Four tools with basic verb-noun naming (scan_file, scan_diff, approve_findings, debug_config). All have descriptions (10-100 chars), but most are terse and lack actionable context. Input schemas present but minimal: scan_file and scan_diff lack parameter descriptions; approve_findings has only a type hint without explaining what 'findings' contains or how to obtain CWE IDs; debug_config has no parameters. No output schemas documented. No error handling guidance. No parameter constraints (enums, ranges). Naming is clear but descriptions do not explain WHEN to use each tool, WHAT they return, or dependencies between them. Baseline: avg tool description ~50 chars (well below 194-char production median); zero parameter descriptions for 3/4 tools.

• Add parameter descriptions to all tools. For scan_diff's 'ref': 'Optional git ref to diff against (e.g., main, HEAD~1). Defaults to HEAD. Must be a valid git reference in the current repository.' For approve_findings' 'findings': 'Array of CWE IDs (strings) to approve, e.g., ["CWE-89", "CWE-79"]. Obtain these from scan_diff or scan_file results.'
• Document output schemas for each tool. E.g., scan_file returns {"vulnerabilities": [{"cwe_id": string, "severity": enum(CRITICAL|HIGH|MEDIUM|LOW), "line": int, "description": string}], "scan_status": enum(PASS|FAIL)}. Include this in tool descriptions or a separate schema field.
• Add error handling guidance. E.g., scan_file: 'If file not found, verify the path is absolute or relative to the repo root. If permission denied, check file permissions. If scan times out (>30s), try a smaller file or contact support.'
• Expand tool descriptions to 100-200 chars with WHEN/WHY context. E.g., scan_file: 'Scan a single file for SAST vulnerabilities. Use this to check a specific file before commit. For staged changes across multiple files, use scan_diff instead. Returns a list of findings with CWE IDs and line numbers.'
• Add parameter constraints. For approve_findings, specify: 'findings must be a non-empty array of valid CWE IDs (format: CWE-\d+). Maximum 100 findings per call.' Use enums or regex patterns in the schema.

Inferred effective spec: <=2025-11-25.

• Relies on Logging (deprecated) - log to stderr or use OpenTelemetry