How does Catalyst's MCP tool authorization affect retry and failure recovery compared to Temporal?

As of the verification date, public documentation for Temporal does not list built-in MCP tool authorization; security is documented at the activity level. Catalyst integrates MCP tool authorization with workload identity, allowing retries to be scoped with policies that prevent unauthorized tool calls during recovery. This adds a security layer to failure recovery, ensuring retries only proceed with valid permissions. Treat this as a difference in where the check lives, not as an absence of security.