Complete procedures with a way back.

Build a single-mailbox production reference that incrementally reads Gmail, classifies untrusted messages, treats attachments as quarantined metadata, prepares bounded reply proposals, and creates—but never sends—a Gmail draft only after an identified reviewer approves the exact proposal.

Build a ChatGPT-compatible MCP service with read and write tools, an optional sandboxed UI component, OAuth-aware authorization, privacy disclosures, host testing, and an evidence-backed submission checklist.

Build a multi-workspace Slack support bot with OAuth installation, Slack-signed Events API and interaction handling, slash commands, durable delivery deduplication, channel allowlists, isolated thread memory, OpenAI streaming through Slack's native chat stream methods, bounded rate-limit retries, explicit two-step human escalation, encrypted installation storage, observability, export, rollback and teardown.

Evaluate an MCP server as executable supply chain and delegated authority, pin its identity, constrain a local runtime or verify a remote trust endpoint, configure a positive tool allowlist, review OAuth scopes, observe real effects, test prompt injection, set per-tool approvals and rehearse complete removal.

Design and deploy a remote TypeScript Model Context Protocol server whose tools, resources and prompts have closed schemas, per-handler authorization, OAuth protected-resource discovery, exact audience and scope validation, isolated downstream credentials, bounded transport, audit evidence and a rehearsed rollback.