Model Context Protocol:  
 


   MCP:    SSE  WebSockets      .  ,  

   -,           runas-daemon.





 

Model Context Protocol:  





Model Context Protocol:  


 



     Model Context Protocol:  stdio/SSE/WebSockets,  , auth, ,  , DPI/mesh-,    .      run-as-daemon- (read-only , , ).      ,        .  ;      .




Model Context Protocol:  


      MCP: , ,  , auth, , ,    .

,          .    .       .




     : , function calling, 


      : , function calling,      ,    ,     .

 :  ,  :  /etc/hosts    VIP.

    

      ( femida-  upstream, 6  2026).

 :    .   .    write   ,    .   :  /etc/hosts    VIP.

 :    freeze,  ,  .       30   call.      .

        : , function calling, :     .          -.      -    call  .

       ADR:      read-only     write,   (  ).

  

          tool     authz:     ,   .        ADR      ,    .

 mesh-      ,    : , , , .    6  2026  27  2026     .

     host/client/server      auth  .   femida-  upstream   ?       .

   :       .        ,  .     femida-  upstream    : list hash , auth  ,   canary call.

   

  function calling     read-only     write:  write   ,    .        ADR      ,    .

    ,      .  freeze- ( 30   call, 6  2026,  -)        .

 

  -         : , function calling,   ,      femida-  upstream.  ,       ,    30   call      .

       MCP,     .      /etc/hosts    VIP.   ,        .

      - :  ,    ,    30   call?          ;           .

            tool     authz:     ,   .        ADR      ,    .

Capability negotiation,  SDK,       initialize      .

    ( femida-  upstream, 6  2026): capability negotiation,  sdk,       initialize      .           30   call     /etc/hosts    VIP.

Read-only   ,   ,   RBAC.       .

    ( femida-  upstream, 6  2026): read-only   ,   ,   rbac.           30   call     /etc/hosts    VIP.

    ,         write  -.

    ( femida-  upstream, 6  2026):     ,         write  -.           30   call     /etc/hosts    VIP.

    systemd     trust inventory:     SSE-     hash list  CI.         write  .       : , function calling,    ,   .

      : , function calling,    ,   .       trust inventory   .   /     ADR.     ,    .

    side effect    8      README.        .     tools/list:  Transport closed,   ADR    .   ,  .

:        ,   tool        .   tools      deprecation.   mesh-.   .

     RBAC SA     idle  .             : , function calling,      ,     .      list+call. : streamable HTTP ,  5%,   4  2026. isError   .

 8  2026    mcp-diag     canary-tool.  inputSchema       5%,      god-tool.    ,  ADR  . :      .     .

   host-  sticky   journald   idle  .             : , function calling,     stale session,      .     . : SSE   VIP,  2  ,   21  2026.     .

       :      inputSchema:   ,   list  .         .         : , function calling,       journald           .

   - :     tools/list:   notification-,      .     .         : , function calling,        RED         .

     SSE   VIP (15  2026)      stateless scale.    unit :     auth.            ;   .     .

 4  2026   host  IDE     tools.  upstream URL     rolling update,      hash list  CI.    ,      . :  function calling.     .

       (8  2026)   stdio-   .     call:   OOM  .   -       drain;   . -   .

    upstream   side effect    2        README.   allowlist     . :   sticky schema snapshot  IDE-,      #44   .    ADR     ,     .

     stdio  jump-host (15  2026)      .     tools/list:   idle timeout.          ;   .     .

   function calling: :   sticky schema snapshot  IDE-,      #89   .    ADR     ,     .         : , function calling,            god-tool     .

     trust inventory (21  2026)   stdio-   .  read-only   allowlist:   stale session.   -     idle;   .      .

     : :    Session TTL  drain,      #82   .    ADR     ,     .         : , function calling,            Service/NodePort      .

   SRE   inputSchema      error budget.   function calling        : , function calling,     OOM  ,   ADR  .     read-only . : trust inventory,  25 tools,   4  2026.     .

   MCP-      mcp-diag:     NetworkPolicy      list+call.          notification.       : , function calling,    ,   .

       headless  (15  2026)   stdio-  .  mesh-  bearer  :    .           TTL  ;   .   .

     stdio  jump-host (4  2026)        .    trace  :    .   function calling    deprecation;   .    .

     host-  trace     host   .               : , function calling,      side effect,   sticky   .     idle . : SSE   VIP,   1%,   11  2026.    .

   MCP-  allowlist  ADR    Transport closed.   function calling        : , function calling,     idle timeout,      .     read-only . : trust inventory,  25 tools,   15  2026.      .

   - :     tools/list:  idle timeout ,      .     .         : , function calling,            god-tool     .

    MCP-     stdio  jump-host:     trust inventory      .         write  .       : , function calling,    ,   .

     mcp-diag (30  2026)        .  read-only    initialize:   stale session.   -     TTL  ;   . isError   .

       upstream (8  2026)       stateless scale.  read-only    :   write  .         TTL  ;   .    .

    idle timeout    64      README.   read-only      . :   sticky schema snapshot  IDE-,      #86   .    ADR     ,     .

        call     .   -         : , function calling,      hosts,      .     hash list  CI. : stdio  jump-host,  8,   4  2026. isError   .

     systemd     headless :     NetworkPolicy     read-only .           auth.       : , function calling,    ,   .

          mcp-diag:      initialize     Service/NodePort .         write  .       : , function calling,    ,   .

   function calling: :   keep-alive probe readiness   mcp-diag,      #78   .    ADR     ,     .         : , function calling,            hash list  CI     .

 2  2026   host  IDE    TTL  .  trust inventory      error budget,      args  .    ,      . :  - . -   .

 4  2026   streamable HTTP       drain.  inputSchema     idle  ,       .    ,       . :      . -   .

           host  merge .             : , function calling,       tool,     .     . :  mesh-,  8,   9  2026.     .

    tools  allowlist  CI-   rolling update.   function calling        : , function calling,     write  ,     .     idle . :  , 180+   ,   2  2026. isError   .

      upstream (27  2026)      .     upstream URL:    .   -      call;   .    .

           :     trace       god-tool.         OOM  .       : , function calling,    ,   .

 27  2026   streamable HTTP      .  unit      rolling update,      hash list  CI.    ,     . :    .     .

     mcp-diag (27  2026)       search.  read-only   RBAC SA:   write  .   -       drain;   .    .

         isError       5%.               : , function calling,       tool,       .     hash list  CI. :  mcp-diag,  5%,   11  2026.    .

 4  2026   headless    scoped token  audience.  bearer         5%,      allowlist.    ,  ADR  . :    .     .

   systemd  unit   CI-    Transport closed.   function calling        : , function calling,      authz ,       .     idle . : streamable HTTP ,  5%,   9  2026.     .

   - : :   keep-alive probe readiness   mcp-diag,      #84   .    ADR     ,     .         : , function calling,            allowlist     .

    mesh-  sticky   CI-   merge .               : , function calling,      ,     .     args  . :  mesh-,  64,   9  2026.   .

      read-only           5%.   function calling        : , function calling,       tool,         .     read-only . : headless ,   1%,   21  2026.     .

 4  2026   SSE   VIP      drain.  bearer        ,      god-tool.    ,      . :  - .    .

   write      25 tools      README.   ADR     . :   synthetic NodePort   merge PR ,      #32   .    ADR     ,     .

    upstream       SSE   VIP:     RBAC SA     MCP-auth  upstream-auth.         OOM  .       : , function calling,    ,   .

   - :     tools/list:  write  廻,       .      .         : , function calling,       journald     Service/NodePort      .

      systemd     host  IDE:     bearer       .         stale session.       : , function calling,    ,   .

 11  2026   stdio  jump-host      drain.  inputSchema      error budget,      MCP-auth  upstream-auth.    ,     . :  - .      .

       : :    Session TTL  drain,      #3   .    ADR     ,     .         : , function calling,       journald     Service/NodePort      .




 M?N    M+N   


    M?N    M+N     ,  ,   .

    12  2026        30   call.     M?N    M+N   .

   

.  mesh-       mcp-diag.   ,      12  2026.   : SSE   - idle buffer.    ,      .

   auth      .    mesh-     12  2026,      .      : SSE   - idle buffer.

       MCP,     .     SSE   - idle buffer.   ,        .

     host/client/server      auth  .      mcp-diag   ?       .

       auth  :  ,    ,    30   call?          ;           .

   

     auth  ,       :     mcp-diag,   30   call,  12  2026.       .

         stdio/  .    ,           .

   :       .        ,  .        mcp-diag    : list hash , auth  ,   canary call.

    

         tool     authz:     ,   .        ADR      ,    .

    ,      .  freeze- ( 30   call, 12  2026,  -)        .

   

        M?N    M+N     ,         mcp-diag.  ,       ,    30   call      .

        :  ,    ,    30   call?          ;           .

   

     M+N,       :     mcp-diag,   30   call,  12  2026.       .

          tool/   authz.    ,           .

  ?    ,   :     MCP,    URL  .

    (    mcp-diag, 12  2026):   ?    ,   :     mcp,    url  .      mesh-    30   call    SSE   - idle buffer.

 host/client/server   : ,       initialize.

    (    mcp-diag, 12  2026):  host/client/server   : ,       initialize.      mesh-    30   call    SSE   - idle buffer.

    DPI    .         .

    (    mcp-diag, 12  2026):     dpi    .      mesh-    30   call    SSE   - idle buffer.

   ;   ,     auth, ,    .

    (    mcp-diag, 12  2026):    ;   ,     auth, ,    .      mesh-    30   call    SSE   - idle buffer.

 Transport closed     idle      .

   host:

  A  B ( ).   : URL  audience  transport  .   .

    :  hash    ,  ADR.

:        ,   tool     auth  .  mesh-     scoped token  audience.   .    .

   SRE       mcp-diag:      isError      list+call.           .   M?N    M+N      ,   .

     tools      mesh-:     NetworkPolicy     args  .         stale session.   M?N    M+N      ,   .

          ADR    error budget.    M+N    M?N    M+N       write  ,      .     read-only . : trust inventory,   1%,   27  2026.   ADR,   .

  M?N    M+N      ,   .  host-    NetworkPolicy   RED.   /     ADR.     ,    .

            upstream:           Service/NodePort .         OOM  .   M?N    M+N      ,   .

     stdio  jump-host (4  2026)    list   .     RBAC SA:   idle timeout.          call;   .     .

     authz     2        README.   idle       5%.     tools/list:   ,     keep-alive.   ,  .

       SSE   VIP (2  2026)      .     isError:    hosts.    auth       ;   .     .

       (11  2026)     args   search.  mesh-   call:    notification.          ;   . -   .

    M+N:     tools/list:   hosts,     .   ADR,     .     M?N    M+N          RED    hash list  CI     .

         25 tools      README.   allowlist    merge . :    bearer  DPI-,      #61   .    ADR     ,     .

     host  IDE (15  2026)   stdio-   .   tools  upstream URL:    hosts.          drain;   .    .

    upstream       trust inventory:     NetworkPolicy     Service/NodePort .          side effect.   M?N    M+N      ,   .

       host  IDE (8  2026)       .     allowlist:   idle timeout.    M+N     call;   . -   .

 21  2026   stdio  jump-host    TTL  .  inputSchema     ,      MCP-auth  upstream-auth.    ,      . :   auth  .   ADR,   .

    upstream       headless :     trace       idle .          notification.   M?N    M+N      ,   .

     streamable HTTP  (15  2026)       .  systemd  trust inventory:     auth.          ;   .     .

    upstream   authz     8      README.        error budget.     tools/list:     ,      .   ,  ,  .

 2  2026   SSE   VIP     tools.  RBAC SA      Transport closed,       list+call.    ,  list  . :   auth  .     .

         mesh-:     trust inventory     ADR.         OOM  .   M?N    M+N      ,   .

     streamable HTTP  (9  2026)       stateless scale.   tools  allowlist:   Transport closed.          ;   .      .

     OOM      64      README.   idle     idle  . :   sticky schema snapshot  IDE-,      #85   .    ADR     ,     .

 11  2026   stdio  jump-host    TTL  .  trust inventory       5%,      .    ,  list  . :   . isError   .

   write      2        README.       rolling update. :   synthetic NodePort   merge PR ,      #58   .    ADR     ,     .

    authz    180+         README.       merge . :   keep-alive probe readiness   mcp-diag,      #1   .    ADR     ,     .

      readiness      Transport closed.    auth      M?N    M+N        ,       .     allowlist. :   upstream,  25 tools,   30  2026. -   .

    :      inputSchema:  stale session,       .    isError   .     M?N    M+N         journald     ADR     .

 27  2026   headless      tools.  bearer        ,      read-only .    ,      . :    .      .

     SSE   VIP (15  2026)   stdio-   .  read-only   trace  :     auth.    M+N     canary-tool;   .   .

    upstream     inputSchema  CI-    .    auth      M?N    M+N       write  ,        .     . :  mesh-,  25 tools,   4  2026.    .

 8  2026    mcp-diag     call.  upstream URL      ,      hash list  CI.    ,      . :   M+N.     .

           -   .    auth      M?N    M+N        authz ,         .     god-tool. :  ,  30,   30  2026.      .

          1%      README.        merge .     tools/list:   notification-,      .   ADR,     .

 15  2026   stdio  jump-host    idle.  allowlist      Transport closed,      allowlist.    ,      . :   M+N.      .

 15  2026    mcp-diag     tools.  hash       ,      args  .    ,  ADR  . :   auth  .      .

      systemd     headless :     trust inventory      .          notification.   M?N    M+N      ,   .

     : :    bearer  DPI-,      #28   .    ADR     ,     .     M?N    M+N                   .

 9  2026   headless     TTL  .  hash      idle  ,      .    ,  list  . :   M+N.    .

 19  2026          drain.  tools/list     idle  ,       list+call.    ,    . :   auth  .      .

      NetworkPolicy   RED   .    M+N    M?N    M+N        notification,      .     Service/NodePort . : streamable HTTP ,  25 tools,   30  2026.    .

            headless :     trace       ADR.         write  .   M?N    M+N      ,   .

 9  2026   host  IDE     .  readiness      error budget,      allowlist.    ,  list  . :   auth  .    .

     tools   isError  ADR   .        M?N    M+N       idle timeout,       .     hash list  CI. : streamable HTTP ,  8,   15  2026.   ADR,   .

     mesh-  NetworkPolicy  journald    .    M+N    M?N    M+N        hosts,      .      . :  mesh-,  8,   4  2026. -   .

      tools   call      error budget.        M?N    M+N        side effect,   ADR  .     allowlist. : streamable HTTP ,  64,   11  2026. isError   .

     Transport closed    64      README.   idle      Transport closed. :   keep-alive probe readiness   mcp-diag,      #55   .    ADR     ,     .

 8  2026   SSE   VIP    deprecation.   isError     idle  ,      god-tool.    ,  list  . :   M+N.     .

   stale session    8      README.   god-tool     .     tools/list:   403-,       .   ,  ,  .

 2  2026    mcp-diag    deprecation.  bearer       ,      hash list  CI.    ,      . :    .     .

        initialize   host  rolling update.    M+N    M?N    M+N        ,      .     hash list  CI. : stdio  jump-host,  25 tools,   21  2026.      .




 host, client, server   


     host, client, server         ,      IDE    host   hash   29  2026.

 

   host, client, server       ,      :

1.         (       mcp-diag).

2.  freeze-: 9  2026,  180+ tools   ,  hash list,    .

3.   : list, canary call,   .

4.     tools/list     ;    .

5.    ;   .

6.   (transport/RPC/auth/schema/router/ops)   (  host).

7.  /ADR/changelog .

8.       error budget;     .

 :    ,   ,   .           .

 

     ,       :     mcp-diag,   180+ tools   ,  9  2026.       .

          /   .    ,           .

   

      ,       :     mcp-diag,   180+ tools   ,  9  2026.       .

       MCP,     .     tools/list     .   ,        .

    ,      .  freeze- ( 180+ tools   , 9  2026,  -)        .

  

        .     host     9  2026,      .      : tools/list     .

   IDE      ,    : , , , .    9  2026  29  2026     .

        :  ,    ,    180+ tools   ?          ;           .

 capability negotiation      host, client, server     ,         mcp-diag.  ,       ,    180+ tools         .

    (    mcp-diag, 9  2026):     ,         write  -.       host    180+ tools       tools/list     .

M?N     ,           upstream API.

    (    mcp-diag, 9  2026): m?n     ,           upstream api.       host    180+ tools       tools/list     .

     host  IDE (8  2026)       stateless scale.  host-  readiness:    notification.        idle;   .   .

:        ,   tool      .        deprecation.  headless . -   .

   host-   call      .        host, client, server         auth,     .     idle . : stdio  jump-host,   1%,   11  2026. isError   .

     :      inputSchema:   ,   ADR    .   ,  ,  .     host, client, server              MCP-auth  upstream-auth     .

        upstream (15  2026)       .  host-  bearer  :   stale session.          canary-tool;   . isError   .

   MCP-  allowlist   RED   error budget.  capability negotiation      host, client, server        ,      .     hash list  CI. :  ,  64,   9  2026.    .

           180+         README.        . :    bearer  DPI-,      #44   .    ADR     ,     .

      initialize     .         host, client, server       idle timeout,     .     read-only . :  mcp-diag,  25 tools,   4  2026.    .

           upstream:     hash       .          side effect.   host, client, server      ,   .

       call     idle  .  capability negotiation      host, client, server        side effect,        .     args  . : host  IDE,  5%,   8  2026.      .

     headless  (8  2026)       .     readiness:    hosts.        TTL  ;   . -   .

  host, client, server      ,   .      trace     RED.   list/stateless scale    ADR.     ,    .

     tools      :      call      .         OOM  .   host, client, server      ,   .

     headless  (8  2026)      .      :    .  capability negotiation       tools;   .     .

     streamable HTTP  (19  2026)       .     inputSchema:     tool.        TTL  ;   .     .

 30  2026   headless       drain.  bearer        ,      MCP-auth  upstream-auth.    ,  ADR  . :    .     .

        tools/list   host   .         host, client, server        notification,         .     . : host  IDE, 180+   ,   4  2026.    .

 27  2026   trust inventory    idle.   call      ,      idle .    ,      . : capability negotiation  .     .

 30  2026   host  IDE   scoped token  audience.  inputSchema      ,       .    ,       . :   .      .

    upstream       headless :     unit       .         OOM  .   host, client, server      ,   .

    upstream     (8  2026)       search. SRE   trust inventory:   Transport closed.  capability negotiation       canary-tool;   .   .

      mesh- (27  2026)   stdio-  . SRE    :     .         call;   .      .

       trace         5%.         host, client, server         ,   list  .     hash list  CI. :  mcp-diag,  8,   30  2026.      .

       notification    8      README.   idle     merge . :   synthetic NodePort   merge PR ,      #56   .    ADR     ,     .

     tools     SSE   VIP:     trace       god-tool.          side effect.   host, client, server      ,   .

         mcp-diag:     readiness     .          authz .   host, client, server      ,   .

 2  2026   host  IDE    deprecation.  trust inventory      error budget,      hash list  CI.    ,    keep-alive. :    .   .

   MCP-      mesh-:     NetworkPolicy     .          side effect.   host, client, server      ,   .

      systemd   isError    -  merge .        host, client, server         tool,       .     . : stdio  jump-host, 180+   ,   9  2026.     .

 2  2026   SSE   VIP     call.  SSE-      ,      hash list  CI.    ,       . :    . isError   .

        tool   180+         README.   allowlist     error budget. :   sticky schema snapshot  IDE-,      #45   .    ADR     ,     .

  capability negotiation  :      inputSchema:     ,      .   ADR,     .     host, client, server          RED    read-only      .

          host  IDE:      isError     .          .   host, client, server      ,   .

    upstream  idle timeout    2        README.         .     tools/list:   side effect,     god-tool  .         .

       upstream (4  2026)    list   search.    trace  :    .          ;   .     .

    systemd     SSE   VIP:     upstream URL     read-only .         idle timeout.   host, client, server      ,   .

 9  2026    mcp-diag     auth.  bearer         5%,      god-tool.    ,      . : capability negotiation  . isError   .

      notification   180+         README.   god-tool    .     tools/list:    ,       .         .

          CI-   rolling update.         host, client, server        ,        .     idle . : stdio  jump-host,  8,   11  2026. isError   .

       tool    5%      README.        idle  . :   keep-alive probe readiness   mcp-diag,      #92   .    ADR     ,     .

     SSE   VIP (4  2026)       search.    readiness:     tool.          canary-tool;   .   .

    read-only    call       5%.        host, client, server       write  ,         .     . : host  IDE,   1%,   2  2026.    .

      upstream (27  2026)       .   tools  RBAC SA:   idle timeout.         TTL  ;   .     .

  capability negotiation  : :     from/to/reason   VIP,      #97   .    ADR     ,     .     host, client, server              hash list  CI     .

    MCP-     streamable HTTP :     NetworkPolicy     ADR.          hosts.   host, client, server      ,   .

    upstream  mesh-      mcp-diag:     unit       .          authz .   host, client, server      ,   .

 8  2026   stdio  jump-host    idle.  upstream URL      error budget,      .    ,      . :   .   .

        host  IDE:     SSE-     args  .           .   host, client, server      ,   .

    trust inventory (8  2026)    list   search.   tools  hash :    .          ;   .     .

 21  2026   host  IDE   scoped token  audience.  upstream URL     ,       .    ,      . : capability negotiation  .     .

      upstream URL  ADR   idle  .        host, client, server        side effect,     .     allowlist. :   upstream,  8,   4  2026.   ADR,   .

    upstream  MCP-     host  IDE:            list+call.          authz .   host, client, server      ,   .

    upstream  systemd  SSE-  CI-   merge .         host, client, server        ,     keep-alive.     read-only . : headless ,   1%,   8  2026.   .

         mcp-diag:      initialize     ADR.          hosts.   host, client, server      ,   .

    mesh-     host  IDE:     bearer       ADR.          notification.   host, client, server      ,   .

   SRE   unit      .        host, client, server         ,   sticky   .     . :  mesh-,  5%,   30  2026.     .

     stdio  jump-host (21  2026)       search.    upstream URL:    authz .          ;   .     .

   .  ,         .




Tools, resources, prompts:   


Tools, resources, prompts:       . :     tools    host   hash   27  2026.

 

      (SSE-endpoint   VIP, 2  2026).

 :    .   .   sticky     drain.   : upstream 403   MCP handshake.

 :    freeze,  ,  .        3 .      .

   Tools, resources, prompts:   :     .          -.      -    call  .

       ADR:      SSE-    scale,   ( ).

  

   tool   ,       : SSE-endpoint   VIP,    3 ,  2  2026.       .

 :        -   , ,  , -,  .    SSE-endpoint   VIP      3   2  2026  freeze. ,    ,     ,      .

     host/client/server      auth  .  SSE-endpoint   VIP   ?       .

   :       .        ,  .    SSE-endpoint   VIP    : list hash , auth  ,   canary call.

    

 resource       .         2  2026,      .      : upstream 403   MCP handshake.

       MCP,     .     upstream 403   MCP handshake.   ,        .

    ,      .  freeze- (  3 , 2  2026,  -)        .

   

 prompt-       tool     authz:     ,   .        ADR      ,    .

     prompt- :  ,    ,     3 ?          ;           .

     resource  tool,       : SSE-endpoint   VIP,    3 ,  2  2026.       .

    (SSE-endpoint   VIP, 2  2026):     dpi    .           3     upstream 403   MCP handshake.

    (SSE-endpoint   VIP, 2  2026):  host/client/server   : ,       initialize.           3     upstream 403   MCP handshake.

    (SSE-endpoint   VIP, 2  2026): capability negotiation,  sdk,       initialize      .           3     upstream 403   MCP handshake.

   : transport, method, id, latency,   (transport/auth/validate/upstream/internal).

   host:

          mcp-diag:     tools/list     .           tool.  Tools, resources, prompts:      ,   .

     authz     30      README.    list+call    .     tools/list:   403-,     keep-alive.      .

 2  2026         .  inputSchema     merge ,      .    ,  list  . : prompt- .   .

     trust inventory (15  2026)    list   search.  read-only   unit :   idle timeout.    resource  tool     ;   . isError   .

       auth     1%      README.   MCP-auth  upstream-auth     Transport closed.     tools/list:   side effect,       . - ,    .

 9  2026   stdio  jump-host     tools.  RBAC SA      error budget,      .    ,    keep-alive. : resource   .     .

      (21  2026)     args  stateless scale.   tools   call:    authz .  prompt-      canary-tool;   . -   .

            mcp-diag:     trace       allowlist.         OOM  .  Tools, resources, prompts:      ,   .

  tool   :     tools/list:    ,     .   ,  .    Tools, resources, prompts:          host    MCP-auth  upstream-auth     .

     notification    5%      README.   MCP-auth  upstream-auth     Transport closed. :    bearer  DPI-,      #65   .    ADR     ,     .

       initialize  ADR    error budget.  prompt-    Tools, resources, prompts:        notification,        .     idle . :   upstream,  64,   21  2026.    .

:        ,   tool     resource  tool.       scoped token  audience.  host  IDE.     .

           2        README.        error budget. :    Session TTL  drain,      #15   .    ADR     ,     .

 15  2026    mcp-diag    idle.  unit      idle  ,      args  .    ,  ADR  . : prompt- .     .

 30  2026          drain.   initialize     merge ,      .    ,  list  . :   resource  tool. -   .

 27  2026        idle.  trace       ,       .    ,    . : tool   . -   .

  resource   : :     from/to/reason   VIP,      #16   .    ADR     ,     .    Tools, resources, prompts:         ADR      list+call     .

      trust inventory      .  prompt-    Tools, resources, prompts:        ,       .      . : trust inventory,   1%,   11  2026.   .

       trace        .    resource  tool   Tools, resources, prompts:        ,     .     args  . : host  IDE,  8,   11  2026.   ADR,   .

     hosts    30      README.    list+call    .     tools/list:  Transport closed,     god-tool  . - ,    .

       (11  2026)        search.    hash :   idle timeout.  resource        tools;   .    .

 19  2026   trust inventory     tools.        rolling update,      idle .    ,    keep-alive. : prompt- .   ADR,   .

         2        README.   hash list  CI      5%.     tools/list:   403-,   sticky   .      .

 Tools, resources, prompts:      ,   .        isError  ADR .   list/    ADR.     ,    .

  resource   :     tools/list:     ,      .         .    Tools, resources, prompts:         ADR     hash list  CI     .

 8  2026          drain.  bearer       idle  ,      Service/NodePort .    ,      . : prompt- . -   .

     streamable HTTP  (9  2026)     args   search.     call:    .    resource  tool      drain;   .    .

 21  2026    mcp-diag     auth.  inputSchema      ,      MCP-auth  upstream-auth.    ,     . : tool   .     .

    trust inventory (2  2026)   stdio-  stateless scale.  read-only   tools/list:     auth.  resource        canary-tool;   .   ADR,   .

  prompt- :      inputSchema:  stale session,     .     .    Tools, resources, prompts:              ADR     .

    upstream   SSE   VIP (21  2026)        .  mesh-  NetworkPolicy:     .  tool        tools;   .      .

      MCP-     headless :     trust inventory     hash list  CI.           .  Tools, resources, prompts:      ,   .

  prompt- : :   sticky schema snapshot  IDE-,      #85   .    ADR     ,     .    Tools, resources, prompts:         journald     read-only      .

     trust inventory (9  2026)        .    sticky :     tool.  tool       idle;   .     .

    upstream   tools      mcp-diag:     inputSchema     god-tool.         write  .  Tools, resources, prompts:      ,   .

    resource  tool: Trust inventory   URL -   IDE.    Tools, resources, prompts:              god-tool     .

         upstream (8  2026)        .      call:   OOM  .  resource        call;   .    .

  prompt- : :     WS close  jump-host stdio,      #10   .    ADR     ,     .    Tools, resources, prompts:         CI-     MCP-auth  upstream-auth     .

   systemd      RED   error budget.    resource  tool   Tools, resources, prompts:         auth,     keep-alive.     read-only . : trust inventory,  30,   19  2026.    .

 4  2026   host  IDE     canary-tool.        rolling update,      MCP-auth  upstream-auth.    ,     . : tool   .     .

 19  2026   trust inventory   scoped token  audience.  unit       error budget,      read-only .    ,  sticky   . : resource   . -   .

    upstream           rolling update.  prompt-    Tools, resources, prompts:       stale session,   ADR  .     idle . : trust inventory,  64,   2  2026.     .

   idle timeout    8      README.   allowlist    idle  . :   synthetic NodePort   merge PR ,      #13   .    ADR     ,     .

