MCP logs exclude credential-bearing URI/query/headers/body; protocol error logs are suppressed. A config checksum reloads the existing gateway; its image is pinned to the previously observed digest. Website routes, source allowlists and request bounds are preserved.
TLS-verified public checks: metadata 200; protected-resource discovery redirects to /api/mcp/metadata; HTTP redirects to HTTPS port 443; website 200; anonymous/invalid bearer MCP initialization 401 with the resource-metadata challenge; untrusted Origin 403. Native authorization discovery returns 404 while sign-in remains disabled.
Read-only acceptance run 26365 succeeded at 2026-10-07T05:41:08Z for observer source 8c0fd2fcc72bff502bb64439ec144c82ab7ed749. The actual mounted nginx hash matches the reviewed configuration; the new gateway pod is the correlated backend peer; backend DNS resolves exactly to that ready gateway pod. Headless Service/EndpointSlice ownership and DNS were stable before and after the probe. No runtime mutation was performed. Source checks passed: 18 gateway checks, real nginx syntax and six HTTP routing/header checks, plus synthetic callback credential absence from logs. Worker fixtures used substituted DNS; live gateway acceptance is established by run 26365. Native-client acceptance remains open.
Native OAuth source remains unintegrated and disabled; specific TEST Entra identity/consent approval is pending. Native ChatGPT/Codex and restricted-role acceptance remain open. Statistics is now deployed and live-verified in TEST; historical artifacts have not been deleted.
Recover through a reviewed TEST source revision restoring prior gateway configuration while retaining the no-prune guard. Do not roll back using a legacy prune-enabled TEST pipeline revision.
Frontend pipeline 395 run 26366 succeeded at 2026-10-07T05:58:23Z for reviewed DEV revision 08dbf33c0342788010cb22bfcb24c5ba6ffec3da (PR 6741). DEV integration used skip-ci; only TEST was deployed. The serving release is 08dbf33c0342788010cb22bfcb24c5ba6ffec3da-26366; the deployment moved from generation 109 to 110, with rollback not needed and unchanged backend UID/resource version at switch. Public TLS version, runtime-config hash and Statistics page checks passed. Runtime-config SHA-256: 270a65bffa3967876645086eb70917c1374fd254eccb4a98b3fd1a3055a429d5.
The signed-in user saw 18 MCP actions. A fresh permitted pool read returned 200 with 17 pools, and Refresh raised the total to 19; every operation/outcome/count row matched that user's usage API. Desktop and narrow light/dark checks passed for controls and content. At 390 pixels the decorative panel border extends six pixels beyond the viewport; controls, totals and table content fit. This cosmetic issue remains a bounded follow-up. These checks do not prove restricted-user or native-client acceptance.
The reviewed retention path preserves every existing release copy and recovery snapshot, including legacy snapshots with incomplete prior references. Admission is bounded to 11 release directories, ten snapshots and the existing 512 MiB free reserve; no physical storage expansion or new permission was granted. Run 26366 admitted the candidate with ten existing directories, nine snapshots and 3,002,368 KiB available. Its receipt records zero planned or executed deletions and protects all ten historical releases. New snapshot: thewell-frontend-recovery-26366. Specific deletion approval remains absent. Read-only pipeline 394 run 26367 succeeded at 2026-10-07T06:18:53Z for observer source e51c3ae85f86a38d777ca4c382b91a74aa580bc9. Its final observation confirms all ten historical directory names and sizes match the pre-deployment inventory, and all nine existing recovery snapshot UIDs remain identical. The candidate and new immutable snapshot are present, giving eleven directories and ten snapshots. Free space is 2,994,176 KiB, above the existing 512 MiB reserve. Serving source, app, config, runtime and plugin identities match run 26366; the ready serving pod and endpoint ownership were stable across the observation. Final observed frontend generation is 111 (the switch receipt recorded applied generation 110). Gateway mounted configuration, peer and backend DNS acceptance also passed again. No runtime mutation or secret-data output occurred. This closes frontend delivery and retained-inventory acceptance; no repeated increase of these bounds is authorized by this record.
Recovery retains the previous serving release and all historical artifacts. Use the reviewed TEST preservation path and a pinned valid release; do not enable legacy cleanup without specific approval.
