| MCP Design Principles | Phase 1 — intent-first design, tool count limits, naming, anti-patterns |
| MCP Design Server Patterns | Phase 1/2 — naming, response formats, pagination, transport, 3-layer architecture |
| MCP Design Context Efficiency | Phase 2 — tool description budget (180-token template), context efficiency, filesystem discovery |
| MCP Quality Standards | Phase 1 — security, annotations, testing, audit logging, MCP primitives |
| MCP Quality Compliance | Phase 2 — SOC2/GDPR/PCI compliance flags, canonical scorer delegation |
| MCP Quality Versioning | Phase 2 — tool versioning, breaking changes, canary rollouts |
| Agent Design Patterns — Core | Phase 1 — patterns 1-5: directive, confidence, error, disclosure, linking |
| Agent Design Patterns — Advanced | Phase 2 — patterns 6-10: idempotency, context carryover, circuit breaker, audit trail |
| Agent Design Patterns — Domain | Phase 2 — domain presets (payment, healthcare, e-commerce), tool consolidation |
| Error Taxonomy | Phase 1 — error codes, recovery hints, no-fake-empty-data |
| Branded Types & Audit | Phase 2 — type-safe IDs, Zod integration, audit logging |
| TypeScript Setup | Phase 2 — project structure, package config, build |
| TypeScript Patterns | Phase 2 — tool naming, Zod schemas, tool structure |
| TypeScript Patterns Advanced | Phase 2 — response formats, pagination, error handling, utilities |
| TypeScript Advanced | Phase 2 — complete example, resources, transport |
| Python Setup | Phase 2 — Python SDK, tool structure, Pydantic |
| Python Patterns | Phase 2 — pagination, errors, complete example |
| Python Advanced | Phase 2 — context, resources, lifespan, quality |
| Resilience Core | Phase 2 — circuit breaker, bulkhead, rate limiter, retry strategy |
| Resilience Caching & Pool | Phase 2 — rate limiter, retry, LRU caching |
| Resilience Production | Phase 2 — connection pool, composing patterns, loop detection |
| Security Core | Phase 2 — SecurityManager, attack patterns (SQL/XSS/path traversal/command injection) |
| Security Middleware & Attacks | Phase 2 — middleware integration, prompt injection, brute force, SSRF |
| Security PII & Compliance | Phase 2 — PII tokenization, testing, CI/CD pipeline, security checklist |
| Observability Tracing | Phase 2 — OpenTelemetry setup, custom MCP spans, 6-metric pyramid |
| Observability Metrics | Phase 2 — metrics collection, sampling strategies |
| Observability Monitoring | Phase 2 — integration example, post-deployment health targets, alert tiers, cost reduction |
| Production Runtime — Shutdown & Health | Phase 2 — graceful shutdown, K8s health checks |
| Production Runtime — Multi-Tenant | Phase 2 — AsyncLocalStorage context, quotas, audit |
| Production Infrastructure Docker | Phase 2 — Docker multi-stage build, docker-compose, Kubernetes manifests |
| Production Infrastructure Structure | Phase 2 — 3-layer folder structure, layer responsibilities |
| Evaluation Criteria | Phase 4 — question/answer design |
| Evaluation Running | Phase 4 — CLI, setup, troubleshooting |