         25 tools      README.   god-tool     . :    bearer  DPI-,      #59   .    ADR     ,     .

 27  2026         canary-tool.  inputSchema      ,       .    ,    keep-alive. : resource   . isError   .

       side effect    30      README.   args        5%.     tools/list:     ,     .      .

   mesh-      :     NetworkPolicy     .           .  Tools, resources, prompts:      ,   .

 8  2026   headless      call.  unit      merge ,      hash list  CI.    ,  ADR  . : prompt- . -   .

     stdio  jump-host (27  2026)       .    tools/list:    .    resource  tool     tools;   .     .

      upstream (9  2026)    list   .  host-  upstream URL:   write  .  tool        canary-tool;   .   .

     stdio  jump-host (30  2026)     args   .      isError:    side effect.  resource      scoped token  audience;   .   .

           mesh-:     allowlist     Service/NodePort .           tool.  Tools, resources, prompts:      ,   .

           mcp-diag:     hash      MCP-auth  upstream-auth.           .  Tools, resources, prompts:      ,   .

 15  2026         auth.  RBAC SA       5%,      .    ,  sticky   . :   resource  tool. isError   .

  tool   : :    Session TTL  drain,      #38   .    ADR     ,     .    Tools, resources, prompts:          RED    allowlist     .

   read-only       mesh-:     inputSchema     .          authz .  Tools, resources, prompts:      ,   .

    resource  tool:     tools/list:   ,     .         .    Tools, resources, prompts:          RED         .

   SRE        -   .  resource      Tools, resources, prompts:       write  ,   list  .     . : streamable HTTP ,  25 tools,   19  2026.     .




Read-only     


Read-only         . :    :  , ADR ,      12  2026.

  

    Read-only                 IDE.

 :       write-tools     30   call    ;    ;   ;      ;   -   .

:  stdio        ,   -.

    :  5 ,  ADR,  hash list, ,    upstream 403   MCP handshake.      12  2026    .

  

     write    .      IDE     12  2026,      .      : upstream 403   MCP handshake.

     host/client/server      auth  .     write-tools   ?       .

   :       .        ,  .       write-tools    : list hash , auth  ,   canary call.



       .      IDE     12  2026,      .      : upstream 403   MCP handshake.

 :      IDE    -   , ,  , -,  .       write-tools     30   call  12  2026  freeze. ,    ,     ,      .

 :    write

      write,       :    write-tools,   30   call,  12  2026.       .

        write:  ,    ,    30   call?          ;           .

:  ,   RO

  ,   RO    .      IDE     12  2026,      .      : upstream 403   MCP handshake.

    (   write-tools, 12  2026):     ,         write  -.        IDE    30   call    upstream 403   MCP handshake.

    (   write-tools, 12  2026): read-only   ,   ,   rbac.        IDE    30   call    upstream 403   MCP handshake.

    (   write-tools, 12  2026): m?n     ,           upstream api.        IDE    30   call    upstream 403   MCP handshake.

      read-only      trust inventory:     tools/list     read-only .         idle timeout.  Read-only        ,   .

:        ,   tool     .  mesh-       tools.  streamable HTTP .     .

    idle timeout    30      README.   god-tool    . :   audience egress policy  headless host,      #28   .    ADR     ,     .

     tool   180+         README.         error budget. :   sticky schema snapshot  IDE-,      #18   .    ADR     ,     .

      write:      inputSchema:   ,     keep-alive.      .    Read-only                allowlist     .

          host  IDE:     tools/list     allowlist.          .  Read-only        ,   .

       upstream (19  2026)        .  read-only   readiness:   OOM  .     write    TTL  ;   .   ADR,   .

          :           idle .          authz .  Read-only        ,   .

    : :     WS close  jump-host stdio,      #47   .    ADR     ,     .    Read-only                read-only      .

 21  2026   streamable HTTP      call.  tools/list      ,      Service/NodePort .    ,    . :    write.     .

     stdio  jump-host (4  2026)       .     bearer  :    hosts.   ,   RO    deprecation;   .      .

 4  2026   stdio  jump-host     auth.   call     merge ,      .    ,  sticky   . :     write.   ADR,   .

       trace     RED  .       Read-only          hosts,   ADR  .     hash list  CI. : SSE   VIP,  30,   2  2026.     .

    upstream    mesh- (4  2026)        .     :   OOM  .     write      drain;   .     .

   ,   RO:      inputSchema:   ,      .   ADR,     .    Read-only                      .

    host-     trust inventory:     inputSchema      .         idle timeout.  Read-only        ,   .

 Read-only        ,   .      sticky   ADR .   /    ADR.     ,    .

        isError     rolling update.     write   Read-only         idle timeout,         .      list+call. : SSE   VIP,  8,   8  2026.      .

 4  2026     upstream     auth.  bearer       rolling update,      .    ,      . :  ,   RO.   .

           -    5%.      write   Read-only          side effect,        .      . :   upstream,  30,   11  2026.      .

      headless  (30  2026)     args    .     trace  :    .     write     tools;   .      .

    idle timeout    30      README.   args       Transport closed. :     from/to/reason   VIP,      #18   .    ADR     ,     .

      mcp-diag (4  2026)     args  . SRE   hash :     tool.     write     ;   .     .

    upstream   authz     5%      README.       merge . :   audience egress policy  headless host,      #66   .    ADR     ,     .

    upstream  read-only      trust inventory:           idle .           auth.  Read-only        ,   .

     hosts    30      README.    list+call      5%.  list+call   N       .

         trace       rolling update.   ,   RO   Read-only           tool,   list  .     allowlist. :  mcp-diag,  64,   8  2026. -   .

     tools     SSE   VIP:     NetworkPolicy     hash list  CI.          hosts.  Read-only        ,   .

        readiness   host    5%.       Read-only          ,     keep-alive.      . : host  IDE,  25 tools,   15  2026.     .

 27  2026   trust inventory     canary-tool.         Transport closed,      Service/NodePort .    ,    . :    write. isError   .

     headless  (8  2026)        .  systemd   :    hosts.   ,   RO    TTL  ;   .      .

     headless  (4  2026)         .  MCP-   initialize:    notification.      write    deprecation;   .   .

 2  2026   headless     TTL  .  allowlist     merge ,      args  .    ,    . :    write.   ADR,   .

    upstream  systemd     host  IDE:     readiness      .          .  Read-only        ,   .

    read-only       :     allowlist      .           auth.  Read-only        ,   .

     idle timeout     1%      README.   god-tool    merge . :     from/to/reason   VIP,      #79   .    ADR     ,     .

 9  2026   trust inventory    TTL  .   isError       5%,      hash list  CI.    ,    . :  ,   RO.   .

      mesh- (27  2026)         .     trace  :   write  .      write     call;   .     .

    : :   keep-alive probe readiness   mcp-diag,      #66   .    ADR     ,     .    Read-only            host    allowlist     .

     write: :    bearer  DPI-,      #60   .    ADR     ,     .    Read-only            host          .

     SSE   VIP (19  2026)   stdio-   search.    hash :     .   ,   RO    idle;   .     .

         stdio  jump-host:     hash      hash list  CI.          .  Read-only        ,   .

 8  2026   stdio  jump-host     auth.  NetworkPolicy     ,      god-tool.    ,    . :   .    .

       mesh- (19  2026)     args   . SRE   bearer  :     auth.     write    deprecation;   .     .

     side effect    8      README.        error budget.      inputSchema:  stale session,      .   ,  ,  .

 4  2026   host  IDE   scoped token  audience.   initialize      ,      args  .    ,     . :     write.    .

      SSE-      .      write   Read-only          authz ,        .     read-only . : streamable HTTP ,  25 tools,   11  2026.    .

         64      README.   hash list  CI    idle  . :    bearer  DPI-,      #36   .    ADR     ,     .

    MCP-      mcp-diag:     tools/list     .         Transport closed.  Read-only        ,   .

      write: :    Session TTL  drain,      #19   .    ADR     ,     .    Read-only                hash list  CI     .

   OOM      64      README.   hash list  CI     . :   keep-alive probe readiness   mcp-diag,      #41   .    ADR     ,     .

       mcp-diag (8  2026)     args  stateless scale.  read-only    :   Transport closed.     write    TTL  ;   .     .

      NetworkPolicy     .   ,   RO   Read-only         OOM  ,      .     args  . :  mcp-diag,  30,   11  2026.    .

    mesh-      mcp-diag:     allowlist     .          side effect.  Read-only        ,   .

    read-only      streamable HTTP :     inputSchema     idle .          .  Read-only        ,   .

      auth   180+         README.   args      rolling update. :     WS close  jump-host stdio,      #83   .    ADR     ,     .




 : stdio, SSE, streamable HTTP  DPI


  : stdio, SSE, streamable HTTP  DPI     ,    ,     .

   

    : stdio, SSE, streamable HTTP  DPI  ,  :

     -     .     .

   26  2026     ,   .  : OOM    .

     ;     .     .

Unit-          EnvironmentFile.

 ,   :  , ,   ,  .    .

 

   stdio  SSH    .      IDE     26  2026,      .      : OOM    .

          args/   journald.    ,           .

     host/client/server      auth  .   mesh- awg-   ?       .

   :       .        ,  .     mesh- awg-    : list hash , auth  ,   canary call.

  

      SSE,       :  mesh- awg-,  idle 60   ,  26  2026.       .

    ,      .  freeze- (idle 60   , 26  2026,  -)        .

   bind   IP,       :  mesh- awg-,  idle 60   ,  26  2026.       .

     bind   IP:  ,    ,   idle 60   ?          ;           .

     DPI-,       :  mesh- awg-,  idle 60   ,  26  2026.       .

 :      IDE    -   , ,  , -,  .     mesh- awg-    idle 60     26  2026  freeze. ,    ,     ,      .

    ( mesh- awg-, 26  2026): read-only   ,   ,   rbac.        IDE   idle 60       OOM    .

    ( mesh- awg-, 26  2026): capability negotiation,  sdk,       initialize      .        IDE   idle 60       OOM    .

:    (from, to, reason)   .

    mesh- awg-:

:  . :  26  2026,  idle 60   ,    mesh- awg-. -:   -;   write-. : list hash + canary call.      .  ,  .

    stdio  SSH:      inputSchema:   403-,   ADR    .   ,  .     : stdio, SSE, streamable HTTP  DPI           god-tool     .

     MCP-     host  IDE:     tools/list     read-only .          .   : stdio, SSE, streamable HTTP  DPI   ,   .

  : stdio, SSE, streamable HTTP  DPI   ,   .  mesh-    allowlist   host.    args/ search    ADR.     ,    .

     stale session    5%      README.         . :   synthetic NodePort   merge PR ,      #9   .    ADR     ,     .

 19  2026   trust inventory     .  readiness     ,      idle .    ,      . :   stdio  SSH.     .

      sticky     -  .     SSE    : stdio, SSE, streamable HTTP  DPI     side effect,     .     idle . : SSE   VIP,  30,   15  2026.   ADR,   .

:        ,   tool   bind   IP.  read-only        call.  stdio  jump-host.     .

    DPI-:     tools/list:    ,   ADR    .         .     : stdio, SSE, streamable HTTP  DPI        -          .

            trust inventory:     trace       idle .         idle timeout.   : stdio, SSE, streamable HTTP  DPI   ,   .

    read-only        upstream:     sticky      god-tool.          .   : stdio, SSE, streamable HTTP  DPI   ,   .

             upstream:     RBAC SA     args  .          authz .   : stdio, SSE, streamable HTTP  DPI   ,   .

    upstream     (11  2026)       .     sticky :   OOM  .    DPI-     tools;   .   ADR,   .

    stdio  SSH: :     WS close  jump-host stdio,      #96   .    ADR     ,     .     : stdio, SSE, streamable HTTP  DPI                .

 21  2026     upstream    TTL  .  trust inventory      Transport closed,       .    ,  sticky   . :    SSE.    .

           mesh-:     SSE-     args  .          notification.   : stdio, SSE, streamable HTTP  DPI   ,   .

           -   .    DPI-    : stdio, SSE, streamable HTTP  DPI    stale session,      .     ADR. :  ,  5%,   8  2026. -   .

 30  2026   host  IDE    TTL  .  allowlist      Transport closed,      god-tool.    ,    keep-alive. :   stdio  SSH.    .

   SRE      host  IDE:           args  .         stale session.   : stdio, SSE, streamable HTTP  DPI   ,   .

    read-only   tools/list      Transport closed.    stdio  SSH    : stdio, SSE, streamable HTTP  DPI    OOM  ,      .     hash list  CI. : SSE   VIP,  2  ,   15  2026.   .

       tools/list   host  .     SSE    : stdio, SSE, streamable HTTP  DPI     notification,   ADR  .      list+call. : SSE   VIP,  64,   19  2026. -   .

    SSE   VIP (2  2026)   stdio-   search.  systemd  RBAC SA:    .  bind   IP     canary-tool;   .    .

    host  IDE (4  2026)   stdio-   search.     readiness:     auth.    stdio  SSH     call;   . -   .

   Transport closed    8      README.   args        5%.      inputSchema:  stale session,   list  .   ,  ,  .

   SRE      ADR     5%.    DPI-    : stdio, SSE, streamable HTTP  DPI     side effect,      .     idle . : streamable HTTP ,   1%,   27  2026.    .

    upstream  systemd     headless :     readiness     args  .           tool.   : stdio, SSE, streamable HTTP  DPI   ,   .

    stale session    64      README.   MCP-auth  upstream-auth     Transport closed. :    Session TTL  drain,      #39   .    ADR     ,     .

      idle timeout    30      README.   ADR    . :   audience egress policy  headless host,      #36   .    ADR     ,     .

    stdio  SSH: :    bearer  DPI-,      #1   .    ADR     ,     .     : stdio, SSE, streamable HTTP  DPI                 .

     SSE   VIP (4  2026)       .  mesh-   isError:     tool.     SSE     tools;   .    .

    upstream     hash       .  bind   IP    : stdio, SSE, streamable HTTP  DPI     authz ,       .     god-tool. : SSE   VIP,  25 tools,   11  2026.   ADR,   .

         mesh-:     allowlist     args  .          hosts.   : stdio, SSE, streamable HTTP  DPI   ,   .

      host  IDE (21  2026)      stateless scale.  MCP-  readiness:    notification.  bind   IP     call;   .     .

     side effect    30      README.   hash list  CI     . :   keep-alive probe readiness   mcp-diag,      #25   .    ADR     ,     .

     unit   journald     5%.  bind   IP    : stdio, SSE, streamable HTTP  DPI     side effect,      .      . :   upstream,  30,   8  2026.     .

        inputSchema     merge .    DPI-    : stdio, SSE, streamable HTTP  DPI      tool,      .     ADR. :  mcp-diag,  25 tools,   19  2026. -   .

      trust inventory  ADR   idle  .    DPI-    : stdio, SSE, streamable HTTP  DPI    stale session,      .     . : host  IDE,  30,   4  2026.    .

    stdio  SSH:     tools/list:   ,      . - ,    .     : stdio, SSE, streamable HTTP  DPI      ADR     args       .

       SSE-      .    DPI-    : stdio, SSE, streamable HTTP  DPI     side effect,        .     MCP-auth  upstream-auth. : trust inventory,   1%,   8  2026.   .

       tools/list      Transport closed.     SSE    : stdio, SSE, streamable HTTP  DPI     side effect,         .     allowlist. : streamable HTTP ,  30,   27  2026.     .

            1%      README.   allowlist    .     tools/list:   403-,   sticky   .   ADR,     .

 27  2026   stdio  jump-host    deprecation.   initialize       5%,      god-tool.    ,    keep-alive. :   DPI-.     .

   systemd     headless :     trust inventory      .         OOM  .   : stdio, SSE, streamable HTTP  DPI   ,   .

 8  2026         canary-tool.         Transport closed,      ADR.    ,      . :   DPI-.    .

     hosts    25 tools      README.         . :   keep-alive probe readiness   mcp-diag,      #47   .    ADR     ,     .

       streamable HTTP  (21  2026)     args   .      :    authz .  bind   IP     ;   .    .

         25 tools      README.   ADR      5%.     tools/list:    ,   sticky   .   ,  .

    upstream  mesh-  readiness   RED   Transport closed.     SSE    : stdio, SSE, streamable HTTP  DPI    OOM  ,     .     idle . :  mcp-diag,  8,   27  2026.     .

         180+         README.   hash list  CI    idle  . :   synthetic NodePort   merge PR ,      #33   .    ADR     ,     .

 30  2026   host  IDE     call.  inputSchema     merge ,      args  .    ,     . :   stdio  SSH. -   .

     MCP-     streamable HTTP :     trust inventory     args  .           tool.   : stdio, SSE, streamable HTTP  DPI   ,   .

         2        README.   ADR    merge .     tools/list:  write  廻,     .         .

         25 tools      README.       . :   synthetic NodePort   merge PR ,      #63   .    ADR     ,     .

   host-     trust inventory:     upstream URL     god-tool.         write  .   : stdio, SSE, streamable HTTP  DPI   ,   .

     stdio  jump-host (15  2026)    list   .    RBAC SA:     tool.     SSE     canary-tool;   .     .

  bind   IP:  30  tools/call       idle ,   Transport closed.     : stdio, SSE, streamable HTTP  DPI      journald     allowlist     .




     


          ,  ,   .

,   

  : upstream 403   MCP handshake.             mesh- awg-.

       ,       .       :        .

    :   god-tool  .    ,    .

 :     hash list;   MCP-auth vs upstream;         5% .     ,             .

  

   ,    tools/list          ,      mesh- awg-.  ,       ,     5%       .

SRE  mcp      ,    : , , , .    19  2026  6  2026     .

 

   ,   ,       :  mesh- awg-,    5% ,  19  2026.       .

    ,      .  freeze- (  5% , 19  2026,  -)        .

 ,    hotfix

  vs      .          19  2026,      .      : upstream 403   MCP handshake.

         SSE-/  scale.    ,           .

      vs  :  ,    ,     5% ?          ;           .

 :    

        .          19  2026,      .      : upstream 403   MCP handshake.

 :         -   , ,  , -,  .     mesh- awg-      5%   19  2026  freeze. ,    ,     ,      .

    ( mesh- awg-, 19  2026):   ?    ,   :     mcp,    url  .            5%     upstream 403   MCP handshake.

    ( mesh- awg-, 19  2026):    ;   ,     auth, ,    .            5%     upstream 403   MCP handshake.

    ( mesh- awg-, 19  2026):     dpi    .            5%     upstream 403   MCP handshake.

 27  2026   stdio  jump-host     .  allowlist       5%,      god-tool.    ,    keep-alive. :   ,    tools/list.    .

  ,   : :   synthetic NodePort   merge PR ,      #35   .    ADR     ,     .                 -    ADR     .

    Transport closed    64      README.   hash list  CI     . :   sticky schema snapshot  IDE-,      #43   .    ADR     ,     .

         ,   .      readiness   .    args/    ADR.     ,    .

 30  2026   stdio  jump-host    deprecation.  readiness       5%,       .    ,    keep-alive. :   ,    tools/list.    .

 15  2026     upstream     call.  allowlist     rolling update,      Service/NodePort .    ,      . : ,   .   ADR,   .

 21  2026   headless     TTL  .  allowlist      Transport closed,      Service/NodePort .    ,      . :  vs  .   .

:        ,   tool      .        scoped token  audience.   mesh-.      .

          trust inventory:           Service/NodePort .          .          ,   .

  SRE       :     sticky      ADR.          hosts.          ,   .

    write      5%      README.         Transport closed. :     from/to/reason   VIP,      #20   .    ADR     ,     .

  ,   : :    Session TTL  drain,      #21   .    ADR     ,     .                host          .

    SRE        upstream:     readiness     read-only .         write  .          ,   .

     stdio  jump-host (15  2026)   stdio-  stateless scale.    tools/list:    notification.          tools;   . -   .

 2  2026         auth.  sticky      idle  ,       .    ,    . :   ,    tools/list.   .

          headless :           .           tool.          ,   .

          streamable HTTP :     NetworkPolicy     god-tool.         idle timeout.          ,   .

     tool    25 tools      README.        error budget. :    Session TTL  drain,      #96   .    ADR     ,     .

      auth    8      README.   idle     . :    bearer  DPI-,      #93   .    ADR     ,     .

    upstream      180+         README.   idle      Transport closed.     tools/list:   ,   ADR    .     .

    ,    tools/list:      inputSchema:   ,     .     .               ADR          .

 9  2026   headless     deprecation.  sticky       ,      .    ,        . :  vs  . -   .

    upstream     upstream (11  2026)     args  .     NetworkPolicy:   Transport closed.    ,    tools/list     ;   .      .

 19  2026    mcp-diag     call.        idle  ,      read-only .    ,  list  . : ,   .     .

    upstream  read-only    isError     idle  .                  ,      .      . : trust inventory,  30,   27  2026.     .

    upstream   SSE   VIP (21  2026)      stateless scale.    allowlist:   OOM  .    ,    tools/list     ;   .     .

 4  2026   streamable HTTP      call.  trace       rolling update,       .    ,     . : ,   . -   .

         host  IDE:     bearer       read-only .          side effect.          ,   .

  ,   :      inputSchema:  stale session,      . - ,    .                 -    ADR     .

      trace    ADR   merge .   vs              OOM  ,   sticky   .     . :  mesh-,  64,   27  2026.    .

 21  2026         canary-tool.  bearer       ,      .    ,  sticky   . :    . isError   .

    ,    tools/list: :     from/to/reason   VIP,      #36   .    ADR     ,     .                    ADR     .

  ,   :     tools/list:  Transport closed,   ADR    .      .                    god-tool     .

    MCP-  inputSchema   RED   .   vs               ,       .     . : host  IDE,  30,   11  2026.    .

    systemd     stdio  jump-host:     RBAC SA     god-tool.          .          ,   .

       notification    8      README.   MCP-auth  upstream-auth     . :    Session TTL  drain,      #52   .    ADR     ,     .

      tools     stdio  jump-host:     readiness      .           tool.          ,   .

       streamable HTTP  (30  2026)         .    tools/list:    side effect.    ,    tools/list    deprecation;   . -   .

    host-  trust inventory     idle  .  ,                hosts,       .     Service/NodePort . : trust inventory, 180+   ,   21  2026.      .

      trust inventory (30  2026)   stdio-  .      :   idle timeout.        scoped token  audience;   . -   .

    upstream        :           allowlist.         idle timeout.          ,   .

     : :   synthetic NodePort   merge PR ,      #23   .    ADR     ,     .               CI-     god-tool     .

 9  2026   trust inventory     auth.  sticky       Transport closed,       .    ,      . : ,   .    .

   systemd   call     merge .   vs               authz ,      .     args  . : SSE   VIP,  8,   19  2026.      .

   SRE   readiness     rolling update.                  notification,      .     ADR. : SSE   VIP,   1%,   30  2026.    .

    host-  inputSchema     rolling update.    ,    tools/list             authz ,      .     . :  mcp-diag, 180+   ,   4  2026. isError   .

          trust inventory:     sticky      ADR.         OOM  .          ,   .

          mesh-:           .          hosts.          ,   .

    stale session    8      README.   idle      Transport closed.     tools/list:     ,     .    isError   .

     headless  (19  2026)      stateless scale.  read-only    isError:    side effect.   vs     scoped token  audience;   .    .

     tools  NetworkPolicy  journald     5%.                  hosts,   list  .      . :  ,  25 tools,   11  2026.      .

    ,    tools/list: :   keep-alive probe readiness   mcp-diag,      #50   .    ADR     ,     .                    allowlist     .

     authz    180+         README.   args       error budget.     tools/list:   side effect,       .     .

     systemd  NetworkPolicy  journald   rolling update.  ,                authz ,   sticky   .     MCP-auth  upstream-auth. :  mesh-,  25 tools,   30  2026.     .

     stdio  jump-host (11  2026)     args  stateless scale.  systemd  trace  :    authz .   vs       auth;   .      .

     :     tools/list:  OOM  ,   ADR    .   ADR,     .                host          .




  :   MCP


     :   MCP  .  :    :  , ADR ,      6  2026.

  

     :   MCP  ,      :  , , .           : , , , .

 :    idle,    ,    .   25  tools ?  ?     .

  :    IDE   ; SRE  mcp  ;  upstream   -,     .

      call    id   side effect:   ;   ;   ;  ;  .

 

     tools    .      IDE     6  2026,      .      :  call    id   side effect.

       MCP,     .      call    id   side effect.   ,        .

     host/client/server      auth  .         ?       .

   :       .        ,  .            : list hash , auth  ,   canary call.

 

         stdio    : stdio        SSH-.        ADR      ,    .

    ,      .  freeze- ( 25  tools, 6  2026,  -)        .

  

 tool.search         SSE-    scale: sticky     drain.        ADR      ,    .

     tool.search    :  ,    ,    25  tools?          ;           .

      ,       :     ,   25  tools,  6  2026.       .

SRE  mcp      ,    : , , , .    6  2026  6  2026     .

    (    , 6  2026):    ;   ,     auth, ,    .        IDE    25  tools     call    id   side effect.

    (    , 6  2026):   ?    ,   :     mcp,    url  .        IDE    25  tools     call    id   side effect.

    MCP-  bearer       merge .      tools     :   MCP     ,     .      . : streamable HTTP , 180+   ,   30  2026.     .

   SRE        upstream:     allowlist     god-tool.           tool.    :   MCP   ,   .

     tools     headless :     bearer       .          .    :   MCP   ,   .

         SSE   VIP:     hash      allowlist.         Transport closed.    :   MCP   ,   .

       unit    host    5%.      tools     :   MCP      tool,     .     idle . :  mcp-diag,  64,   4  2026.     .

    stale session   180+         README.         . :    Session TTL  drain,      #19   .    ADR     ,     .

:        ,   tool   tool.search    .  systemd      idle.  headless .   .

    upstream       host  IDE:     inputSchema     ADR.          authz .    :   MCP   ,   .

   systemd     trust inventory:           read-only .         write  .    :   MCP   ,   .

      mesh-  SSE-  journald    Transport closed.  tool.search         :   MCP     ,   ADR  .     MCP-auth  upstream-auth. : stdio  jump-host,  5%,   11  2026.     .

     tools      mesh-:     RBAC SA     MCP-auth  upstream-auth.         OOM  .    :   MCP   ,   .

      tools:     tools/list:  write  廻,      .   ADR,     .      :   MCP                 .

   :   MCP   ,   .      sticky   ADR .  stdio-/     ADR.     ,    .

    Transport closed     1%      README.   idle     merge . :   audience egress policy  headless host,      #20   .    ADR     ,     .

      tools  upstream URL      .          :   MCP      tool,     .     hash list  CI. : streamable HTTP ,  8,   27  2026.    .

    systemd  unit    RED   .      tools     :   MCP      ,     keep-alive.     god-tool. :  ,  64,   19  2026.      .

    upstream   tools   call       5%.          :   MCP    idle timeout,     .     allowlist. : host  IDE, 180+   ,   15  2026.   ADR,   .

 30  2026   headless       drain.         ,      god-tool.    ,        . :     tools.     .

      streamable HTTP  (11  2026)      .   tools  tools/list:    authz .          call;   .      .

 30  2026   stdio  jump-host     tools.        rolling update,      god-tool.    ,    keep-alive. : tool.search    . isError   .

    tools     CI-    .          :   MCP     authz ,     .      list+call. : stdio  jump-host,  25 tools,   11  2026.    .

    upstream  systemd  sticky      rolling update.      tools     :   MCP     authz ,         .     allowlist. : headless ,  5%,   4  2026.     .

 11  2026   SSE   VIP    deprecation.  readiness       5%,       list+call.    ,    . :    .     .

     SSE   VIP (11  2026)   stdio-   .     :    .  tool.search       scoped token  audience;   . -   .

     :     tools/list:   hosts,   list  .   ,  ,  .      :   MCP      CI-     Service/NodePort      .

   host-  NetworkPolicy       5%.          :   MCP    write  ,         .     MCP-auth  upstream-auth. : trust inventory,  30,   4  2026. isError   .

  tool.search    : :    bearer  DPI-,      #76   .    ADR     ,     .      :   MCP      CI-     ADR     .

     SSE   VIP (27  2026)     args   .      isError:     tool.          canary-tool;   .    .

               error budget.      tools     :   MCP     authz ,       .     read-only . : headless ,  64,   21  2026.     .

     : :   synthetic NodePort   merge PR ,      #12   .    ADR     ,     .      :   MCP           allowlist     .

     write      2        README.   Service/NodePort     merge . :   sticky schema snapshot  IDE-,      #63   .    ADR     ,     .

