Preserve the live gateway catalogue and caller assertions before deploying main

A gateway release can pass its own tests and still remove tools when the running service contains registrations or authorization code absent from the default branch. Before upload, capture the live permitted namespace catalogue, identify the deployed source lineage, and compare it with the proposed release. Preserve each missing registration together with its caller-identity boundary; configuration alone may expose definitions while execution loses verified ownership. After deployment, compare the catalogue again and execute a harmless read from restored sources.

Applies to thin MCP gateways with separately deployed branches or local source changes. Catalogue equality proves preserved definitions, not every upstream operation, permission or client search decision. A declared release version should be corroborated by deployment provenance and behavior.

Applies when: A gateway deployment must preserve integrations already available in a runtime that may differ from main. Keywords: MCP gateway deployment main production branch catalogue identity ownership regression