chore(tasks): mark final wave completed (prj16, gw16, cov-knobs, import-loudness, client-policy-wire-tests)

tasks/gateway/review-002-prj16-schema-via-call.md

@@ -1,7 +1,7 @@
 ---
 id: review-002-prj16-schema-via-call
 name: Block Internal-op schema disclosure via services/schema over /call (PRJ-16, cross-crate CF-004)
-status: pending
+status: completed
 depends_on: []
 scope: moderate
 risk: medium
@@ -73,4 +73,8 @@ found) covers all three + MCP; if the mechanism is route-local, mirror
 it in all three pre-check sites. Do not block on the alkcall fix —
 this task is shippable independently and the alkcall lead time is
 unknown. If CF-004 lands first, re-scope this task to defense-in-depth
-assertions only.
+assertions only.
+
+## Summary
+
+Dispatch-spine guard: invoke/invoke_streaming apply GET /schema's is-internal + ACL checks to the inner services/schema name (404/FORBIDDEN); shared check also used by the MCP schema tool (deduped). ADR-071 records CF-004 layering (complete fix alkcall-side; guard stays as defense-in-depth).