Evidence row 569948

What was observed

{
  "count": 4,
  "tools": [
    {
      "description": "Returns real-time health, active DLP security policies, OpenTelemetry metadata, and regulatory compliance standards for this gateway node.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "get_gateway_status"
    },
    {
      "description": "Validates an outgoing LLM tool call payload against zero-trust threat rules (destructive SQL DROP/TRUNCATE, recursive rm -rf, token blowup, prompt injection). Returns allowed: true or policy violation details.",
      "inputSchema": {
        "properties": {
          "arguments": {
            "description": "Dictionary of parameters being sent to the MCP tool.",
            "type": "object"
          },
          "tool_name": {
            "description": "Target MCP tool name being invoked.",
            "type": "string"
          }
        },
        "required": [
          "tool_name",
          "arguments"
        ],
        "type": "object"
      },
      "name": "inspect_tool_call_security"
    },
    {
      "description": "Zero-Trust in-band proxy for remote MCP servers. Pre-inspects tool arguments for threats, executes downstream request with W3C traceparent headers, and automatically scrubs PII/secrets from response payloads.",
      "inputSchema": {
        "properties": {
          "arguments": {
            "description": "Parameters to pass to the downstream MCP tool.",
            "type": "object"
          },
          "target_url": {
            "description": "Downstream MCP server HTTPS endpoint (e.g., https://api.enterprise.com/mcp).",
            "type": "string"
          },
          "tool_name": {
            "description": "Target MCP tool name to execute.",
            "type": "string"
          }
        },
        "required": [
          "target_url",
          "tool_name",
          "arguments"
        ],
        "type": "object"
      },
      "name": "proxy_secure_tool_call"
    },
    {
      "description": "In-band Data Loss Prevention (DLP) engine. Redacts SSNs, credit cards, emails, phone numbers, AWS keys, OpenAI/Anthropic tokens, and JWTs from text or JSON data before LLM ingestion (GDPR Article 5 & EU AI Act compliant).",
      "inputSchema": {
        "properties": {
          "mask_emails": {
            "default": true,
            "description": "Whether to redact email addresses (default: true).",
            "type": "boolean"
          },
          "payload": {
            "description": "The raw text, database dump, or JSON string to sanitize.",
            "type": "string"
          }
        },
        "required": [
          "payload"
        ],
        "type": "object"
      },
      "name": "redact_pii_dlp"
    }
  ]
}

What the leaf hashes

{"body":"abe9c87109be726c86afa687d6801613e973afb6934a5d4f416d8f7bc12f8b4c","id":569948,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793139559756807,"prev":null,"subject":"8d173621-8f0b-48a5-8ad0-bcdbd9be091d","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0x870e00ce27991b65b84e6c9956c08b07c8e016c55b4905d580bbbd42696ea3a8
2. 0xf77acce6a0cdc8971149324250168edc324c2c636de276b90532b5f7e07a4203
3. 0x2860060ce3885780dd5f11a960749a84ca7cbaf25a76317ca7bff37722ab8230
4. 0x2a804f4425596e47e86a3e117f10872e925ebbbe29596b2440fcd3390ed66b9b
5. 0xee0219116b1159c193f80c0b87ad16ec42d95debc8295dcc212b889aab51d04f
6. 0xbac221cafb474789378d937ba12e92dbf24a5d4e343a312ca949045a5ba5a00f
7. 0x119043cd61207296714bfd57e11f4103cd7b972a13c01defc93b87d0aca863f3
8. 0x287bd355e80d2379cf20e05ecb7d22f5450f94a4edce8a605ea5b9a32d1b2d00
9. 0x3b52c6ad26fef54f1a95dab30d52c670f796f7d232c75b00704e0499d5bbe4a0
10. 0x3ad36be139732c0f1161d23d3ac1b36f0b333f6c06f4553cb7e017b8df590a80
11. 0x75376c2d4b66495f3289538d2a16eac6d0471b87780b054af7810e758374d02a
12. 0x470f6acef0d823e6f9e5fa35684563c8f27c3d338b165b457171afc3d44d4d86
13. 0x6251e2be57e8d16b82579481d181c265d75096882014489550b74a728741f2f1
14. 0x4964f0806efde5ed25f60da2b45d78cd2e0f07d67e64aad2822f6016ad973c47
15. 0x3c500ec3d3edf0c74b87a6ca8fcd77656bfbe03db3d478bd0c184d0c88839c6b
16. 0xfecf3d4646dd4984a13dd715499e842c3fde63692336d97394c2bfd8e877ca5d
17. 0xf30fddbf4811226c58e8f0daf36fddd79fc5f1356b592bb1d99a8061ddbabe66
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4