vault-mcp-session-scoped-disconnect-use-filesystem-fallback
Once vault-mcp shows disconnected in a Claude Code session, the MCP client state is session-scoped and will not reconnect mid-session even if the container is healthy (confirmed via direct curl with extended timeout). The fallback is direct filesystem audit against /opt/second-brain/vault/ using Bash + Python scripts. The 5-second curl default is too aggressive for TLS handshake on the vault endpoint — use 15s minimum.