Evidence row 1288728

What was observed

{
  "count": 6,
  "tools": [
    {
      "description": "Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "url": {
            "description": "The payment page address, for example https://shop.example.com/checkout. A bare domain is read as https.",
            "maxLength": 2000,
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "check_payment_page"
    },
    {
      "description": "Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or \"unsure\" to get every SAQ with who it is for.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "saq_type": {
            "description": "The merchant's SAQ, or \"unsure\".",
            "enum": [
              "A",
              "A-EP",
              "B",
              "B-IP",
              "C",
              "C-VT",
              "P2PE",
              "SPoC",
              "D",
              "unsure"
            ],
            "type": "string"
          }
        },
        "required": [
          "saq_type"
        ],
        "type": "object"
      },
      "name": "do_i_need_an_asv_scan"
    },
    {
      "description": "Explains a failed PCI ASV scan finding and how to fix it, for the ten most common causes: certificates, old TLS, unpatched software, open ports, default credentials, version banners, missing headers, insecure remote access, DNS and mail, and injection flaws. Pass the finding text from the scan report, or an issue name, or neither to list all ten.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "finding": {
            "description": "The finding as the scan report words it, for example \"TLS Version 1.0 Protocol Detection\".",
            "maxLength": 300,
            "type": "string"
          },
          "issue": {
            "description": "The category, when the caller already knows it.",
            "enum": [
              "certificate",
              "tls_version",
              "unpatched_software",
              "open_ports",
              "default_credentials",
              "version_disclosure",
              "security_headers",
              "remote_access",
              "dns_mail",
              "web_app_flaws"
            ],
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "fix_failed_scan"
    },
    {
      "description": "Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "get_pricing"
    },
    {
      "description": "Searches ServerScan's published guides on PCI DSS requirements, ASV scanning, scan failures, payment page monitoring and penetration testing. Returns up to five matching guides with a short excerpt and a link each. Use it to answer a PCI question from our own pages, then cite the link.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "query": {
            "description": "What to look for, in a few words. For example \"requirement 11.6.1\", \"TLS 1.0 scan failure\" or \"SAQ A-EP\".",
            "maxLength": 200,
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "search_guides"
    },
    {
      "description": "Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "domain": {
            "description": "asv_scanning only: the domain or IPv4 address to scan, filled into the signup form. A URL is cut down to its host.",
            "maxLength": 300,
            "type": "string"
          },
          "include_monitoring": {
            "description": "asv_scanning only: add payment page monitoring to the scan plan.",
            "type": "boolean"
          },
          "product": {
            "description": "What to buy. penetration_test tests a network by IP address; web_app_penetration_test tests web applications and their APIs while logged in.",
            "enum": [
              "asv_scanning",
              "payment_page_monitoring",
              "penetration_test",
              "web_app_penetration_test"
            ],
            "type": "string"
          },
          "term": {
            "description": "Billing term. Defaults to one_year, the cheaper per quarter.",
            "enum": [
              "quarterly",
              "one_year"
            ],
            "type": "string"
          }
        },
        "required": [
          "product"
        ],
        "type": "object"
      },
      "name": "start_order"
    }
  ]
}

What the leaf hashes

{"body":"055b25c3fcef942af2a811975874c78c8b3cf23c0a29145fd79a000cfc45ec85","id":1288728,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793392784798294,"prev":557353,"subject":"07d29040-e47c-4ea2-99de-cfc839655fce","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-30 (243099 rows).

1. 0x9395f4f8d36722dc612bf47d98925eb59ff96e3316159b7b444da6da4725035c
2. 0x5617cc28b9831f1af025f04d3a23689ce3cc06ddae3153f85dc6ca50b7f93be9
3. 0x3d6dea619f996726d6597645bba8b54066596eb5a6c0bcc6bfde58fe33af2ffd
4. 0x53001ef523518b8c444d348f4b9b3b3937e81fe7c6c0c8e94d0bf36058bd0b4d
5. 0x571bac561075c3f6277258c68259ce504e248d972da66a8408a791b7e8d6b235
6. 0xf24082d95e7fb04ecc40efbe434cd66d7c76c9d7b242b24125a7cc30baff79b3
7. 0x8c698108230d3f1af5ec27b063e0dadc08b7841e9fe38b9d71cd44da2c9e683b
8. 0xfff02de36cd3999d38d410aab0b67b418bf863a19c5a2364d2d6aa4a73980458
9. 0x1c6c8cf6d45a043c35aeb38656f073dadb1f6334bde1f7fe4925ff16e60c7183
10. 0xc5a8528465b5ea8ab3458c80f2a3d3a99862c6243ed270ca320c4ae1a28bcec0
11. 0x6c8caed80bc751fc23af60761bd391ba499134a0ef0bf840a5788f8af7d9e758
12. 0x20af208f910fac34d7c14b4292bae9939615ab31f093d4409d4d8c0c5fdeda51
13. 0x7d1bf48d5d64dd078f722c5d54a57afd7c7264c947c587f6fbc3d1add4080eb7
14. 0x7db51cf84d41f2e07ef904fc1b6aeb666b2a2762de18ed12ac42d5938eb28dc2
15. 0xe722b5213af778d8f1621b8b0b61f957ac8d8bb43a780aed8989bfc357e5bc58
16. 0x835211170e79bdce1a823ec914e3532e128f77751e9074286da35091b0200284
17. 0x61ef83255d34604cb052882568ca1d1386ac3cfb8284509715bc1734cff77831
18. 0x0c43c73b62a5d49ee1444b5dc4195fc5b16b141d3f4458e2e9fbd5fd6ecb367d

Day root

0x0826c7ad6039e06a2360ca0a4a3a4fe7f2626c6dc19f71a37599386f78b39875

Chained

0x36b4c8a1063758f0b8765fa1bdf75fa92fb543cc183add3e261880ee2bd1f822

Published

On Arc Testnet, block 69923247: 0x8704744146c6967c8abc9e9a99de4db7283b29e840922ea83a69b6fe776e6861