Now I ask for a small, approved PandaDoc read in the connected folder. Claude checks the workspace and its access before making the request. I match the result to the request and workspace. HTTP 200 confirms the read succeeded; an empty list is a valid result. Outloop’s receipt reports no secret exposure.