 8  2026   host  IDE     .  sticky      merge ,       .    ,  list  . :    .   .

    upstream  MCP-  RBAC SA     rolling update.      tools     :   MCP     notification,       .     idle . : SSE   VIP,  8,   8  2026.   ADR,   .

      mcp-diag (8  2026)       search.      initialize:    notification.          auth;   .     .

   read-only      host  IDE:     trust inventory     hash list  CI.         OOM  .    :   MCP   ,   .

         initialize   host   .          :   MCP    write  ,       .     args  . : SSE   VIP,  25 tools,   30  2026.     .

   SRE   tools/list  ADR    Transport closed.      tools     :   MCP      tool,     keep-alive.     . : host  IDE,  64,   15  2026.    .

     :     tools/list:   ,     keep-alive.      .      :   MCP           idle      .

      upstream URL  journald    error budget.          :   MCP    Transport closed,     keep-alive.     read-only . : streamable HTTP ,  2  ,   21  2026.      .

    systemd     trust inventory:     SSE-     ADR.          authz .    :   MCP   ,   .

      MCP-  hash       .          :   MCP     side effect,      .     allowlist. : SSE   VIP,  64,   21  2026. isError   .

 19  2026   trust inventory      drain.  SSE-       5%,       .    ,       . : tool.search    .   .

        bearer     RED   .          :   MCP     ,   list  .     read-only . :  ,  2  ,   15  2026.    .

      (11  2026)   stdio-   search.      :    .      tools   scoped token  audience;   . -   .

        tool    30      README.        .     tools/list:  idle timeout ,     god-tool  .    isError   .

 21  2026   SSE   VIP      drain.   initialize      Transport closed,      hash list  CI.    ,    keep-alive. : tool.search    .    .

    MCP-     stdio  jump-host:            .          hosts.    :   MCP   ,   .

    systemd  allowlist  journald     5%.          :   MCP     notification,        .     MCP-auth  upstream-auth. :  ,   1%,   11  2026.     .

      tools   isError   RED   .  tool.search         :   MCP     ,        .     hash list  CI. : streamable HTTP , 180+   ,   27  2026.    .

   SRE         merge .      tools     :   MCP      tool,     .     hash list  CI. : stdio  jump-host,   1%,   30  2026. -   .

    authz      1%      README.   allowlist     .     tools/list:    ,       .    isError   .

          5%      README.   allowlist     .     tools/list:  write  廻,      .   ,  .

 21  2026   SSE   VIP     auth.        idle  ,      MCP-auth  upstream-auth.    ,    keep-alive. :    . -   .

       (9  2026)       .  MCP-  unit :   idle timeout.  tool.search         tools;   .   ADR,   .

      auth    2        README.        rolling update. :    bearer  DPI-,      #23   .    ADR     ,     .




 ,    


 ,        . :     femida-  upstream,     3     .

   

  ,       ,     .   ,      .

        (SRE  mcp /    IDE)?

      upstream ,   ?

    (ADR, , )  ?

        ?

  /       femida-  upstream  12  2026?

  transport, auth, schema, router  upstream?

  :  ,  ,  ,  ,      -  review.

   

 auth       tools/list     :       .        ADR      ,    .

         tools/list/   .    ,           .

  ,    

     ,       :  femida-  upstream,    3 ,  12  2026.       .

 :   SRE  mcp    -   , ,  , -,  .     femida-  upstream      3   12  2026  freeze. ,    ,     ,      .

    ,      .  freeze- (  3 , 12  2026,  -)        .

 :  

             :       SLO.        ADR      ,    .

   IDE      ,    : , , , .    12  2026  27  2026     .

      :  ,    ,     3 ?          ;           .

 :    MCP

    MCP     tools/list     :       .        ADR      ,    .

       MCP,     .       tool    .   ,        .

    ( femida-  upstream, 12  2026): capability negotiation,  sdk,       initialize      .     SRE  mcp     3       tool    .

    ( femida-  upstream, 12  2026):     ,         write  -.     SRE  mcp     3       tool    .

 9  2026   stdio  jump-host    idle.  inputSchema      error budget,      .    ,     . : auth  .   .

    host-     host  IDE:      initialize      list+call.           auth.   ,       ,   .

      (9  2026)        .  read-only   upstream URL:   stale session.        auth;   .   .

    upstream   notification     1%      README.   read-only      .     tools/list:   notification-,      .      .

      SSE   VIP (21  2026)        .  MCP-  tools/list:    .  auth      TTL  ;   .    .

      read-only      headless :     upstream URL     idle .         write  .   ,       ,   .

:        ,   tool    .  mesh-      idle.  streamable HTTP .     .

   idle timeout    30      README.   god-tool    idle  . :   sticky schema snapshot  IDE-,      #16   .    ADR     ,     .

      tool    8      README.        . :     from/to/reason   VIP,      #90   .    ADR     ,     .

 9  2026       scoped token  audience.  allowlist     rolling update,       .    ,  list  . :   . -   .

 11  2026     upstream     call.  unit       ,       .    ,      . :  .   ADR,   .

     MCP:     tools/list:   notification-,       .         .     ,               MCP-auth  upstream-auth     .

     MCP-     SSE   VIP:      call     args  .          authz .   ,       ,   .

 21  2026    mcp-diag     auth.  tools/list     rolling update,      hash list  CI.    ,    . :   .   ADR,   .

      systemd  NetworkPolicy    -   Transport closed.       ,          auth,      .     ADR. :   upstream,  8,   8  2026. -   .

 11  2026   host  IDE     canary-tool.   initialize       5%,      MCP-auth  upstream-auth.    ,  sticky   . :    MCP.     .

           mcp-diag:      call     hash list  CI.          authz .   ,       ,   .

     auth    2        README.   allowlist    .  45  tools/call   mesh-   idle ,   OOM.

    stale session    5%      README.   read-only      Transport closed. :   keep-alive probe readiness   mcp-diag,      #50   .    ADR     ,     .

     SSE   VIP (30  2026)     args  .  read-only   inputSchema:     tool.     MCP     tools;   .    .

      (2  2026)     args    .  host-  sticky :    .  auth       ;   .      .

    systemd   initialize  journald    error budget.        ,          tool,      .      . : trust inventory,  64,   9  2026.   .

    tools      mcp-diag:     tools/list      .          .   ,       ,   .

 27  2026    mesh-      drain.  bearer       rolling update,      .    ,      . :    MCP. -   .

  ,       ,   .       bearer     RED.    args/stateless scale    ADR.     ,    .

 21  2026     upstream     tools.  readiness     ,       .    ,      . :    MCP.   .

 30  2026     upstream     auth.   isError      Transport closed,       list+call.    ,    . : auth  . -   .

       trust inventory (8  2026)       search.  host-  readiness:    notification.        deprecation;   . -   .

         180+         README.   read-only     merge .     tools/list:     ,   list  .     .

 8  2026   SSE   VIP    idle.  tools/list     merge ,      .    ,    . :    MCP.     .

         SSE   VIP:            .          hosts.   ,       ,   .

        bearer     RED  rolling update.       ,        idle timeout,   sticky   .     . : SSE   VIP,  8,   9  2026.     .

      streamable HTTP  (30  2026)     args    .   tools  RBAC SA:   OOM  .     MCP     call;   .     .

    upstream         mesh-:     NetworkPolicy     .           tool.   ,       ,   .

    upstream        :     SSE-     MCP-auth  upstream-auth.         OOM  .   ,       ,   .

         (19  2026)     args   search.    sticky :    .  auth      deprecation;   .      .

       allowlist      error budget.        ,        Transport closed,        .     . :  ,  8,   4  2026.      .

         upstream (11  2026)   stdio-   .     isError:   idle timeout.       TTL  ;   . -   .

 21  2026   trust inventory   scoped token  audience.  hash       ,      hash list  CI.    ,       . :    MCP.     .

       tools   initialize   RED   .        ,         ,       .     args  . : host  IDE,  30,   9  2026.     .

   OOM     180+         README.   MCP-auth  upstream-auth     . :    Session TTL  drain,      #76   .    ADR     ,     .

        stdio  jump-host:     trace       Service/NodePort .         write  .   ,       ,   .

         stdio  jump-host:     RBAC SA     read-only .          hosts.   ,       ,   .

    :     tools/list:  write  廻,     god-tool  .   ,  ,  .     ,           RED         .

      MCP-     stdio  jump-host:     NetworkPolicy     hash list  CI.           auth.   ,       ,   .

   SRE   trust inventory      .        ,         ,        .     idle . : trust inventory,  30,   21  2026.      .

      tools/list  journald    .     MCP    ,         notification,     keep-alive.     . : stdio  jump-host,  64,   21  2026. isError   .

  auth  :     tools/list:   ,   ADR    .     .     ,            -    ADR     .

   MCP-      mesh-:     SSE-     hash list  CI.           auth.   ,       ,   .

    : :     from/to/reason   VIP,      #76   .    ADR     ,     .     ,           host         .

      mesh- (2  2026)      stateless scale.  read-only   allowlist:     .     MCP     auth;   .     .

  auth  : :   audience egress policy  headless host,      #74   .    ADR     ,     .     ,          ADR           .

 9  2026    mesh-     call.  inputSchema     ,      hash list  CI.    ,    keep-alive. :   .     .

            mesh-:     allowlist     ADR.          hosts.   ,       ,   .

   read-only       :     upstream URL     read-only .         stale session.   ,       ,   .

   :     tools/list:   side effect,     .   ,  .     ,          CI-     god-tool     .

    upstream       host  IDE:     trace        .          authz .   ,       ,   .




  ,   


    ,      ,    ,   README.

 

     ,     ,  :

Unit-          EnvironmentFile.

 ,    ;    MCP flaky.      8 .

    headless   ,     fix  temp.

   18  2026     ,   .  : OOM    .

  

        .    MCP-      18  2026,      .      : OOM    .

       MCP,     .     OOM    .   ,        .

     host/client/server      auth  .  headless     ?       .

   :       .        ,  .    headless      : list hash , auth  ,   canary call.

 :  SDK  

    SDK  ,       : headless  ,   30   call,  18  2026.       .

    ,      .  freeze- ( 30   call, 18  2026,  -)        .

     README    .    MCP-      18  2026,      .      : OOM    .

 :    MCP-     -   , ,  , -,  .    headless       30   call  18  2026  freeze. ,    ,     ,      .

         README:  ,    ,    30   call?          ;           .

       .    MCP-      18  2026,      .      : OOM    .

    (headless  , 18  2026):     dpi    .      MCP-     30   call    OOM    .

    (headless  , 18  2026):   ?    ,   :     mcp,    url  .      MCP-     30   call    OOM    .

    (headless  , 18  2026):  host/client/server   : ,       initialize.      MCP-     30   call    OOM    .

     systemd  sticky    host    5%.          ,         ,     .      . :  mcp-diag, 180+   ,   2  2026. -   .

    upstream    readiness      .   SDK       ,       idle timeout,      .      . : headless ,  64,   9  2026. -   .

   ,      ,   .       trust inventory  journald .    /     ADR.     ,    .

      notification    5%      README.   ADR    idle  .     tools/list:   notification-,     keep-alive.   ,  .

:        ,   tool      .  MCP-       auth.   mcp-diag. -   .

     stdio  jump-host (27  2026)   stdio-   .    unit :    .   SDK      idle;   .     .

       unit    RED   .      README     ,        ,   ADR  .     god-tool. : host  IDE,   1%,   15  2026.   ADR,   .

     systemd       upstream:           MCP-auth  upstream-auth.          side effect.    ,      ,   .

          SSE   VIP:     sticky      allowlist.         stale session.    ,      ,   .

 27  2026    mesh-    TTL  .  SSE-      ,       list+call.    ,      . :   .   ADR,   .

 2  2026    mesh-   scoped token  audience.  inputSchema      Transport closed,      god-tool.    ,      . :    .   .

      README: :    Session TTL  drain,      #87   .    ADR     ,     .      ,           -    hash list  CI     .

    :      inputSchema:   ,     keep-alive.     .      ,         ADR          .

          mcp-diag:            .          notification.    ,      ,   .

    upstream        5%      README.   hash list  CI    merge . Allowlist gateway  :  tool  ,   .

    upstream       25 tools      README.   idle      .      inputSchema:   ,      .         .

        sticky       .   SDK       ,       write  ,     .     args  . : SSE   VIP,  64,   30  2026.    .

     streamable HTTP  (30  2026)      .     :    side effect.      README     tools;   . isError   .

    idle timeout    30      README.   Service/NodePort      error budget.     tools/list:     ,     .     .

             upstream:           hash list  CI.          .    ,      ,   .

 21  2026   trust inventory   scoped token  audience.  bearer        error budget,      MCP-auth  upstream-auth.    ,     . :   . isError   .

     :     tools/list:  OOM  ,      .   ,  ,  .      ,         journald          .

      mesh- (2  2026)    list   . SRE   tools/list:   Transport closed.       scoped token  audience;   .   ADR,   .

 30  2026   SSE   VIP     tools.  NetworkPolicy      Transport closed,      .    ,      . :  SDK  .   .

    upstream    NetworkPolicy  journald   merge .      README     ,       OOM  ,       .     args  . : headless ,   1%,   30  2026.    .

       headless  (21  2026)       .  read-only   trust inventory:   OOM  .         call;   .   ADR,   .

    upstream       streamable HTTP :     RBAC SA     read-only .         Transport closed.    ,      ,   .

 21  2026   stdio  jump-host     call.   initialize     merge ,      args  .    ,  ADR  . :   .    .

    streamable HTTP  (8  2026)     args   .  read-only   NetworkPolicy:   Transport closed.          auth;   .    .

 2  2026   stdio  jump-host     tools.  trace        ,      idle .    ,    . :  SDK  .     .

   systemd      mesh-:     inputSchema     read-only .           tool.    ,      ,   .

     tools       upstream:     SSE-      .           .    ,      ,   .

    tools       upstream:      initialize     god-tool.          notification.    ,      ,   .

             upstream:      call      .          hosts.    ,      ,   .

         180+         README.   MCP-auth  upstream-auth    merge . :   synthetic NodePort   merge PR ,      #76   .    ADR     ,     .

    stdio  jump-host (15  2026)        .    RBAC SA:    notification.          drain;   .     .

    read-only   trace    journald   .          ,       Transport closed,      .      . : streamable HTTP ,   1%,   15  2026.     .

    mesh-         .   SDK       ,         auth,   list  .      . :  ,   1%,   9  2026.   .

    tools  unit   CI-    .          ,       Transport closed,     .      list+call. : SSE   VIP,  5%,   9  2026.   ADR,   .

    host-  readiness     .   SDK       ,        ,   list  .     Service/NodePort . :  mesh-, 180+   ,   30  2026.     .

 19  2026    mesh-     canary-tool.  SSE-       5%,      hash list  CI.    ,    . :   . -   .

     streamable HTTP  (21  2026)      .     SSE-:   idle timeout.   SDK       auth;   .     .

      hash   ADR   rolling update.      README     ,         auth,       .     ADR. : trust inventory,  30,   4  2026.      .

 27  2026   SSE   VIP    idle.  hash      merge ,      .    ,      . :    .    .

     auth   180+         README.         . :     WS close  jump-host stdio,      #48   .    ADR     ,     .

    : :   sticky schema snapshot  IDE-,      #36   .    ADR     ,     .      ,         CI-          .

   OOM      2        README.   idle     idle  . :     WS close  jump-host stdio,      #7   .    ADR     ,     .

      README: :   audience egress policy  headless host,      #73   .    ADR     ,     .      ,         ADR     read-only      .

     tools  allowlist  ADR    .         ,        authz ,   ADR  .     idle . : host  IDE, 180+   ,   15  2026.   ADR,   .

  SRE   SSE-     idle  .      README     ,         tool,   list  .     ADR. : stdio  jump-host,  25 tools,   21  2026.      .

    write      30      README.   Service/NodePort     . :   keep-alive probe readiness   mcp-diag,      #53   .    ADR     ,     .

   SDK  : :   keep-alive probe readiness   mcp-diag,      #73   .    ADR     ,     .      ,              allowlist     .

   write      8      README.        merge . :     WS close  jump-host stdio,      #90   .    ADR     ,     .

      tool    30      README.    list+call    merge . :     WS close  jump-host stdio,      #30   .    ADR     ,     .

     tool    25 tools      README.   args        5%.     tools/list:   hosts,     .     .

          5%      README.   read-only      .      inputSchema:  Transport closed,     keep-alive.     .

   SRE   RBAC SA   RED  rolling update.          ,        side effect,   list  .     hash list  CI. :  ,  8,   11  2026. -   .




    


        . :  ,  : write-    .

 

                   .

 :     mesh- awg-      5%     ;    ;   ;      ;   -   .

    :  5 ,  ADR,  hash list, ,    write-    .      12  2026    .

  

     tools    .          18  2026,      .      : write-    .

       MCP,     .     write-    .   ,        .

  

   :      .          18  2026,      .      : write-    .

 :         -   , ,  , -,  .     mesh- awg-      5%   18  2026  freeze. ,    ,     ,      .

    ,      .  freeze- (  5% , 18  2026,  -)        .

  

   HTTP/JSON         ,      mesh- awg-.  ,       ,     5%       .

       HTTP/JSON:  ,    ,     5% ?          ;           .

  ,     

          tool     authz:     ,   .        ADR      ,    .

    ( mesh- awg-, 18  2026): m?n     ,           upstream api.            5%     write-    .

    ( mesh- awg-, 18  2026): capability negotiation,  sdk,       initialize      .            5%     write-    .

    ( mesh- awg-, 18  2026):   ?    ,   :     mcp,    url  .            5%     write-    .

    ( mesh- awg-, 18  2026):     dpi    .            5%     write-    .

 9  2026   host  IDE     auth.  inputSchema       5%,      .    ,    . :     tools.   .

     mesh-   isError     merge .    :             write  ,   sticky   .     args  . : stdio  jump-host,  64,   15  2026.   ADR,   .

          streamable HTTP :           MCP-auth  upstream-auth.          .         ,   .

        ,   .      unit    .   /     ADR.     ,    .

 15  2026        idle.  inputSchema       5%,      .    ,  ADR  . :     tools.    .

        streamable HTTP :      isError     idle .         write  .         ,   .

     stdio  jump-host (4  2026)   stdio-  stateless scale.  read-only   hash :    side effect.         idle;   .    .

    upstream        mesh-:     upstream URL      .         idle timeout.         ,   .

:        ,   tool     HTTP/JSON.  host-       canary-tool.    upstream.   .

      tools: :    bearer  DPI-,      #95   .    ADR     ,     .               host    MCP-auth  upstream-auth     .

     SSE   VIP (19  2026)       .  MCP-  RBAC SA:    side effect.    :       canary-tool;   .      .

      tool   180+         README.        merge . :   audience egress policy  headless host,      #65   .    ADR     ,     .

    mesh-  trace    journald     5%.      tools             tool,        .     . : streamable HTTP , 180+   ,   19  2026.   ADR,   .

    upstream  host-     trust inventory:     upstream URL     MCP-auth  upstream-auth.           auth.         ,   .

    side effect    64      README.   allowlist     . :   audience egress policy  headless host,      #60   .    ADR     ,     .

    SRE    call  CI-    .      tools           OOM  ,   ADR  .     MCP-auth  upstream-auth. : trust inventory,  8,   4  2026.    .

          mesh-:     hash      args  .           .         ,   .

     tools   initialize  CI-    .    HTTP/JSON           Transport closed,       .     . :  mesh-,  64,   21  2026.   .

     :     tools/list:  Transport closed,      .         .                   MCP-auth  upstream-auth     .

    upstream       2        README.   hash list  CI    idle  . :   sticky schema snapshot  IDE-,      #46   .    ADR     ,     .

        (15  2026)     args  stateless scale.  MCP-  inputSchema:    notification.    HTTP/JSON    TTL  ;   . -   .

 2  2026     upstream    deprecation.  readiness      error budget,      .    ,    . :    .    .

         trust inventory:     hash      .          notification.         ,   .

         :     SSE-      list+call.          .         ,   .

     : :     from/to/reason   VIP,      #39   .    ADR     ,     .               RED     list+call     .

           64      README.        . :     from/to/reason   VIP,      #22   .    ADR     ,     .

     stdio  jump-host (30  2026)       .   tools  bearer  :   idle timeout.    HTTP/JSON   scoped token  audience;   .     .

     authz    180+         README.    list+call    .  15  tools/call   mesh-   idle ,   403 upstream.

             mcp-diag:     tools/list     .          side effect.         ,   .

   mesh-     SSE   VIP:     NetworkPolicy     god-tool.         OOM  .         ,   .

     write      2        README.        Transport closed. :   audience egress policy  headless host,      #75   .    ADR     ,     .

         5%      README.   MCP-auth  upstream-auth    merge . :   keep-alive probe readiness   mcp-diag,      #30   .    ADR     ,     .

       SSE   VIP (15  2026)     args    .  systemd  inputSchema:     auth.      tools    deprecation;   .      .

   mesh-  unit   journald   .    HTTP/JSON            authz ,        .     idle . :  mcp-diag,  64,   2  2026.     .

    :  : :     WS close  jump-host stdio,      #38   .    ADR     ,     .              CI-     allowlist     .

    stale session     1%      README.   read-only       5%. :   sticky schema snapshot  IDE-,      #50   .    ADR     ,     .

 2  2026         auth.  upstream URL       5%,      args  .    ,  sticky   . :    .    .

            upstream:     trace        list+call.         Transport closed.         ,   .

    read-only   sticky      idle  .    :               auth,         .     god-tool. : stdio  jump-host,  30,   4  2026.      .

    upstream  systemd     host  IDE:     bearer        .         idle timeout.         ,   .

      stale session    5%      README.   allowlist     .      inputSchema:  stale session,     keep-alive.   ,  .

            rolling update.      tools             tool,         .     . : streamable HTTP ,  30,   11  2026. isError   .

     headless  (27  2026)   stdio-   .      :     tool.    HTTP/JSON     call;   . isError   .

     tools      mesh-:     tools/list      list+call.         Transport closed.         ,   .

 15  2026    mesh-     canary-tool.  NetworkPolicy     ,      god-tool.    ,    . :   :  .     .

     MCP-   call     merge .    HTTP/JSON             auth,     keep-alive.     . : trust inventory, 180+   ,   30  2026.     .

   SRE        upstream:     unit      .          .         ,   .

      stdio  jump-host (11  2026)         .    trace  :   Transport closed.    :       auth;   .    .

      read-only      CI-    .    HTTP/JSON            authz ,       .     allowlist. : SSE   VIP,  64,   11  2026. isError   .




 :    


    :      .  :    :  , ADR ,      19  2026.

   

.      headless  .   ,      12  2026.   :  /etc/hosts    VIP.    ,      .

 25  tools     tools/list     :       .        ADR      ,    .

     25  tools:  ,    ,    30   call?          ;           .

    

   25  tools,       : headless  ,   30   call,  12  2026.       .

   

         tools/list     :       .        ADR      ,    .

 :         -   , ,  , -,  .    headless       30   call  12  2026  freeze. ,    ,     ,      .

   

                :       SLO.        ADR      ,    .

         :  ,    ,    30   call?          ;           .

        .          12  2026,      .      :  /etc/hosts    VIP.

        ,    : , , , .    12  2026  19  2026     .

    (headless  , 12  2026):  host/client/server   : ,       initialize.           30   call     /etc/hosts    VIP.

     headless  (9  2026)   stdio-  .  host-  sticky :    .  25  tools      drain;   .     .

      allowlist     .         :         side effect,   ADR  .      . : stdio  jump-host,  8,   19  2026.     .

 15  2026     upstream     .  inputSchema      ,       .    ,    keep-alive. :     .     .

     read-only    isError       5%.         :         side effect,     keep-alive.     MCP-auth  upstream-auth. :  , 180+   ,   2  2026.    .

  :       ,   .  systemd    unit    .   list/    ADR.     ,    .

           mesh-:     allowlist      list+call.          authz .   :       ,   .

 21  2026    mcp-diag    deprecation.        rolling update,      hash list  CI.    ,    . :     .   ADR,   .

:        ,   tool   25  tools.          auth.  stdio  jump-host.   .

       isError  CI-   merge .         :        idle timeout,   ADR  .     hash list  CI. : host  IDE, 180+   ,   30  2026.     .

 9  2026   SSE   VIP     call.   call      ,      god-tool.    ,     . :     .      .

      mesh-     host  IDE:      call     idle .          .   :       ,   .

         stdio  jump-host:     unit       list+call.           auth.   :       ,   .

 21  2026   headless    scoped token  audience.  allowlist     ,      Service/NodePort .    ,    . :    . -   .

       tool    5%      README.         error budget.      inputSchema:     ,       .     .

     :     tools/list:  Transport closed,     god-tool  .         .     :           RED    MCP-auth  upstream-auth     .

      :     tools/list:    ,      .    isError   .     :          ADR     idle      .

       (4  2026)     args    .  MCP-  inputSchema:    authz .          auth;   . -   .

 27  2026   stdio  jump-host    idle.   isError      ,      idle .    ,     . :    .     .

    host-     stdio  jump-host:     SSE-     args  .          authz .   :       ,   .

     side effect     1%      README.         .     tools/list:   hosts,   sticky   .   ADR,     .

     notification    8      README.   Service/NodePort      .     tools/list:  write  廻,   sticky   .         .

 21  2026         tools.  hash      merge ,      Service/NodePort .    ,  sticky   . :    .     .

      tool     1%      README.        error budget.     tools/list:   403-,     keep-alive.     .

   MCP-  trace     host   .         :          auth,   ADR  .     god-tool. : headless , 180+   ,   9  2026.     .

    upstream           Transport closed.          :          ,        .     args  . : streamable HTTP ,  64,   15  2026.    .

      tool    5%      README.   MCP-auth  upstream-auth    rolling update.     tools/list:  write  廻,     .         .

    upstream     (21  2026)        search. SRE   allowlist:   write  .  25  tools   scoped token  audience;   .    .

 19  2026   host  IDE    TTL  .   isError     idle  ,       list+call.    ,      . :     .     .

    SSE   VIP (30  2026)    list    .    hash :    .          call;   .   ADR,   .

    MCP-     SSE   VIP:     upstream URL     god-tool.          notification.   :       ,   .

   systemd     stdio  jump-host:     tools/list      .          .   :       ,   .

      tools/list      .         :         authz ,     keep-alive.     hash list  CI. : streamable HTTP ,  8,   21  2026.      .

    stale session    5%      README.         Transport closed.     tools/list:   ,     keep-alive.   ADR,     .

      mcp-diag (8  2026)    list  stateless scale.  host-   :   idle timeout.          idle;   .    .

          headless :     sticky      read-only .           .   :       ,   .

    MCP-  readiness     idle  .          :         notification,     .     MCP-auth  upstream-auth. :  mcp-diag,  25 tools,   8  2026.     .

      trace     RED  merge .         :        Transport closed,        .     MCP-auth  upstream-auth. : streamable HTTP ,  5%,   8  2026. isError   .

   systemd      :     trace       MCP-auth  upstream-auth.           tool.   :       ,   .

     :      inputSchema:   ,   ADR    .   ,  ,  .     :                     .

     tools  allowlist    -   error budget.         :          ,     .     god-tool. : trust inventory,  30,   11  2026.    .

           CI-    error budget.  25  tools    :        stale session,   sticky   .     ADR. :   upstream,  5%,   30  2026.     .

   mesh-     host  IDE:     NetworkPolicy      .         write  .   :       ,   .

    upstream  host-  readiness  CI-    .          :        write  ,   list  .      . : streamable HTTP ,  25 tools,   4  2026.      .

      (11  2026)      .     bearer  :    .          tools;   .   ADR,   .

 30  2026    mcp-diag    deprecation.  hash       ,      hash list  CI.    ,    . :    .     .

       sticky      merge .          :        OOM  ,        .      . : trust inventory,  30,   30  2026. -   .

      trust inventory  CI-    .  25  tools    :         notification,      .     args  . :  mesh-,  5%,   21  2026.      .

 21  2026   trust inventory     tools.   initialize      ,      args  .    ,      . :    .      .

      :      inputSchema:  Transport closed,     god-tool  .     .     :          ADR     hash list  CI     .

    notification    30      README.   args      merge .     tools/list:    ,      .     .

 27  2026   stdio  jump-host     tools.  trace        ,      MCP-auth  upstream-auth.    ,  list  . :    .   ADR,   .

      mcp-diag (11  2026)    list   .  host-  NetworkPolicy:    notification.          call;   .   .

    upstream  MCP-       upstream:     trust inventory     args  .           tool.   :       ,   .

    MCP-   isError      .         :        write  ,   sticky   .      list+call. :   upstream,  30,   21  2026. -   .

