Publish curated Unraid-AppOps-Gateway source from c61e0e1e292914893b40354f904f23dd9fd4a958

backend/app/services/mcp_operations.py

@@ -59,6 +59,14 @@ def _reconciliation_required_response(
     }
 
 
+def mcp_policy_source(action: str, target: str) -> str:
+    """Normalize only the fixed acceptance authority at the authenticated MCP boundary."""
+    if (action in {"runner.acceptance.preflight", "runner.acceptance.quiesce"}
+            and target == "tower/ci-acceptance-residue"):
+        return "chatgpt-mcp"
+    return "automation"
+
+
 def request_operation(
     session: Session,
     *,
@@ -97,7 +105,7 @@ def request_operation(
         session,
         action=safe_action,
         target=safe_target,
-        source="automation",
+        source=mcp_policy_source(safe_action, safe_target),
     )
     risk = str(policy.get("risk") or ACTION_RISK.get(safe_action, "critical"))
     if capability == "read_only":