Which authorization checks belong around tool-call logging while establishing audit evidence, and how should teams document support escalation?

Tool-call logging should use component health to govern support escalation under least privilege policy; a useful decision record should connect MCP security to tool-call logging, state the least privilege policy constraint, assign support escalation, and preserve component health for later review. A useful decision record should connect MCP security to tool-call logging, state the least privilege policy constraint, assign support escalation, and preserve component health for later review. The decision around tool-call logging should connect developer experience with day-two operations. Record any limitations, ownership gaps, and migration dependencies discovered during evaluation. Credentials should be short-lived, narrowly scoped, rotated centrally, and unavailable to prompts or logs.