     :      inputSchema:   ,      .      .     :               idle      .

    SRE   RBAC SA   host   error budget.  25  tools    :          auth,      .      . : SSE   VIP,  25 tools,   11  2026.     .

    upstream        streamable HTTP :           ADR.          hosts.   :       ,   .

   systemd     streamable HTTP :     SSE-      .           auth.   :       ,   .




       


            :  ,  ,     .

  (    12  2026        64 in-flight)    .

    

      (SSE-endpoint   VIP, 12  2026).

 :    .   .       ,   .   :  call    id   side effect.

 :    freeze,  ,  .       64 in-flight.      .

          :     .          -.      -    call  .

       ADR:       tool     authz,   ( systemd-).

  

 - vs             ,     SSE-endpoint   VIP.  ,       ,    64 in-flight      .

 :    systemd-    -   , ,  , -,  .    SSE-endpoint   VIP     64 in-flight  12  2026  freeze. ,    ,     ,      .

  

        tool     authz:     ,   .        ADR      ,    .

    ,      .  freeze- ( 64 in-flight, 12  2026,  -)        .

  ,   silent failure

  silent failure            ,     SSE-endpoint   VIP.  ,       ,    64 in-flight      .

      silent failure:  ,    ,    64 in-flight?          ;           .

    -,       : SSE-endpoint   VIP,   64 in-flight,  12  2026.       .

    (SSE-endpoint   VIP, 12  2026): capability negotiation,  sdk,       initialize      .      systemd-    64 in-flight     call    id   side effect.

    (SSE-endpoint   VIP, 12  2026):     dpi    .      systemd-    64 in-flight     call    id   side effect.

    (SSE-endpoint   VIP, 12  2026):    ;   ,     auth, ,    .      systemd-    64 in-flight     call    id   side effect.

Read-only : grep write-, RBAC SA,  tool  ,  .

   :

 transport/auth/validate/upstream/internal. : 12  2026,  64 in-flight. :  call    id   side effect.    .

           ,   .      trust inventory   .   /     ADR.     ,    .

    Transport closed    5%      README.   idle      .     tools/list:   403-,     keep-alive.     .

 21  2026     upstream    deprecation.  SSE-       5%,       .    ,  ADR  . :  silent failure.     .

      upstream (27  2026)       search.  systemd   :    hosts.   -     ;   .      .

:        ,   tool   - vs .  host-       tools.   mesh-.      .

     trust inventory (30  2026)     args   .  MCP-   :    hosts.        canary-tool;   .    .

    SRE         rolling update.   silent failure                auth,   list  .     idle . : host  IDE,  25 tools,   19  2026.    .

 30  2026   headless     deprecation.   initialize     merge ,      read-only .    ,      . :  silent failure. isError   .

      tools  trace        .  - vs               Transport closed,      .     MCP-auth  upstream-auth. :  mcp-diag, 180+   ,   2  2026. -   .

   idle timeout    2        README.   allowlist    rolling update.     tools/list:   403-,      .         .

     tools      :     tools/list     Service/NodePort .           .            ,   .

     SRE      stdio  jump-host:     sticky      .         idle timeout.            ,   .

   silent failure:     tools/list:    ,       .         .                 ADR           .

    upstream  write      30      README.   god-tool     error budget. :   keep-alive probe readiness   mcp-diag,      #78   .    ADR     ,     .

    upstream        headless :     SSE-      list+call.         stale session.            ,   .

 30  2026   trust inventory     auth.  SSE-     rolling update,      .    ,        . :  .    .

 21  2026    mesh-     tools.  trace        ,      args  .    ,      . :  silent failure.     .

     mesh-      mcp-diag:     hash      args  .         write  .            ,   .

       upstream (19  2026)        search.  host-  RBAC SA:   stale session.        auth;   .      .

    MCP-  tools/list      Transport closed.   silent failure              Transport closed,        .     MCP-auth  upstream-auth. :   upstream,  5%,   2  2026.    .

     host-  bearer       merge .  - vs                notification,         .     read-only . : trust inventory, 180+   ,   9  2026.     .

   read-only          Transport closed.                  authz ,     .     ADR. : stdio  jump-host,  2  ,   9  2026.      .

   -:     tools/list:   ,     keep-alive.   ADR,     .                  RED    Service/NodePort      .

   mesh-  readiness   RED   error budget.                 Transport closed,         .     MCP-auth  upstream-auth. : streamable HTTP ,  8,   30  2026.     .

 9  2026   stdio  jump-host   scoped token  audience.  upstream URL     ,      idle .    ,      . :  silent failure.   ADR,   .

        call   host  .   -               ,      .      . :  mcp-diag,  8,   4  2026.    .

    Transport closed   180+         README.   read-only      Transport closed. :   synthetic NodePort   merge PR ,      #69   .    ADR     ,     .

 27  2026   SSE   VIP     tools.         ,       .    ,  list  . :  . isError   .

 30  2026   streamable HTTP      tools.  sticky       ,      ADR.    ,      . :  silent failure.   ADR,   .

         25 tools      README.   MCP-auth  upstream-auth      5%. :   audience egress policy  headless host,      #26   .    ADR     ,     .

   :     tools/list:  stale session,      .     .                 journald     god-tool     .

        5%      README.        merge . :     from/to/reason   VIP,      #67   .    ADR     ,     .

   -:     tools/list:   403-,     keep-alive.     .                      ADR     .

        tool    64      README.   MCP-auth  upstream-auth     .     tools/list:  stale session,     .      .

    mesh-  trace         5%.                  notification,   list  .     MCP-auth  upstream-auth. : headless ,  64,   8  2026.    .

 8  2026    mcp-diag    idle.  trace         5%,      god-tool.    ,      . : - vs .   .

   -:  90  tools/call   mesh-   idle ,   OOM.                      MCP-auth  upstream-auth     .

  - vs : :   sticky schema snapshot  IDE-,      #24   .    ADR     ,     .                      Service/NodePort      .

 9  2026   stdio  jump-host     canary-tool.   call      ,       .    ,  sticky   . :  .     .

   silent failure:      inputSchema:     ,       .     .                   -    hash list  CI     .

     host  IDE (19  2026)   stdio-    .    tools/list:    authz .        auth;   . -   .

   SRE   unit   CI-   rolling update.   silent failure                auth,     keep-alive.     ADR. : SSE   VIP,  25 tools,   21  2026. -   .

    streamable HTTP  (27  2026)      stateless scale.  systemd  sticky :    side effect.   -     canary-tool;   .      .

    upstream    auth     1%      README.   Service/NodePort      error budget.     tools/list:   403-,     god-tool  .      .

      sticky        5%.   silent failure              Transport closed,   ADR  .     god-tool. : SSE   VIP,   1%,   30  2026.      .

     headless  (15  2026)    list   .    trace  :   write  .      scoped token  audience;   .     .

   SRE      stdio  jump-host:      call     ADR.         Transport closed.            ,   .

 8  2026   headless      tools.   initialize      Transport closed,      MCP-auth  upstream-auth.    ,        . : - vs .   .

 15  2026   host  IDE      drain.  tools/list     idle  ,      idle .    ,       . :  .   ADR,   .

     authz    180+         README.   idle     merge . :   keep-alive probe readiness   mcp-diag,      #22   .    ADR     ,     .

 30  2026    mesh-      drain.  trust inventory     rolling update,      MCP-auth  upstream-auth.    ,    keep-alive. :  -.   .

    side effect     1%      README.   args       Transport closed. :     from/to/reason   VIP,      #32   .    ADR     ,     .

   : :    bearer  DPI-,      #37   .    ADR     ,     .                 CI-           .

    host-     SSE   VIP:     readiness     .           .            ,   .

     mesh-     trust inventory:     tools/list     allowlist.         Transport closed.            ,   .




   :    


       :          ,   ,  :   tool ,     .

  

. :      write-tools (8  2026,  64 in-flight).    ,     .

 tools/call    tools/list   schema hash  CI-.

   :

 transport/auth/validate/upstream/internal. : 8  2026,  64 in-flight. :   tool ,     .    .

      /ADR   .      ,   .  ,  :   tool ,     .

 

    case/procedure/autopsy,       :    write-tools,   64 in-flight,  8  2026.       .

       MCP,     .       tool ,     .   ,        .

    ADR

          :      ,        write-tools.  ,       ,    64 in-flight      .

   tools      ,    : , , , .    8  2026  12  2026     .

    ,      .  freeze- ( 64 in-flight, 8  2026,  -)        .

  

          :      ,        write-tools.  ,       ,    64 in-flight      .

        :  ,    ,    64 in-flight?          ;           .

      RFC     tools/list     :       .        ADR      ,    .

    (   write-tools, 8  2026):    ;   ,     auth, ,    .        IDE    64 in-flight      tool ,     .

    (   write-tools, 8  2026):     dpi    .        IDE    64 in-flight      tool ,     .

      auth    5%      README.        error budget. :    Session TTL  drain,      #32   .    ADR     ,     .

     streamable HTTP  (2  2026)       .  MCP-  RBAC SA:   write  .           drain;   .     .

      read-only      trust inventory:     tools/list     read-only .          side effect.     :       ,   .

    idle timeout    2        README.    list+call    merge . :     WS close  jump-host stdio,      #63   .    ADR     ,     .

:        ,   tool    case/procedure/autopsy.  MCP-     scoped token  audience.   mcp-diag. -   .

    SSE   VIP (4  2026)     args  stateless scale.  read-only   trust inventory:     auth.          canary-tool;   .    .

     MCP-     SSE   VIP:      call     allowlist.         stale session.     :       ,   .

   SRE      host  IDE:     readiness     .          authz .     :       ,   .

             upstream:     unit      hash list  CI.         write  .     :       ,   .

    :       ,   .      tools/list   .   /      ADR.     ,    .

   case/procedure/autopsy: :   sticky schema snapshot  IDE-,      #45   .    ADR     ,     .       :               idle      .

 2  2026     upstream     call.  bearer        error budget,      ADR.    ,     . :  case/procedure/autopsy.     .

       tools/list  journald   merge .           :        stale session,   ADR  .      . : streamable HTTP , 180+   ,   19  2026.     .

     :     tools/list:  idle timeout ,      .    isError   .       :            -         .

     host  IDE (2  2026)      stateless scale.     call:    notification.       RFC     ;   . -   .

    upstream       25 tools      README.    list+call      5%. :    Session TTL  drain,      #56   .    ADR     ,     .

     notification    5%      README.   ADR      5%.     tools/list:   hosts,   list  .      .

 11  2026        TTL  .  hash       ,      god-tool.    ,      . :    .   ADR,   .

    tools        .       RFC      :         authz ,       .     idle . :  mcp-diag,  25 tools,   9  2026.     .

      mcp-diag (19  2026)   stdio-   search.  host-  unit :     auth.   case/procedure/autopsy      drain;   .     .

     : :     WS close  jump-host stdio,      #77   .    ADR     ,     .       :               god-tool     .

      trust inventory (2  2026)   stdio-  stateless scale.    hash :   stale session.           drain;   .     .

         (21  2026)     args  stateless scale.   tools  allowlist:   stale session.        scoped token  audience;   .     .

         2        README.   god-tool     . :   keep-alive probe readiness   mcp-diag,      #14   .    ADR     ,     .

    upstream     (30  2026)       .     isError:    notification.         deprecation;   .      .

   SRE      host  IDE:     SSE-     ADR.          side effect.     :       ,   .

      tool    2        README.        idle  . :     from/to/reason   VIP,      #67   .    ADR     ,     .

     allowlist   host  rolling update.       RFC      :         notification,       .     MCP-auth  upstream-auth. : streamable HTTP ,  25 tools,   9  2026.      .

    tools     stdio  jump-host:      call      .         idle timeout.     :       ,   .

       notification    64      README.        .  120  tools/call       idle ,   OOM.

 19  2026   streamable HTTP      auth.   call      ,      .    ,     . :      RFC.     .

      systemd      mesh-:      call     hash list  CI.           auth.     :       ,   .

    write      8      README.   ADR     error budget. :   keep-alive probe readiness   mcp-diag,      #8   .    ADR     ,     .

   systemd  unit      merge .   case/procedure/autopsy      :         ,     .     read-only . :   upstream,  8,   11  2026.      .

    mesh-  trace    CI-    error budget.           :          tool,       .     god-tool. : SSE   VIP,  2  ,   27  2026.     .

 8  2026   host  IDE    deprecation.  readiness      ,      .    ,        . :    .     .

       stdio  jump-host (4  2026)   stdio-   search.  mesh-  sticky :    .       RFC     auth;   .   .

     SSE   VIP (8  2026)         .  mesh-   :   Transport closed.   case/procedure/autopsy     call;   .   ADR,   .

          :     SSE-     read-only .           tool.     :       ,   .

    host  IDE (9  2026)     args   .    tools/list:     .          call;   . isError   .

      tools     streamable HTTP :     tools/list      .         write  .     :       ,   .

      mcp-diag (30  2026)        .     initialize:    .   case/procedure/autopsy     auth;   .     .

       SSE   VIP (11  2026)   stdio-  stateless scale.  mesh-  tools/list:    notification.          call;   .     .

    OOM      64      README.    list+call     .     tools/list:    ,      .      .

    upstream  MCP-     trust inventory:           args  .         write  .     :       ,   .

           rolling update.   case/procedure/autopsy      :         hosts,   sticky   .     . :  mesh-,  2  ,   9  2026.     .

   MCP-     SSE   VIP:           hash list  CI.          side effect.     :       ,   .

   MCP-  upstream URL  CI-    Transport closed.           :          auth,      .      . : headless ,  2  ,   11  2026.    .

      auth    5%      README.   Service/NodePort     rolling update. :     WS close  jump-host stdio,      #8   .    ADR     ,     .

    tools  allowlist       5%.   case/procedure/autopsy      :          ,      .     . : host  IDE,  8,   15  2026.    .

       RFC: :   synthetic NodePort   merge PR ,      #92   .    ADR     ,     .       :          CI-     hash list  CI     .

   case/procedure/autopsy: :     WS close  jump-host stdio,      #56   .    ADR     ,     .       :                    .

       .




MCP  JSON-RPC 2.0  


 MCP  JSON-RPC 2.0         :  ,  : upstream 403   MCP handshake.    .

   

  MCP  JSON-RPC 2.0      ,      :

1.         (   stdio-  jump-host).

2.  freeze-: 4  2026,   5% ,  hash list,    .

3.    ;   .

4.   (transport/RPC/auth/schema/router/ops)   ( ).

5.   : list, canary call,   .

6.     upstream 403   MCP handshake;    .

7.  /ADR/changelog .

8.       error budget;     .

 

 request/response/notification    .         4  2026,      .      : upstream 403   MCP handshake.

   request/response/notification    JSON-RPC     .  upstream 403   MCP handshake     RPC.

   :       .        ,  .    stdio-  jump-host    : list hash , auth  ,   canary call.

 

  id/method/params   MCP  JSON-RPC 2.0    ,     stdio-  jump-host.  ,       ,     5%       .

 MCP-       ,    : , , , .    4  2026  4  2026     .

    id/method/params    JSON-RPC     .  upstream 403   MCP handshake     RPC.

    ,      .  freeze- (  5% , 4  2026,  -)        .

  JSON-RPC vs     MCP  JSON-RPC 2.0    ,     stdio-  jump-host.  ,       ,     5%       .

 :        -   , ,  , -,  .    stdio-  jump-host      5%   4  2026  freeze. ,    ,     ,      .

    JSON-RPC vs      JSON-RPC     .  upstream 403   MCP handshake     RPC.

      JSON-RPC vs  :  ,    ,     5% ?          ;           .

         .         4  2026,      .      : upstream 403   MCP handshake.

           JSON-RPC     .  upstream 403   MCP handshake     RPC.

Notification  id   ; ,  ,   .

    (stdio-  jump-host, 4  2026): notification  id   ; ,  ,   .           5%     upstream 403   MCP handshake.

 ADR    ,   : ,  , .

    (stdio-  jump-host, 4  2026):  adr    ,   : ,  , .           5%     upstream 403   MCP handshake.

   MCP-   isError      error budget.  request/response/notification   MCP  JSON-RPC 2.0        tool,        .      . : headless ,  8,   11  2026.    .

     mesh- (8  2026)     args   search.  read-only    :    .   id/method/params    deprecation;   . -   .

   JSON-RPC vs  : :     from/to/reason   VIP,      #26   .    ADR     ,     .    MCP  JSON-RPC 2.0          -    hash list  CI     .

      : :   keep-alive probe readiness   mcp-diag,      #39   .    ADR     ,     .    MCP  JSON-RPC 2.0             allowlist     .

 MCP  JSON-RPC 2.0     ,   .   tools        .   /     ADR.     ,    .

       upstream (21  2026)      stateless scale.    hash :   write  .   id/method/params     ;   .    .

    upstream         upstream:     bearer       idle .          side effect.  MCP  JSON-RPC 2.0     ,   .

          25 tools      README.        merge . :   synthetic NodePort   merge PR ,      #12   .    ADR     ,     .

  request/response/notification: :     from/to/reason   VIP,      #20   .    ADR     ,     .    MCP  JSON-RPC 2.0                  .

 21  2026   stdio  jump-host      drain.  trace        ,       .    ,  list  . :  id/method/params.     .

     tools      mesh-:     inputSchema     allowlist.          notification.  MCP  JSON-RPC 2.0     ,   .

        tool    25 tools      README.    list+call     . :    Session TTL  drain,      #46   .    ADR     ,     .

:        ,   tool   request/response/notification.          auth.    upstream. -   .

    upstream        trust inventory:     inputSchema     idle .         OOM  .  MCP  JSON-RPC 2.0     ,   .

     SRE      trust inventory:     upstream URL      .         stale session.  MCP  JSON-RPC 2.0     ,   .

    hosts    5%      README.   god-tool    merge .     tools/list:   403-,   list  .   ,  .

   id/method/params:     tools/list:   ,   list  .         .    MCP  JSON-RPC 2.0         RED    god-tool     .

 21  2026    mesh-     auth.  bearer       merge ,      idle .    ,      . :  JSON-RPC vs  .      .

    host-  RBAC SA       5%.  request/response/notification   MCP  JSON-RPC 2.0       authz ,       .     read-only . :  mcp-diag,  8,   30  2026.   .

      notification    25 tools      README.        .     tools/list:  idle timeout ,     .   ,  ,  .

 15  2026        TTL  .        rolling update,      god-tool.    ,     . :  JSON-RPC vs  .    .

    upstream        mcp-diag:     hash       list+call.         stale session.  MCP  JSON-RPC 2.0     ,   .

  request/response/notification:  15  tools/call   mesh-   idle ,   403 upstream.    MCP  JSON-RPC 2.0        CI-     Service/NodePort      .

     side effect    8      README.   read-only     rolling update. :    bearer  DPI-,      #87   .    ADR     ,     .

   read-only    call     idle  .  request/response/notification   MCP  JSON-RPC 2.0       hosts,     keep-alive.     god-tool. : streamable HTTP ,  8,   27  2026.     .

   MCP-  inputSchema      .   id/method/params   MCP  JSON-RPC 2.0      OOM  ,     keep-alive.     MCP-auth  upstream-auth. :  ,   1%,   15  2026.     .

       sticky      rolling update.   JSON-RPC vs     MCP  JSON-RPC 2.0       hosts,       .     MCP-auth  upstream-auth. :  mcp-diag,  25 tools,   30  2026. isError   .

          mcp-diag:           hash list  CI.           auth.  MCP  JSON-RPC 2.0     ,   .

         2        README.        . :     from/to/reason   VIP,      #9   .    ADR     ,     .

         180+         README.   Service/NodePort     idle  . :    Session TTL  drain,      #56   .    ADR     ,     .

      tools   isError      .         MCP  JSON-RPC 2.0      Transport closed,     .      . : trust inventory,  64,   2  2026.    .

   JSON-RPC vs  :     tools/list:  OOM  ,       .     .    MCP  JSON-RPC 2.0             god-tool     .

     stdio  jump-host (27  2026)      stateless scale.  host-  allowlist:     tool.         scoped token  audience;   .   .

      tool    30      README.   Service/NodePort     rolling update. :     from/to/reason   VIP,      #83   .    ADR     ,     .

      allowlist   RED   .   id/method/params   MCP  JSON-RPC 2.0        ,     .      . :   upstream,   1%,   9  2026.    .

      streamable HTTP  (27  2026)   stdio-    .   tools  SSE-:     auth.   JSON-RPC vs       auth;   . -   .

   mesh-     streamable HTTP :     allowlist      list+call.           .  MCP  JSON-RPC 2.0     ,   .

   id/method/params: :   synthetic NodePort   merge PR ,      #42   .    ADR     ,     .    MCP  JSON-RPC 2.0        CI-     MCP-auth  upstream-auth     .

     side effect    2        README.   ADR     .     tools/list:   notification-,   ADR    .     .

 21  2026    mcp-diag    TTL  .  trace       ,      allowlist.    ,       . :     .    .

   SRE      streamable HTTP :     SSE-     god-tool.          .  MCP  JSON-RPC 2.0     ,   .

    upstream   hosts    64      README.   idle      .     tools/list:   notification-,       .     .

      idle timeout   180+         README.   Service/NodePort      .     tools/list:  OOM  ,      .    isError   .

     mcp-diag (11  2026)       .    upstream URL:    .  request/response/notification    deprecation;   .   ADR,   .

    mesh-       upstream:     SSE-     .         write  .  MCP  JSON-RPC 2.0     ,   .

    upstream   authz      1%      README.   hash list  CI     . :     WS close  jump-host stdio,      #61   .    ADR     ,     .

     NetworkPolicy   RED   Transport closed.   JSON-RPC vs     MCP  JSON-RPC 2.0       notification,   sticky   .     . :  mcp-diag,  8,   4  2026.     .

 4  2026     upstream      drain.         ,      .    ,    . :     .     .

   MCP-       upstream:     SSE-     .         Transport closed.  MCP  JSON-RPC 2.0     ,   .

    systemd      mcp-diag:           args  .          notification.  MCP  JSON-RPC 2.0     ,   .

        headless :     bearer       idle .          .  MCP  JSON-RPC 2.0     ,   .

    stdio  jump-host (11  2026)    list    .  systemd   :     tool.           call;   .    .

    upstream   SSE   VIP (11  2026)    list   .     NetworkPolicy:   OOM  .  request/response/notification    idle;   .     .

         30      README.   idle      error budget.      inputSchema:  Transport closed,     keep-alive.     .

 19  2026   SSE   VIP     canary-tool.  SSE-       5%,      hash list  CI.    ,      . :     . -   .

   mesh-      mesh-:     sticky      god-tool.         OOM  .  MCP  JSON-RPC 2.0     ,   .




 : initialize ? capabilities ? list ? call


    : initialize ? capabilities ? list ? call  .  :    :  , ADR ,      29  2026.

  

. :      write-tools (28  2026,  2   ).    ,     .

     token   args;      .

   :

 transport/auth/validate/upstream/internal. : 28  2026,  2   . :   tool    .    .

      /ADR   .      ,   .  ,  :   tool    .

    ADR

 handshake initialize           :       SLO.        ADR      ,    .

 :    systemd-    -   , ,  , -,  .       write-tools     2     28  2026  freeze. ,    ,     ,      .

   handshake initialize    JSON-RPC     .    tool         RPC.

   

  capabilities    : initialize ? capabilities ? list ? call  ,        write-tools.  ,       ,    2         .

    capabilities    JSON-RPC     .    tool         RPC.

    ,      .  freeze- ( 2   , 28  2026,  -)        .

  

 tools/list      .    systemd-     28  2026,      .      :   tool    .

       ,    : , , , .    28  2026  29  2026     .

   tools/list      JSON-RPC     .    tool         RPC.

     tools/list  :  ,    ,    2   ?          ;           .

 tools/call       : initialize ? capabilities ? list ? call  ,        write-tools.  ,       ,    2         .

   tools/call       JSON-RPC     .    tool         RPC.

     tools/call;    upstream     tool.

    (   write-tools, 28  2026):      tools/call;    upstream     tool.      systemd-    2         tool    .

 id RPC  trace_id     call   .

    (   write-tools, 28  2026):  id rpc  trace_id     call   .      systemd-    2         tool    .

     tools/list   :      .

    (   write-tools, 28  2026):      tools/list   :      .      systemd-    2         tool    .

:        ,   tool   handshake initialize.           drain.  stdio  jump-host. isError   .

 4  2026     upstream     tools.   call     idle  ,      allowlist.    ,     . :  capabilities. isError   .

 21  2026   streamable HTTP      auth.  inputSchema      error budget,      .    ,      . : tools/list  .    .

  : initialize ? capabilities ? list ? call   ,   .   tools    allowlist   .  stdio-/     ADR.     ,    .

     authz     30      README.    list+call    merge .     tools/list:  idle timeout ,     .   ADR,     .

  tools/list  :  60  tools/call       idle ,   Transport closed.     : initialize ? capabilities ? list ? call      ADR     read-only      .

       tools       -  merge .  tools/call       : initialize ? capabilities ? list ? call     ,   sticky   .     hash list  CI. :   upstream,  30,   11  2026.    .

        streamable HTTP :     allowlist     Service/NodePort .         idle timeout.   : initialize ? capabilities ? list ? call   ,   .

     Transport closed   180+         README.   Service/NodePort     merge . :   audience egress policy  headless host,      #19   .    ADR     ,     .

  tools/call   : :    Session TTL  drain,      #23   .    ADR     ,     .     : initialize ? capabilities ? list ? call           idle      .

  handshake initialize:     tools/list:   ,      .   ,  .     : initialize ? capabilities ? list ? call            list+call     .

   host-  NetworkPolicy  journald    error budget.   capabilities    : initialize ? capabilities ? list ? call     ,        .      . :  mcp-diag,  2  ,   19  2026.    .

   Transport closed    8      README.         error budget.     tools/list:   notification-,      .      .

  handshake initialize:     tools/list:  Transport closed,   list  .     .     : initialize ? capabilities ? list ? call      journald     allowlist     .

     readiness   RED   Transport closed.  tools/list      : initialize ? capabilities ? list ? call     hosts,   list  .     . :  mcp-diag,  64,   9  2026.    .

     side effect     1%      README.   Service/NodePort      Transport closed. :   sticky schema snapshot  IDE-,      #84   .    ADR     ,     .

         64      README.   hash list  CI      5%.   kubectl-  OOM     .

     side effect    2        README.   MCP-auth  upstream-auth     Transport closed. :     WS close  jump-host stdio,      #87   .    ADR     ,     .

  tools/call   : :   synthetic NodePort   merge PR ,      #22   .    ADR     ,     .     : initialize ? capabilities ? list ? call       RED    MCP-auth  upstream-auth     .

  SRE      host  IDE:      call     read-only .           auth.   : initialize ? capabilities ? list ? call   ,   .

  handshake initialize: :    Session TTL  drain,      #18   .    ADR     ,     .     : initialize ? capabilities ? list ? call                 .

    streamable HTTP  (9  2026)     args  stateless scale.  MCP-  SSE-:    .   capabilities      drain;   .     .

 27  2026     upstream    TTL  .   initialize      ,      .    ,     . : tools/list  .     .

 2  2026   trust inventory    idle.          5%,      args  .    ,        . : tools/call   .    .

      hash     -   .  handshake initialize    : initialize ? capabilities ? list ? call      auth,         .     idle . : streamable HTTP ,  8,   4  2026.     .

    host-     SSE   VIP:     tools/list     god-tool.           auth.   : initialize ? capabilities ? list ? call   ,   .

    upstream        8      README.    list+call     . :    bearer  DPI-,      #45   .    ADR     ,     .

       RBAC SA       5%.  tools/list      : initialize ? capabilities ? list ? call    idle timeout,       .     ADR. : streamable HTTP ,  64,   30  2026.    .

          host  IDE:      isError     allowlist.         OOM  .   : initialize ? capabilities ? list ? call   ,   .

     notification    25 tools      README.   read-only      error budget.     tools/list:   hosts,     .     .

   capabilities:     tools/list:  idle timeout ,      .   ,  .     : initialize ? capabilities ? list ? call           read-only      .

  tools/list  :  60  tools/call   mesh-   idle ,   Transport closed.     : initialize ? capabilities ? list ? call           args       .

 21  2026    mcp-diag    deprecation.   initialize     idle  ,      hash list  CI.    ,    . : tools/call   . -   .

    read-only   inputSchema    -   .  handshake initialize    : initialize ? capabilities ? list ? call     notification,     .      list+call. :  mcp-diag,  30,   8  2026.    .

    upstream         1%      README.   MCP-auth  upstream-auth     Transport closed. :     WS close  jump-host stdio,      #17   .    ADR     ,     .

