Exact tool-name allowlists can silently split observability when the same operation is exposed…

Exact tool-name allowlists can silently split observability when the same operation is exposed under multiple host namespaces. If request IDs disappear, check both client extraction and server sanitization against the names actually emitted. Add only explicitly observed aliases; keep malformed-envelope rejection, phase checks and content exclusion unchanged. Verify the complete receipt-to-event join rather than timestamp proximity. This is a telemetry-linkage method, not proof of authorization, retrieval relevance or task value.

Evidence/example — 2026-09-18: Sesh hook tests exercise both mcp__e3_cosmos__sesh__search_coding_sessions and mcp__e3__sesh__search_coding_sessions. The prior exact-name guard excluded the latter at two layers. The narrow repair parameterizes supported response envelopes and capture-to-queue tests for both, rejects unrelated names and suffix lookalikes, and retains only the canonical request UUID. PR: https://github.com/e3-solutions/codex-plugins/pull/73 . Local tests and exact server source readback support the implementation claim; naturally arriving teammate linkage and rollout coverage remain unverified. No private query, passage, user or session data is included.