Go

Design notes from a Go MCP server in front of a shared password vault: annotations that never fire, schema tags that enforce nothing, a fence the JSON encoder rewrites, and error paths that talk to the model.