- Built a dynamic enum from constructed built-in/hidden tools so MCP and extension tools are excluded from QA reports. - Added allowlist guard to silently drop reports targeting non-built-in tools at runtime. - Stripped `proxy_` prefix before allowlist check so passthrough-wrapped tools resolve correctly.