Evidence row 566751

What was observed

{
  "count": 1,
  "tools": [
    {
      "description": "Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade (HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS the score is capped at 39), each header's status and notes, recommended fix headers, and a link to the full report with copy-paste snippets for nginx, Apache, Cloudflare, Netlify, Vercel and Express. Read-only: it sends ordinary GET requests to the site (following up to 10 redirects, each safety-checked) and never reads page bodies. Same engine and scoring as the HeaderGuard JSON API (GET /api/scan).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "include_raw": {
            "default": false,
            "description": "Also return the full /api/scan JSON (redirect chain, all response headers with cookie values redacted, per-platform fix snippets) in structuredContent.raw. Larger output.",
            "type": "boolean"
          },
          "url": {
            "description": "URL or bare domain to scan, e.g. example.com or https://example.com/login. A bare domain is scanned as https://<domain>/ (plain HTTP if HTTPS does not answer).",
            "maxLength": 2048,
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "scan_headers"
    }
  ]
}

What the leaf hashes

{"body":"8d966109109aeefaeee345cb6584125fa58dfcc1bc609e61609fe3a5e7a98831","id":566751,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793138522374284,"prev":null,"subject":"8bedd339-432b-45ad-800c-635fc41a358f","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xb3196a961d53693b64eb9e51b91b99ee67328b0a9efc337092dee39b04164d8a
2. 0x44f60bc87039e8e65cb8739ed0aab6db858a5dd4644102156022af6fa786d202
3. 0xc1480e17add1ac3f4db9d95c65237e2345f3b1f0dea0dc12cffaaa22618aeaaa
4. 0x7c938ce2604f3ac66f15b65f8a117cbb93585a6cb2035f70fee8fa3016eda8f5
5. 0xc4b2be017890f815f6c98607a49b82b561a0337981ef877a7fc8179c0929242d
6. 0xce72d3a17fa1592f113bab29a6caac2fa3e4ed5945112ef80568431bffc7ef02
7. 0x40d99bf01d95f2a13f9e20142a7b88fd2621bb3a190320479589e848c0724fb1
8. 0x645d7f4fa97e210040753e84b7e7a73ed234880790f79ff0ffd555b23d78ef5b
9. 0x66641a5de5773f191ee4c359122b78665def3f4c25f20287284b8f42f36b6e7f
10. 0x70e1a807254d3ffa88dc48fdd8a48e01352e196a3337a1b38bc0fb82b21b0c40
11. 0x86028923d07588db14494db8e3f5477d37f29bebfab3475069528bce48c5f3c8
12. 0x305c0e886bebb6df8123db384ccd0d5bfc3ddf1de5fbf4edca0aea32f7e223a0
13. 0xf1104ea7df082465ff9df25ed29be80a0ac7c1c6b25c289b5d2e6ae5e6331952
14. 0x87cb8935612c40b569de008a9bf8218cd24a06f74a7364a1654613d972fe00ed
15. 0xec7bb68216a4deb1960acfbbd75da88f7e468b58adb9cf3ec62f2790e46508b3
16. 0x64c405a28e8819716221eb2529fe4ce277ab08025e17e685cbd5ece75ceb75c7
17. 0xf30fddbf4811226c58e8f0daf36fddd79fc5f1356b592bb1d99a8061ddbabe66
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4