Evidence row 568564

What was observed

{
  "count": 4,
  "tools": [
    {
      "description": "Analyze a PDF, JPEG or PNG balance report. Include the pre-issued operation for encrypted result recovery and safe same-payload replay for up to 15 minutes from issuance; restarting the service ends recovery. Omit operation only for legacy immediate-only delivery. Raw reports are not persisted. Returns structured facts and readable Hebrew text/HTML. External OCR sends personal/financial mortgage data to Google Document AI outside Israel only with an agent attestation that the existing task permits this transfer, or legacy separate approval. The supplier notice hash is not evidence a human saw it. Local-only is the default. A terminal failure never restarts the same operation.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "additionalProperties": false,
        "properties": {
          "authorization": {
            "additionalProperties": false,
            "description": "Deprecated compatibility field; omit it. FINLY does not use or record it as consent evidence.",
            "properties": {
              "policy_version": {
                "maxLength": 100,
                "minLength": 1,
                "type": "string"
              },
              "text_sha256": {
                "pattern": "^[a-f0-9]{64}$",
                "type": "string"
              },
              "user_approved_processing": {
                "const": true,
                "type": "boolean"
              },
              "user_approved_result_sharing": {
                "const": true,
                "type": "boolean"
              }
            },
            "required": [
              "policy_version",
              "text_sha256",
              "user_approved_processing",
              "user_approved_result_sharing"
            ],
            "type": "object"
          },
          "content_base64": {
            "maxLength": 25165824,
            "minLength": 4,
            "type": "string"
          },
          "external_ocr": {
            "anyOf": [
              {
                "additionalProperties": false,
                "properties": {
                  "approved": {
                    "const": true,
                    "type": "boolean"
                  },
                  "policy_version": {
                    "maxLength": 100,
                    "minLength": 1,
                    "type": "string"
                  },
                  "text_sha256": {
                    "pattern": "^[a-f0-9]{64}$",
                    "type": "string"
                  }
                },
                "required": [
                  "approved",
                  "policy_version",
                  "text_sha256"
                ],
                "type": "object"
              },
              {
                "additionalProperties": false,
                "properties": {
                  "authorization_basis": {
                    "const": "existing_task",
                    "type": "string"
                  },
                  "policy_version": {
                    "maxLength": 100,
                    "minLength": 1,
                    "type": "string"
                  },
                  "task_authorizes_external_processing": {
                    "const": true,
                    "type": "boolean"
                  },
                  "text_sha256": {
                    "pattern": "^[a-f0-9]{64}$",
                    "type": "string"
                  }
                },
                "required": [
                  "authorization_basis",
                  "task_authorizes_external_processing",
                  "policy_version",
                  "text_sha256"
                ],
                "type": "object"
              }
            ],
            "description": "Optional external OCR selection. Existing-task authority is an agent attestation covering mortgage data sent to Google Document AI outside Israel; its policy hash binds the supplier notice, not proof of human viewing. Legacy separate approval remains accepted. Omission means local-only processing."
          },
          "operation": {
            "additionalProperties": false,
            "description": "Opt into encrypted result recovery for this pre-issued operation. Omit only for legacy immediate-only delivery.",
            "properties": {
              "result_handle": {
                "format": "uuid",
                "type": "string"
              },
              "result_token": {
                "pattern": "^[A-Za-z0-9_-]{43}$",
                "type": "string"
              }
            },
            "required": [
              "result_handle",
              "result_token"
            ],
            "type": "object"
          },
          "security_challenge": {
            "maxLength": 2048,
            "minLength": 1,
            "type": "string"
          },
          "security_proof": {
            "maxLength": 128,
            "minLength": 1,
            "pattern": "^[A-Za-z0-9_-]+$",
            "type": "string"
          }
        },
        "required": [
          "content_base64",
          "security_challenge",
          "security_proof"
        ],
        "type": "object"
      },
      "name": "analyze_balance_report"
    },
    {
      "description": "Cancel this operation and delete its encrypted result using its exact capability. A deleted operation cannot be restarted. No raw report, identity or result is placed in the URL.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "additionalProperties": false,
        "properties": {
          "operation": {
            "additionalProperties": false,
            "properties": {
              "result_handle": {
                "format": "uuid",
                "type": "string"
              },
              "result_token": {
                "pattern": "^[A-Za-z0-9_-]{43}$",
                "type": "string"
              }
            },
            "required": [
              "result_handle",
              "result_token"
            ],
            "type": "object"
          }
        },
        "required": [
          "operation"
        ],
        "type": "object"
      },
      "name": "delete_report_analysis_result"
    },
    {
      "description": "Get the processing notice, external OCR supplier notices for existing-task authority or legacy approval, and a single-use proof-of-work challenge. Normal report analysis requires no additional FINLY approval. Solve SHA-256(challenge_token + \":\" + proof) so its first two bytes are zero.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "get_report_analysis_requirements"
    },
    {
      "description": "Retrieve the result or pending status using the exact operation capability received before upload. Does not upload, analyze, call OCR, renew expiry or prove Customer identity. An expired or restarted service cannot recover the result.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "additionalProperties": false,
        "properties": {
          "operation": {
            "additionalProperties": false,
            "properties": {
              "result_handle": {
                "format": "uuid",
                "type": "string"
              },
              "result_token": {
                "pattern": "^[A-Za-z0-9_-]{43}$",
                "type": "string"
              }
            },
            "required": [
              "result_handle",
              "result_token"
            ],
            "type": "object"
          }
        },
        "required": [
          "operation"
        ],
        "type": "object"
      },
      "name": "get_report_analysis_result"
    }
  ]
}

