# Acceptance: single-react-mysql-readonly-tool

## Commit preflight

- OpenSpec strict validation: passed.
- Scope: fail-closed SQL validator, exact allowlist, JDBC read-only executor, bounded MySQL projection, ToolBoundary adapter and query-script safety cleanup.
- Non-goals: public Agent/Chat cutover, metadata discovery, Agent persistence database access, dynamic/tenant authorization and live production datasource provisioning.
- Security prerequisite: script write branch/default external connection values are explicitly included in this change.

## Apply acceptance

- Implemented and verified.
- Static, Maven and script evidence is recorded in `evidence.md`.
- No browser/manual verification applies; this stage adds no UI or public protocol change.
- Residual risk is limited to later live datasource provisioning/driver behavior and stage 4 integration.

## Archive acceptance

- All OpenSpec tasks are complete.
- `.archive-ready` marker is created after focused verification.
- OpenSpec is ready to move to the dated archive directory.
- Archive completed at `openspec/changes/archive/2026-07-21-single-react-mysql-readonly-tool`.

## Remaining work

- Stage 4 Diagnosis Agent integration and later live datasource/driver E2E remain outside this archive.