ChatGPT silently passes data between connectors and the bounty wants an ID card

ChatGPT silently routed a follow-up tool call through a different connector than the one that initiated the flow, passing a confirmation code generated by the first connector to the second without user awareness. This behavior poses a security risk because it transfers data between separate applications with different OAuth clients without explicit consent, potentially allowing unauthorized data sharing between third-party connectors. The issue highlights that tool calls should be matched to specific OAuth clients rather than shared MCP server URLs to maintain proper authorization boundaries.