Evidence row 1475130

What was observed

{
  "count": 1,
  "tools": [
    {
      "description": "Use this before an agent or wallet signs a Solana transaction. Decodes the unsigned or signed transaction and returns NO_MATCH (no known-bad pattern matched; not a safety guarantee), WARN, or BLOCK, with plain-language reasons and a signed receipt. Pass an x402 quote to also check a payment transaction against it (overpay, approve-instead-of-transfer, unchecked Transfer, wrong payee). Errors return ERROR and are never charged. Price $0.009 USDC (x402, Solana).",
      "inputSchema": {
        "properties": {
          "cap_base_units": {
            "description": "Hard per-payment cap enforced even if the quote asks for more.",
            "type": "integer"
          },
          "caps": {
            "description": "Optional spend caps you declare; any violation returns BLOCK. Keys: max_amount (int base units per outflow), max_amounts ({mint|'SOL': int}), max_total (int per asset), allowed_payees ([pubkey]; owners' ATAs match), allowed_assets ([mint|'SOL']), allow_approvals (bool, default false).",
            "type": "object"
          },
          "known_addresses": {
            "description": "Optional: pubkeys you have recently paid or received from. A recipient that only looks like one of these (same first/last characters) is flagged as address poisoning.",
            "items": {
              "type": "string"
            },
            "maxItems": 200,
            "type": "array"
          },
          "quote": {
            "description": "x402 quote the tx pays: {asset, amount, pay_to | pay_to_token_account, decimals?, token_program?}.",
            "type": "object"
          },
          "simulate": {
            "description": "Simulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, except plain System/Token/ATA/ComputeBudget/Memo transactions with no unresolved lookup tables, which are fully decoded statically. Third-party unlimited approvals BLOCK by default. Response includes risk_score (0-100), basis (simulated|static) and top_reason.",
            "type": "boolean"
          },
          "strict": {
            "description": "Escalate HIGH-risk token approvals (unlimited or third-party delegate) from WARN to BLOCK. Default false.",
            "type": "boolean"
          },
          "tx": {
            "description": "Base64 wire transaction (also accepts an RPC getTransaction result).",
            "type": "string"
          },
          "wallet": {
            "description": "Your own pubkey; only this key is treated as 'you'.",
            "type": "string"
          }
        },
        "required": [
          "tx"
        ],
        "type": "object"
      },
      "name": "shield_guard_check"
    }
  ]
}

What the leaf hashes

{"body":"9f3010dc102be4ede82c5da3ee6fd5999c033034344371379827258dcd422a65","id":1475130,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793413196209020,"prev":null,"subject":"5b2f0926-cfbc-4ca4-8434-87e4a0b64c0a","subject_kind":"endpoint"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.