Date: 2026-09-11 UTC Candidate SHA: 9152f5a50de42be55508f0effed5ed09aee44c60

Purpose: enumerate every user-related field accepted or returned by the bounded public MCP v1 and map it to the published host-local privacy disclosure. This artifact is for submission/review preparation; it does not grant production or submission authority.

• The public v1 does not search, retrieve, or enumerate customer records.
• The public v1 does not mutate CRM data.
• The public v1 does not send messages.
• Identifiers are supplied explicitly by the user/requesting client; they are not looked up and echoed by default.
• Tool responses contain no passwords, API keys, access tokens, cookies, auth headers, trace IDs, request IDs, session IDs, timestamps, logs, billing data, health data, or payment data.
• Proposal tools return only the fields needed to identify and review the proposal the user explicitly requested.

Inputs: none.

Outputs:

• state — bounded contract state; operational metadata, not user data.
• customer_data_tools_exposed — boolean safety/readiness metadata.
• mutating_tools_exposed — boolean safety/readiness metadata.
• production_authority — boolean authority metadata.
• submission_authority — boolean authority metadata.

User-related data returned: none.

Inputs and echoed outputs:

• workspace_id — explicit user-supplied workspace identifier; required to bind the proposal to the intended workspace.
• subject_id — explicit user-supplied subject/lead identifier; required to bind the proposal to the intended subject.
• note — explicit user-supplied note text; required because the tool only packages the requested note as a reviewable proposal.

Generated output metadata:

• kind=crm_note_proposal
• state=REVIEW_REQUIRED
• side_effect=false

Privacy disclosure mapping: /privacy explicitly discloses workspace identifiers, subject or lead identifiers, and note text.

Inputs and echoed outputs:

• workspace_id — explicit user-supplied workspace identifier.
• lead_id — explicit user-supplied lead identifier.
• from_stage — explicit current-stage label supplied for the requested proposal.
• to_stage — explicit proposed-stage label supplied for the requested proposal.
• reason — optional user-supplied reason; empty when omitted.

Generated output metadata:

• kind=lead_stage_change_proposal
• state=REVIEW_REQUIRED
• side_effect=false

Privacy disclosure mapping: /privacy explicitly discloses workspace identifiers, lead identifiers, current/proposed stage names, and a reason.

Inputs and echoed outputs:

• workspace_id — explicit user-supplied workspace identifier.
• lead_id — explicit user-supplied lead identifier.
• channel — explicit communication-channel label (email, sms, whatsapp, or other).
• objective — explicit user-supplied outreach objective.

Generated output metadata:

• kind=outreach_draft_request
• state=REVIEW_REQUIRED
• side_effect=false
• send_authorized=false

Privacy disclosure mapping: /privacy explicitly discloses workspace identifiers, lead identifiers, communication channel, and outreach objective.

PRIVACY_FIELD_MATRIX=PASS_BOUNDED_EXPLICIT_INPUTS_ONLY

The bounded v1 intentionally exposes no customer-data retrieval tool. Every identifier returned by proposal tools was explicitly supplied for the user's requested proposal and is directly tied to that request. No additional personal or internal telemetry fields are added to MCP tool results.

Invariant: PRIVACY_DISCLOSURE_PASS != PUBLISHER_IDENTITY_VERIFIED != PORTAL_SCAN_PASS != SUBMISSION_AUTHORITY.