Evidence row 176218

What was observed

{
  "count": 2,
  "tools": [
    {
      "description": "Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.",
      "inputSchema": {
        "properties": {},
        "title": "describe_operation_risk_serviceArguments",
        "type": "object"
      },
      "name": "describe_operation_risk_service"
    },
    {
      "description": "Check whether the actual operation inside an MCP tool call is safe before execution. Use this when one MCP tool exposes multiple operations with different side effects, so whole-tool permissions are too coarse. Provide the native MCP server identity, the tool's tools/list metadata and the intended arguments. For supported consolidated tools, distinguish read, create/add, update/mutate and delete/destructive operations. Return ALLOW, DENY, or REQUIRE_APPROVAL. Unknown, unsupported, ambiguous, or schema-changed calls fail closed with REQUIRE_APPROVAL. The evaluator never executes the source operation.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "arguments": {
            "additionalProperties": true,
            "description": "Arguments intended for the source MCP tools/call request being evaluated. The evaluator does not execute that call.",
            "title": "Arguments",
            "type": "object"
          },
          "source": {
            "additionalProperties": false,
            "description": "MCP server and negotiated protocol identity for the source tool.",
            "properties": {
              "protocol_version": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Negotiated MCP protocol version, or null when unavailable.",
                "title": "Protocol Version"
              },
              "server": {
                "additionalProperties": false,
                "description": "MCP server identity from the connection's initialize response.",
                "properties": {
                  "name": {
                    "description": "Name reported by the MCP server during initialize; used as a supported-manifest lookup hint.",
                    "title": "Name",
                    "type": "string"
                  },
                  "version": {
                    "anyOf": [
                      {
                        "type": "string"
                      },
                      {
                        "type": "null"
                      }
                    ],
                    "description": "Server version reported during initialize, or null when unavailable.",
                    "title": "Version"
                  }
                },
                "required": [
                  "name",
                  "version"
                ],
                "title": "NativeServerIdentity",
                "type": "object"
              }
            },
            "required": [
              "server",
              "protocol_version"
            ],
            "title": "NativeSource",
            "type": "object"
          },
          "tool": {
            "additionalProperties": false,
            "description": "The complete relevant Tool record returned by the source server's tools/list.",
            "properties": {
              "_meta": {
                "anyOf": [
                  {
                    "additionalProperties": true,
                    "type": "object"
                  },
                  {
                    "type": "null"
                  }
                ],
                "default": null,
                "description": "Relevant tool metadata from tools/list, when present.",
                "title": "Meta"
              },
              "annotations": {
                "additionalProperties": true,
                "description": "Tool annotations from tools/list, such as read-only or destructive hints; use an empty object when absent.",
                "title": "Annotations",
                "type": "object"
              },
              "description": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "description": "Tool description from tools/list, or null if the server omitted it.",
                "title": "Description"
              },
              "execution": {
                "anyOf": [
                  {
                    "additionalProperties": true,
                    "type": "object"
                  },
                  {
                    "type": "null"
                  }
                ],
                "default": null,
                "description": "Tool execution metadata from tools/list, when present.",
                "title": "Execution"
              },
              "icons": {
                "anyOf": [
                  {
                    "items": {
                      "additionalProperties": true,
                      "type": "object"
                    },
                    "type": "array"
                  },
                  {
                    "type": "null"
                  }
                ],
                "default": null,
                "description": "Tool icons from tools/list, when present.",
                "title": "Icons"
              },
              "inputSchema": {
                "additionalProperties": true,
                "description": "Complete inputSchema from tools/list; used to validate the intended arguments and match a supported tool manifest.",
                "title": "Inputschema",
                "type": "object"
              },
              "name": {
                "description": "Exact tool name from the MCP server's tools/list response.",
                "title": "Name",
                "type": "string"
              },
              "outputSchema": {
                "anyOf": [
                  {
                    "additionalProperties": true,
                    "type": "object"
                  },
                  {
                    "type": "null"
                  }
                ],
                "default": null,
                "description": "Tool output schema from tools/list, when present.",
                "title": "Outputschema"
              },
              "title": {
                "anyOf": [
                  {
                    "type": "string"
                  },
                  {
                    "type": "null"
                  }
                ],
                "default": null,
                "description": "Tool title from tools/list, when provided by the server.",
                "title": "Title"
              }
            },
            "required": [
              "name",
              "description",
              "inputSchema"
            ],
            "title": "NativeToolRecord",
            "type": "object"
          }
        },
        "required": [
          "source",
          "tool",
          "arguments"
        ],
        "title": "NativeMcpEvaluationRequest",
        "type": "object"
      },
      "name": "evaluate_operation_risk"
    }
  ]
}

What the leaf hashes

{"body":"0cd1a8da7b73e5bc38f8d9eb71aa466239f7e464d1ee5a4fe69ec36109217ee6","id":176218,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793025788162934,"prev":null,"subject":"eb2fe9ce-d710-428a-bc54-cb69abc433fb","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x1c5277b6eea7c42a03efeaf44eda495e3f54a2b340356700cf2622c5bf656aa5
2. 0x49e65700e6163f30ddf22e347a2bbbe5683cbe1b97447afb28bd56e424a06fd6
3. 0xeab95781f5e9c0ef92c463f177a50541ef3bf5c67124128d66fe5f9ac7c374c9
4. 0x5616476e32dd9e09600d75531dbbd7f7a08a38a5ded97e26c4ac0d0de0140014
5. 0x3a3822a25a5d794b71c35eccdf2b28001a4ab9668195a5b9047846d1f9eb37b4
6. 0x32188f8228fd8f2279132ec0cd00d15536d413910b805b80143944a3413e209e
7. 0x59d217f445ce8341a966b42d29ba3f9eac005d08ec0d7606836722f90c1edec7
8. 0xe5185264b1d20b414080fa0183dd6ac218b026cea6546f2194e6006aa93378eb
9. 0x2d421bc9466d0d4b4327525e0ea891650f7ef1bb786aac0e9343baa14ec49fe2
10. 0xff0b07a758b1dcaf0eebbded2fa92a070a531479a35a33200105774bbc143b25
11. 0xa71cc4f892400c8dd1d9d33faa6b7466eba77734b3716286b78aa51d46ff4255
12. 0x7ab2e7902b312a74cfdbc32b2906ced29b1fb9dc4280b5378e8eb181ad88686e
13. 0xe00c7829e46541e49a308807d357db902e06eff941a833217a8f0dbccd3964f1
14. 0x770e4376196188c7fc9ec40f8e218dc0d1cb92bba5fe0425a0edce27ca9a997f
15. 0x60582ab4b41e72eb70eb0bce07fbf0fb4d2b62a8bad5be50f5d16d511adc746c
16. 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae