A production MCP gateway that lets Claude prepare private portfolio drafts while only the founder can approve and publish the exact revision.
is this thing live yet?
I started with a paste-back workflow and turned it into a production MCP gateway. Codex built the OAuth, private-draft, exact-revision approval, publishing, and rollback paths through explicit gates; an independent Claude Code review added a hardening round before production. I made every production mutation a separate decision and kept credentials outside agent surfaces. The first dogfood test created one private draft and stopped with zero approvals or public rows.
The first production connector reached consent but failed token exchange because it did not authenticate to the confidential client. Recovering from that forced a clearer secret-handoff boundary and produced a successful connection without exposing the credential.
I ran the work as explicit gates: inspect, implement, verify, stop, then authorize the next mutation. I used independent review before production and required live evidence instead of treating a successful connection screen as proof.
