diff --git a/dotnet/src/Microsoft.Agents.AI.DurableTask/CHANGELOG.md b/dotnet/src/Microsoft.Agents.AI.DurableTask/CHANGELOG.md
index 6d4add798b..1fa375e8a9 100644
--- a/dotnet/src/Microsoft.Agents.AI.DurableTask/CHANGELOG.md
+++ b/dotnet/src/Microsoft.Agents.AI.DurableTask/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 ## [Unreleased]
 
+- Bind MCP threadId to the current agent and guard cross-agent session dispatch ([#6531](https://github.com/microsoft/agent-framework/pull/6531))
 - Added support for durable workflows ([#4436](https://github.com/microsoft/agent-framework/pull/4436))
 
 ## v1.0.0-preview.260219.1
diff --git a/dotnet/src/Microsoft.Agents.AI.Hosting.AzureFunctions/CHANGELOG.md b/dotnet/src/Microsoft.Agents.AI.Hosting.AzureFunctions/CHANGELOG.md
index f8f59c89d1..6f44d343b2 100644
--- a/dotnet/src/Microsoft.Agents.AI.Hosting.AzureFunctions/CHANGELOG.md
+++ b/dotnet/src/Microsoft.Agents.AI.Hosting.AzureFunctions/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 ## [Unreleased]
 
+- Bind MCP threadId to the current agent and guard cross-agent session dispatch ([#6531](https://github.com/microsoft/agent-framework/pull/6531))
 - Support returning workflow results from HTTP trigger endpoint ([#5321](https://github.com/microsoft/agent-framework/pull/5321))
 - Added MCP tool trigger support for durable workflows ([#4768](https://github.com/microsoft/agent-framework/pull/4768))
 - Added Azure Functions hosting support for durable workflows ([#4436](https://github.com/microsoft/agent-framework/pull/4436))
diff --git a/dotnet/tests/Microsoft.Agents.AI.DurableTask.UnitTests/DurableAIAgentProxyTests.cs b/dotnet/tests/Microsoft.Agents.AI.DurableTask.UnitTests/DurableAIAgentProxyTests.cs
index 28e833719b..97b88b4a7b 100644
--- a/dotnet/tests/Microsoft.Agents.AI.DurableTask.UnitTests/DurableAIAgentProxyTests.cs
+++ b/dotnet/tests/Microsoft.Agents.AI.DurableTask.UnitTests/DurableAIAgentProxyTests.cs
@@ -9,7 +9,7 @@ public sealed class DurableAIAgentProxyTests
     // Verifies the proxy rejects a session whose agent name differs from its own,
     // and that the durable client is never called when this happens.
     [Fact]
-    public async Task RunAsync_ThrowsWhenSessionBelongsToDifferentAgent()
+    public async Task RunAsync_ThrowsWhenSessionBelongsToDifferentAgentAsync()
     {
         StubDurableAgentClient client = new();
         DurableAIAgentProxy proxy = new("agentA", client);
@@ -27,7 +27,7 @@ public sealed class DurableAIAgentProxyTests
     // Control test: when the session's agent name matches the proxy's name,
     // the request is forwarded to the durable client.
     [Fact]
-    public async Task RunAsync_AllowsSessionWhenAgentNameMatches()
+    public async Task RunAsync_AllowsSessionWhenAgentNameMatchesAsync()
     {
         AgentSessionId sessionId = new("agentA", "shared-key");
         InvalidOperationException sentinel = new("reached the client");
@@ -48,7 +48,7 @@ public sealed class DurableAIAgentProxyTests
     // Ensures the agent-name comparison is case-insensitive, so casing differences
     // are neither a false-positive rejection nor a bypass.
     [Fact]
-    public async Task RunAsync_AgentNameComparisonIsCaseInsensitive()
+    public async Task RunAsync_AgentNameComparisonIsCaseInsensitiveAsync()
     {
         AgentSessionId sessionId = new("AGENTA", "shared-key");
         InvalidOperationException sentinel = new("reached the client");