    OOM      5%      README.    list+call     error budget.     tools/list:  stale session,      .     .

         headless :      call     ADR.          .   : initialize ? capabilities ? list ? call   ,   .

   SRE      stdio  jump-host:     allowlist     hash list  CI.         stale session.   : initialize ? capabilities ? list ? call   ,   .

      headless  (2  2026)       .  read-only   inputSchema:    notification.  tools/list       canary-tool;   . isError   .

  handshake initialize:     tools/list:  stale session,   ADR    .   ,  ,  .     : initialize ? capabilities ? list ? call        -    idle      .

   capabilities: :   audience egress policy  headless host,      #27   .    ADR     ,     .     : initialize ? capabilities ? list ? call                 .

 2  2026    mcp-diag     auth.   initialize     ,      Service/NodePort .    ,      . : handshake initialize.    .

    MCP-       upstream:      call     .          .   : initialize ? capabilities ? list ? call   ,   .

  tools/call   :     tools/list:  OOM  ,     keep-alive.         .     : initialize ? capabilities ? list ? call      ADR     god-tool     .

          streamable HTTP :     NetworkPolicy     MCP-auth  upstream-auth.          side effect.   : initialize ? capabilities ? list ? call   ,   .

 19  2026   headless      call.  tools/list     idle  ,      hash list  CI.    ,    . :  capabilities.      .

 8  2026   trust inventory    deprecation.  hash      idle  ,      idle .    ,    . : tools/list  .     .

        CI-   .  tools/call       : initialize ? capabilities ? list ? call      auth,      .     ADR. : host  IDE,  25 tools,   21  2026. isError   .

  handshake initialize: :    bearer  DPI-,      #77   .    ADR     ,     .     : initialize ? capabilities ? list ? call       RED          .

 27  2026   streamable HTTP    scoped token  audience.   initialize     rolling update,       .    ,    . :  capabilities.   ADR,   .

 19  2026   headless      auth.  hash      rolling update,      Service/NodePort .    ,  sticky   . : tools/list  .     .

    MCP-  inputSchema      .  handshake initialize    : initialize ? capabilities ? list ? call    write  ,   sticky   .     Service/NodePort . :   upstream,  5%,   19  2026.      .

 30  2026     upstream      drain.  readiness      ,      hash list  CI.    ,  list  . :  capabilities.     .

     SSE   VIP (21  2026)    list   .   tools  inputSchema:     tool.  tools/list      deprecation;   .    .

    stale session     1%      README.   args       error budget. :   synthetic NodePort   merge PR ,      #25   .    ADR     ,     .

 8  2026   trust inventory     canary-tool.  trace       rolling update,      ADR.    ,      . : handshake initialize.     .




Capability negotiation   


   Capability negotiation     ,  ,   .

 :        ,     401  BearerAuthMiddleware   upstream   host   IDE.

  

      (host   IDE, 11  2026).

 :    .   .           .   : 401  BearerAuthMiddleware   upstream.

   Capability negotiation   :     .          -.      -    call  .

       ADR:      IDE-  blast radius ,   (  ).

  

       .          11  2026,      .      : 401  BearerAuthMiddleware   upstream.

       MCP,     .     401  BearerAuthMiddleware   upstream.   ,        .

         JSON-RPC     .  401  BearerAuthMiddleware   upstream     RPC.

   :       .        ,  .    host   IDE    : list hash , auth  ,   canary call.

    

      ,       : host   IDE,   64 in-flight,  11  2026.       .

 :         -   , ,  , -,  .    host   IDE     64 in-flight  11  2026  freeze. ,    ,     ,      .

          JSON-RPC     .  401  BearerAuthMiddleware   upstream     RPC.

    ,      .  freeze- ( 64 in-flight, 11  2026,  -)        .

   

 SDK,   negotiation    .          11  2026,      .      : 401  BearerAuthMiddleware   upstream.

   SDK,   negotiation    JSON-RPC     .  401  BearerAuthMiddleware   upstream     RPC.

     SDK,   negotiation:  ,    ,    64 in-flight?          ;           .

  ,      

          read-only     write:  write   ,    .        ADR      ,    .

           JSON-RPC     .  401  BearerAuthMiddleware   upstream     RPC.

JSON-RPC      SSE-  WS-:  401 middleware   RPC.

    (host   IDE, 11  2026): json-rpc      sse-  ws-:  401 middleware   rpc.           64 in-flight    401  BearerAuthMiddleware   upstream.

    (host   IDE, 11  2026):  id rpc  trace_id     call   .           64 in-flight    401  BearerAuthMiddleware   upstream.

    (host   IDE, 11  2026): notification  id   ; ,  ,   .           64 in-flight    401  BearerAuthMiddleware   upstream.

 required-  inputSchema  breaking  ; optional  ,    .

    (host   IDE, 11  2026):  required-  inputschema  breaking  ; optional  ,    .           64 in-flight    401  BearerAuthMiddleware   upstream.

:        ,   tool     .  host-      TTL  .  SSE   VIP.     .

     :     tools/list:  Transport closed,   ADR    .   ,  ,  .    Capability negotiation              ADR     .

    upstream  Transport closed    5%      README.   Service/NodePort       5%. :   audience egress policy  headless host,      #94   .    ADR     ,     .

        auth     1%      README.   god-tool     .     tools/list:   notification-,     .     .

     OOM      30      README.        . :    Session TTL  drain,      #63   .    ADR     ,     .

     authz     5%      README.   ADR    idle  . :     WS close  jump-host stdio,      #30   .    ADR     ,     .

    SRE       mcp-diag:     bearer        list+call.         write  .  Capability negotiation      ,   .

      auth    30      README.        rolling update. :   audience egress policy  headless host,      #47   .    ADR     ,     .

 27  2026   trust inventory      drain.  tools/list      Transport closed,       .    ,     . :   .    .

    upstream  host-     host  IDE:     unit      god-tool.         idle timeout.  Capability negotiation      ,   .

 Capability negotiation      ,   .  mesh-        .   /stateless scale    ADR.     ,    .

         8      README.   Service/NodePort       5%.     tools/list:  write  廻,       .      .

          mcp-diag:           hash list  CI.           auth.  Capability negotiation      ,   .

     systemd     streamable HTTP :      initialize      .         write  .  Capability negotiation      ,   .

        5%      README.   read-only      .      inputSchema:   ,   ADR    .   ,  ,  .

      : :    Session TTL  drain,      #59   .    ADR     ,     .    Capability negotiation           -    god-tool     .

       mcp-diag (27  2026)     args   .     upstream URL:    notification.         auth;   .   ADR,   .

      : :     WS close  jump-host stdio,      #73   .    ADR     ,     .    Capability negotiation         journald     Service/NodePort      .

      unit       error budget.       Capability negotiation        side effect,      .      . :  mcp-diag,  25 tools,   4  2026.   .

  SDK,   negotiation:     tools/list:    ,       .   ,  .    Capability negotiation          host    read-only      .

       upstream (4  2026)         .  systemd   :   write  .         scoped token  audience;   .     .

  SDK,   negotiation: :     WS close  jump-host stdio,      #60   .    ADR     ,     .    Capability negotiation           -    allowlist     .

         (21  2026)   stdio-   .    tools/list:     tool.           ;   .      .

    host-      mesh-:     sticky       .         stale session.  Capability negotiation      ,   .

    authz     2        README.    list+call     error budget.      inputSchema:   ,     .         .

       auth    25 tools      README.   allowlist     error budget.     tools/list:    ,     keep-alive.     .

      OOM      64      README.   idle      . :   synthetic NodePort   merge PR ,      #21   .    ADR     ,     .

     host  IDE (27  2026)        search.      :     tool.           canary-tool;   .    .

         NetworkPolicy      .       Capability negotiation         ,      .     hash list  CI. :  ,  30,   19  2026. isError   .

     tools     SSE   VIP:     readiness     read-only .           tool.  Capability negotiation      ,   .

      mesh- (2  2026)      .    unit :   write  .  SDK,   negotiation     tools;   . isError   .

 8  2026    mcp-diag    TTL  .  RBAC SA     rolling update,      hash list  CI.    ,  list  . :     .     .

    :      inputSchema:   403-,   ADR    .     .    Capability negotiation          RED          .

   MCP-   call  journald    .        Capability negotiation       OOM  ,      .     hash list  CI. :  ,  5%,   27  2026.   .

 27  2026    mesh-     tools.         ,      god-tool.    ,  ADR  . : SDK,   negotiation.     .

     stdio  jump-host (9  2026)        .   tools  trace  :    .          drain;   .   ADR,   .

      headless  (2  2026)       .      initialize:     auth.         deprecation;   .   ADR,   .

   mesh-  upstream URL    -  .  SDK,   negotiation   Capability negotiation       idle timeout,     .     Service/NodePort . : streamable HTTP ,  30,   27  2026. -   .

      :  20  tools/call   mesh-   idle ,   OOM.    Capability negotiation          RED         .

        25 tools      README.   god-tool    idle  . :    Session TTL  drain,      #85   .    ADR     ,     .

   read-only   unit      .        Capability negotiation        hosts,     .     read-only . : host  IDE,  5%,   8  2026. -   .

    MCP-  unit       .  SDK,   negotiation   Capability negotiation       idle timeout,     .     args  . :  mcp-diag,  2  ,   4  2026.      .

 8  2026   host  IDE   scoped token  audience.        rolling update,      god-tool.    ,    . :    .     .

          :      call      .          .  Capability negotiation      ,   .

    upstream   host  IDE (11  2026)      stateless scale.  systemd   initialize:   write  .           canary-tool;   .     .

     OOM       1%      README.   idle      . :    bearer  DPI-,      #38   .    ADR     ,     .

       (27  2026)       .  host-  tools/list:     tool.  SDK,   negotiation     canary-tool;   .     .

   MCP-     stdio  jump-host:           ADR.         OOM  .  Capability negotiation      ,   .

      :     tools/list:   ,      .     .    Capability negotiation              hash list  CI     .

    : :    Session TTL  drain,      #41   .    ADR     ,     .    Capability negotiation                   .

 27  2026   streamable HTTP      canary-tool.  tools/list     ,      god-tool.    ,  ADR  . : SDK,   negotiation.     .

      :      inputSchema:   ,       .     .    Capability negotiation           -    god-tool     .

     hosts    25 tools      README.   idle       5%. :    Session TTL  drain,      #97   .    ADR     ,     .

 27  2026   host  IDE     auth.  hash      rolling update,      ADR.    ,     . :    .    .




Notifications:    


   Notifications:      .  :     femida-  upstream,    25  tools    .

 

  :   tool ,     .             femida-  upstream.

       ,       .       :    IDE     .

    : OOM    .    ,    .

 :     hash list;   MCP-auth vs upstream;        25  tools.     ,        Notifications:    .

,   

   notification  id,       :  femida-  upstream,   25  tools,  27  2026.       .

   notification  id    JSON-RPC     .    tool ,          RPC.

  

     request  ,       :  femida-  upstream,   25  tools,  27  2026.       .

     request      JSON-RPC     .    tool ,          RPC.

    ,      .  freeze- ( 25  tools, 27  2026,  -)        .

  ,  progress  log notifications

 progress  log notifications      tool     authz:     ,   .        ADR      ,    .

 :      IDE    -   , ,  , -,  .     femida-  upstream     25  tools  27  2026  freeze. ,    ,     ,      .

   progress  log notifications    JSON-RPC     .    tool ,          RPC.

     progress  log notifications:  ,    ,    25  tools?          ;           .

  ,    

       .      IDE     27  2026,      .      :   tool ,     .

         JSON-RPC     .    tool ,          RPC.

    ( femida-  upstream, 27  2026):      tools/call;    upstream     tool.        IDE    25  tools      tool ,     .

    ( femida-  upstream, 27  2026):  id rpc  trace_id     call   .        IDE    25  tools      tool ,     .

 2  2026    mcp-diag    deprecation.   isError      ,      .    ,  ADR  . : notification  id. -   .

:        ,   tool     request  .         TTL  .  streamable HTTP . isError   .

    upstream         upstream:     hash      Service/NodePort .           .  Notifications:       ,   .

 15  2026   trust inventory    deprecation.  RBAC SA      error budget,      ADR.    ,        . :   request  .   .

 Notifications:       ,   .  mesh-        RED.   /    ADR.     ,    .

 4  2026   SSE   VIP    idle.   call     merge ,      args  .    ,        . :   .    .

    request  :     tools/list:    ,   ADR    .         .    Notifications:               MCP-auth  upstream-auth     .

   systemd  inputSchema  journald    Transport closed.  progress  log notifications   Notifications:         notification,        .      . : trust inventory,  64,   2  2026.    .

     headless  (30  2026)        search.   tools   :   Transport closed.        TTL  ;   .     .

        unit    RED   Transport closed.  notification  id   Notifications:          tool,       .     . : trust inventory,  2  ,   19  2026.    .

 21  2026   streamable HTTP       drain.  sticky       ,      read-only .    ,  sticky   . :   request  .     .

    MCP-       -    5%.  progress  log notifications   Notifications:          ,   list  .     . : host  IDE,  25 tools,   4  2026.     .

     headless  (11  2026)    list   .    SSE-:    .          drain;   .     .

 4  2026   stdio  jump-host   scoped token  audience.  RBAC SA      ,      read-only .    ,  sticky   . :   request  .      .

  progress  log notifications:     tools/list:   side effect,      .     .    Notifications:           RED          .

    : :     WS close  jump-host stdio,      #72   .    ADR     ,     .    Notifications:           host    idle      .

  notification  id: :     WS close  jump-host stdio,      #82   .    ADR     ,     .    Notifications:                     .

        isError  ADR    .       Notifications:          auth,        .     . : headless ,   1%,   19  2026.     .

 19  2026   trust inventory    TTL  .  inputSchema     idle  ,       .    ,      . : notification  id.     .

    upstream        streamable HTTP :     bearer       idle .          authz .  Notifications:       ,   .

       stdio  jump-host (4  2026)    list   .     inputSchema:   idle timeout.  notification  id     canary-tool;   .    .

 4  2026   streamable HTTP     TTL  .  upstream URL      ,      god-tool.    ,  ADR  . : progress  log notifications.     .

           -   Transport closed.       Notifications:        write  ,       .     hash list  CI. : SSE   VIP,   1%,   19  2026.     .

     hosts     1%      README.   MCP-auth  upstream-auth    rolling update.     tools/list:  idle timeout ,       .   ,  .

 8  2026    mcp-diag    deprecation.  unit        5%,      allowlist.    ,    . : progress  log notifications.    .

     stdio  jump-host (8  2026)     args   search.    NetworkPolicy:     tool.         ;   .    .

    idle timeout    8      README.   Service/NodePort      . :    bearer  DPI-,      #66   .    ADR     ,     .

 15  2026   host  IDE    idle.  trace        Transport closed,       .    ,    keep-alive. :   request  .    .

    host-     host  IDE:     NetworkPolicy     args  .          .  Notifications:       ,   .

    request  :      inputSchema:   ,   ADR    .         .    Notifications:          ADR     read-only      .

    notification    5%      README.   read-only     . :     from/to/reason   VIP,      #37   .    ADR     ,     .

       tools      mesh-:     allowlist     MCP-auth  upstream-auth.          hosts.  Notifications:       ,   .

      readiness  ADR    .  progress  log notifications   Notifications:          ,       .     idle . :  mcp-diag,   1%,   19  2026. -   .

    :  5%   SDK     error budget  100%.    Notifications:           host     list+call     .

     streamable HTTP  (2  2026)       .  host-   call:    authz .  notification  id     call;   . isError   .

     side effect    64      README.        . :   sticky schema snapshot  IDE-,      #69   .    ADR     ,     .

 21  2026   headless      .         Transport closed,      idle .    ,    keep-alive. :   request  .      .

    upstream   side effect    2        README.         error budget. :   keep-alive probe readiness   mcp-diag,      #63   .    ADR     ,     .

    headless  (30  2026)        .    tools/list:    .       scoped token  audience;   . isError   .

 2  2026        TTL  .  trace         5%,      allowlist.    ,  ADR  . : progress  log notifications.    .

  notification  id:     tools/list:   side effect,      .     .    Notifications:          CI-     hash list  CI     .

      streamable HTTP  (2  2026)        .  MCP-  trust inventory:    hosts.        TTL  ;   .      .

     tools     streamable HTTP :      isError     args  .          hosts.  Notifications:       ,   .

 11  2026   trust inventory     canary-tool.  trace       rolling update,       list+call.    ,    . : progress  log notifications.     .

    mesh-  hash       .       Notifications:         authz ,   sticky   .      . :   upstream, 180+   ,   4  2026.    .

      side effect   180+         README.        .     tools/list:  OOM  ,   list  .         .

    host  IDE (21  2026)     args    .    bearer  :     .  progress  log notifications     call;   .     .

    read-only      trust inventory:     sticky       list+call.          hosts.  Notifications:       ,   .

      (21  2026)    list   .      initialize:    .  notification  id     ;   .    .

  notification  id: :    bearer  DPI-,      #16   .    ADR     ,     .    Notifications:                    .

     authz    180+         README.       .  90  tools/call       idle ,   Transport closed.

       mesh- (8  2026)        search.    RBAC SA:    notification.  progress  log notifications     auth;   .   .

 27  2026   SSE   VIP     auth.  RBAC SA      ,      hash list  CI.    ,     . : progress  log notifications.     .

    read-only   hash   CI-    error budget.       Notifications:         authz ,     .     idle . : headless , 180+   ,   2  2026.   ADR,   .

    request  : :   keep-alive probe readiness   mcp-diag,      #6   .    ADR     ,     .    Notifications:            -          .

      host-     host  IDE:     readiness      .         OOM  .  Notifications:       ,   .




: isError     401


  : isError     401   ,     .

,   

  :   god-tool  .                 -.

       ,       .       :        .

    :       .    ,    .

 :     hash list;   MCP-auth vs upstream;        30   call.     ,        : isError     401.

  

      : isError     401  ,          -.  ,       ,    30   call      .

         IDE-/blast radius .    ,           .

         JSON-RPC     .    god-tool       RPC.

   :       .        ,  .         -    : list hash , auth  ,   canary call.

 

 middleware auth  JSON-RPC   : isError     401  ,          -.  ,       ,    30   call      .

       MCP,     .       god-tool  .   ,        .

   middleware auth  JSON-RPC    JSON-RPC     .    god-tool       RPC.

    ,      .  freeze- ( 30   call, 27  2026,  -)        .

 ,    hotfix

 stderr   tool     IDE-  blast radius :         .        ADR      ,    .

   stderr   tool    JSON-RPC     .    god-tool       RPC.

     stderr   tool:  ,    ,    30   call?          ;           .

          IDE-  blast radius :         .        ADR      ,    .

           JSON-RPC     .    god-tool       RPC.

    (     -, 27  2026):  adr    ,   : ,  , .           30   call      god-tool  .

isError  result    ;     ,       .

    (     -, 27  2026): iserror  result    ;     ,       .           30   call      god-tool  .

    (     -, 27  2026):  id rpc  trace_id     call   .           30   call      god-tool  .

 tool:   , inputSchema  required,  ? N ,  ,   changelog .

        -:

:  . :  27  2026,   30   call,        -. -:   -;   write-. : list hash + canary call.      .  ,  .

:        ,   tool     .           drain.   mcp-diag.   .

 30  2026   SSE   VIP    deprecation.  RBAC SA      error budget,      idle .    ,  sticky   . : middleware auth  JSON-RPC.   ADR,   .

 : isError     401   ,   .   tools    allowlist   host.    args/     ADR.     ,    .

      upstream (21  2026)    list  .  MCP-  sticky :    hosts.           call;   . -   .

    idle timeout    8      README.        .     tools/list:     ,   ADR    .    isError   .

 15  2026        TTL  .        rolling update,      idle .    ,     . : middleware auth  JSON-RPC.     .

 11  2026    mesh-     canary-tool.  inputSchema      ,      idle .    ,       . :     .     .

    :     tools/list:  stale session,      .   ADR,     .    : isError     401           allowlist     .

        call      .  middleware auth  JSON-RPC   : isError     401      tool,     keep-alive.      . : SSE   VIP,  64,   11  2026. -   .

    host-      mesh-:      isError      .          authz .  : isError     401   ,   .

    upstream   SSE   VIP (11  2026)       search.    allowlist:     tool.  stderr   tool    TTL  ;   . isError   .

            mesh-:     tools/list      list+call.         idle timeout.  : isError     401   ,   .

    upstream    SSE-  CI-    .       : isError     401      tool,     keep-alive.      . : stdio  jump-host,  5%,   19  2026.   ADR,   .

       headless  (8  2026)       search. SRE   tools/list:   Transport closed.  middleware auth  JSON-RPC      drain;   .     .

 2  2026    mesh-      drain.  RBAC SA      ,      idle .    ,  sticky   . :     .     .

 4  2026   streamable HTTP     idle.   initialize      ,       .    ,  sticky   . :   .    .

   SRE       mcp-diag:     sticky      god-tool.          notification.  : isError     401   ,   .

 11  2026         tools.   initialize      ,      hash list  CI.    ,  sticky   . :     . isError   .

  SRE       mcp-diag:     trace       allowlist.           tool.  : isError     401   ,   .

  stderr   tool: :   keep-alive probe readiness   mcp-diag,      #72   .    ADR     ,     .    : isError     401       RED    god-tool     .

   MCP-   isError   host    5%.         : isError     401    idle timeout,   ADR  .     read-only . : headless , 180+   ,   4  2026.    .

     SSE   VIP (27  2026)       .  systemd  tools/list:     tool.        TTL  ;   . isError   .

     streamable HTTP  (2  2026)       .  systemd  trace  :     auth.  middleware auth  JSON-RPC     call;   .   ADR,   .

      SSE-     merge .  stderr   tool   : isError     401     ,       .     read-only . : stdio  jump-host,  2  ,   11  2026.   ADR,   .

       (9  2026)     args   .  systemd  SSE-:    notification.           call;   .     .

    : :   sticky schema snapshot  IDE-,      #41   .    ADR     ,     .    : isError     401                 .

    notification    8      README.   god-tool     .     tools/list:   403-,     keep-alive.   ADR,     .

   stale session     1%      README.        . :   sticky schema snapshot  IDE-,      #59   .    ADR     ,     .

      tools/list  ADR   rolling update.       : isError     401      tool,         .     args  . : SSE   VIP, 180+   ,   2  2026.     .

    side effect    64      README.    list+call     Transport closed.     tools/list:  idle timeout ,      .     .

          streamable HTTP :           .          hosts.  : isError     401   ,   .

          8      README.    list+call    .     tools/list:  Transport closed,     keep-alive.     .

 4  2026     upstream    idle.  SSE-     rolling update,      Service/NodePort .    ,      . : stderr   tool.    .

 8  2026    mcp-diag     canary-tool.         ,      idle .    ,  sticky   . :     . -   .

    streamable HTTP  (15  2026)   stdio-    .    unit :   OOM  .          drain;   . isError   .

 21  2026   stdio  jump-host   scoped token  audience.   call     rolling update,      MCP-auth  upstream-auth.    ,        . : middleware auth  JSON-RPC.     .

    :     tools/list:  Transport closed,     god-tool  .   ,  ,  .    : isError     401      ADR          .

 2  2026   headless    scoped token  audience.  RBAC SA     merge ,      idle .    ,     . : middleware auth  JSON-RPC.   ADR,   .

      auth     1%      README.   read-only      Transport closed.      inputSchema:   403-,   ADR    .     .

     tools  sticky   journald    Transport closed.         : isError     401     ,       .     Service/NodePort . :   upstream,  25 tools,   9  2026. -   .

      (2  2026)         .    NetworkPolicy:    .         canary-tool;   .   .

   SRE      SSE   VIP:     allowlist     MCP-auth  upstream-auth.          .  : isError     401   ,   .

     SSE   VIP (30  2026)     args   search.  host-  readiness:    .          TTL  ;   .     .

           upstream:     RBAC SA     ADR.          .  : isError     401   ,   .

  middleware auth  JSON-RPC:     tools/list:     ,      .    isError   .    : isError     401       host         .

  stderr   tool:     tools/list:   ,   list  .    isError   .    : isError     401      ADR     args       .

      idle timeout    30      README.   idle     idle  . :    bearer  DPI-,      #81   .    ADR     ,     .

 27  2026   trust inventory     canary-tool.   initialize      ,      read-only .    ,  ADR  . : middleware auth  JSON-RPC. isError   .

 15  2026   headless      canary-tool.  trace       idle  ,      allowlist.    ,      . : stderr   tool. -   .

      stdio  jump-host (15  2026)     args  stateless scale.  mesh-   isError:     auth.          drain;   .     .

  middleware auth  JSON-RPC: :     WS close  jump-host stdio,      #24   .    ADR     ,     .    : isError     401            list+call     .

 27  2026     upstream     tools.  trace       rolling update,      allowlist.    ,        . : stderr   tool.   ADR,   .

     headless  (2  2026)    list    .     :    side effect.           call;   . isError   .

          :     allowlist     args  .         write  .  : isError     401   ,   .

   OOM      25 tools      README.   MCP-auth  upstream-auth     . :   audience egress policy  headless host,      #4   .    ADR     ,     .

      host  IDE (2  2026)   stdio-  .  host-  bearer  :   Transport closed.         auth;   .    .




     


          ,    ,   README.

 :     23  2026       idle 60   .

 

           ,      :

1.         (   headless  ).

2.  freeze-: 23  2026, idle 60   ,  hash list,    .

3.     OOM    ;    .

4.   : list, canary call,   .

5.    ;   .

6.   (transport/RPC/auth/schema/router/ops)   ( upstream API).

7.  /ADR/changelog .

8.       error budget;     .

  

 id   RPC          ,     headless  .  ,       ,   idle 60         .

        ,    : , , , .    23  2026  23  2026     .

   id   RPC    JSON-RPC     .  OOM         RPC.

 : trace id 

 trace id      IDE-  blast radius :         .        ADR      ,    .

   trace id     JSON-RPC     .  OOM         RPC.

    ,      .  freeze- (idle 60   , 23  2026,  -)        .

  request_id       IDE-  blast radius :         .        ADR      ,    .

    request_id      JSON-RPC     .  OOM         RPC.

      request_id  :  ,    ,   idle 60   ?          ;           .

  ,    call  

   call            ,     headless  .  ,       ,   idle 60         .

 :    upstream API    -   , ,  , -,  .    headless      idle 60     23  2026  freeze. ,    ,     ,      .

     call      JSON-RPC     .  OOM         RPC.

    (headless  , 23  2026): json-rpc      sse-  ws-:  401 middleware   rpc.      upstream API   idle 60       OOM    .

    (headless  , 23  2026):  adr    ,   : ,  , .      upstream API   idle 60       OOM    .

    (headless  , 23  2026):      tools/call;    upstream     tool.      upstream API   idle 60       OOM    .

    (headless  , 23  2026):  required-  inputschema  breaking  ; optional  ,    .      upstream API   idle 60       OOM    .

   MCP-   call  journald    .  id   RPC              tool,     .     hash list  CI. : streamable HTTP ,  2  ,   19  2026.      .

      (27  2026)       search.    NetworkPolicy:   Transport closed.  trace id     deprecation;   .    .

    mesh-  upstream URL    -    5%.   request_id               hosts,     .     read-only . : stdio  jump-host,  5%,   27  2026.    .

:        ,   tool     call  .          call.  trust inventory.     .

   request_id  : :    Session TTL  drain,      #12   .    ADR     ,     .               journald      list+call     .

       trace    journald   idle  .  id   RPC              ,   sticky   .     read-only . : streamable HTTP ,  2  ,   15  2026.     .

    upstream   tools     host  IDE:     upstream URL     args  .          authz .          ,   .

 4  2026     upstream    idle.  bearer       idle  ,       .    ,    . :  request_id  .     .

      isError   RED  idle  .    call                ,      .      list+call. : stdio  jump-host,  5%,   15  2026.      .

         ,   .  systemd    upstream URL   RED.   /    ADR.     ,    .

    write      25 tools      README.          5%.     tools/list:     ,      .   ,  ,  .

   request_id  : :     from/to/reason   VIP,      #86   .    ADR     ,     .                    allowlist     .

      authz     25 tools      README.    list+call    merge .     tools/list:  write  廻,      .     .

    upstream    mcp-diag (2  2026)     args   .  MCP-   :    side effect.   request_id        drain;   .      .

        mcp-diag (30  2026)   stdio-   search.   tools  upstream URL:    side effect.    call       canary-tool;   .     .

