Vulnerable behavior observed: workspace-scoped server started without trust.