T8/P1: MCP tool boundary — serve exactly the K1 whitelist

[mzargham]

Implements spec §8.1/§10-P1 on branch feat/t8-concept-definition-app.

Traceability:

• REQ-K1.1 — cds.mcp serves only the whitelist → tests/unit/test_mcp_whitelist.py::test_manifest_equals_whitelist
• REQ-K1.2 — no code/file/net/shell tool exists → tests/unit/test_mcp_whitelist.py::test_no_exec_tool_present
• Acceptance: the whitelisted tools drive a full authoring session → tests/unit/test_mcp_tools.py
• Posture: every write tool produces candidates only; cds_commit refuses until P2 (K2)

Spec: docs/architecture/cds-web-app.md §8.1 (whitelist), §10 P1 (acceptance gate).

Commits reference this issue with Refs: footers. Closes only when feat/t8-concept-definition-app merges to main.

[mzargham]

P1 progress: e7e2403 (registry + read/preview tools), e3adde3 (candidate write + ledger tools), 6ef2325 (spec amendment: six-component decomposition C1–C6, §8.3 contract seams). Next: cds_waive/cds_commit + manifest → whitelist tests green.

[mzargham]

P1 Task 4 landed in d5bb2b0: cds_waive (refuses any waiver selecting a live T1; append-only deterministic waivers.ttl) + gated cds_commit stub (PermissionError until P2's K2 gate) + server.list_tools() drift guard. REQ-K1.1/K1.2 tests GREEN (tests/unit/test_mcp_whitelist.py). Full suite: 188 passed; remaining red = P2/P3 scope only.

[mzargham]

P1 COMPLETE for the MCP boundary (issue stays open until feat/t8→main). Commits: e7e2403, e3adde3, d5bb2b0, d3afb9a. Evidence: test_mcp_whitelist.py (REQ-K1.1/K1.2) GREEN; full authoring session via tools only (test_mcp_tools.py) GREEN; MCP server serves exactly the 15-tool whitelist (test_mcp_server_entry.py, mcp SDK 2.0). Suite: 211 passed; red = P2/P3 scope only.