Azure TEST pipeline 394 run 26368 succeeded for source 2c82d633bbeaf2edebd5d3c36c04b5ff0c771989; serving release selected by delivery is 2c82d633bbeaf2edebd5d3c36c04b5ff0c771989-26368, generation 763. DEV PR 6742 and TEST PR 6743 preserve the reviewed source tree. App tree SHA-256: 36baba957594fae898dd012e1cbea87afc866983a45db23fd5dbe363449fcfeb; runtime configuration SHA-256: 6f6b83996aa6a11b6b5b97e0ac084a37328316cb25ef36db0f0c25a11bfe5991. Delivery confirms isolated TEST database and active Entra identity/configuration matches; rollback was not needed. Independent post-deployment serving/ownership observation is still pending.
The installed MCP SDK can emit complete protocol results at Trace level. The former category-only filter was overridden by the database provider's Trace rule. The shared logging protection now suppresses all ModelContextProtocol diagnostics for all providers, including the explicit database-provider override. Application metadata and attributed MCP action audits remain available. Seventeen worker MCP checks passed, including an isolated real-SDK positive control reproducing private result capture and its protected counterpart. No real private-data leakage is claimed and live Trace capture was not enabled.
The delivery route no longer hardcodes permission to delete retained rollback artifacts. Preservation-only admission rechecks every retained copy's name/size and each snapshot's identity, and stops at the existing fourteen-directory/fourteen-snapshot limits and 512 MiB reserve. The run 26368 admission receipt confirms ten retained directories and ten snapshots before and after admission, zero planned/deleted artifacts, and 1,044,480 KiB available before copying the new release. Five worker preservation checks and shell syntax verification passed. No capacity or permission expansion occurred.
Live delegated-user acceptance after delivery read 17 pools, a 2,745-character document chunk identical to the website, and developer log settings. All three action IDs are successful HTTP 200 audit rows. Statistics Refresh advanced the user's total from 19 to 22; all thirteen operation/outcome/count rows match the personal usage API, with one historical rejection and zero pending/uncertain actions. Public metadata returns 200 and unauthenticated MCP returns 401. Native authorization-server discovery remains 404: native ChatGPT/Codex OAuth is disabled pending the TEST Entra approval and remaining client/role/file/default-document-source acceptance.
The developer and user connection guides are integrated in Documentation DEV commit f2cb8a6. Confluence projection is not verified because its configured publisher actor, target and credentials have not been established. Earlier gateway/frontend records and historical rollback artifacts remain preserved.
Read-only Azure run 26370 succeeded using disabled observer source c0472e4132a6ae789432a971858ee0935c42017c. The gateway mounted hash still matches the approved configuration, and the direct peer and backend DNS correlate to the same ready gateway. Every previously verified frontend release name/size and recovery-snapshot UID is unchanged: eleven copies, ten snapshots, 2,994,176 KiB available. The specialized observer does not include backend release hashes; its receipt was not treated as proof of those fields.
Complementary read-only run 26371 succeeded for the existing TEST observer at source 2c82d633bbeaf2edebd5d3c36c04b5ff0c771989. Its backend source, release, app tree and effective runtime configuration hashes all match delivery run 26368's receipt. Deployment UID is preserved; the ready Pod and endpoint ownership match the gateway probe, with zero container restarts. Observed generation is 764; delivery recorded applied generation 763. The final backend inventory contains eleven release directories and eleven immutable recovery snapshots, including the newly delivered release and snapshot. Available space is 937,984 KiB, above the unchanged 512 MiB reserve. Admission's ten/ten counts preceded creation of the new release/snapshot; no retained artifact was deleted.
The TEST logging/preservation hotfix is accepted: exact deployment/runtime evidence, live knowledge/developer reads, three attributable successful audit rows, Statistics 19-to-22 Refresh matching all personal usage rows, and complementary serving/gateway/retention observations. Both connection guides are integrated in Documentation DEV commit eece4c760bb38f75402e2faecd1a68f7a9533e0d. Full Wiki metadata and publication state are preserved.
The personal-agent goal remains incomplete. Native OAuth is still disabled; the new TEST Entra registrations/delegated consent approval is pending. Actual ChatGPT/Codex sign-in, restricted-user denial, native file transport and the default document source remain unaccepted. Confluence publication is unverified. No production activation, identity/permission expansion or paid fallback was applied. The completed 302,284 KiB SDK fixture workspace was removed after all source and successful/failed test receipts were preserved; the unfinished native worker workspace remains bounded at 2 GiB with a dated owner/retention marker.