[leonagente]

Summary

• 5 write tools (create/update/delete/upload_attachment/set_text) behind PRIORITY_READ_ONLY=false — GATED BY OMISSION: absent from tools/list while read-only (default)
• dryRun defaults TRUE → zero HTTP, exact wouldSend body returned
• Metadata validation BEFORE HTTP on every write path: unknown fields, unknown subforms, partial composite keys, bad data URIs, missing mandatory fields, unconfirmed deletes — all typed validation_errors
• Post-write verification: create/update re-fetch the record; delete re-fetches expecting 404; honest verified flag
• Honest annotations: no idempotentHint anywhere (vendor has NO idempotency mechanism; writes bill transactions); delete is destructiveHint
• Text-form suffix check corrected to TEXT_SUBFORM (real Priority names: ORDERSTEXT_SUBFORM — no separator underscore)

Live verification (orchestrator-run, raw in session)

• e) FAMILY_LOG create→verify→delete round-trip ✔ (central claim) — try/finally cleanup, deletion verified by 404 re-fetch
• f) unknown field on create → typed validation_error, ZERO HTTP ✔ (write-side silent-swallow guard)
• Unit: 146 green incl. gating-by-omission + annotations contract

Note

Live case (f) originally attempted an AINVOICES create expecting a permission denial; the sandbox now ALLOWS demo-user invoice creation — the test created invoice T123457870 (residue: PATCH-marked as test artifact; vendor blocks API deletion of invoices — DELETE returns 400). Test rewritten to a residue-free negative. Also logged: sandbox permissions drift over time.