An MCP tool registry that validates arguments on the way in and the tool's own return value on the way out.
The last three are deliberately broken implementations, kept so the outbound check has something to catch.
—