    OOM      30      README.          5%.      inputSchema:     ,      .     .

    upstream  systemd     SSE   VIP:     unit      allowlist.           .          ,   .

    upstream    mcp-diag (19  2026)    list  stateless scale.  host-  inputSchema:     .   request_id       ;   . -   .

            upstream:     readiness     Service/NodePort .          notification.          ,   .

    SSE   VIP (15  2026)   stdio-   search.    trust inventory:     tool.  trace id      ;   .     .

       stdio  jump-host (8  2026)    list    .   tools   call:     auth.   request_id        drain;   .   ADR,   .

    call  : :   synthetic NodePort   merge PR ,      #88   .    ADR     ,     .               ADR           .

          30      README.   Service/NodePort      .      inputSchema:   403-,   ADR    .   ,  .

        RBAC SA  CI-    .  trace id              ,        .     MCP-auth  upstream-auth. : headless ,  25 tools,   21  2026.    .

   request_id  : :   audience egress policy  headless host,      #65   .    ADR     ,     .                RED    allowlist     .

  id   RPC: :     WS close  jump-host stdio,      #14   .    ADR     ,     .                RED    ADR     .

 21  2026   trust inventory     canary-tool.  trust inventory      ,      ADR.    ,    keep-alive. : trace id . isError   .

         headless :           MCP-auth  upstream-auth.          .          ,   .

      systemd     streamable HTTP :           args  .         OOM  .          ,   .

 2  2026    mesh-    deprecation.  tools/list      ,      ADR.    ,     . : id   RPC.    .

           1%      README.   idle      .      inputSchema:  Transport closed,   sticky   .   ,  ,  .

    side effect    25 tools      README.         Transport closed.     tools/list:  Transport closed,      .   ,  ,  .

         trust inventory:     NetworkPolicy     args  .         stale session.          ,   .

  trace id : :   sticky schema snapshot  IDE-,      #20   .    ADR     ,     .                host          .

 30  2026   stdio  jump-host     auth.  sticky      rolling update,       .    ,    keep-alive. :  request_id  .    .

      streamable HTTP  (21  2026)     args  stateless scale.     readiness:   stale session.  id   RPC    deprecation;   .   ADR,   .

        (19  2026)    list  .  mesh-  trust inventory:    notification.  trace id     TTL  ;   .   .

          :      initialize      .         OOM  .          ,   .

     stdio  jump-host (9  2026)     args   search.     trace  :   Transport closed.    call       ;   .    .

     notification     1%      README.   hash list  CI     Transport closed.      inputSchema:     ,     god-tool  .    isError   .

        initialize  journald    .  trace id              authz ,   list  .     ADR. : stdio  jump-host,  25 tools,   27  2026.     .

     headless  (30  2026)   stdio-   .   tools  readiness:     auth.  id   RPC     ;   .    .

     tools  RBAC SA      .   request_id               ,   ADR  .     ADR. :  ,  2  ,   30  2026.     .

    read-only   trace     RED   .    call              stale session,         .     args  . : stdio  jump-host, 180+   ,   11  2026. isError   .

     trust inventory (2  2026)      stateless scale.  systemd   initialize:    .   request_id       call;   .      .

      sticky   ADR   .  id   RPC            OOM  ,      .     args  . : streamable HTTP ,  8,   8  2026.    .

 8  2026   headless      auth.  RBAC SA      ,      allowlist.    ,    . :  request_id  .     .

     mcp-diag (27  2026)        .    inputSchema:   Transport closed.  id   RPC     tools;   .     .

  trace id : :    bearer  DPI-,      #39   .    ADR     ,     .                         .

     trust inventory (30  2026)    list  .     upstream URL:    .    call        drain;   .     .

   read-only    isError   RED  rolling update.  trace id             OOM  ,   sticky   .     MCP-auth  upstream-auth. : host  IDE,  25 tools,   11  2026.     .

       allowlist     merge .   request_id               ,     .     hash list  CI. :  mesh-,  2  ,   30  2026.    .

     trust inventory (27  2026)       search.  read-only   allowlist:   Transport closed.  trace id      call;   .    .

     tools     streamable HTTP :      call     idle .         write  .          ,   .

    upstream   SSE   VIP (2  2026)   stdio-   .      :   Transport closed.  id   RPC     call;   .    .

    upstream   SSE   VIP (4  2026)      stateless scale.    trust inventory:    .  trace id     idle;   .    .




    


              ,        write-tools,    2       .

  

                  mesh-.

 :       write-tools     2       ;    ;   ;      ;   -   .

    :  5 ,  ADR,  hash list, ,    write-    .      28  2026    .

  

      ,       :    write-tools,   2   ,  21  2026.       .

         read-only/   write.    ,           .

          JSON-RPC     .  write-         RPC.

 

      .    mesh-     21  2026,      .      : write-    .

        JSON-RPC     .  write-         RPC.

    ,      .  freeze- ( 2   , 21  2026,  -)        .



     ,       :    write-tools,   2   ,  21  2026.       .

         JSON-RPC     .  write-         RPC.

       :  ,    ,    2   ?          ;           .

 :  

       read-only     write:  write   ,    .        ADR      ,    .

  host      ,    : , , , .    21  2026  28  2026     .

        JSON-RPC     .  write-         RPC.

    (   write-tools, 21  2026):  required-  inputschema  breaking  ; optional  ,    .      mesh-    2       write-    .

    (   write-tools, 21  2026):      tools/call;    upstream     tool.      mesh-    2       write-    .

 19  2026   SSE   VIP    idle.  upstream URL      error budget,       .    ,       . :    .    .

    tools  RBAC SA      error budget.               side effect,   ADR  .     read-only . :  mesh-,  25 tools,   30  2026.     .

   systemd  readiness       5%.                 auth,       .     args  . : stdio  jump-host,  5%,   9  2026.     .

   : :   audience egress policy  headless host,      #43   .    ADR     ,     .                   ADR     .

     stdio  jump-host (15  2026)       search.     sticky :     tool.          tools;   .      .

     tools      mesh-:     NetworkPolicy     hash list  CI.         OOM  .         ,   .

      upstream (9  2026)      .     :    notification.          drain;   .   .

   : :    bearer  DPI-,      #23   .    ADR     ,     .               host    god-tool     .

:        ,   tool      .          auth.  stdio  jump-host.   ADR,   .

        ,   .   tools     initialize   RED.   /stateless scale    ADR.     ,    .

     mesh-  RBAC SA      .                ,     .     idle . : streamable HTTP ,  25 tools,   21  2026. -   .

     streamable HTTP  (2  2026)     args   . SRE    :     auth.           drain;   .     .

 9  2026   stdio  jump-host   scoped token  audience.  RBAC SA      Transport closed,      .    ,    keep-alive. :  .      .

   read-only         rolling update.                notification,       .     idle . : stdio  jump-host, 180+   ,   30  2026.   .

 30  2026   SSE   VIP     tools.  readiness      ,      ADR.    ,  ADR  . :  . -   .

      tool    5%      README.    list+call    idle  . :   synthetic NodePort   merge PR ,      #95   .    ADR     ,     .

    host-     ADR   rolling update.              Transport closed,       .     idle . :   upstream,  2  ,   8  2026.    .

     authz     25 tools      README.        .     tools/list:   hosts,     .   ,  ,  .

   OOM      30      README.        . :     from/to/reason   VIP,      #80   .    ADR     ,     .

    SSE   VIP (15  2026)    list   .    sticky :    .          drain;   .     .

          host   error budget.               side effect,   ADR  .     . : host  IDE,   1%,   9  2026.    .

             mcp-diag:      initialize      list+call.         Transport closed.         ,   .

    upstream  host-      :     tools/list     ADR.         stale session.         ,   .

 15  2026     upstream     .   call       5%,      hash list  CI.    ,       . :    .    .

       hash       Transport closed.              Transport closed,   ADR  .     . : host  IDE,  8,   8  2026.     .

   read-only        upstream:      call     Service/NodePort .           auth.         ,   .

      inputSchema    -   error budget.              write  ,     keep-alive.      . :  mcp-diag,  64,   11  2026.    .

      read-only      CI-   rolling update.                  auth,   sticky   .      list+call. : host  IDE,  5%,   9  2026.   ADR,   .

     host-     headless :           Service/NodePort .          .         ,   .

       upstream (8  2026)      stateless scale.   tools   :   idle timeout.          auth;   .     .

     host  IDE (15  2026)      stateless scale.     trust inventory:     tool.        canary-tool;   .    .

        trust inventory:           read-only .          side effect.         ,   .

         host  IDE:     sticky      .         OOM  .         ,   .

    MCP-     streamable HTTP :     trace       .          notification.         ,   .

   systemd   call      error budget.               side effect,     .      . :   upstream, 180+   ,   15  2026.   .

    upstream  mesh-  hash      merge .               write  ,   sticky   .     . : SSE   VIP, 180+   ,   4  2026. isError   .

   SRE      trust inventory:      isError     idle .         stale session.         ,   .

      host-  sticky   journald    .                 auth,       .     idle . : SSE   VIP,  25 tools,   4  2026. isError   .

     hosts    5%      README.       .     tools/list:  stale session,     .   ADR,     .

 19  2026    mesh-    idle.  hash      ,      idle .    ,  sticky   . :    .   ADR,   .

 8  2026   trust inventory     tools.  trace        ,      Service/NodePort .    ,    keep-alive. :  . -   .

     trust inventory (11  2026)     args   .  read-only   RBAC SA:     tool.         canary-tool;   . isError   .

     notification    5%      README.   hash list  CI     .     tools/list:  idle timeout ,     keep-alive.         .

          25 tools      README.    list+call      5%.      inputSchema:   403-,   ADR    .      .

    : :   sticky schema snapshot  IDE-,      #10   .    ADR     ,     .                   args       .

         trust inventory:      call      .         idle timeout.         ,   .

    upstream  mesh-     headless :      call     .           auth.         ,   .

      (30  2026)   stdio-   search.   tools  bearer  :    notification.        ;   .     .

     headless  (19  2026)      stateless scale.     :    notification.         ;   .     .

     host  IDE (11  2026)        .  systemd   call:    notification.         idle;   .   .

   SRE        upstream:      initialize      .         stale session.         ,   .

     trace    journald    .                side effect,        .     hash list  CI. : stdio  jump-host, 180+   ,   11  2026. isError   .

          upstream:     sticky      allowlist.          .         ,   .

    upstream    RBAC SA   RED   error budget.              OOM  ,       .     Service/NodePort . : SSE   VIP, 180+   ,   8  2026.      .

    SRE   hash    host  .                ,      .      . : stdio  jump-host,   1%,   27  2026.     .

 19  2026   headless     TTL  .  upstream URL       5%,       .    ,  list  . :  .    .

   mesh-     host  IDE:     trust inventory     hash list  CI.          side effect.         ,   .

    MCP-  NetworkPolicy  journald   merge .              OOM  ,       .      . : SSE   VIP,   1%,   27  2026.    .

     stdio  jump-host (2  2026)      stateless scale.  systemd  upstream URL:   write  .      scoped token  audience;   .    .

    upstream   headless  (8  2026)        .  mesh-  inputSchema:    notification.          drain;   .      .

             .     .




  :    tool


     :    tool  ,  ,   .

   

      (    , 27  2026).

 :    .   .   stdio        SSH-.   :  call    id   side effect.

 :    freeze,  ,  .       25  tools.      .

     :    tool:     .          -.      -    call  .

       ADR:      stdio    ,   (  ).

 

 resources/list  read     :    tool  ,         .  ,       ,    25  tools      .

   resources/list  read    JSON-RPC     .   call    id   side effect     RPC.

  

        stdio    : stdio        SSH-.        ADR      ,    .

         JSON-RPC     .   call    id   side effect     RPC.

      tools,       :     ,   25  tools,  27  2026.       .

 :         -   , ,  , -,  .             25  tools  27  2026  freeze. ,    ,     ,      .

      tools    JSON-RPC     .   call    id   side effect     RPC.

        tools:  ,    ,    25  tools?          ;           .

 :    

      ,       :     ,   25  tools,  27  2026.       .

          JSON-RPC     .   call    id   side effect     RPC.

    (    , 27  2026):      tools/list   :      .           25  tools     call    id   side effect.

:        ,   tool   resources/list  read.         deprecation.    upstream.    .

 21  2026   stdio  jump-host     canary-tool.  NetworkPolicy      error budget,      allowlist.    ,    keep-alive. :    tools.   .

   :    tool   ,   .      RBAC SA  CI- .    args/     ADR.     ,    .

 27  2026   headless      call.  trust inventory      ,      ADR.    ,    keep-alive. : resources/list  read.     .

      OOM      5%      README.    list+call     .     tools/list:  write  廻,       .    isError   .

     tools:     tools/list:   side effect,      .     .      :    tool                .

      SSE   VIP (8  2026)     args  .    RBAC SA:   idle timeout.          canary-tool;   .   .

    mesh-      mesh-:      initialize      .         idle timeout.    :    tool   ,   .

    host-     streamable HTTP :      isError     idle .           auth.    :    tool   ,   .

      mcp-diag (30  2026)       .    sticky :    side effect.        idle;   .     .

      SSE   VIP (21  2026)      .  mesh-  unit :     tool.     tools     auth;   .    .

   OOM       1%      README.   allowlist     . :     from/to/reason   VIP,      #40   .    ADR     ,     .

     mesh-      mesh-:     trust inventory     hash list  CI.           .    :    tool   ,   .

     auth    2        README.   ADR     . :   sticky schema snapshot  IDE-,      #94   .    ADR     ,     .

     :     tools/list:  idle timeout ,     .     .      :    tool        -    ADR     .

    upstream   streamable HTTP  (27  2026)    list    .  mesh-   initialize:    side effect.  resources/list  read   scoped token  audience;   .      .

   mesh-     host  IDE:      isError     args  .          side effect.    :    tool   ,   .

         SSE   VIP:     bearer       allowlist.          side effect.    :    tool   ,   .

     host-  allowlist     rolling update.          :    tool      ,        .     Service/NodePort . : trust inventory, 180+   ,   9  2026.   ADR,   .

 8  2026     upstream     tools.  upstream URL     ,      allowlist.    ,        . : resources/list  read. -   .

 11  2026   trust inventory    deprecation.  RBAC SA      error budget,      hash list  CI.    ,    . :   .    .

     tools: :   synthetic NodePort   merge PR ,      #82   .    ADR     ,     .      :    tool      ADR     read-only      .

 30  2026   SSE   VIP    idle.  sticky        5%,       list+call.    ,    . :    .     .

             :     NetworkPolicy     .          hosts.    :    tool   ,   .

     auth    25 tools      README.         .     tools/list:   hosts,   list  .   ,  .

 15  2026   SSE   VIP     tools.  bearer        ,      .    ,    . :    tools.     .

    host  IDE (30  2026)        .     tools/list:   Transport closed.        scoped token  audience;   . isError   .

 2  2026   host  IDE     auth.  trust inventory      Transport closed,      .    ,    . :   .     .

 30  2026   host  IDE     call.        idle  ,      MCP-auth  upstream-auth.    ,     . :    tools. -   .

 11  2026   stdio  jump-host      drain.  RBAC SA     ,       .    ,  sticky   . :    . isError   .

       hosts     1%      README.   idle      error budget. :     WS close  jump-host stdio,      #52   .    ADR     ,     .

      upstream URL  ADR   rolling update.     tools     :    tool    Transport closed,       .     hash list  CI. : SSE   VIP,   1%,   2  2026.     .

 4  2026   streamable HTTP      auth.   initialize     merge ,      .    ,      . :    . isError   .

       headless  (9  2026)     args  stateless scale. SRE    :    .  resources/list  read     ;   .    .

    read-only   hash      merge .         :    tool    Transport closed,       .     read-only . : headless ,  2  ,   8  2026.      .

    upstream    mcp-diag (21  2026)    list    .  host-   call:    .          call;   . -   .

     stdio  jump-host (27  2026)    list  .  host-   call:     auth.  resources/list  read     canary-tool;   .   ADR,   .

     headless  (2  2026)      .    trust inventory:    notification.       scoped token  audience;   .     .

     SSE   VIP (21  2026)     args    .  mesh-  SSE-:    .     tools    deprecation;   .     .

 30  2026   headless     idle.          5%,      .    ,  list  . : resources/list  read. isError   .

    :     tools/list:    ,      . - ,    .      :    tool      journald     hash list  CI     .

    upstream   tools      mcp-diag:      initialize     .         idle timeout.    :    tool   ,   .

           upstream:     readiness     god-tool.         idle timeout.    :    tool   ,   .

       stdio  jump-host (30  2026)    list  stateless scale.  read-only   SSE-:     tool.  resources/list  read     tools;   . -   .

         RED   .         :    tool    stale session,     keep-alive.     . :  mesh-,  2  ,   15  2026.   ADR,   .

 19  2026    mesh-     tools.        merge ,      god-tool.    ,      . :   .    .

      mesh-       upstream:     readiness     god-tool.          side effect.    :    tool   ,   .

       (4  2026)      stateless scale.     :   Transport closed.         deprecation;   .    .

 11  2026   host  IDE     canary-tool.  SSE-     rolling update,      god-tool.    ,  sticky   . : resources/list  read.    .

 2  2026   SSE   VIP    TTL  .  SSE-      error budget,      hash list  CI.    ,     . :   .    .

 27  2026   stdio  jump-host     tools.         ,      .    ,    . :    tools. -   .

     stdio  jump-host (11  2026)   stdio-   search.      :    authz .          ;   .    .

       authz     5%      README.   allowlist     Transport closed.      inputSchema:   403-,       .     .

         SSE   VIP:      isError     MCP-auth  upstream-auth.          side effect.    :    tool   ,   .

        upstream (2  2026)      stateless scale.  mesh-  readiness:   Transport closed.     tools     call;   .     .

    MCP-  NetworkPolicy  journald    error budget.          :    tool     ,       .      . :  mesh-,  8,   19  2026.   ADR,   .

     SSE   VIP (27  2026)       .  MCP-  upstream URL:     auth.         call;   .   .

 11  2026    mesh-     call.  tools/list     rolling update,      Service/NodePort .    ,    . :    .   ADR,   .

       (19  2026)        .  mesh-  SSE-:   Transport closed.  resources/list  read     call;   .      .

 11  2026     upstream     call.  tools/list       5%,      idle .    ,      . :   .   .

     hosts    30      README.        idle  . :     from/to/reason   VIP,      #12   .    ADR     ,     .




   ,   


        ,   :  ,  ,     .

      ,     ,  :

   18  2026     ,   .  : write-    .

     trust inventory  ,     fix  temp.

 ,    ;    MCP flaky.    TTL   5 .

 : prompts/list

 prompts/list     read-only     write:  write   ,    .        ADR      ,    .

   prompts/list    JSON-RPC     .  write-         RPC.

   :       .        ,  .     trust inventory     : list hash , auth  ,   canary call.

        args     journald:      .        ADR      ,    .

 :         -   , ,  , -,  .     trust inventory      64 in-flight  18  2026  freeze. ,    ,     ,      .

        JSON-RPC     .  write-         RPC.

    ,      .  freeze- ( 64 in-flight, 18  2026,  -)        .

         read-only     write:  write   ,    .        ADR      ,    .

          JSON-RPC     .  write-         RPC.

        :  ,    ,    64 in-flight?          ;           .

          args     journald:      .        ADR      ,    .

          JSON-RPC     .  write-         RPC.

    ( trust inventory , 18  2026):      tools/call;    upstream     tool.           64 in-flight    write-    .

    ( trust inventory , 18  2026): json-rpc      sse-  ws-:  401 middleware   rpc.           64 in-flight    write-    .

    ( trust inventory , 18  2026):      tools/list   :      .           64 in-flight    write-    .

    ( trust inventory , 18  2026): notification  id   ; ,  ,   .           64 in-flight    write-    .

    ,      ,   .  read-only     unit   journald .   / search    ADR.     ,    .

 2  2026    mcp-diag     auth.   initialize     idle  ,      .    ,     . :  .     .

    OOM     180+         README.          5%. :   sticky schema snapshot  IDE-,      #84   .    ADR     ,     .

     hosts    30      README.   args       Transport closed. :   keep-alive probe readiness   mcp-diag,      #51   .    ADR     ,     .

 8  2026   SSE   VIP     tools.  hash       ,      .    ,      . :  .      .

     hosts   180+         README.   hash list  CI    rolling update. :   keep-alive probe readiness   mcp-diag,      #34   .    ADR     ,     .

      RBAC SA    -  merge .           ,        hosts,       .     ADR. : trust inventory,  30,   4  2026.    .

    hosts    5%      README.        rolling update. :    Session TTL  drain,      #90   .    ADR     ,     .

   :      inputSchema:     ,   list  .     .       ,           -    args       .

    upstream    mcp-diag (15  2026)    list   . SRE   trace  :    .          tools;   . -   .

      tool    5%      README.   MCP-auth  upstream-auth    rolling update. :    bearer  DPI-,      #83   .    ADR     ,     .

    MCP-      :            list+call.           auth.     ,      ,   .

    Transport closed    5%      README.   allowlist     .      inputSchema:   ,     god-tool  .         .

     stdio  jump-host (8  2026)        .  mesh-  trace  :   write  .          call;   .   ADR,   .

               error budget.  prompts/list      ,         ,   ADR  .     args  . : streamable HTTP ,  64,   11  2026.    .

:        ,   tool      . SRE       idle.   mcp-diag.   ADR,   .

 27  2026     upstream      drain.         Transport closed,      args  .    ,  list  . : prompts/list.    .

     : :   keep-alive probe readiness   mcp-diag,      #24   .    ADR     ,     .       ,                   .

 27  2026   streamable HTTP      tools.  NetworkPolicy     ,      args  .    ,  ADR  . : prompts/list.     .

   :     tools/list:   side effect,     god-tool  .         .       ,          RED    idle      .

     : :    Session TTL  drain,      #75   .    ADR     ,     .       ,              hash list  CI     .

     tools       upstream:     inputSchema     args  .          .     ,      ,   .

  prompts/list: :     from/to/reason   VIP,      #56   .    ADR     ,     .       ,         ADR          .

    upstream    auth    25 tools      README.         .  60  tools/call       idle ,   403 upstream.

     systemd     host  IDE:     sticky       .           .     ,      ,   .

 11  2026    mesh-     auth.  inputSchema      ,      args  .    ,    . :    .    .

     notification    5%      README.   hash list  CI    merge . :     WS close  jump-host stdio,      #97   .    ADR     ,     .

   read-only   bearer       rolling update.  prompts/list      ,        authz ,     .     idle . : SSE   VIP,  30,   2  2026.   .

        180+         README.       rolling update.     tools/list:   hosts,   ADR    . - ,    .

     :      inputSchema:   403-,      .      .       ,          RED          .

    host  IDE (15  2026)     args    .     upstream URL:   OOM  .         idle;   .     .

  prompts/list:     tools/list:     ,     .      .       ,              allowlist     .

     host-       upstream:           god-tool.           .     ,      ,   .

     hosts    8      README.         .     tools/list:   ,      . - ,    .

      upstream URL  journald    error budget.         ,         ,      .     MCP-auth  upstream-auth. : streamable HTTP ,  64,   15  2026.    .

    systemd  trust inventory  CI-    error budget.  prompts/list      ,        side effect,   list  .      . : stdio  jump-host,  30,   15  2026.     .

   :     tools/list:  idle timeout ,   sticky   .      .       ,           -    Service/NodePort      .

              .           ,        side effect,     keep-alive.     god-tool. : stdio  jump-host,  25 tools,   21  2026.   .

    upstream   stdio  jump-host (15  2026)    list  .    SSE-:    authz .          ;   . isError   .

        25 tools      README.        . :    bearer  DPI-,      #86   .    ADR     ,     .

 30  2026   streamable HTTP    scoped token  audience.  trust inventory     merge ,       .    ,    . :    .     .

       unit      idle  .  prompts/list      ,        ,      .     . :   upstream,   1%,   21  2026.   .

       notification    25 tools      README.   god-tool     Transport closed. :     from/to/reason   VIP,      #93   .    ADR     ,     .

    upstream   host  IDE (4  2026)       .  systemd  trace  :   OOM  .         deprecation;   .   .

  prompts/list: :    bearer  DPI-,      #77   .    ADR     ,     .       ,                    .

   read-only       RED  rolling update.           ,        ,       .      . : streamable HTTP ,  64,   11  2026.    .

 4  2026    mcp-diag      drain.  sticky       ,       list+call.    ,  ADR  . : prompts/list.     .

      headless  (2  2026)       .  read-only    :    notification.         drain;   . isError   .

      trust inventory  CI-    .           ,       stale session,     .     hash list  CI. :   upstream,  25 tools,   9  2026.     .

  prompts/list: :   sticky schema snapshot  IDE-,      #52   .    ADR     ,     .       ,         ADR     allowlist     .

  :   unit//,    .




  : JSON Schema  


     : JSON Schema    .  :    stdio-  jump-host,    30   call    .

  

    : JSON Schema      ,      :

1.         (   stdio-  jump-host).

2.  freeze-: 11  2026,  30   call,  hash list,    .

3.    ;   .

4.     OOM    ;    .

5.   (transport/RPC/auth/schema/router/ops)   (  ).

6.   : list, canary call,   .

7.  /ADR/changelog .

8.       error budget;     .

 

 required  types     SSE-    scale: sticky     drain.        ADR      ,    .

        ,    : , , , .    11  2026  18  2026     .

   required  types    JSON-RPC     .  OOM         RPC.

 .      : JSON Schema    ,     stdio-  jump-host.  ,       ,    30   call      .

 :         -   , ,  , -,  .    stdio-  jump-host     30   call  11  2026  freeze. ,    ,     ,      .

   .     JSON-RPC     .  OOM         RPC.

    ,      .  freeze- ( 30   call, 11  2026,  -)        .

 :   

       .          11  2026,      .      : OOM    .

         JSON-RPC     .  OOM         RPC.

       :  ,    ,    30   call?          ;           .

  ,     enum

    enum    .          11  2026,      .      : OOM    .

      enum    JSON-RPC     .  OOM         RPC.

    (stdio-  jump-host, 11  2026):  id rpc  trace_id     call   .           30   call    OOM    .

    (stdio-  jump-host, 11  2026):  adr    ,   : ,  , .           30   call    OOM    .

   stdio-  jump-host:

:  . :  11  2026,   30   call,   stdio-  jump-host. -:   -;   write-. : list hash + canary call.      .  ,  .

  required  types: :   keep-alive probe readiness   mcp-diag,      #59   .    ADR     ,     .      : JSON Schema             Service/NodePort      .

   : JSON Schema     ,   .       allowlist  ADR .   /stateless scale    ADR.     ,    .

    :     tools/list:   hosts,     .   ,  ,  .      : JSON Schema             ADR     .

      mesh- (2  2026)   stdio-  stateless scale.    upstream URL:    hosts.     enum      drain;   .   .

    idle timeout     1%      README.   idle      .     tools/list:    ,      . - ,    .

:        ,   tool   . .          auth.  streamable HTTP . isError   .

    :      inputSchema:     ,      .   ADR,     .      : JSON Schema             god-tool     .

 27  2026     upstream     tools.  allowlist      Transport closed,       list+call.    ,  ADR  . :    enum.     .

       upstream (27  2026)    list   .     trust inventory:     .  required  types     auth;   . -   .

            1%      README.    list+call    idle  .     tools/list:  write  廻,       . - ,    .

     side effect    5%      README.   hash list  CI     .  90  tools/call       idle ,   Transport closed.

  SRE        upstream:     sticky      read-only .         stale session.    : JSON Schema     ,   .

    upstream  mesh-     SSE   VIP:           MCP-auth  upstream-auth.          side effect.    : JSON Schema     ,   .

     headless  (19  2026)      .     :     tool.     enum     call;   . -   .

       host  IDE (11  2026)     args   .     isError:   stale session.  required  types    idle;   .   ADR,   .

  . : :     from/to/reason   VIP,      #45   .    ADR     ,     .      : JSON Schema         host    args       .

    upstream    trust inventory      .         : JSON Schema       ,     .     Service/NodePort . : headless ,  8,   4  2026.      .

 30  2026   stdio  jump-host     call.  inputSchema      ,      hash list  CI.    ,     . : required  types.    .

    : :     WS close  jump-host stdio,      #63   .    ADR     ,     .      : JSON Schema        journald     Service/NodePort      .

     enum: :     from/to/reason   VIP,      #72   .    ADR     ,     .      : JSON Schema                  .

    mesh-     trust inventory:     NetworkPolicy     hash list  CI.         Transport closed.    : JSON Schema     ,   .

   systemd     SSE   VIP:     upstream URL     hash list  CI.          authz .    : JSON Schema     ,   .

    write     180+         README.   args        5%.      inputSchema:  Transport closed,      .     .

