{
  "title": "Local and Remote MCP Deployment Decision Framework",
  "schemaVersion": "1.0",
  "researchFreeze": "2026-08-26",
  "protocolRevision": "MCP 2026-07-28",
  "sourcePackage": "research/10",
  "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.",
  "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.",
  "checkedAt": "2026-08-26",
  "count": 9,
  "records": [
    {
      "Order": 1,
      "Question": "Must the capability read files, control desktop software, access localhost or use attached hardware?",
      "If yes": "Prefer local stdio or a managed local bundle.",
      "If no": "Continue.",
      "Why": "Machine-bound authority is difficult and risky to proxy remotely.",
      "id": "R10-DEC001",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 1,
        "sourceIds": [],
        "raw": {
          "Order": 1,
          "Question": "Must the capability read files, control desktop software, access localhost or use attached hardware?",
          "If yes": "Prefer local stdio or a managed local bundle.",
          "If no": "Continue.",
          "Why": "Machine-bound authority is difficult and risky to proxy remotely."
        }
      }
    },
    {
      "Order": 2,
      "Question": "Is the upstream system a cloud API used by many users or devices?",
      "If yes": "Prefer a remote Streamable HTTP service.",
      "If no": "Continue.",
      "Why": "One deployment and delegated auth usually beat per-device packaging.",
      "id": "R10-DEC002",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 2,
        "sourceIds": [],
        "raw": {
          "Order": 2,
          "Question": "Is the upstream system a cloud API used by many users or devices?",
          "If yes": "Prefer a remote Streamable HTTP service.",
          "If no": "Continue.",
          "Why": "One deployment and delegated auth usually beat per-device packaging."
        }
      }
    },
    {
      "Order": 3,
      "Question": "Must a web/cloud-only host such as ChatGPT connect directly?",
      "If yes": "Use remote HTTP or a secure tunnel/private endpoint supported by the host.",
      "If no": "Local remains possible.",
      "Why": "Cloud hosts cannot spawn a process on the user machine.",
      "id": "R10-DEC003",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 3,
        "sourceIds": [],
        "raw": {
          "Order": 3,
          "Question": "Must a web/cloud-only host such as ChatGPT connect directly?",
          "If yes": "Use remote HTTP or a secure tunnel/private endpoint supported by the host.",
          "If no": "Local remains possible.",
          "Why": "Cloud hosts cannot spawn a process on the user machine."
        }
      }
    },
    {
      "Order": 4,
      "Question": "Does the organization require central audit, allowlists, rate limits and credential policy?",
      "If yes": "Use a remote server or gateway, possibly combined with managed local packages.",
      "If no": "Continue.",
      "Why": "These controls are easier at a shared ingress.",
      "id": "R10-DEC004",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 4,
        "sourceIds": [],
        "raw": {
          "Order": 4,
          "Question": "Does the organization require central audit, allowlists, rate limits and credential policy?",
          "If yes": "Use a remote server or gateway, possibly combined with managed local packages.",
          "If no": "Continue.",
          "Why": "These controls are easier at a shared ingress."
        }
      }
    },
    {
      "Order": 5,
      "Question": "Is offline operation or strict on-device data handling required?",
      "If yes": "Prefer local, with OS sandbox and explicit data boundaries.",
      "If no": "Continue.",
      "Why": "Remote service availability and data transfer conflict with this constraint.",
      "id": "R10-DEC005",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 5,
        "sourceIds": [],
        "raw": {
          "Order": 5,
          "Question": "Is offline operation or strict on-device data handling required?",
          "If yes": "Prefer local, with OS sandbox and explicit data boundaries.",
          "If no": "Continue.",
          "Why": "Remote service availability and data transfer conflict with this constraint."
        }
      }
    },
    {
      "Order": 6,
      "Question": "Can users safely install and update code on every endpoint?",
      "If no": "Prefer remote.",
      "If yes": "Local may be acceptable.",
      "Why": "Installation support and supply-chain review are real lifecycle costs.",
      "id": "R10-DEC006",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 6,
        "sourceIds": [],
        "raw": {
          "Order": 6,
          "Question": "Can users safely install and update code on every endpoint?",
          "If no": "Prefer remote.",
          "If yes": "Local may be acceptable.",
          "Why": "Installation support and supply-chain review are real lifecycle costs."
        }
      }
    },
    {
      "Order": 7,
      "Question": "Is the capability multi-tenant?",
      "If yes": "Use a remote architecture with explicit tenant identity, cache scope and object authorization.",
      "If no": "Single-tenant remote or local may suffice.",
      "Why": "Multi-tenancy belongs in the application and authorization design.",
      "id": "R10-DEC007",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 7,
        "sourceIds": [],
        "raw": {
          "Order": 7,
          "Question": "Is the capability multi-tenant?",
          "If yes": "Use a remote architecture with explicit tenant identity, cache scope and object authorization.",
          "If no": "Single-tenant remote or local may suffice.",
          "Why": "Multi-tenancy belongs in the application and authorization design."
        }
      }
    },
    {
      "Order": 8,
      "Question": "Does the operation require low-latency local interaction or large local data transfer?",
      "If yes": "Local or split-plane hybrid.",
      "If no": "Remote network overhead may be acceptable.",
      "Why": "Measure total operation time, not transport folklore.",
      "id": "R10-DEC008",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 8,
        "sourceIds": [],
        "raw": {
          "Order": 8,
          "Question": "Does the operation require low-latency local interaction or large local data transfer?",
          "If yes": "Local or split-plane hybrid.",
          "If no": "Remote network overhead may be acceptable.",
          "Why": "Measure total operation time, not transport folklore."
        }
      }
    },
    {
      "Order": 9,
      "Question": "Does a remote workflow also need machine-bound tools?",
      "If yes": "Use both; do not force every capability behind one server.",
      "If no": "Choose the simpler single model.",
      "Why": "Hybrid hosts are a normal MCP composition pattern.",
      "id": "R10-DEC009",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/deployment_decision_framework.json",
        "row": 9,
        "sourceIds": [],
        "raw": {
          "Order": 9,
          "Question": "Does a remote workflow also need machine-bound tools?",
          "If yes": "Use both; do not force every capability behind one server.",
          "If no": "Choose the simpler single model.",
          "Why": "Hybrid hosts are a normal MCP composition pattern."
        }
      }
    }
  ]
}