What the leaf hashes

{"body":"a0740fa0ea02b9982cff9067e6e66eb21319bd816f62cfc70bc06789a803d519","id":568564,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793139053490124,"prev":null,"subject":"22c048b2-3ce7-4c87-82f9-dd25bb60c881","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0x65d409b05f3ab82b4acc05590241fecf44010dc740a0e343bd49f99f0833f782
2. 0x75f58cebafdd5cc77a77b6f8fa86e8048e87bc004ced4b5f9509baddb099e0d4
3. 0xf9217a8d4d1a748db66a638ec5508bc9b3aa97a5296b222fb00e581d36bd0240
4. 0xe6544f9f3b1fea2d7b1d46aa8acd9b1df610757abfd93cb066be345b3f9d6923
5. 0xe2e7eea6be4e76ae4d3a32ad9973f6b6606c0ae6d7102b896be150b92dfaff04
6. 0x1404311522e4fdfc75930e87063ada5f511d32066c3d2fcfa57e447537fb0ac5
7. 0xad2b4302695d5ee6ac67af5cd6a8a640a898ef11ba4f0bbbe91b638fa4305c4a
8. 0x3d19fd9d480b9759502c1e223fb37e0b2328f3133b6805884e2dc38408a200e6
9. 0xc92fd346717627781a7bb4e67d04bddac19fba9fe06364194a85d2dd64ac73c1
10. 0xbd79723d75eb617cb70ea4b66071fc98c4a4a895a5bc97dbaa07f687e955ec27
11. 0x00119541a8ecdb9b96eee77399dbffc076abd7ad280ffa655b85863821cb29d1
12. 0x188b042e533a0dd4a8a233ee981012ab6f4d30710df7807c0e36d3d969103a6d
13. 0x4c257542b0421f909cc313308d9054fb29b4b46d9dca1b83169d04797233fda2
14. 0x3c5462812bd2f841e3d7deefc01555f18262fe5e0d5a7eb155330b7a7cb0388e
15. 0x6f00f0da417f4126951ba8ba9b7962c847e91f5c61364ad9ad47e5f979698a60
16. 0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996
17. 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
18. 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4