cat1: mixed-server (2.7) + whoami per-user execution proof (2.4) PASS via tunnel-registered ref server

config/targets.yaml

@@ -21,10 +21,20 @@ gateways:
       - Slack_SendMessage
       - Slack_WhoAmI
       - Youtube_SearchForVideos
-    notes: baseline cat-1 gateway from main catalog (Slack, GoogleDocs, Youtube). Edited live 2026-06-18 (-Brightdata, +Youtube) to test dynamic registration.
+      - ArcadeEvalRef_Echo
+      - ArcadeEvalRef_Add
+      - ArcadeEvalRef_Whoami
+    notes: cat-1 gateway. Mixed prebuilt (Slack/GoogleDocs/Youtube from main) + custom (ArcadeEvalRef_* from the self-hosted ref server). Also used for dynamic-registration test (-Brightdata, +Youtube).
 
 # name -> {kind: hosted|self-hosted, tools: [...], created_by, notes}   (filled in Task 1.4)
-servers: {}
+servers:
+  arcade-eval-ref:
+    dashboard_id: military-healthy-posted-rats   # ID 'arcade-eval-ref' was rejected; used the tunnel subdomain
+    toolkit: ArcadeEvalRef
+    kind: self-hosted-registered                 # via Cloudflare tunnel (arcade deploy is cloud-only)
+    source: lib/mcp_server
+    tools: [ArcadeEvalRef_Echo, ArcadeEvalRef_Add, ArcadeEvalRef_Whoami]
+    notes: tunnel URL is an ephemeral cloudflared quick tunnel (results/tunnel_url.txt) — re-register on restart.
 
 # Headless per-user identities (vault keys). Any stable string works.
 users: