nx_vizsla_mcp_gate.nx

nx_vizsla_mcp_gate.nx -- GATE: the VIZSLA coordination tools are REAL MCP-level APIs. Drives the EXACT execution layer /mcp tools/call uses (nx_tool_exec_allow tea_resolve/tea_run_argv over the PRODUCTION tool_allowlist.conf) + the discovery registry readback (what tools/list serves) + the rich-schema conf rows. Nothing is mocked: the resolved blessed ELFs run with a real argv and their real stdout comes back through the capture path -- exactly what an MCP client receives. Rows: 1 registry-discovery tool_get readback for vizsla_plan + vizsla_doc (tools/list source) 2 allowlist-resolve tea_resolve(production conf) vizsla_plan -> TEA_OK + the blessed elf path 3 mcp-exec-plan tea_run_argv board over the demo store -> VIZSLA-PLAN-VERDICT captured 4 mcp-exec-ics tea_run_argv ics export -> real .ics on disk + BEGIN:VCALENDAR + verdict 5 mcp-exec-doc tea_run_argv doc put -> list captures docs=1 (mutating tool works e2e) 6 blocked-non-green nx_http_probe row is RED -> TEA_BLOCKED, nothing executed [neg control] 7 notfound-unknown ghost tool -> TEA_NOTFOUND [negative control] 8 schema-rows tool_schemas.conf carries vizsla_plan + vizsla_doc annotation rows Evidence: VIZSLA-MCP-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 8/8. expect_exit: 0 license_tier: ORIGINAL