{
  "title": "Local and Remote MCP Case-Study Decisions",
  "schemaVersion": "1.0",
  "researchFreeze": "2026-08-26",
  "protocolRevision": "MCP 2026-07-28",
  "sourcePackage": "research/10",
  "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.",
  "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.",
  "checkedAt": "2026-08-26",
  "count": 10,
  "records": [
    {
      "Use case": "Local code editing",
      "Recommended default": "Local",
      "Why": "Needs repository/filesystem/IDE access with low friction",
      "Alternative/hybrid": "Remote issue tracker and CI servers alongside local files",
      "Risks to test": "Workspace trust, path scope, project config and secret inheritance",
      "id": "R10-CASE001",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 1,
        "sourceIds": [],
        "raw": {
          "Use case": "Local code editing",
          "Recommended default": "Local",
          "Why": "Needs repository/filesystem/IDE access with low friction",
          "Alternative/hybrid": "Remote issue tracker and CI servers alongside local files",
          "Risks to test": "Workspace trust, path scope, project config and secret inheritance"
        }
      }
    },
    {
      "Use case": "Official SaaS integration",
      "Recommended default": "Remote",
      "Why": "Data and permissions already live in cloud service; centralized update and OAuth",
      "Alternative/hybrid": "Local proxy only for unsupported clients",
      "Risks to test": "OAuth, object authorization, tenant isolation and availability",
      "id": "R10-CASE002",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 2,
        "sourceIds": [],
        "raw": {
          "Use case": "Official SaaS integration",
          "Recommended default": "Remote",
          "Why": "Data and permissions already live in cloud service; centralized update and OAuth",
          "Alternative/hybrid": "Local proxy only for unsupported clients",
          "Risks to test": "OAuth, object authorization, tenant isolation and availability"
        }
      }
    },
    {
      "Use case": "On-prem database",
      "Recommended default": "Local or private remote",
      "Why": "Avoid public exposure and preserve network locality",
      "Alternative/hybrid": "Enterprise gateway or desktop extension as controlled bridge",
      "Risks to test": "Database role, query safety, device identity and audit",
      "id": "R10-CASE003",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 3,
        "sourceIds": [],
        "raw": {
          "Use case": "On-prem database",
          "Recommended default": "Local or private remote",
          "Why": "Avoid public exposure and preserve network locality",
          "Alternative/hybrid": "Enterprise gateway or desktop extension as controlled bridge",
          "Risks to test": "Database role, query safety, device identity and audit"
        }
      }
    },
    {
      "Use case": "Enterprise knowledge search",
      "Recommended default": "Remote single-tenant/gateway",
      "Why": "Shared index, central policy and cross-device access",
      "Alternative/hybrid": "Local connector to private sources",
      "Risks to test": "Document permissions, DLP, prompt injection and stale indexes",
      "id": "R10-CASE004",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 4,
        "sourceIds": [],
        "raw": {
          "Use case": "Enterprise knowledge search",
          "Recommended default": "Remote single-tenant/gateway",
          "Why": "Shared index, central policy and cross-device access",
          "Alternative/hybrid": "Local connector to private sources",
          "Risks to test": "Document permissions, DLP, prompt injection and stale indexes"
        }
      }
    },
    {
      "Use case": "Browser automation on user desktop",
      "Recommended default": "Local",
      "Why": "Needs local browser/profile and visible user context",
      "Alternative/hybrid": "Remote isolated browser for reproducible automation",
      "Risks to test": "Credential/session access, destructive actions and site data",
      "id": "R10-CASE005",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 5,
        "sourceIds": [],
        "raw": {
          "Use case": "Browser automation on user desktop",
          "Recommended default": "Local",
          "Why": "Needs local browser/profile and visible user context",
          "Alternative/hybrid": "Remote isolated browser for reproducible automation",
          "Risks to test": "Credential/session access, destructive actions and site data"
        }
      }
    },
    {
      "Use case": "Cloud infrastructure management",
      "Recommended default": "Remote or local with workload identity depending environment",
      "Why": "Cloud APIs and central policy favor remote; developer CLI identity may favor local",
      "Alternative/hybrid": "Gateway remote for production, local read-only tools for development",
      "Risks to test": "Broad IAM, write confirmation, tenant/account selection",
      "id": "R10-CASE006",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 6,
        "sourceIds": [],
        "raw": {
          "Use case": "Cloud infrastructure management",
          "Recommended default": "Remote or local with workload identity depending environment",
          "Why": "Cloud APIs and central policy favor remote; developer CLI identity may favor local",
          "Alternative/hybrid": "Gateway remote for production, local read-only tools for development",
          "Risks to test": "Broad IAM, write confirmation, tenant/account selection"
        }
      }
    },
    {
      "Use case": "Hardware or lab instrument",
      "Recommended default": "Local",
      "Why": "Direct device/serial/network access near hardware",
      "Alternative/hybrid": "Remote control plane invoking narrow local bridge",
      "Risks to test": "Physical safety, command allowlist and offline behavior",
      "id": "R10-CASE007",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 7,
        "sourceIds": [],
        "raw": {
          "Use case": "Hardware or lab instrument",
          "Recommended default": "Local",
          "Why": "Direct device/serial/network access near hardware",
          "Alternative/hybrid": "Remote control plane invoking narrow local bridge",
          "Risks to test": "Physical safety, command allowlist and offline behavior"
        }
      }
    },
    {
      "Use case": "Public read-only data service",
      "Recommended default": "Remote authless or low-friction auth",
      "Why": "No installation and shared source of truth",
      "Alternative/hybrid": "Local cache for offline use",
      "Risks to test": "Abuse, rate limits, data integrity and availability",
      "id": "R10-CASE008",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 8,
        "sourceIds": [],
        "raw": {
          "Use case": "Public read-only data service",
          "Recommended default": "Remote authless or low-friction auth",
          "Why": "No installation and shared source of truth",
          "Alternative/hybrid": "Local cache for offline use",
          "Risks to test": "Abuse, rate limits, data integrity and availability"
        }
      }
    },
    {
      "Use case": "Personal notes/files across devices",
      "Recommended default": "Hybrid decision",
      "Why": "Local privacy conflicts with cross-device availability",
      "Alternative/hybrid": "Encrypted remote store plus local file bridge",
      "Risks to test": "End-to-end data flow, model provider access and sync conflicts",
      "id": "R10-CASE009",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 9,
        "sourceIds": [],
        "raw": {
          "Use case": "Personal notes/files across devices",
          "Recommended default": "Hybrid decision",
          "Why": "Local privacy conflicts with cross-device availability",
          "Alternative/hybrid": "Encrypted remote store plus local file bridge",
          "Risks to test": "End-to-end data flow, model provider access and sync conflicts"
        }
      }
    },
    {
      "Use case": "MCP App with external APIs",
      "Recommended default": "Remote",
      "Why": "Stable HTTPS, OAuth, CSP domains and shared UI asset delivery",
      "Alternative/hybrid": "Local App for device-local views",
      "Risks to test": "CSP/CORS, dedicated origin, UI supply chain and host support",
      "id": "R10-CASE010",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/case_study_decisions.json",
        "row": 10,
        "sourceIds": [],
        "raw": {
          "Use case": "MCP App with external APIs",
          "Recommended default": "Remote",
          "Why": "Stable HTTPS, OAuth, CSP domains and shared UI asset delivery",
          "Alternative/hybrid": "Local App for device-local views",
          "Risks to test": "CSP/CORS, dedicated origin, UI supply chain and host support"
        }
      }
    }
  ]
}