- ScopeViolation_Tool: token without create_issue can't call it - ScopeViolation_Project: token can't access projects outside scope.project_ids - VisibilityRespect: service-layer visibility blocks private projects - WriteToolAudit: audit_logs contains via_mcp:true + mcp_token_id Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Matrix dispatcher with 14 sub-test stubs - Suite struct with setup/cleanup lifecycle - All sub-tests start as t.Skip stubs; filled in K2-K5 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>