We just shipped an MCP server on Amazon Bedrock AgentCore Runtime that handles AWS Marketplace seller operations, private offers, change sets, the whole thing. Along the way we hit a constraint that reshaped the entire write path, and it's worth sharing on its own. The problem: releasing a private offer moves real money, so we wanted a hard rule, nothing gets submitted that a human hasn't reviewed first. The obvious fix is a pending-operations table: client previews, server stores the paylo...