Evidence row 54685

What was observed

{
  "endpoints": [
    [
      "web",
      "https://vndee.github.io/llm-sandbox/"
    ]
  ],
  "name": "LLM Sandbox",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-08-03T04:22:49.745057Z",
        "status": "active",
        "statusChangedAt": "2026-08-03T04:22:49.745057Z",
        "updatedAt": "2026-08-03T04:22:49.745057Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
      "description": "Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.",
      "name": "io.github.vndee/llm-sandbox",
      "packages": [
        {
          "environmentVariables": [
            {
              "choices": [
                "docker",
                "podman",
                "kubernetes"
              ],
              "default": "docker",
              "description": "Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.",
              "name": "BACKEND"
            },
            {
              "description": "Docker or Podman socket URL, e.g. unix:///var/run/docker.sock",
              "name": "DOCKER_HOST"
            },
            {
              "description": "Path to kubeconfig file when BACKEND=kubernetes.",
              "name": "KUBECONFIG"
            },
            {
              "default": "default",
              "description": "Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.",
              "name": "NAMESPACE"
            },
            {
              "default": "true",
              "description": "Commit the container after a run so installed libraries persist between sessions.",
              "name": "COMMIT_CONTAINER"
            },
            {
              "default": "true",
              "description": "Keep the base image after the session ends to avoid re-pulling it on the next run.",
              "name": "KEEP_TEMPLATE"
            },
            {
              "description": "Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.",
              "name": "SANDBOX_NETWORK_MODE"
            },
            {
              "description": "Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.",
              "name": "SANDBOX_READ_ONLY"
            },
            {
              "description": "Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.",
              "name": "SANDBOX_CAP_DROP"
            },
            {
              "description": "Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.",
              "name": "SANDBOX_SECURITY_OPT"
            },
            {
              "description": "Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.",
              "name": "SANDBOX_MEMORY"
            },
            {
              "description": "Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.",
              "name": "SANDBOX_CPUS"
            }
          ],
          "identifier": "llm-sandbox",
          "registryBaseUrl": "https://pypi.org",
          "registryType": "pypi",
          "runtimeArguments": [
            {
              "description": "Install the MCP server extra. The base llm-sandbox package intentionally ships no container or MCP dependencies, so the extra is required for the server to start.",
              "isRequired": true,
              "name": "--from",
              "type": "named",
              "value": "llm-sandbox[mcp-docker]"
            }
          ],
          "runtimeHint": "uvx",
          "transport": {
            "type": "stdio"
          },
          "version": "0.3.43"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/vndee/llm-sandbox"
      },
      "title": "LLM Sandbox",
      "version": "0.3.43",
      "websiteUrl": "https://vndee.github.io/llm-sandbox/"
    }
  },
  "source": "mcp_registry",
  "summary": "Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends."
}

What the leaf hashes

{"body":"b0a2b148e3bcab5fc20b90f6bc2086b89a7d36161754ae049de0dac5725781f4","id":54685,"kind":"listing","method":"baseline/1","observed_us":1793025433811969,"prev":null,"subject":"mcp_registry:io.github.vndee/llm-sandbox","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xb8311af4f37262fad1964ffd0b092ffea36631e84f8dde84f7598eec2105127a
2. 0x3f37ac9795b136730c2c8407a220c6a8bc17b5b56923272dd436505957923527
3. 0x22e06a52a5f005354d473a779f57a1539d420f3dc8e168078c7d7c5246d7f6f6
4. 0xabef14cd5ae6be462c941781386cbaaf1ad01bf4ef7557ce17f6ad9f4fdd4afe
5. 0x7bf09e0c3cfa154fbb6c7d8fa89f92098f38029b154ebb9d95943770791c9553
6. 0x9a6144d73c343b9aab65f5534f27b0cebf3453b20d296292c1357d406ddbc1b1
7. 0xe2a04dbb973ae633d40433c2c5daf0dd4a51d53a16dc583e6d8f539c8b4869c5
8. 0x14c97314f754fd27e1da1df129853cbca0263d67fd452588aab956ab84c371db
9. 0x09d6e24a08f8a4a1e005e5e1422d6f851fb62c9664eb29fa77589b2b49fdcf6f
10. 0x305a3f47b3689c4a43df7d5c5f208a0395fe7436d6b4555db7943094d45d61a1
11. 0x930671b38b693880d085315beda88a1c227f3639e9a0e0be6b0665bb173a65db
12. 0xb6efd79902cac6d5a402ebecb8069402f00961ab80cd71b4d647fbc686d975ec
13. 0x2f43fe2b2533a5f40c107c114e458e226102f5f8ae91f097e964345880e30928
14. 0xf692ce2b0a640ec9f75aa960e5fb1c2c7091a04e24881798735752c19014e519
15. 0x9f68b5e15459cb62b8c0cd4c124fa61c74147b4a5755a200fbecd21a581635d1
16. 0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae