Evidence row 294451

What was observed

{
  "count": 2,
  "tools": [
    {
      "description": "Screen untrusted input for prompt/tool injection, exfiltration, and obfuscation before an agent consumes it. Returns a verdict (clean|suspicious|attack), probability, bits-at-risk (upper bound on adversarial capture per the Adversarial Landauer bound), matched canon patterns, and a recommended action (allow|sanitize|reject|escalate). Backed by Aristotle-verified theorems T-IB-02/T-IB-06/T-IB-01.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "agentId": {
            "description": "Optional: for MCP-01 envelope cross-check.",
            "type": "string"
          },
          "certainty": {
            "description": "Operating point. Default standard.",
            "enum": [
              "quick",
              "standard",
              "premium"
            ],
            "type": "string"
          },
          "context": {
            "description": "Optional: the agent's role/system prompt; helps calibrate.",
            "type": "string"
          },
          "input": {
            "description": "The untrusted text/data to screen.",
            "maxLength": 200000,
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      },
      "name": "detect_injection"
    },
    {
      "description": "Analyze an agent trace for the Gray Swan Wave 16 class: untrusted retrieved/tool output causing a tool call outside the user-declared per-turn allowlist. Returns trace counts, unauthorized tool-call evidence, canon mapping VC-AI-TOOL-0001, and claim-boundary guardrails. Backed by T-IB-25/T-IB-29/T-IB-36.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "targetName": {
            "description": "Optional display name for the assessed target.",
            "type": "string"
          },
          "trace": {
            "additionalProperties": true,
            "description": "Single agent trace with user_prompt, allowed_tools, and events[].",
            "type": "object"
          },
          "traces": {
            "description": "Optional batch of agent traces.",
            "items": {
              "additionalProperties": true,
              "type": "object"
            },
            "type": "array"
          }
        },
        "type": "object"
      },
      "name": "detect_trace_tool_policy"
    }
  ]
}

What the leaf hashes

{"body":"0363a13b1fb8d4993f51ed17ad3f7b82b724b6da8ac63d25434463283d2f1be9","id":294451,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793050108875183,"prev":null,"subject":"e16f7816-2353-44ed-ac3c-9f775f1a96b6","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x86368d14b4f2cc630c4b5224b2f573065c91bf75a9f2a4691de0da91ba1f59c2
2. 0xc734cc0659a053b306bd1071749d788ea278ddaa073d9b808735080ffe1856f0
3. 0x413aec7c4c8326a2944f348441ceb70311499e73b416c038b5c0274b626102b8
4. 0xad1d5dfa20f88ddeb329d522aed6b432eb3ad1c4d08236d30b4b55b647b8443c
5. 0x86ce77ad1302fb7dcce0bae84be27502cbbd999fe18cf4ec45d795f79441b94a
6. 0x6c75dc3f51892e97325332019381f03e69505bdc3b4eed8c8d37ae075a7bc941
7. 0x74794a3750ffed24783fdce25f7c83970c379af6e3fc1842116f4486520aa38e
8. 0xaa644cdc7aae2538f9860d131147da59759cd9ff92cd8fb1a2d8177445e5633e
9. 0xd5e7fe5e22d0f721add84c87198cf47b769770c1756b2a9721525c366e108dbc
10. 0x0d847b9eb30e194e701d2d4f8af4f34ef43f6c033fe5e001b93f122bdbea7c80
11. 0xd6d2fb435c815b0341c19086a636cc9a706a6129405e2030054a243942b686fe
12. 0x146f43471a3bde6d8a04e87b6afd3ee6860c6e38a009f86aee705ce722b67748
13. 0x91c2ae93ec20c7fed5088112fe3941ca622dfb3f8f1022c4844726c361244bd4
14. 0x0eff463856b0992d53ab7d8c0b97c71541413358bdd445710c1e4b6aeb4d8f78
15. 0x7eb603d37f0f22dae1ea013e391889906ffc0139ff26e25b044bee38eec8f9b2
16. 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae