Evidence row 515587

What was observed

{
  "count": 8,
  "tools": [
    {
      "description": "What AgentAvow is, which tool to use for what, how to read a verdict, and example scans. Call this for an overview or when getting started. No input, read-only.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "about_agentavow"
    },
    {
      "description": "Check whether it is safe to interact with another agent by trust threshold. Thresholds: delegate 0.6, trade 0.5, collaborate 0.4, follow 0.1. Returns is_safe, risk_level, the score, and a recommendation. Read-only, no auth.",
      "inputSchema": {
        "properties": {
          "interaction_type": {
            "enum": [
              "delegate",
              "trade",
              "collaborate",
              "follow"
            ],
            "type": "string"
          },
          "target_entity_id": {
            "description": "UUID of a registered target entity (resolve one with lookup_identity).",
            "maxLength": 64,
            "type": "string"
          }
        },
        "required": [
          "target_entity_id",
          "interaction_type"
        ],
        "type": "object"
      },
      "name": "check_interaction_safety"
    },
    {
      "description": "Get an embeddable AgentAvow trust badge (SVG) for an entity, with ready-to-paste Markdown and HTML. The badge auto-updates as the score changes. Read-only, no auth.",
      "inputSchema": {
        "properties": {
          "entity_id": {
            "description": "UUID of a registered AgentAvow entity (resolve one with lookup_identity).",
            "maxLength": 64,
            "type": "string"
          }
        },
        "required": [
          "entity_id"
        ],
        "type": "object"
      },
      "name": "get_trust_badge"
    },
    {
      "description": "Look up an AgentAvow entity by W3C DID or display name. Returns the entity's id, name, type, trust score and tier. Read-only, no auth. Use to resolve an identity before checking its trust.",
      "inputSchema": {
        "properties": {
          "query": {
            "description": "A did:web:... or a display name.",
            "maxLength": 200,
            "pattern": "^[\\w .:/@#+-]{1,200}$",
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "lookup_identity"
    },
    {
      "description": "Scan a live MCP server's tool definitions for tool-poisoning, prompt-injection, invisible-unicode, and manifest-execution risks before your agent connects to it. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, findings, and a signed attestation. Read-only; calls the agentavow.com public API.",
      "inputSchema": {
        "properties": {
          "endpoint_url": {
            "description": "The MCP server's https:// URL.",
            "maxLength": 512,
            "type": "string"
          },
          "force": {
            "description": "Re-scan now instead of returning the cached verdict (results cache ~1h).",
            "type": "boolean"
          }
        },
        "required": [
          "endpoint_url"
        ],
        "type": "object"
      },
      "name": "scan_mcp_server"
    },
    {
      "description": "Scan a published package (npm, PyPI, crates, Docker, or Hugging Face) with AgentAvow. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (downloads per week), findings with remediation, and a signed attestation. Also reports published advisories that affect the scanned version, the maintainer's deprecation notice, repo-vs-artifact drift (files shipped that aren't in the source), and AgentAvow's behavioral sandbox results when available. Scans the latest version unless `version` (or a pin in the name) names one. Read-only; calls agentavow.com.",
      "inputSchema": {
        "properties": {
          "ecosystem": {
            "description": "Alias for registry.",
            "type": "string"
          },
          "force": {
            "description": "Re-scan now instead of returning the cached verdict (results cache ~1h). Use after a new version ships.",
            "type": "boolean"
          },
          "name": {
            "description": "Package name, e.g. 'chalk' (or 'org/model' for hf).",
            "maxLength": 214,
            "type": "string"
          },
          "registry": {
            "description": "Package registry: npm, pypi, crates, docker, or hf.",
            "type": "string"
          },
          "surface": {
            "description": "Alias for registry.",
            "type": "string"
          },
          "version": {
            "description": "Exact version to scan, e.g. '5.3.0'. Optional: the latest version by default. A pin in the name ('chalk@5.3.0', 'requests==2.32.5') works too.",
            "maxLength": 64,
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "name": "scan_package"
    },
    {
      "description": "Scan a public GitHub repository with AgentAvow and return whether it is safe for an agent to connect to: one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (stars), the findings behind it (with where and how to fix), and a signed, offline-verifiable attestation. Read-only, no account. Calls the AgentAvow public API at agentavow.com.",
      "inputSchema": {
        "properties": {
          "force": {
            "description": "Re-scan now instead of returning the cached verdict (results cache ~1h). Use after the target has changed.",
            "type": "boolean"
          },
          "owner": {
            "description": "Repo owner (optional if 'repo' is already 'owner/name').",
            "maxLength": 214,
            "type": "string"
          },
          "repo": {
            "description": "Repo as 'owner/name' (e.g. 'vercel/next.js'), or just the name when 'owner' is given separately.",
            "maxLength": 214,
            "type": "string"
          }
        },
        "required": [
          "repo"
        ],
        "type": "object"
      },
      "name": "scan_repo"
    },
    {
      "description": "Verify an AgentAvow entity's trust score. Returns trust_score (0-1), trust_score_pct (0-100), trust_tier, and whether it meets a minimum threshold. Read-only, no auth. Use before interacting with an unknown agent.",
      "inputSchema": {
        "properties": {
          "entity_id": {
            "description": "UUID of a registered AgentAvow entity (resolve one with lookup_identity; unknown ids return guidance, not an error).",
            "maxLength": 64,
            "type": "string"
          },
          "min_trust": {
            "default": 0.3,
            "description": "Min score, 0-1.",
            "type": "number"
          }
        },
        "required": [
          "entity_id"
        ],
        "type": "object"
      },
      "name": "verify_trust"
    }
  ]
}

What the leaf hashes

{"body":"c599a6efa1e91060b235c3b92311550df3f302b8af44239363c7199c0030ec94","id":515587,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793120116339150,"prev":null,"subject":"d48c7cae-1cf7-4f34-afbe-555f4eed5f16","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xe44e7b106eac6d07654c8731609ad50f6681643cc873910399aae8c44b06cef3
2. 0xd741efd46a65661f8a2ce2fe42a61759a13ec505b2ae2eab4a3fb8b040effc2e
3. 0xf5ab0fbf62adc12addb899d2f86fb3a795c7a1f6c9559360d8acbbb456dfe505
4. 0x9b88f85460d03eccd1312d62d886e68acbaca8b836016470ff74d735e6c60e62
5. 0x6ee33d056a639c6396690d795550b99c75ffca1b1e236fe065c29836570f3715
6. 0x9c2624032aad70d96860813d05de9c32e0858f7e0b8dff8a427277d18273ae59
7. 0xe46d8c330f25844044cb99d3868a15a22afa280c59646a3559f1fd6616e25b7e
8. 0xac0f78cc7c4d14d1494f283400f4ef06eea3606a2b361262f713999e1777f655
9. 0xdfc18a91dd4961bb645aebb9edc2ef667d6b1075eaac2c5f9baa2843d176ed24
10. 0xf43ec63a3f9fa25173180abb7567056ab830871cfcea8062ffeb94b071fa8fa6
11. 0x79b5848e3de58e55a9bc31f0b9fac7eaaa02831210ebc21da7db3a90dc579124
12. 0xc1d2a56a84338ae3b69b3423e631069ac48cf802439f26d41941f651ac2c28a1
13. 0xd98ea318b514153f74841c90aff18a807e61314ec99610bf3bdbb7219da01cbd
14. 0xf72dee7a0c7534cb19ede4959b957b00c0a8285c36ad49dd2ce1c1092bf60d93
15. 0x24e3e2bb8ee1e8d20756de35f0e0c4ec8eb1f193bd2cf3f077ee1f92f211c34d
16. 0x8745bd887f5ce9f7a49558fd2b04cdcd97a05ea9f8a23f62d0e80cb13d328b0f
17. 0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4