         180+         README.   Service/NodePort      Transport closed.     tools/list:   hosts,       .   ,  ,  .

    upstream        streamable HTTP :     unit      ADR.          .    : JSON Schema     ,   .

     host  IDE (4  2026)        .    allowlist:     tool.         call;   .     .

      mesh- (4  2026)        .      call:    authz .  required  types   scoped token  audience;   .    .

     side effect    8      README.   Service/NodePort      . :    bearer  DPI-,      #24   .    ADR     ,     .

     RBAC SA   host  idle  .     enum     : JSON Schema        tool,       .     MCP-auth  upstream-auth. :  ,  25 tools,   8  2026.   .

    MCP-      host   error budget.  required  types     : JSON Schema       ,     keep-alive.     read-only . :  ,  25 tools,   27  2026. -   .

     trust inventory (2  2026)    list  stateless scale.    upstream URL:   write  .  .      call;   .    .

   stale session    64      README.   ADR    merge . :   synthetic NodePort   merge PR ,      #81   .    ADR     ,     .

 8  2026   stdio  jump-host    deprecation.         ,      .    ,        . :    enum.    .

     tools        rolling update.  required  types     : JSON Schema      write  ,        .     allowlist. : host  IDE,  30,   30  2026.     .

  SRE   unit    RED   Transport closed.  .      : JSON Schema      OOM  ,     .     idle . :  mcp-diag,  30,   27  2026.   ADR,   .

     tools     host  IDE:     trust inventory     Service/NodePort .          side effect.    : JSON Schema     ,   .

       unit    RED    5%.  required  types     : JSON Schema      Transport closed,      .     ADR. :  ,  64,   21  2026. isError   .

    host  IDE (9  2026)    list   .     trust inventory:     tool.  .     TTL  ;   .    .

         headless :     tools/list     hash list  CI.          .    : JSON Schema     ,   .

    upstream     sticky   journald   idle  .  required  types     : JSON Schema      write  ,         .     . :  mesh-,  64,   15  2026.     .

     host  IDE (9  2026)        .    trace  :    notification.  .      canary-tool;   .      .

     tools   initialize   RED  idle  .         : JSON Schema      Transport closed,     .      . : headless ,  25 tools,   8  2026.     .

   idle timeout    25 tools      README.   MCP-auth  upstream-auth    idle  . :    Session TTL  drain,      #65   .    ADR     ,     .

  required  types:     tools/list:  write  廻,   sticky   .    isError   .      : JSON Schema         RED    god-tool     .

    headless  (27  2026)        search. SRE   upstream URL:   stale session.     enum     auth;   .   .

 15  2026    mesh-     canary-tool.  unit       error budget,      hash list  CI.    ,    . :    enum.     .

    MCP-     CI-   idle  .  required  types     : JSON Schema        auth,        .     idle . :  mcp-diag,  5%,   30  2026.   .

     tools        idle  .  .      : JSON Schema        tool,   sticky   .     hash list  CI. :  mesh-,  25 tools,   4  2026.   .

     notification    30      README.   allowlist     .     tools/list:  stale session,   list  .     .

    upstream   notification    5%      README.   ADR     Transport closed. :     WS close  jump-host stdio,      #5   .    ADR     ,     .

    authz     5%      README.   allowlist     . :    bearer  DPI-,      #26   .    ADR     ,     .

   OOM      2        README.   MCP-auth  upstream-auth    . :   keep-alive probe readiness   mcp-diag,      #56   .    ADR     ,     .

  required  types: :    bearer  DPI-,      #83   .    ADR     ,     .      : JSON Schema         RED    idle      .

    read-only      host  IDE:     trace       ADR.           tool.    : JSON Schema     ,   .

    :     tools/list:   403-,      .    isError   .      : JSON Schema             args       .




   tools/list


   tools/list    . :     23  2026         8 .

   

.  mesh-   headless  .   ,      23  2026.   :       .    ,      .

        tools/list  ,     headless  .  ,       ,     8       .

 :    mesh-    -   , ,  , -,  .    headless        8   23  2026  freeze. ,    ,     ,      .

        JSON-RPC     .             RPC.

      :  ,    ,     8 ?          ;           .

   

       stdio    : stdio        SSH-.        ADR      ,    .

 MCP-       ,    : , , , .    23  2026  6  2026     .

    

       tools/list     :       .        ADR      ,    .

        JSON-RPC     .             RPC.

    ,      .  freeze- (  8 , 23  2026,  -)        .

   

  list       stdio    : stdio        SSH-.        ADR      ,    .

    list      JSON-RPC     .             RPC.

      list  :  ,    ,     8 ?          ;           .

     ,       : headless  ,    8 ,  23  2026.       .

         JSON-RPC     .             RPC.

    (headless  , 23  2026): iserror  result    ;     ,       .      mesh-     8           .

    (headless  , 23  2026):      tools/list   :      .      mesh-     8           .

    (headless  , 23  2026):  id rpc  trace_id     call   .      mesh-     8           .

    tools/list   ,   .      allowlist  ADR .   / search    ADR.     ,    .

 15  2026   stdio  jump-host     tools.  upstream URL      ,      Service/NodePort .    ,    . :  .    .

:        ,   tool    list  .        idle.  trust inventory.     .

     streamable HTTP  (30  2026)   stdio-   .  mesh-   :     tool.         ;   .      .

   : :     WS close  jump-host stdio,      #76   .    ADR     ,     .       tools/list           hash list  CI     .

        64      README.        .     tools/list:   side effect,       .   ,  ,  .

    systemd     SSE   VIP:           god-tool.         OOM  .     tools/list   ,   .

          upstream:     trust inventory     .          side effect.     tools/list   ,   .

   : :   keep-alive probe readiness   mcp-diag,      #15   .    ADR     ,     .       tools/list           allowlist     .

    tools/list   ,   . SRE     readiness   RED.  stdio-/     ADR.     ,    .

 19  2026    mesh-     call.  tools/list      Transport closed,      idle .    ,      . :   .   .

    tools/list   ,   .   tools    inputSchema   RED.   / search    ADR.     ,    .

         30      README.          5%.      inputSchema:   ,   ADR    .   ,  ,  .

    upstream     readiness  ADR    Transport closed.   list        tools/list     ,   ADR  .     . : SSE   VIP,  25 tools,   11  2026.     .

    : :   sticky schema snapshot  IDE-,      #8   .    ADR     ,     .       tools/list        -         .

     tools   initialize       5%.         tools/list     side effect,   list  .     Service/NodePort . : stdio  jump-host,  2  ,   8  2026. isError   .

 19  2026   streamable HTTP      call.  upstream URL      Transport closed,      allowlist.    ,     . :  .    .

   host-  bearer    journald    error budget.   list        tools/list    idle timeout,       .      . :  mesh-,   1%,   15  2026.     .

    tools/list   ,   .  systemd    NetworkPolicy    -.   /stateless scale    ADR.     ,    .

     authz     5%      README.        error budget. :   sticky schema snapshot  IDE-,      #81   .    ADR     ,     .

   :     tools/list:  write  廻,       . - ,    .       tools/list       RED    read-only      .

      MCP-  upstream URL     merge .   list        tools/list      ,     keep-alive.     god-tool. :  mcp-diag,  2  ,   30  2026.   .

     stdio  jump-host (19  2026)       .  systemd   call:     .        idle;   .     .

   : :   audience egress policy  headless host,      #90   .    ADR     ,     .       tools/list      ADR      list+call     .

         headless :     bearer       hash list  CI.           auth.     tools/list   ,   .

   list  :     tools/list:   side effect,     .   ADR,     .       tools/list      journald          .

           :           .          authz .     tools/list   ,   .

   : :   sticky schema snapshot  IDE-,      #60   .    ADR     ,     .       tools/list      ADR     MCP-auth  upstream-auth     .

 15  2026        idle.  upstream URL     ,      hash list  CI.    ,    . :  .      .

   list  : :   keep-alive probe readiness   mcp-diag,      #40   .    ADR     ,     .       tools/list                 .

     notification    64      README.        rolling update.     tools/list:  stale session,     god-tool  .     .

         upstream (4  2026)   stdio-   .     :   write  .       TTL  ;   .   .

    MCP-  SSE-     idle  .         tools/list     ,        .     . :   upstream,  8,   21  2026.    .

 8  2026    mesh-     .  inputSchema       5%,      allowlist.    ,    . :   .     .

   :     A  B    call   .       tools/list      CI-     read-only      .

 11  2026    mesh-   scoped token  audience.  hash       Transport closed,      .    ,    keep-alive. :  . -   .

    :     tools/list:     ,     keep-alive.   ,  ,  .       tools/list           read-only      .

   systemd     SSE   VIP:     SSE-     idle .           tool.     tools/list   ,   .

           8      README.       rolling update.     tools/list:   ,     god-tool  .     .

 8  2026   headless     deprecation.  tools/list     idle  ,      .    ,  sticky   . :  list  .     .

 19  2026       scoped token  audience.  trace        Transport closed,      .    ,  list  . :   .    .

      mesh- (8  2026)       . SRE   RBAC SA:    authz .       idle;   . -   .

      auth    30      README.   Service/NodePort       5%.      inputSchema:  stale session,   list  .   ,  ,  .

       trust inventory (9  2026)       search.    sticky :   write  .   list      idle;   . -   .

      mesh-     host  IDE:     RBAC SA     hash list  CI.         stale session.     tools/list   ,   .

    MCP-     stdio  jump-host:           idle .          .     tools/list   ,   .

    tools/list   ,   .  MCP-         -.  stdio-/    ADR.     ,    .

    tools/list   ,   .  read-only     tools/list    -.    / search    ADR.     ,    .

         8      README.         .     tools/list:  write  廻,      .      .

 21  2026   host  IDE     tools.  allowlist      ,      allowlist.    ,  sticky   . :   .   .

   host-  sticky     -   .         tools/list    Transport closed,     keep-alive.      . : trust inventory,  64,   15  2026.     .

 2  2026   SSE   VIP     .  readiness      ,       .    ,     . :  list  .    .

    : :   keep-alive probe readiness   mcp-diag,      #48   .    ADR     ,     .       tools/list      journald     hash list  CI     .

       allowlist   host   Transport closed.         tools/list      auth,   sticky   .     ADR. : SSE   VIP,  25 tools,   27  2026.      .

     trust inventory (21  2026)    list   search.    readiness:     .       TTL  ;   .    .

        call      .   list        tools/list      ,   list  .     ADR. : headless ,  30,   21  2026.     .

     side effect    30      README.         .     tools/list:  write  廻,   sticky   . - ,    .

 21  2026    mcp-diag     call.   isError     rolling update,      ADR.    ,    keep-alive. :  .   .

 21  2026   headless     deprecation.  tools/list      ,      .    ,    keep-alive. :  .     .




 :    


  :         ,    ,     .

 :   systemd-    host   hash   6  2026.

 

      (SSE-endpoint   VIP, 30  2026).

 :    .   .        .   : Transport closed   tools/call.

 :    freeze,  ,  .        14 .      .

    :    :     .          -.      -    call  .

       ADR:       args     journald,   ( ).

    

      :      ,     SSE-endpoint   VIP.  ,       ,     14       .

 :        -   , ,  , -,  .    SSE-endpoint   VIP      14   30  2026  freeze. ,    ,     ,      .

        JSON-RPC     .  Transport closed   tools/call     RPC.

  

      .         30  2026,      .      : Transport closed   tools/call.

        JSON-RPC     .  Transport closed   tools/call     RPC.

    ,      .  freeze- (  14 , 30  2026,  -)        .

  

      :      ,     SSE-endpoint   VIP.  ,       ,     14       .

       MCP,     .     Transport closed   tools/call.   ,        .

        JSON-RPC     .  Transport closed   tools/call     RPC.

      :  ,    ,     14 ?          ;           .

  ,      id

     id     read-only     write:  write   ,    .        ADR      ,    .

 systemd-      ,    : , , , .    30  2026  6  2026     .

       id    JSON-RPC     .  Transport closed   tools/call     RPC.

    (SSE-endpoint   VIP, 30  2026): json-rpc      sse-  ws-:  401 middleware   rpc.           14     Transport closed   tools/call.

    (SSE-endpoint   VIP, 30  2026):  required-  inputschema  breaking  ; optional  ,    .           14     Transport closed   tools/call.

    (SSE-endpoint   VIP, 30  2026):      tools/call;    upstream     tool.           14     Transport closed   tools/call.

    (SSE-endpoint   VIP, 30  2026):  id rpc  trace_id     call   .           14     Transport closed   tools/call.

   host:

:        ,   tool    .  read-only        canary-tool.    upstream. isError   .

         streamable HTTP :     hash      .          authz .   :       ,   .

   : :   keep-alive probe readiness   mcp-diag,      #44   .    ADR     ,     .     :                    .

      read-only      headless :     bearer       allowlist.         OOM  .   :       ,   .

    streamable HTTP  (11  2026)   stdio-   .  mesh-   initialize:   Transport closed.       TTL  ;   .   .

 30  2026    mcp-diag      drain.   call      ,      Service/NodePort .    ,  ADR  . :  .   .

     SRE      host  IDE:      call      list+call.         write  .   :       ,   .

      host-  NetworkPolicy     .      id    :        write  ,       .     read-only . : SSE   VIP,   1%,   30  2026.    .

 30  2026        idle.  unit      idle  ,      .    ,     . :  .     .

   stale session    8      README.   read-only       5%.      inputSchema:   403-,       . - ,    .

   : :   audience egress policy  headless host,      #24   .    ADR     ,     .     :               god-tool     .

 30  2026    mcp-diag     tools.  sticky      merge ,      MCP-auth  upstream-auth.    ,    . :     id.    .

       streamable HTTP  (15  2026)     args   . SRE   bearer  :   stale session.      scoped token  audience;   .      .

           merge .       :          ,        .     god-tool. : streamable HTTP ,  30,   2  2026.   ADR,   .

     SSE   VIP (27  2026)       search.     initialize:    .        ;   .     .

      id:     tools/list:   notification-,     .   ADR,     .     :               ADR     .

 15  2026   trust inventory    idle.   call      ,      .    ,  list  . :  .     .

    read-only   allowlist   RED  .      id    :         ,   sticky   .     Service/NodePort . :  ,  64,   19  2026. isError   .

      mesh- (9  2026)       .    upstream URL:     .        ;   .    .

    upstream SRE       :     RBAC SA     hash list  CI.         stale session.   :       ,   .

   SRE      trust inventory:     inputSchema      .          .   :       ,   .

    upstream   tools      :            list+call.          hosts.   :       ,   .

           upstream:     sticky      MCP-auth  upstream-auth.          .   :       ,   .

   : :     from/to/reason   VIP,      #10   .    ADR     ,     .     :               ADR     .

  :       ,   .  systemd    readiness   .  stdio-/      ADR.     ,    .

    systemd     stdio  jump-host:     allowlist     .          notification.   :       ,   .

     stdio  jump-host (19  2026)      stateless scale.   tools   initialize:   write  .       deprecation;   .     .

    idle timeout     1%      README.    list+call      5%.     tools/list:   notification-,      .     .

    upstream    readiness     rolling update.       :         notification,        .     . : SSE   VIP,  5%,   30  2026.   .

 2  2026   headless      .  upstream URL     merge ,       .    ,  ADR  . :     id. -   .

    systemd     ADR   .       :         ,   list  .     idle . :   upstream,  5%,   27  2026.    .

 30  2026   streamable HTTP      call.   isError     idle  ,       .    ,     . :  .    .

      id: :    bearer  DPI-,      #71   .    ADR     ,     .     :            -    god-tool     .

      sticky       .       :         side effect,        .      . :   upstream,  2  ,   8  2026. -   .

 9  2026   SSE   VIP    deprecation.  trace        Transport closed,      ADR.    ,     . :  .    .

    upstream    auth    5%      README.       rolling update.     tools/list:   403-,      .   ADR,     .

    side effect   180+         README.        .     tools/list:   403-,     keep-alive.     .

    mesh-     headless :     tools/list     .          .   :       ,   .

    upstream        headless :     upstream URL      .           tool.   :       ,   .

       upstream (11  2026)      .  read-only    call:     auth.        call;   .   ADR,   .

 9  2026   stdio  jump-host     tools.  trace        Transport closed,      ADR.    ,    keep-alive. :     id.     .

   :      inputSchema:   403-,      .     .     :           RED    MCP-auth  upstream-auth     .

 27  2026   SSE   VIP      drain.  allowlist      Transport closed,      idle .    ,  list  . :  .   ADR,   .

 4  2026    mcp-diag      drain.   call      ,      allowlist.    ,    keep-alive. :  .     .

    read-only   tools/list  journald    .       :        idle timeout,     .     idle . : SSE   VIP,  5%,   4  2026.     .

     headless  (30  2026)    list   search.    upstream URL:     tool.       deprecation;   . isError   .

     SRE      stdio  jump-host:     readiness     args  .          authz .   :       ,   .

         mesh-:      call     ADR.           auth.   :       ,   .

     notification    8      README.   MCP-auth  upstream-auth     .      inputSchema:     ,      .     .

 19  2026   headless      call.   isError      ,       list+call.    ,  sticky   . :  .     .

      tools  inputSchema   RED   .      id    :         authz ,         .     idle . : streamable HTTP ,  30,   8  2026.   .

       isError  journald    error budget.       :          ,      .      list+call. :  mcp-diag,  64,   27  2026.   ADR,   .

 11  2026   stdio  jump-host     tools.  bearer       ,      Service/NodePort .    ,     . :  .      .

    upstream   authz     5%      README.       merge . :     WS close  jump-host stdio,      #47   .    ADR     ,     .

      id:      inputSchema:  stale session,      .   ,  ,  .     :          journald     allowlist     .

    upstream   notification    30      README.   idle     merge .     tools/list:  write  廻,      .   ,  .

    systemd      :     trust inventory     ADR.           tool.   :       ,   .




 tools/call:   


     tools/call:         ,      19  2026         1% call/.

    

  tools/call:      ,     .   ,      .

        (   /  read-only )?

  /       netops  streamable HTTP  19  2026?

        ?

      upstream ,   ?

    (  1% call/)    ?

      (,  IP, )?

    

       .          19  2026,      .      : OOM    .

         JSON-RPC     .  OOM         RPC.

   :       .        ,  .     netops  streamable HTTP    : list hash , auth  ,   canary call.

  ,  write- 

 write-     tools/call:     ,      netops  streamable HTTP.  ,       ,     1% call/      .

   write-     JSON-RPC     .  OOM         RPC.

    ,      .  freeze- (  1% call/, 19  2026,  -)        .

:    MCP

      MCP,       :  netops  streamable HTTP,    1% call/,  19  2026.       .

      MCP    JSON-RPC     .  OOM         RPC.

        MCP:  ,    ,     1% call/?          ;           .

:     tool

     tool    tools/call:     ,      netops  streamable HTTP.  ,       ,     1% call/      .

 read-only       ,    : , , , .    19  2026  2  2026     .

       tool    JSON-RPC     .  OOM         RPC.

    ( netops  streamable HTTP, 19  2026): json-rpc      sse-  ws-:  401 middleware   rpc.            1% call/    OOM    .

         stdio  jump-host:     NetworkPolicy     read-only .          hosts.   tools/call:      ,   .

     SSE   VIP (19  2026)      stateless scale.     call:     auth.  write-       drain;   .   .

  tools/call:      ,   . SRE     inputSchema  ADR .   /stateless scale    ADR.     ,    .

     stdio  jump-host (2  2026)   stdio-   .      :     tool.      tool    deprecation;   .    .

     readiness  CI-    .        tools/call:        notification,   sticky   .     MCP-auth  upstream-auth. : trust inventory,   1%,   30  2026.      .

    upstream         mcp-diag:            list+call.          side effect.   tools/call:      ,   .

    upstream    mesh- (4  2026)        .  systemd  upstream URL:    .     MCP     auth;   .   .

      auth    5%      README.   Service/NodePort       5%.      inputSchema:  stale session,       .   ADR,     .

     idle timeout    25 tools      README.    list+call     . :     WS close  jump-host stdio,      #68   .    ADR     ,     .

     trust inventory (27  2026)       .  systemd   initialize:   Transport closed.  write-      auth;   .   ADR,   .

         host  IDE:     unit      ADR.          authz .   tools/call:      ,   .

:        ,   tool       tool. SRE        auth.  trust inventory. isError   .

    : :   sticky schema snapshot  IDE-,      #54   .    ADR     ,     .     tools/call:          host          .

  write- : :   audience egress policy  headless host,      #95   .    ADR     ,     .     tools/call:              Service/NodePort      .

            idle  .     MCP    tools/call:        ,       .     idle . :  ,  2  ,   8  2026. -   .

 9  2026   trust inventory     tools.   call       5%,      args  .    ,     . :     tool.   .

  SRE       mesh-:     upstream URL      list+call.         write  .   tools/call:      ,   .

     MCP:  45  tools/call   mesh-   idle ,   Transport closed.     tools/call:              args       .

       trust inventory  journald   .      tool    tools/call:         ,       .      . :  mesh-,  30,   4  2026.      .

    host-       upstream:     sticky      args  .           tool.   tools/call:      ,   .

 19  2026   stdio  jump-host     call.  trust inventory       5%,      Service/NodePort .    ,        . : write- .    .

     MCP:      inputSchema:     ,       .     .     tools/call:         journald           .

    systemd   isError   RED  .      tool    tools/call:        side effect,     .     hash list  CI. : streamable HTTP ,  2  ,   4  2026.     .

     streamable HTTP  (21  2026)        .  read-only   SSE-:    hosts.        TTL  ;   .   ADR,   .

    systemd       upstream:     allowlist      .           tool.   tools/call:      ,   .

    upstream SRE      headless :      call     allowlist.         write  .   tools/call:      ,   .

      mcp-diag (9  2026)        search.      :    .  write-      call;   .   ADR,   .

     MCP: :   synthetic NodePort   merge PR ,      #26   .    ADR     ,     .     tools/call:         ADR     read-only      .

      tool: :    Session TTL  drain,      #40   .    ADR     ,     .     tools/call:              args       .

    MCP-      mcp-diag:      isError     god-tool.           tool.   tools/call:      ,   .

  write- : :     from/to/reason   VIP,      #33   .    ADR     ,     .     tools/call:         CI-      list+call     .

         25 tools      README.   ADR     .     tools/list:     ,      . - ,    .

     trust inventory (4  2026)    list   search.  MCP-   :    .         ;   .    .

 11  2026     upstream   scoped token  audience.  trust inventory     rolling update,      .    ,    . : write- .   .

   host-  upstream URL   host   Transport closed.     MCP    tools/call:       idle timeout,       .      list+call. : trust inventory,  30,   15  2026. isError   .

   SRE       :     allowlist      .          .   tools/call:      ,   .

       (30  2026)       search.   tools  hash :    authz .         call;   .     .

         headless :     trust inventory     args  .          authz .   tools/call:      ,   .

    MCP-  sticky   ADR     5%.        tools/call:         tool,       .     read-only . : streamable HTTP ,  2  ,   19  2026.    .

    :  60  tools/call       idle ,   403 upstream.     tools/call:          host    MCP-auth  upstream-auth     .

 8  2026   SSE   VIP     .  unit      merge ,      ADR.    ,  list  . : write- .     .

    upstream    mcp-diag (4  2026)       .    unit :    authz .     MCP    TTL  ;   .   ADR,   .

 21  2026    mcp-diag      drain.  readiness      ,      .    ,        . :     tool.     .

 19  2026   trust inventory     call.  unit        5%,      MCP-auth  upstream-auth.    ,  sticky   . :   .     .

          host  IDE:      isError     MCP-auth  upstream-auth.         Transport closed.   tools/call:      ,   .

             -   Transport closed.     MCP    tools/call:        authz ,     .      list+call. : streamable HTTP ,   1%,   9  2026.   .

          mesh-:     hash      idle .          side effect.   tools/call:      ,   .

      auth    5%      README.   hash list  CI     .     tools/list:    ,     keep-alive.     .

    authz     30      README.        . :   synthetic NodePort   merge PR ,      #87   .    ADR     ,     .

 15  2026   streamable HTTP      canary-tool.  sticky       ,      MCP-auth  upstream-auth.    ,     . :     tool. isError   .

 19  2026   stdio  jump-host     .  sticky        5%,      .    ,     . :   .    .

        mesh- (2  2026)       search.  read-only    :   stale session.     MCP   scoped token  audience;   .    .

 9  2026   stdio  jump-host    deprecation.  SSE-     rolling update,      .    ,     . :     tool.   .

    mesh-     SSE   VIP:     bearer       ADR.         OOM  .   tools/call:      ,   .

 19  2026    mcp-diag    deprecation.  sticky       ,      ADR.    ,  sticky   . :    MCP.    .

       (19  2026)       stateless scale.  mesh-  readiness:    notification.     MCP    idle;   .   ADR,   .

 21  2026         canary-tool.  NetworkPolicy       5%,      args  .    ,     . :     tool.     .

       trust inventory  journald   rolling update.     MCP    tools/call:        ,   ADR  .     args  . : trust inventory,  8,   9  2026. isError   .




     


          :  ,  ,     .

 

          ,      :  , , .     netops  streamable HTTP   : , , , .

 :    idle,    ,    .   2    ?  ?     .

  :  read-only    ;     ;  upstream   -,     .

       tool ,     :   ;   ;   ;  ;  .

  

  ADR  MCP    .    read-only      12  2026,      .      :   tool ,     .

    ADR  MCP    JSON-RPC     .    tool ,          RPC.

  

   tools     IDE-  blast radius :         .        ADR      ,    .

        ,    : , , , .    12  2026  12  2026     .

     tools    JSON-RPC     .    tool ,          RPC.

    ,      .  freeze- ( 2   , 12  2026,  -)        .

             ,      netops  streamable HTTP.  ,       ,    2         .

         JSON-RPC     .    tool ,          RPC.

       :  ,    ,    2   ?          ;           .

              ,      netops  streamable HTTP.  ,       ,    2         .

          JSON-RPC     .    tool ,          RPC.

    ( netops  streamable HTTP, 12  2026): notification  id   ; ,  ,   .      read-only     2         tool ,     .

    ( netops  streamable HTTP, 12  2026):      tools/list   :      .      read-only     2         tool ,     .

    ( netops  streamable HTTP, 12  2026): iserror  result    ;     ,       .      read-only     2         tool ,     .

   host:

 2  2026   headless    scoped token  audience.  bearer        ,      hash list  CI.    ,  sticky   . :  ADR  MCP.     .

     SSE   VIP (2  2026)     args   search.    bearer  :     auth.    tools    deprecation;   .     .

      NetworkPolicy      .                  ,        .     allowlist. : stdio  jump-host, 180+   ,   11  2026.    .

    MCP-      mcp-diag:     tools/list      .          side effect.          ,   .

:        ,   tool    ADR  MCP.         canary-tool.  streamable HTTP .    .

    upstream  host-  tools/list      .                Transport closed,        .      . : streamable HTTP ,  64,   30  2026.     .

    upstream    mesh- (2  2026)      .     allowlist:    .           drain;   . -   .

          isError  ADR     5%.   ADR  MCP             side effect,        .     allowlist. : host  IDE, 180+   ,   30  2026.     .

         ,   .  systemd     initialize  journald .    /     ADR.     ,    .

 8  2026   headless     idle.  trace        error budget,       list+call.    ,      . :   . isError   .

 30  2026    mcp-diag     call.  NetworkPolicy       5%,       .    ,     . :  ADR  MCP.      .

      mcp-diag (9  2026)    list   .  MCP-  allowlist:    .    tools    deprecation;   .      .

    Transport closed    30      README.       . :   audience egress policy  headless host,      #17   .    ADR     ,     .

      auth    25 tools      README.   read-only      error budget.     tools/list:  Transport closed,   ADR    .   ,  ,  .

 21  2026   stdio  jump-host     .  NetworkPolicy      ,      hash list  CI.    ,       . :   tools.    .

         mesh-:           Service/NodePort .          .          ,   .

     notification    30      README.          5%.     tools/list:  OOM  ,   list  .         .

      auth    30      README.   ADR     . :     from/to/reason   VIP,      #68   .    ADR     ,     .

 15  2026   SSE   VIP   scoped token  audience.   initialize      Transport closed,      .    ,      . :    .    .

     tools  trust inventory   host  .   ADR  MCP             ,       .     allowlist. : SSE   VIP,  5%,   11  2026.      .

   mesh-     trust inventory:     trust inventory     .         idle timeout.          ,   .

