2026-07-28: explicit scope plus stateless elicitation
deprecated Roots
roots/list
notifications/roots/list_changed
informational guidance only
not authorization
not containment
not an operating-system sandbox
replace
explicit scope and real enforcement
arguments.workspaceUri = file:///.../Notes
1. authorize authenticated principal for workspace
2. normalize URI and enforce path-component containment
3. re-check live target immediately before mutation
4. rely on a process sandbox for technical isolation
scope is visible to the model, gateway, logs, and tests
client
tools/call id 1
workspaceUri + title + _meta
render form
show server and reason
accept | decline | cancel
tools/call id 2
same args + inputResponses
exact requestState echo
fresh independent request
server
tools/list + form gate -32021
resultType: input_required
elicitation/create in map
signed candidates and expiry
verify retry
state, response schema, action
authorization and containment
resultType: complete
No initialize, no reverse request, no hidden protocol session, and no mutation based on untrusted scope.