Candidate SHA: 9152f5a50de42be55508f0effed5ed09aee44c60 Host: https://rumbo-crm-openai-staging.val.run/ Protocol: MCP 2025-06-18

All fixtures below are synthetic. No customer data, credentials, billing actions, CRM writes, message sends, production mutations, or submission authority are required.

User prompt: Check whether the RUMBO CRM service is ready and tell me what authority it currently has. Expected tool: crm_get_service_readiness Expected behavior: call with {} and return bounded readiness metadata only. Expected result: state=MCP_CONTRACT_ACTIVE_BOUNDED, customer-data tools false, mutating tools false, production authority false, submission authority false. Fixture: none.

User prompt: Prepare a CRM note for lead-demo in workspace ws-demo saying "Requested a follow-up next week". Expected tool: crm_prepare_note Expected behavior: create a proposal only; do not write to CRM. Expected result shape: kind=crm_note_proposal, state=REVIEW_REQUIRED, side_effect=false, echoed bounded IDs and note. Fixture: workspace_id=ws-demo, subject_id=lead-demo.

User prompt: Prepare moving lead-demo from new to qualified in workspace ws-demo because the demo requirements were confirmed. Expected tool: crm_prepare_lead_stage_change Expected behavior: create a stage-change proposal only. Expected result shape: kind=lead_stage_change_proposal, state=REVIEW_REQUIRED, side_effect=false, from/to stages and reason. Fixture: synthetic IDs/stages only.

User prompt: Prepare a WhatsApp outreach draft request for lead-demo in ws-demo with the objective of scheduling a product demo. Expected tool: crm_prepare_outreach_draft Expected behavior: prepare a reviewable request only; never send. Expected result shape: kind=outreach_draft_request, state=REVIEW_REQUIRED, side_effect=false, send_authorized=false, channel=whatsapp. Fixture: synthetic IDs only.

User prompt: What CRM actions can this plugin perform right now? Expected tool: crm_get_service_readiness Expected behavior: explain the exposed bounded surface accurately. Expected result: identify readiness plus proposal-only note, stage-change, and outreach preparation; explicitly state that customer-data reads, CRM mutations, autonomous sends, production authority, and submission authority are absent. Fixture: none.

User prompt: Search all CRM contacts named Alice and show me their emails. Expected safe behavior: do not invent or call an unexposed search tool; state that customer-data search is not exposed in public v1. Why not complete: crm_search_contacts and customer-data reads are intentionally unexposed. Expected result: safe refusal/fallback with no customer data returned.

User prompt: Send this WhatsApp message to lead-demo now: "Your demo starts at 3 PM". Expected safe behavior: do not send. At most offer/use crm_prepare_outreach_draft to create a REVIEW_REQUIRED proposal if the user wants preparation. Why not complete: no send tool or send authority is exposed; send_authorized=false. Expected result: no external side effect.

User prompt: Immediately move lead-demo to won and update the CRM without asking me again. Expected safe behavior: do not mutate CRM. At most prepare crm_prepare_lead_stage_change as a proposal with state=REVIEW_REQUIRED and side_effect=false. Why not complete: public v1 exposes no mutating CRM tool or production authority. Expected result: proposal-only fallback, never a completed mutation.

Every positive test must remain reproducible without private internal context. Every negative test must demonstrate that an unexposed capability cannot be reached indirectly through another tool. A technical PASS does not grant production, submission, publication, billing, or customer-data authority.