WhatToChange: recommended-changes/2026-09-21-docs-and-cors/ What-to-Change.md What-to-Change-To.md How-to-implement-the-changes.md What was actually done: - Markdown, HTML, and PDF for standards, architecture, API, and the operator guide. - README points at scripts/build-docs.sh. - VERAE_MCP_CORS=1 enables CORS and JSON responses on the Streamable HTTP app. What was not done: - (none)
709 B
709 B
What to Change:
Reviewed after 60bcefb. Pytest 14 passed. The server behavior from the first pack is in place. Operators still had only a short README.
What is working
- Hash-only tools, file ledger mode 0600, global HTTP off the event loop.
debug-trace/remains the live stamp record and stays in git.
| Component | Problem | Evidence | Severity | Type |
|---|---|---|---|---|
| README only | No architecture, tool reference, or standards a reader can print | docs/ did not exist before this pack |
high | doc drift |
| Streamable HTTP | Browser sample on another origin cannot read mcp-session-id |
server.py called mcp.run with no CORS middleware |
medium | missing gate |