Director's Brief: What Our Evals Discovered & What We Changed

• Protocol-Level Role Separation: A citizen assistant connecting to /mcp/citizen has zero visibility into departmental decision tools (decide_application, list_applications), preventing hallucinated privilege escalation.
• Handling Ineligible Ages & Kiosks: Persona Bhaben Bora (age 58) demonstrated that an assistant must not invent a bypass. The portal's validate_application() rejected the submission, returning structured eligibility explanations.
• Graceful Duplicate Management: Senior citizens frequently lose application numbers. Instead of creating duplicates, the assistant looks up their existing application (Phukan Baruah), reports SLA progress, and guides them on withdrawal if they need to amend records (Nirmala Kalita).
• Full Officer Audit Accountability: Every decision made through the Officer MCP records the officer's authenticated username and mandatory administrative note in audit_log, preventing unreasoned approvals.