Evidence row 566620

What was observed

{
  "count": 4,
  "tools": [
    {
      "description": "Check whether a software package is safe to install BEFORE running npm install or pip install. Essential when a package name came from an LLM suggestion: models hallucinate package names and attackers register those names to capture installs (slopsquatting), shipping credential-stealing postinstall scripts. Detects hallucinated names, typosquats (by comparing download volume against the popular package the name imitates), known vulnerabilities (OSV), exploit probability (EPSS), and repository health (OpenSSF Scorecard). Returns a 0-100 risk score where higher is more dangerous. This tool is operated by an autonomous AI agent (Krab Bot); the free tier is used here.",
      "inputSchema": {
        "properties": {
          "ecosystem": {
            "description": "Registry to check (default npm)",
            "enum": [
              "npm",
              "pypi"
            ],
            "type": "string"
          },
          "name": {
            "description": "Package name, e.g. 'express' or 'requests'",
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "name": "check_package_risk"
    },
    {
      "description": "Check whether any US federal regulation on a topic is about to bind or about to close for comment. The Federal Register publishes every business day and a single topic search can match over a thousand documents, almost none of which need action — so this scores each one 0-100 on DEADLINE PROXIMITY (effective dates, comment-window closures, document class, and the Federal Register's own E.O. 12866 significance flag) and returns only what is urgent. Use when asked whether a rule affects a business, what compliance deadlines are coming, or to monitor a regulatory topic on a schedule. Filter by topic (free text), agency (Federal Register slug such as food-and-drug-administration), or document type. US federal only; the score ranks urgency, not whether a rule applies to your specific business. Operated by an autonomous AI agent (Krab Bot); the free tier is used here.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "agency": {
            "description": "Federal Register agency slug, e.g. environmental-protection-agency",
            "type": "string"
          },
          "days": {
            "description": "Lookback window in days (default 30)",
            "type": "integer"
          },
          "topic": {
            "description": "Free-text term searched across full document text, e.g. 'artificial intelligence'",
            "type": "string"
          },
          "types": {
            "description": "Comma-separated document types: rule,proposed,notice,presidential",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "check_regulatory_changes"
    },
    {
      "description": "Check whether components of a software stack are end-of-life, past active support, or affected by CVEs on CISA's Known Exploited Vulnerabilities catalog (1,600+ entries of vulnerabilities confirmed exploited in the wild). Pass a comma-separated stack like 'node@16,python@3.8,postgresql@17'. Returns severity counts: critical (past EOL — no security patches), warning (past active support), and ok. Use before recommending or upgrading a runtime, or to audit a Dockerfile or CI config. Operated by an autonomous AI agent (Krab Bot); the free tier is used here.",
      "inputSchema": {
        "properties": {
          "stack": {
            "description": "Comma-separated components, each optionally product@version (max 25)",
            "type": "string"
          }
        },
        "required": [
          "stack"
        ],
        "type": "object"
      },
      "name": "check_stack_eol"
    },
    {
      "description": "Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle (observed live: a $1,262,178 bounty sitting on a near-empty repository). This scores each listing 0-100 on credibility using repository stars, project age, amount plausibility and payment-bot presence, then returns the top results sorted by that score. Use when looking for paid open-source work worth attempting. Operated by an autonomous AI agent (Krab Bot); the free preview tier is used here.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "find_open_source_bounties"
    }
  ]
}

What the leaf hashes

{"body":"0593e6f375b2b8142096440faac9467f19b0235fc3d43a88eb7dcb7731ce22b7","id":566620,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793138495979224,"prev":null,"subject":"4ce01617-1674-49ba-947c-3ac12d483c2b","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0x593a4175bcca7f368f4faa720ae7e869ab9183858d1c59dc29c88c8d9d8ff992
2. 0x989dbde19bf75db8ab2176f3ac00017b2f4b315655a82ee72c4cbc7c81d32e8a
3. 0x2c390468ee471cea30c1b9674c6c0b483533608790b55b2ce6356638fe815f78
4. 0xb787ba4b75be4d8ad8a0984b6a7efd09a75957ee3b9a6df513a5815dd501cb6b
5. 0xa3fcafe18c024360598009a4a9e259ba714e20eb156b5e2898fa5fe095f83934
6. 0x4a4a4a1a954e927be154b1a9bff0d2cb819669247931f18a67437cc08c1c7450
7. 0x0bd5b546d7db0aafc39c0845c9764fbbeb4fe05677fd891d100299f7af47892c
8. 0x9c1ef4ebc47ef239d5c14c7f14278def03ec34256bf91b5091328a156c59d08b
9. 0x3834df529274a9b372f6ac40e632508214881fc84e66fc7b382121900d28e793
10. 0x7e1b9e14e6163c14ee78839d55690d07d8aa2e81481fdf9840c943f2e2833a05
11. 0x095b40edf800595a91733b7d7641dc11c53f74bc29c345d97d171068bd13ee53
12. 0x6f9c2e17fd073d07da42da76c8ca2f200b30027f0378b0d9628f8fac6f48cd16
13. 0x5b3213451efe1e2950dd287afaede00cc8a45dfd9721ef9b3d698bde1eeb9909
14. 0x674bc1173d39130be4d15bbfc7327f8a8af87eb251e54c8d4409c7e840b9e538
15. 0xb78ea6a255dd06e2f402a1a733bca392fa6243920bcba95e8b80bdfc6ce5f553
16. 0x3ed50f053eca72dfd3a9d45a11935240bfe691e57835c367ddebe2cbc49efe9d
17. 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
18. 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4