Evidence row 523066

What was observed

{
  "count": 4,
  "tools": [
    {
      "description": "Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "domain": {
            "description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used.",
            "type": "string"
          }
        },
        "required": [
          "domain"
        ],
        "type": "object"
      },
      "name": "check_registry_lock"
    },
    {
      "description": "Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "domain": {
            "description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used.",
            "type": "string"
          }
        },
        "required": [
          "domain"
        ],
        "type": "object"
      },
      "name": "check_seal_dns_registrar"
    },
    {
      "description": "Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "url": {
            "description": "Public https page URL or domain, e.g. https://app.example.com/",
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "check_sri"
    },
    {
      "description": "Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "domain": {
            "description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used.",
            "type": "string"
          }
        },
        "required": [
          "domain"
        ],
        "type": "object"
      },
      "name": "scan_domain"
    }
  ]
}

What the leaf hashes

{"body":"aa55a5fed593a38f8329d6aca5eae5173f9e316f6263a71ff865ba8f731db5f5","id":523066,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793124111114674,"prev":null,"subject":"238e33bd-c548-4138-bcb7-8798b5b620da","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xa387240417df1fb62bea868bad0907246c481f94e25ed171028ab76deaed11b3
2. 0xe3f167c8f24c355e5aedb497afc94c805bbba6d3e627b0556ff4ff29d135f79c
3. 0xdb9b5bf56fec667edc5a24d4cc552df6eb62a24b205a6e041e6a26a0537e9dd9
4. 0x7857274cd063b0ff6d05916140846ea82a01da2dafd9c5bb2757bce300592820
5. 0x5fd1b54d4b8d4d53ce73d6b00c9291d264e54deb31c99386dcf017913349b4ce
6. 0xd15c53518af19926195d185852e645a57d61c4009e8cd02f01027115945e1f12
7. 0x97d2eda21509597598d20c3fe2b923227da017dcbd96072ae69d1ced7e2ec1b3
8. 0x4b81737ffc971521b0eef5ce5c6978228746e7e6d666c8422cf08ed01eebd734
9. 0x0ce6111c24ab48de4e2530e2515b06cf0191fdc5a18459f7a2a6cae0775fb11e
10. 0xa0ea68059b84d3e8082a97b6f66d61d00092b368cef47b86fa4b782fde336acf
11. 0xd9929b92c66c9433d68fc7d48eddf234ae765144f98d397c91dd32e9124ee876
12. 0x0c9efc71bd73a056aab018d34b600797c2287eaa0df0398c8404046e9420d684
13. 0x87816aee66e8f6e0f1e55ea83733bb58cf9612d36c45fd5b7fc5d6f4484b78fd
14. 0x0644f7e2a4b5bf9b66f185cc3fbb766d456ad94490183852f4c6db5855114cc5
15. 0xa3fff4662cd48659f5bafd0612931759a90e53a7b4209ed8f26f6594a07bb547
16. 0x64c405a28e8819716221eb2529fe4ce277ab08025e17e685cbd5ece75ceb75c7
17. 0xf30fddbf4811226c58e8f0daf36fddd79fc5f1356b592bb1d99a8061ddbabe66
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4