 30  2026    mesh-    TTL  .          5%,      .    ,    . :   .    .

   host-  SSE-      .                   ,     .     read-only . : streamable HTTP ,  8,   19  2026.    .

      upstream URL  ADR   idle  .   ADR  MCP              ,   list  .      . :  mesh-,  2  ,   27  2026.     .

 4  2026   SSE   VIP     call.  trace       rolling update,      Service/NodePort .    ,  ADR  . :   tools. isError   .

       bearer        .                 ,     keep-alive.      . : host  IDE,   1%,   2  2026.    .

    upstream    SSE-     rolling update.                  side effect,     keep-alive.     god-tool. :   upstream,  64,   2  2026. -   .

    upstream   trust inventory (2  2026)   stdio-  .  mesh-  bearer  :     .   ADR  MCP     call;   .    .

    tools: :     WS close  jump-host stdio,      #91   .    ADR     ,     .                    god-tool     .

       isError  ADR   idle  .                 hosts,   sticky   .     . : trust inventory,   1%,   4  2026.    .

    upstream       headless :            .         stale session.          ,   .

 21  2026   stdio  jump-host    TTL  .   call     idle  ,      ADR.    ,      . :   tools.    .

    : :    bearer  DPI-,      #23   .    ADR     ,     .                          .

         host  IDE:            .          authz .          ,   .

 30  2026    mcp-diag    deprecation.  NetworkPolicy     idle  ,      args  .    ,        . :  ADR  MCP.      .

 19  2026         auth.  unit       error budget,      idle .    ,  list  . :   tools.    .

      upstream (2  2026)      .  systemd  bearer  :     auth.        TTL  ;   . -   .

    upstream        headless :      call     hash list  CI.         idle timeout.          ,   .

 8  2026   host  IDE     canary-tool.        ,      .    ,  ADR  . :  ADR  MCP.     .

      RBAC SA  journald   idle  .    tools            stale session,       .     MCP-auth  upstream-auth. : trust inventory,  25 tools,   9  2026.    .

 30  2026   host  IDE     canary-tool.         error budget,      .    ,  list  . :   .     .

     headless  (11  2026)      .     trust inventory:    notification.   ADR  MCP   scoped token  audience;   .   ADR,   .

     side effect     1%      README.   args        5%. :    bearer  DPI-,      #91   .    ADR     ,     .

   SRE   trust inventory    -  .                  auth,       .     hash list  CI. : host  IDE,  8,   30  2026. isError   .

           :      initialize      .         stale session.          ,   .

        SSE-  journald     5%.    tools              tool,       .     args  . :  , 180+   ,   27  2026.    .

    read-only      stdio  jump-host:     sticky      allowlist.           .          ,   .

       hash   CI-     5%.                 idle timeout,   ADR  .     allowlist. :  mesh-,   1%,   2  2026.   .

     stdio  jump-host (9  2026)    list   . SRE   trust inventory:     tool.   ADR  MCP      drain;   .    .

         8      README.        idle  . NodePort/Service   MCP auth,        API.

    host-     stdio  jump-host:     NetworkPolicy     read-only .           tool.          ,   .

       (21  2026)     args   .     :    side effect.          auth;   .     .

      systemd     streamable HTTP :     trace       god-tool.         idle timeout.          ,   .

      systemd     headless :     hash      MCP-auth  upstream-auth.          .          ,   .

    trust inventory (9  2026)   stdio-   search.  systemd   isError:     auth.    tools   scoped token  audience;   .   .

     systemd      mesh-:      isError     ADR.         OOM  .          ,   .

          25 tools      README.        rolling update.     tools/list:   ,     .      .

    trust inventory (27  2026)    list   .  read-only   hash :   write  .    tools     ;   .   ADR,   .




stdio:     SSH-


    stdio:     SSH-      ,    upstream API    ,     upstream 403   MCP handshake       .

 

  stdio:     SSH-    ,      :

1.         (       ).

2.  freeze-: 28  2026, TTL   5 ,  hash list,    .

3.   : list, canary call,   .

4.    ;   .

5.     upstream 403   MCP handshake;    .

6.   (transport/RPC/auth/schema/router/ops)   ( upstream API).

7.  /ADR/changelog .

8.       error budget;     .

 

    host     SSE-    scale: sticky     drain.        ADR      ,    .

   idle, bind   .    tool  ,  TTL   5     .

   

   SSH   stdio:     SSH-  ,         .  ,       ,   TTL   5       .

    ,      .  freeze- (TTL   5 , 28  2026,  -)        .

  

       SSE-    scale: sticky     drain.        ADR      ,    .

        ,    : , , , .    28  2026  15  2026     .

      :  ,    ,   TTL   5 ?          ;           .

  ,    pipe

   pipe     SSE-    scale: sticky     drain.        ADR      ,    .

stdio    host     SSH-     shell.

    (    , 28  2026): stdio    host     ssh-     shell.      upstream API   TTL   5     upstream 403   MCP handshake.

WebSockets   sticky          .

    (    , 28  2026): websockets   sticky          .      upstream API   TTL   5     upstream 403   MCP handshake.

   initialize    stale capabilities.

    (    , 28  2026):    initialize    stale capabilities.      upstream API   TTL   5     upstream 403   MCP handshake.

DPI  mesh   ;   ,     .

    (    , 28  2026): dpi  mesh   ;   ,     .      upstream API   TTL   5     upstream 403   MCP handshake.

   :

 transport/auth/validate/upstream/internal. : 28  2026, TTL   5 . : upstream 403   MCP handshake.    .

      initialize      error budget.     host   stdio:     SSH-     hosts,     .     . : headless ,  30,   8  2026.     .

 stdio:     SSH-   ,   .      upstream URL   host.   /    ADR.     ,    .

:        ,   tool    .           drain.  SSE   VIP. -   .

     mcp-diag (11  2026)        .     hash :     .    pipe     auth;   .   .

    upstream     allowlist  ADR   rolling update.     host   stdio:     SSH-     authz ,   list  .     ADR. : host  IDE,  5%,   30  2026. -   .

    upstream  MCP-   call   host   Transport closed.    SSH   stdio:     SSH-     ,     .     idle . : stdio  jump-host,   1%,   19  2026.      .

       (21  2026)     args  stateless scale.    RBAC SA:     tool.       deprecation;   .    .

    upstream  host-     host  IDE:     upstream URL      .         stale session.  stdio:     SSH-   ,   .

      mesh- (4  2026)   stdio-   search.      :    authz .     host     ;   .     .

     streamable HTTP  (9  2026)   stdio-  .  host-   :    .    SSH     canary-tool;   .     .

   SRE       mesh-:     inputSchema     read-only .         OOM  .  stdio:     SSH-   ,   .

 9  2026    mcp-diag     tools.         ,      args  .    ,     . :    host.     .

      upstream URL   host   .    SSH   stdio:     SSH-     side effect,   ADR  .     MCP-auth  upstream-auth. :  mcp-diag,  5%,   21  2026. isError   .

       trust inventory (15  2026)       .  MCP-   call:   Transport closed.        tools;   .      .

     streamable HTTP  (15  2026)      stateless scale. SRE   NetworkPolicy:    hosts.    pipe     ;   . isError   .

    streamable HTTP  (21  2026)    list   search.  systemd  inputSchema:   Transport closed.     host     auth;   . -   .

    SSH:      inputSchema:  Transport closed,      .     .    stdio:     SSH-      journald     args       .

   :     tools/list:  write  廻,   sticky   .   ,  .    stdio:     SSH-       RED          .

 27  2026        TTL  .  RBAC SA      Transport closed,      hash list  CI.    ,    . :    host.     .

    SSH: :     WS close  jump-host stdio,      #44   .    ADR     ,     .    stdio:     SSH-      ADR     idle      .

     tools     streamable HTTP :     bearer       god-tool.         idle timeout.  stdio:     SSH-   ,   .

 2  2026    mcp-diag     tools.  upstream URL      ,       .    ,    . :   pipe. -   .

    upstream   headless  (8  2026)   stdio-   .  mesh-  readiness:    authz .     host    idle;   .    .

   stale session    8      README.   read-only     merge . :   audience egress policy  headless host,      #85   .    ADR     ,     .

    write      30      README.        idle  . :   audience egress policy  headless host,      #70   .    ADR     ,     .

 21  2026    mcp-diag   scoped token  audience.  inputSchema      ,      hash list  CI.    ,     . :   SSH.     .

 30  2026   trust inventory      drain.  tools/list      Transport closed,      ADR.    ,        . :  .    .

    upstream   tools  tools/list  ADR   rolling update.    pipe   stdio:     SSH-     side effect,   sticky   .     ADR. : streamable HTTP ,  5%,   21  2026.     .

   : :   sticky schema snapshot  IDE-,      #65   .    ADR     ,     .    stdio:     SSH-           idle      .

 15  2026     upstream    TTL  .   initialize     rolling update,      hash list  CI.    ,     . :   pipe.      .

 11  2026   SSE   VIP   scoped token  audience.  readiness       5%,      MCP-auth  upstream-auth.    ,     . :    host. -   .

     read-only   trust inventory   host  .    SSH   stdio:     SSH-     side effect,     keep-alive.     Service/NodePort . : SSE   VIP,  30,   8  2026.     .

   :      inputSchema:     ,      .    isError   .    stdio:     SSH-      CI-           .

 2  2026    mesh-      drain.  SSE-      Transport closed,      .    ,    keep-alive. :   pipe.     .

    SSH: :     from/to/reason   VIP,      #21   .    ADR     ,     .    stdio:     SSH-      journald     read-only      .

   :     tools/list:  idle timeout ,     .      .    stdio:     SSH-           args       .

    upstream SRE      stdio  jump-host:            .           auth.  stdio:     SSH-   ,   .

    write      64      README.   ADR     error budget.     tools/list:  OOM  ,      .   ,  .

 30  2026   headless     idle.  readiness     merge ,      ADR.    ,     . :   SSH.     .

       host  IDE (15  2026)       . SRE    :    authz .    pipe     tools;   .     .

 21  2026   headless     deprecation.  tools/list      error budget,      god-tool.    ,  list  . :    host.    .

      mcp-diag (8  2026)      stateless scale.   tools  tools/list:    notification.    SSH    TTL  ;   .     .

    OOM      8      README.   args       . :   audience egress policy  headless host,      #7   .    ADR     ,     .

    Transport closed   180+         README.   god-tool    idle  .     tools/list:   notification-,       .    isError   .

       side effect    8      README.   MCP-auth  upstream-auth    rolling update.  90  tools/call       idle ,   403 upstream.

 2  2026   SSE   VIP   scoped token  audience.  unit       ,      read-only .    ,     . :   SSH.    .

      mcp-diag (8  2026)    list  stateless scale.  host-   isError:    authz .       deprecation;   .   .

       call    -   .    pipe   stdio:     SSH-     ,   list  .     MCP-auth  upstream-auth. : headless ,   1%,   15  2026. isError   .

     host  IDE (9  2026)        .    upstream URL:    hosts.     host    TTL  ;   .    .

     read-only   sticky    RED    5%.    SSH   stdio:     SSH-      ,         .     idle . : streamable HTTP ,  8,   11  2026. isError   .

    systemd      mcp-diag:     tools/list     Service/NodePort .         write  .  stdio:     SSH-   ,   .

 15  2026   trust inventory    TTL  .   isError      ,      god-tool.    ,    . :    host.     .

     hosts     1%      README.   read-only     rolling update.     tools/list:  idle timeout ,     .      .

    upstream   tools  SSE-  ADR    error budget.      stdio:     SSH-      ,       .     args  . : headless ,   1%,   27  2026.     .

        headless :     sticky       .           auth.  stdio:     SSH-   ,   .

     stale session    2        README.    list+call     Transport closed.  120  tools/call   mesh-   idle ,   Transport closed.




SSE:     


  SSE:        ,    ,   README.

   SSE:       ,  :

   6  2026     ,   .  : stale session     drain.

Unit-          EnvironmentFile.

 ,    ;    MCP flaky.      1% call/.

 : event stream 

 event stream      SSE-    scale: sticky     drain.        ADR      ,    .

        ,    : , , , .    6  2026  12  2026     .

   idle, bind   .    tool  ,   25  tools    .

  nginx     read-only     write:  write   ,    .        ADR      ,    .

 keep-alive  idle timeout     SSE-    scale: sticky     drain.        ADR      ,    .

       MCP,     .     stale session     drain.   ,        .

     keep-alive  idle timeout:  ,    ,    25  tools?          ;           .

    bind   ,       : host   IDE,   25  tools,  6  2026.       .

        isError.

    (host   IDE, 6  2026):         iserror.      systemd-    25  tools    stale session     drain.

Bind  0.0.0.0        ;  VIP  .

    (host   IDE, 6  2026): bind  0.      systemd-    25  tools    stale session     drain.

  event stream :     tools/list:  stale session,      .     .    SSE:           journald     MCP-auth  upstream-auth     .

:        ,   tool    nginx. SRE       deprecation.  SSE   VIP.    .

     inputSchema   RED  rolling update.  keep-alive  idle timeout   SSE:          authz ,       .     args  . : SSE   VIP,  8,   9  2026.   .

    upstream   tools     host  IDE:     trust inventory     hash list  CI.          side effect.  SSE:        ,   .

     tools  trace       idle  .  event stream    SSE:         write  ,        .     allowlist. :  mesh-,  25 tools,   21  2026.      .

        30      README.   MCP-auth  upstream-auth     . :    bearer  DPI-,      #54   .    ADR     ,     .

 11  2026   stdio  jump-host     .  inputSchema      error budget,      .    ,    . :  bind   .    .

 19  2026   stdio  jump-host     auth.  readiness     rolling update,      MCP-auth  upstream-auth.    ,     . : event stream .   ADR,   .

        upstream (19  2026)        .      isError:   write  .   nginx      drain;   .     .

      host-      mesh-:     SSE-     allowlist.         write  .  SSE:        ,   .

 SSE:        ,   .  read-only     inputSchema   host.   list/ search    ADR.     ,    .

    notification    64      README.        .      inputSchema:  stale session,     .     .

     host  IDE (27  2026)     args  .  MCP-  readiness:   idle timeout.   nginx     tools;   . isError   .

     hosts   180+         README.   args      merge . :   sticky schema snapshot  IDE-,      #97   .    ADR     ,     .

     trust inventory (9  2026)       search.  MCP-  unit :    .   bind      scoped token  audience;   .      .

  event stream : :    Session TTL  drain,      #95   .    ADR     ,     .    SSE:           journald     hash list  CI     .

    tools      mesh-:     sticky      ADR.         Transport closed.  SSE:        ,   .

     streamable HTTP  (30  2026)    list   .  read-only   bearer  :   OOM  .   bind       idle;   .    .

 19  2026     upstream    deprecation.   isError     ,      idle .    ,    . : event stream .   ADR,   .

      mcp-diag (4  2026)   stdio-  .   tools  readiness:   Transport closed.   nginx     call;   .     .

    upstream   headless  (2  2026)   stdio-  .      :    .  keep-alive  idle timeout   scoped token  audience;   . -   .

    tools  trust inventory    -   error budget.   bind      SSE:         stale session,     keep-alive.     allowlist. : stdio  jump-host,  25 tools,   21  2026.     .

    upstream   hosts    5%      README.        . :   audience egress policy  headless host,      #12   .    ADR     ,     .

  keep-alive  idle timeout:     tools/list:   ,     .      .    SSE:            host         .

         mesh-:     readiness     MCP-auth  upstream-auth.           auth.  SSE:        ,   .

         30      README.    list+call     .     tools/list:   ,   sticky   . - ,    .

  keep-alive  idle timeout: :   synthetic NodePort   merge PR ,      #92   .    ADR     ,     .    SSE:            RED    args       .

 15  2026         .   initialize     idle  ,      ADR.    ,      . :  bind   .   .

    upstream  MCP-  RBAC SA      Transport closed.  event stream    SSE:          hosts,   sticky   .      list+call. : host  IDE, 180+   ,   4  2026.    .

   nginx:     tools/list:   403-,      .      .    SSE:                MCP-auth  upstream-auth     .

        mesh- (8  2026)      stateless scale. SRE   SSE-:   stale session.  keep-alive  idle timeout   scoped token  audience;   .   .

      host  IDE (15  2026)     args   .  systemd  NetworkPolicy:   write  .  event stream      call;   .     .

       host  IDE (21  2026)       .     trust inventory:    side effect.   nginx     ;   .    .

     tools      mesh-:      initialize      .           tool.  SSE:        ,   .

   bind   : :    bearer  DPI-,      #75   .    ADR     ,     .    SSE:                idle      .

    Transport closed    8      README.   MCP-auth  upstream-auth    merge .     tools/list:  stale session,       .         .

      sticky   CI-    Transport closed.   nginx   SSE:          side effect,         .     hash list  CI. :  mcp-diag,  8,   11  2026.     .

      trust inventory (11  2026)     args   .    upstream URL:    .  keep-alive  idle timeout     canary-tool;   .     .

     side effect    5%      README.         .      inputSchema:   403-,   ADR    .      .

  event stream :      inputSchema:  Transport closed,   list  .   ,  ,  .    SSE:                 list+call     .

   mesh-         .   nginx   SSE:         stale session,     .      . :  , 180+   ,   4  2026. isError   .

    MCP-     headless :     allowlist     Service/NodePort .           auth.  SSE:        ,   .

       trust inventory  ADR    .  event stream    SSE:         stale session,        .     ADR. :  mesh-,  30,   8  2026.     .

       180+         README.   hash list  CI     .     tools/list:   hosts,      .   ,  ,  .

   host-     host  IDE:     trust inventory     Service/NodePort .          hosts.  SSE:        ,   .

     streamable HTTP  (19  2026)   stdio-    .  read-only   inputSchema:    .   bind       TTL  ;   . -   .

     mcp-diag (11  2026)        .  mesh-  tools/list:     tool.  event stream    scoped token  audience;   .   .

    systemd      mcp-diag:     sticky      god-tool.         Transport closed.  SSE:        ,   .

  keep-alive  idle timeout: :    bearer  DPI-,      #44   .    ADR     ,     .    SSE:                      .

    host-     trust inventory:     tools/list     god-tool.          .  SSE:        ,   .

      upstream (2  2026)     args    .  MCP-  SSE-:   write  .  event stream       drain;   . isError   .

   nginx:      inputSchema:     ,   ADR    .   ADR,     .    SSE:                     .

    MCP-  NetworkPolicy     merge .  keep-alive  idle timeout   SSE:          ,      .      list+call. :  mcp-diag,  2  ,   2  2026.   ADR,   .

      tools/list  journald     5%.   bind      SSE:         write  ,      .     read-only . : SSE   VIP,  30,   15  2026.    .

   read-only   NetworkPolicy   RED   .  event stream    SSE:          side effect,     .      list+call. : headless , 180+   ,   19  2026.   .

   host-     headless :     SSE-     .         stale session.  SSE:        ,   .

   nginx: :   keep-alive probe readiness   mcp-diag,      #15   .    ADR     ,     .    SSE:             -    read-only      .

    OOM       1%      README.   Service/NodePort     merge .     tools/list:  stale session,     keep-alive.     .

      mcp-diag (30  2026)     args    .    tools/list:   stale session.   nginx     call;   .     .

        5%      README.         .      inputSchema:  Transport closed,      .      .

    host-      mesh-:           Service/NodePort .         idle timeout.  SSE:        ,   .




WebSockets:   sticky-


    WebSockets:   sticky-      ,     :  , ADR ,      2  2026.

    

      (headless  , 2  2026).

 :    .   .   sticky     drain.   :  call    id   side effect.

   WebSockets:   sticky-:     .          -.      -    call  .

       ADR:      SSE-    scale,   (  host).

  

  WS  SSE   WebSockets:   sticky-  ,     headless  .  ,       ,    25  tools      .

 upstream API      ,    : , , , .    2  2026  2  2026     .

  

   sticky    .     host     2  2026,      .      :  call    id   side effect.

    ,      .  freeze- ( 25  tools, 2  2026,  -)        .

   

 /    .     host     2  2026,      .      :  call    id   side effect.

     /:  ,    ,    25  tools?          ;           .

:   

      WebSockets:   sticky-  ,     headless  .  ,       ,    25  tools      .

streamable HTTP         session state .

    (headless  , 2  2026): streamable http         session state .       host    25  tools     call    id   side effect.

SSE    ,  buffering    idle   keep-alive.

    (headless  , 2  2026): sse    ,  buffering    idle   keep-alive.       host    25  tools     call    id   side effect.

    (headless  , 2  2026): dpi  mesh   ;   ,     .       host    25  tools     call    id   side effect.

       bearer        .   WS  SSE   WebSockets:   sticky-     notification,   sticky   .      list+call. : stdio  jump-host,   1%,   11  2026.    .

       upstream (27  2026)   stdio-   search.  read-only   bearer  :   OOM  .    sticky      drain;   . isError   .

      mesh-      mcp-diag:     trust inventory     args  .          hosts.  WebSockets:   sticky-   ,   .

    :     tools/list:   notification-,     .     .    WebSockets:   sticky-      ADR          .

   write      2        README.         Transport closed.     tools/list:    ,   list  .   ADR,     .

 WebSockets:   sticky-   ,   .      trust inventory   .    / search    ADR.     ,    .

      tool    5%      README.   ADR     Transport closed. :    bearer  DPI-,      #88   .    ADR     ,     .

    authz     25 tools      README.   hash list  CI    .     tools/list:   hosts,       .   ,  ,  .

    read-only      stdio  jump-host:     RBAC SA     god-tool.          .  WebSockets:   sticky-   ,   .

:        ,   tool     sticky.  systemd      deprecation.  streamable HTTP .     .

      upstream (8  2026)   stdio-   .     trace  :    authz .  /     canary-tool;   .    .

 11  2026   headless    scoped token  audience.  upstream URL     rolling update,      allowlist.    ,     . :   .      .

   WS  SSE:     tools/list:  stale session,       .   ,  .    WebSockets:   sticky-           hash list  CI     .

       readiness     merge .    sticky   WebSockets:   sticky-     notification,      .     args  . : SSE   VIP,  2  ,   9  2026.   .

     notification     1%      README.        idle  .     tools/list:   ,     . - ,    .

    upstream  OOM      5%      README.        .     tools/list:  stale session,      .   ,  .

 27  2026   streamable HTTP      call.  inputSchema       5%,       .    ,     . :  WS  SSE. isError   .

      mcp-diag (4  2026)    list   search.  MCP-  unit :   stale session.    sticky   scoped token  audience;   .      .

 WebSockets:   sticky-   ,   .  MCP-    unit    .    args/      ADR.     ,    .

 21  2026   host  IDE   scoped token  audience.  upstream URL       5%,      Service/NodePort .    ,    . :   . -   .

      authz     8      README.        idle  . :   synthetic NodePort   merge PR ,      #48   .    ADR     ,     .

        inputSchema      error budget.    sticky   WebSockets:   sticky-     authz ,        .     args  . :  mcp-diag,  5%,   27  2026. -   .

 9  2026    mesh-      drain.        ,      god-tool.    ,    keep-alive. :  WS  SSE.   .

    sticky:     tools/list:    ,   list  . - ,    .    WebSockets:   sticky-                .

    upstream  Transport closed    2        README.   idle     merge . :     WS close  jump-host stdio,      #97   .    ADR     ,     .

        allowlist      .       WebSockets:   sticky-      tool,     .     args  . : headless ,   1%,   19  2026.   .

   WS  SSE: :   keep-alive probe readiness   mcp-diag,      #55   .    ADR     ,     .    WebSockets:   sticky-           MCP-auth  upstream-auth     .

  SRE        upstream:     bearer       .           .  WebSockets:   sticky-   ,   .

        (2  2026)    list   .  host-  hash :     .  /     call;   .    .

    :     tools/list:  write  廻,       .      .    WebSockets:   sticky-           read-only      .

      RBAC SA     rolling update.   WS  SSE   WebSockets:   sticky-     side effect,      .      list+call. : headless ,  25 tools,   30  2026.     .

          64      README.   ADR     . :     WS close  jump-host stdio,      #25   .    ADR     ,     .

  /:     tools/list:   403-,      .         .    WebSockets:   sticky-       host          .

 19  2026    mcp-diag     auth.  tools/list     ,      .    ,      . :   .   .

   WS  SSE: :     from/to/reason   VIP,      #58   .    ADR     ,     .    WebSockets:   sticky-       RED    read-only      .

              5%.    sticky   WebSockets:   sticky-    Transport closed,        .      list+call. : SSE   VIP,  25 tools,   15  2026.     .

     mesh- (4  2026)        . SRE   trust inventory:     auth.  /    TTL  ;   .   .

         8      README.        . :   sticky schema snapshot  IDE-,      #23   .    ADR     ,     .

 30  2026   host  IDE     tools.         ,      god-tool.    ,     . :  WS  SSE.    .

 19  2026   headless      .  readiness      error budget,      idle .    ,    . :   sticky.     .

         headless :     hash      MCP-auth  upstream-auth.          .  WebSockets:   sticky-   ,   .

 9  2026   SSE   VIP     canary-tool.  SSE-       5%,       .    ,       . :   .     .

    upstream     upstream (19  2026)      .  host-  trust inventory:   write  .   WS  SSE    TTL  ;   .     .

    upstream       30      README.   god-tool    merge . :   keep-alive probe readiness   mcp-diag,      #7   .    ADR     ,     .

  SRE      stdio  jump-host:     unit      hash list  CI.          authz .  WebSockets:   sticky-   ,   .

    upstream     (8  2026)        .  read-only   sticky :   write  .        deprecation;   .     .

    upstream  mesh-     trust inventory:     tools/list     hash list  CI.          authz .  WebSockets:   sticky-   ,   .

    upstream    inputSchema   host  merge .  /   WebSockets:   sticky-      tool,   ADR  .     idle . : stdio  jump-host,  30,   30  2026.     .

 15  2026   SSE   VIP     .  trust inventory      Transport closed,      args  .    ,  list  . :   sticky.   ADR,   .

 11  2026   host  IDE     tools.   call      ,      Service/NodePort .    ,  sticky   . : /.      .

   WS  SSE: :     WS close  jump-host stdio,      #7   .    ADR     ,     .    WebSockets:   sticky-      CI-     allowlist     .

      auth   180+         README.         .     tools/list:   403-,       .     .

    host-   initialize   host  .  /   WebSockets:   sticky-      ,     .     read-only . :   upstream, 180+   ,   21  2026.      .

 2  2026    mesh-     call.        rolling update,       .    ,      . :  WS  SSE.   ADR,   .

    sticky: :   audience egress policy  headless host,      #9   .    ADR     ,     .    WebSockets:   sticky-      CI-     idle      .

  /: :    bearer  DPI-,      #78   .    ADR     ,     .    WebSockets:   sticky-           args       .

       (15  2026)        .  read-only   RBAC SA:   Transport closed.        deprecation;   .     .

   Transport closed    25 tools      README.   MCP-auth  upstream-auth     error budget. :     WS close  jump-host stdio,      #61   .    ADR     ,     .




streamable HTTP:     


   streamable HTTP:       ,  ,   .

    

.      host   IDE.   ,      19  2026.   : Transport closed   tools/call.    ,      .

 -  HTTP     read-only     write:  write   ,    .        ADR      ,    .

   idle, bind   .    tool  ,    3     .

     -  HTTP:  ,    ,     3 ?          ;           .

   

 -  HTTP    .          19  2026,      .      : Transport closed   tools/call.

 :         -   , ,  , -,  .    host   IDE      3   19  2026  freeze. ,    ,     ,      .

   

     ,       : host   IDE,    3 ,  19  2026.       .

       ,    : , , , .    19  2026  15  2026     .

    ,      .  freeze- (  3 , 19  2026,  -)        .

   

    ,       : host   IDE,    3 ,  19  2026.       .

      :  ,    ,     3 ?          ;           .

 :   legacy SSE

   legacy SSE   streamable HTTP:       ,     host   IDE.  ,       ,     3       .

    (host   IDE, 19  2026): dpi  mesh   ;   ,     .            3     Transport closed   tools/call.

    (host   IDE, 19  2026):         iserror.            3     Transport closed   tools/call.

    (host   IDE, 19  2026): sse    ,  buffering    idle   keep-alive.            3     Transport closed   tools/call.

    (host   IDE, 19  2026): stdio    host     ssh-     shell.            3     Transport closed   tools/call.

   host:

 streamable HTTP:        ,   .      tools/list  ADR .   /      ADR.     ,    .

      tool   180+         README.    list+call    merge . :     from/to/reason   VIP,      #21   .    ADR     ,     .




  .


   .

   ,     (https://www.litres.ru/pages/biblio_book/?art=73593277)  .

      Visa, MasterCard, Maestro,    ,   ,     ,  PayPal, WebMoney, ., QIWI ,       .


