{
  "title": "Hybrid MCP Architecture Patterns",
  "schemaVersion": "1.0",
  "researchFreeze": "2026-08-26",
  "protocolRevision": "MCP 2026-07-28",
  "sourcePackage": "research/10",
  "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.",
  "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.",
  "checkedAt": "2026-08-26",
  "count": 5,
  "records": [
    {
      "Pattern": "Developer workstation hybrid",
      "Conceptual flow": "Host → stdio Git/filesystem; Host → HTTPS GitHub/SaaS",
      "Why use it": "Keep machine access local while sharing cloud integrations",
      "Identity requirement": "Separate local OS and remote OAuth identities",
      "Principal risk": "Cross-server prompt injection and inconsistent approval/audit",
      "Source IDs": "S039 S042",
      "id": "R10-HYBA001",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/hybrid_architecture_patterns.json",
        "row": 1,
        "sourceIds": [
          "S039",
          "S042"
        ],
        "raw": {
          "Pattern": "Developer workstation hybrid",
          "Conceptual flow": "Host → stdio Git/filesystem; Host → HTTPS GitHub/SaaS",
          "Why use it": "Keep machine access local while sharing cloud integrations",
          "Identity requirement": "Separate local OS and remote OAuth identities",
          "Principal risk": "Cross-server prompt injection and inconsistent approval/audit",
          "Source IDs": "S039 S042"
        }
      }
    },
    {
      "Pattern": "Private enterprise bridge",
      "Conceptual flow": "Cloud host → secure tunnel → private MCP server → internal system",
      "Why use it": "Avoid public inbound exposure while allowing cloud assistants",
      "Identity requirement": "Tunnel identity + MCP OAuth/SSO + upstream identity",
      "Principal risk": "Tunnel becomes critical infrastructure; prevent bypass",
      "Source IDs": "S035 S050 S062",
      "id": "R10-HYBA002",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/hybrid_architecture_patterns.json",
        "row": 2,
        "sourceIds": [
          "S035",
          "S050",
          "S062"
        ],
        "raw": {
          "Pattern": "Private enterprise bridge",
          "Conceptual flow": "Cloud host → secure tunnel → private MCP server → internal system",
          "Why use it": "Avoid public inbound exposure while allowing cloud assistants",
          "Identity requirement": "Tunnel identity + MCP OAuth/SSO + upstream identity",
          "Principal risk": "Tunnel becomes critical infrastructure; prevent bypass",
          "Source IDs": "S035 S050 S062"
        }
      }
    },
    {
      "Pattern": "Enterprise gateway plus local tools",
      "Conceptual flow": "Host → gateway → approved remote servers; Host → managed local bundle",
      "Why use it": "Centralize shared services without giving gateway local-machine power",
      "Identity requirement": "Gateway policy plus endpoint package policy",
      "Principal risk": "Two control planes and fragmented trace correlation",
      "Source IDs": "S040 S052 S054",
      "id": "R10-HYBA003",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/hybrid_architecture_patterns.json",
        "row": 3,
        "sourceIds": [
          "S040",
          "S052",
          "S054"
        ],
        "raw": {
          "Pattern": "Enterprise gateway plus local tools",
          "Conceptual flow": "Host → gateway → approved remote servers; Host → managed local bundle",
          "Why use it": "Centralize shared services without giving gateway local-machine power",
          "Identity requirement": "Gateway policy plus endpoint package policy",
          "Principal risk": "Two control planes and fragmented trace correlation",
          "Source IDs": "S040 S052 S054"
        }
      }
    },
    {
      "Pattern": "Remote orchestration with local agent",
      "Conceptual flow": "Remote MCP service → user-authorized local bridge → desktop/hardware",
      "Why use it": "Remote workflow needs device capability",
      "Identity requirement": "End-user delegation must survive bridge",
      "Principal risk": "Authority amplification and exfiltration",
      "Source IDs": "S004 S013 S062",
      "id": "R10-HYBA004",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/hybrid_architecture_patterns.json",
        "row": 4,
        "sourceIds": [
          "S004",
          "S013",
          "S062"
        ],
        "raw": {
          "Pattern": "Remote orchestration with local agent",
          "Conceptual flow": "Remote MCP service → user-authorized local bridge → desktop/hardware",
          "Why use it": "Remote workflow needs device capability",
          "Identity requirement": "End-user delegation must survive bridge",
          "Principal risk": "Authority amplification and exfiltration",
          "Source IDs": "S004 S013 S062"
        }
      }
    },
    {
      "Pattern": "Vendor remote plus local cache",
      "Conceptual flow": "Host → managed remote server; local component stores offline/cache",
      "Why use it": "Reduce repeated data transfer or support offline views",
      "Identity requirement": "Remote OAuth plus local data protection",
      "Principal risk": "Stale data, cache tenant mix-up and local leakage",
      "Source IDs": "S058 S060",
      "id": "R10-HYBA005",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping",
      "archive": {
        "namespace": "research/10/hybrid_architecture_patterns.json",
        "row": 5,
        "sourceIds": [
          "S058",
          "S060"
        ],
        "raw": {
          "Pattern": "Vendor remote plus local cache",
          "Conceptual flow": "Host → managed remote server; local component stores offline/cache",
          "Why use it": "Reduce repeated data transfer or support offline views",
          "Identity requirement": "Remote OAuth plus local data protection",
          "Principal risk": "Stale data, cache tenant mix-up and local leakage",
          "Source IDs": "S058 S060"
        }
      }
    }
  ]
}