MCP policy doesn't see what the user typed – it sees what the model made up | Hacker News Reader