Evidence row 1747572

What was observed

{
  "count": 15,
  "tools": [
    {
      "description": "One call security audit of a PUBLIC GitHub repo the user is authorized to scan. Creates a workspace if\n        workspace_token is empty (keep the returned token private), scans, waits up to 90 s, starts GPU analysis for the\n        top max_analyses (0-5) findings and returns summary + next steps. Reuse request_id only for the SAME request.",
      "inputSchema": {
        "properties": {
          "authorized": {
            "default": false,
            "title": "Authorized",
            "type": "boolean"
          },
          "max_analyses": {
            "default": 3,
            "title": "Max Analyses",
            "type": "integer"
          },
          "repository_url": {
            "title": "Repository Url",
            "type": "string"
          },
          "request_id": {
            "title": "Request Id",
            "type": "string"
          },
          "workspace_token": {
            "default": "",
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "repository_url",
          "request_id"
        ],
        "title": "audit_repositoryArguments",
        "type": "object"
      },
      "name": "audit_repository"
    },
    {
      "description": "Scan summary, analysis statuses and which fix prompts (get_fix_prompt) are ready, in one call.",
      "inputSchema": {
        "properties": {
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id"
        ],
        "title": "audit_statusArguments",
        "type": "object"
      },
      "name": "audit_status"
    },
    {
      "description": "After fixes are PUSHED to the default branch: rescan the same repo against scan_id and list resolved,\n        persisting, new and key-reissue-needed findings. Same commit means the fix was not pushed yet.",
      "inputSchema": {
        "properties": {
          "authorized": {
            "default": false,
            "title": "Authorized",
            "type": "boolean"
          },
          "request_id": {
            "title": "Request Id",
            "type": "string"
          },
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id",
          "request_id"
        ],
        "title": "check_fixArguments",
        "type": "object"
      },
      "name": "check_fix"
    },
    {
      "description": "Revoke this workspace and its result access. Does not cancel already submitted backend jobs.",
      "inputSchema": {
        "properties": {
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token"
        ],
        "title": "close_workspaceArguments",
        "type": "object"
      },
      "name": "close_workspace"
    },
    {
      "description": "Create a private, expiring workspace. Save its capability only in the user's AI conversation.",
      "inputSchema": {
        "properties": {},
        "title": "create_workspaceArguments",
        "type": "object"
      },
      "name": "create_workspace"
    },
    {
      "description": "Generate the service's report from owned server scan and available analyses, indicating incomplete work.",
      "inputSchema": {
        "properties": {
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id"
        ],
        "title": "generate_reportArguments",
        "type": "object"
      },
      "name": "generate_report"
    },
    {
      "description": "Poll GPU status and delivery gates; inference can take several minutes. Never fake ready results.",
      "inputSchema": {
        "properties": {
          "analysis_id": {
            "title": "Analysis Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "analysis_id"
        ],
        "title": "get_analysisArguments",
        "type": "object"
      },
      "name": "get_analysis"
    },
    {
      "description": "Get a gated real LLM proposal. Agent must inspect code, check repo/commit, fix and test in its workspace.",
      "inputSchema": {
        "properties": {
          "analysis_id": {
            "title": "Analysis Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "analysis_id"
        ],
        "title": "get_fix_promptArguments",
        "type": "object"
      },
      "name": "get_fix_prompt"
    },
    {
      "description": "Poll every >=10 seconds; on done return actual commit, coverage and up to 50 LLM-input findings.",
      "inputSchema": {
        "properties": {
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id"
        ],
        "title": "get_scanArguments",
        "type": "object"
      },
      "name": "get_scan"
    },
    {
      "description": "Draft only; NEVER submits. kind: assess/incident-24h/privacy-72h. incident requires discovered_at ISO time;\n        optional organization {name,service_name,contact_email}, summary, incident_types, damage, actions_taken,\n        personal_info {leaked: confirmed/suspected/none, affected_count, items}. Use only user-confirmed facts.\n        ",
      "inputSchema": {
        "properties": {
          "incident": {
            "additionalProperties": true,
            "title": "Incident",
            "type": "object"
          },
          "kind": {
            "title": "Kind",
            "type": "string"
          },
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id",
          "kind",
          "incident"
        ],
        "title": "incident_reportArguments",
        "type": "object"
      },
      "name": "incident_report"
    },
    {
      "description": "Rescan the SAME repository default branch. Only published changes are visible; unpushed edits are not.",
      "inputSchema": {
        "properties": {
          "authorized": {
            "default": false,
            "title": "Authorized",
            "type": "boolean"
          },
          "previous_scan_id": {
            "title": "Previous Scan Id",
            "type": "string"
          },
          "request_id": {
            "title": "Request Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "previous_scan_id",
          "request_id"
        ],
        "title": "rescanArguments",
        "type": "object"
      },
      "name": "rescan"
    },
    {
      "description": "Learn the whole workflow and available service capabilities before creating work.",
      "inputSchema": {
        "properties": {},
        "title": "service_infoArguments",
        "type": "object"
      },
      "name": "service_info"
    },
    {
      "description": "Start GPU Red/Blue review of one real scan finding. Same inputs deduplicate.",
      "inputSchema": {
        "properties": {
          "fingerprint": {
            "title": "Fingerprint",
            "type": "string"
          },
          "scan_id": {
            "title": "Scan Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "scan_id",
          "fingerprint"
        ],
        "title": "start_analysisArguments",
        "type": "object"
      },
      "name": "start_analysis"
    },
    {
      "description": "Start a REAL public GitHub scan. User authorization required. Reuse request_id on identical retries.",
      "inputSchema": {
        "properties": {
          "authorized": {
            "default": false,
            "title": "Authorized",
            "type": "boolean"
          },
          "repository_url": {
            "title": "Repository Url",
            "type": "string"
          },
          "request_id": {
            "title": "Request Id",
            "type": "string"
          },
          "workspace_token": {
            "title": "Workspace Token",
            "type": "string"
          }
        },
        "required": [
          "workspace_token",
          "repository_url",
          "request_id"
        ],
        "title": "start_scanArguments",
        "type": "object"
      },
      "name": "start_scan"
    },
    {
      "description": "Runtime proof on the DEMO target only: isolated sandbox replays attacks before/after the fix and runs\n        functional tests. mode: reference (human fix) or ai (Red/Blue generated attacks and fix). Not the user's repo.\n        If a previous call returned status queued/running, pass its verify_job_id to keep polling the same job.",
      "inputSchema": {
        "properties": {
          "mode": {
            "default": "reference",
            "title": "Mode",
            "type": "string"
          },
          "verify_job_id": {
            "default": "",
            "title": "Verify Job Id",
            "type": "string"
          }
        },
        "title": "verify_demoArguments",
        "type": "object"
      },
      "name": "verify_demo"
    }
  ]
}

What the leaf hashes

{"body":"6be7df471edac03512c1629b89489c2cc7762607b6d80a56d0a9cd5cdd3411b4","id":1747572,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793516637835816,"prev":null,"subject":"57804822-d3ad-4298-b779-68fe1d98d27b","subject_kind":"endpoint"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.