api-tools(#80): trial finding — picker attach vs group gate, auto-enable + warn line
docs: #79 permission modes + #80/#81/#85 api tools designs; badge dialects (#84) - design-assistant-permission-modes.md: session-level write policy (three declared classes; meta never silent), the sender-switch revision. - design-api-tools.md: full design + live E2E findings; outbound policy as default action (allow/deny) with external/internal rule lists (host/wildcard/IP/CIDR), save-time guards (#83 credential scope, admin manage gate), required tool descriptions, body params always keyed (#87). - design-ui-system.md: badge dialects (wire vs enum, outline retired, status = Lamp) + ScopeBadge as the one scope renderer. - doc-map: index rows for both designs.