MCP 2026-07-28: Stateless Servers, Discovery, and Multi-Round-Trip — Cheat Sheet

• Start with the local contract and explicit acceptance criteria.
• Treat prompts, retrieved content, tool output, and protocol messages as untrusted.
• Keep identity, authorization, policy, telemetry, cost, and cleanup explicit.
• Prefer the smallest orchestration or adaptation that satisfies the evidence.