Evidence row 570455

What was observed

{
  "count": 7,
  "tools": [
    {
      "description": "Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act (a name-based heuristic that weights a name's first word most). Read-only: it mints no receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.",
      "inputSchema": {
        "properties": {
          "inventory": {
            "items": {
              "additionalProperties": true,
              "type": "object"
            },
            "title": "Inventory",
            "type": "array"
          },
          "notes": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Notes"
          }
        },
        "required": [
          "inventory"
        ],
        "title": "audit_my_agent_inventoryArguments",
        "type": "object"
      },
      "name": "audit_my_agent_inventory"
    },
    {
      "description": "Egress classification check. Scans a data sample for a finite list of sensitivity markers and classifies as NO_MARKERS_FOUND / INTERNAL / CONFIDENTIAL / RESTRICTED. RESTRICTED sets blocked=true; this tool cannot block anything itself, and NO_MARKERS_FOUND is not clearance to send. Returns classification, retention info, and a tamper-evident receipt.",
      "inputSchema": {
        "properties": {
          "data_sample": {
            "title": "Data Sample",
            "type": "string"
          },
          "destination": {
            "title": "Destination",
            "type": "string"
          },
          "provider": {
            "title": "Provider",
            "type": "string"
          }
        },
        "required": [
          "destination",
          "data_sample",
          "provider"
        ],
        "title": "check_egressArguments",
        "type": "object"
      },
      "name": "check_egress"
    },
    {
      "description": "Two-phase decision gate with a real verdict. PREVIEW returns ALLOW, DENY or ESCALATE with the risk tier and reasons, plus a preview_id, without acting. COMMIT re-evaluates the same inputs and mints a signed receipt for the verdict. Only ALLOW returns a GRANTED permit; DENY returns DENIED; ESCALATE returns WITHHELD_PENDING_HUMAN and a human must decide outside this tool. Applies only to actions the caller routes through it: it does not observe or block what an agent does. Verb-tier heuristic on the action name and resource, not a proof. Stateless. Optional attestation: triggered_by_type, triggered_by_source, decision_model.",
      "inputSchema": {
        "properties": {
          "action": {
            "title": "Action",
            "type": "string"
          },
          "context": {
            "additionalProperties": true,
            "title": "Context",
            "type": "object"
          },
          "decision_model": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Decision Model"
          },
          "phase": {
            "default": "PREVIEW",
            "title": "Phase",
            "type": "string"
          },
          "preview_id": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Preview Id"
          },
          "resource": {
            "title": "Resource",
            "type": "string"
          },
          "triggered_by_source": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Triggered By Source"
          },
          "triggered_by_type": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Triggered By Type"
          }
        },
        "required": [
          "action",
          "resource",
          "context"
        ],
        "title": "gate_decisionArguments",
        "type": "object"
      },
      "name": "gate_decision"
    },
    {
      "description": "Mint a signed receipt (Ed25519, plus ML-DSA-65 when the post-quantum backend is available) for an arbitrary consequential agent action. Optional attestation: triggered_by_type (human/agent/script), triggered_by_source (api/cli/cron), decision_model (the LLM model used). Attestation values are caller claims: allowlisted to safe characters, signed, not verified. Decisions that contain a gate verdict word are reserved for gate_decision.",
      "inputSchema": {
        "properties": {
          "agent_id": {
            "title": "Agent Id",
            "type": "string"
          },
          "decision": {
            "default": "ACTION_GOVERNED",
            "title": "Decision",
            "type": "string"
          },
          "decision_model": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Decision Model"
          },
          "inputs": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Inputs"
          },
          "operation": {
            "title": "Operation",
            "type": "string"
          },
          "policy": {
            "default": "agent action evidence",
            "title": "Policy",
            "type": "string"
          },
          "target": {
            "title": "Target",
            "type": "string"
          },
          "triggered_by_source": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Triggered By Source"
          },
          "triggered_by_type": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Triggered By Type"
          }
        },
        "required": [
          "agent_id",
          "operation",
          "target"
        ],
        "title": "mint_action_receiptArguments",
        "type": "object"
      },
      "name": "mint_action_receipt"
    },
    {
      "description": "Mint a signed receipt (Ed25519, plus ML-DSA-65 when the post-quantum backend is available) for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).",
      "inputSchema": {
        "properties": {
          "changed_by_agent": {
            "title": "Changed By Agent",
            "type": "string"
          },
          "field": {
            "title": "Field",
            "type": "string"
          },
          "new_value": {
            "title": "New Value",
            "type": "string"
          },
          "object_type": {
            "title": "Object Type",
            "type": "string"
          },
          "old_value": {
            "title": "Old Value",
            "type": "string"
          },
          "policy": {
            "default": "per-decision CRM change evidence",
            "title": "Policy",
            "type": "string"
          },
          "record_id": {
            "title": "Record Id",
            "type": "string"
          },
          "tenant": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Tenant"
          }
        },
        "required": [
          "record_id",
          "object_type",
          "field",
          "old_value",
          "new_value",
          "changed_by_agent"
        ],
        "title": "mint_receipt_for_record_changeArguments",
        "type": "object"
      },
      "name": "mint_receipt_for_record_change"
    },
    {
      "description": "Vendor exit readiness drill. Checks local signing key, local model access (Ollama). Returns step-by-step results and a tamper-evident receipt. Informational; it signs one receipt, which creates the signing key on a host that has none yet.",
      "inputSchema": {
        "properties": {},
        "title": "run_exit_drillArguments",
        "type": "object"
      },
      "name": "run_exit_drill"
    },
    {
      "description": "Verify a Trust Gate receipt from the certificate alone (offline). ok=true means unchanged since signing, signed, kid consistent with the embedded key, and (require_pq default on) at least one post-quantum leg verified; unsigned receipts fail. It does not prove who signed: pass expected_kid to pin the signer's Ed25519 key; a pin counts only when that key's own signature verifies (see signer_pinned). The post-quantum keys in a receipt are not covered by the kid.",
      "inputSchema": {
        "properties": {
          "expected_kid": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Expected Kid"
          },
          "receipt": {
            "additionalProperties": true,
            "title": "Receipt",
            "type": "object"
          },
          "require_pq": {
            "anyOf": [
              {
                "type": "boolean"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "title": "Require Pq"
          }
        },
        "required": [
          "receipt"
        ],
        "title": "verify_receiptArguments",
        "type": "object"
      },
      "name": "verify_receipt"
    }
  ]
}

What the leaf hashes

{"body":"8455d507d8c155127fc34f48ad5aeddaa624574100b7d2a5b9db476197b07632","id":570455,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793139785716631,"prev":null,"subject":"b91edac5-22c8-46f4-8a0d-c7c67964236f","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xc1df94f17557f8e0a2d03c1435e995d7ab42b0bdb70d8648c4ab4e815e363682
2. 0x34b2ff5ec37245ba94c5bf34fbb2b943912d8f30f112e13f8de5af722f43b748
3. 0x510b723f97d99b185b0d3aa48379a40c197d806e6946cdc1cffbd3f693e54fa8
4. 0x1555d8bc69a673f6b090e027f118e56328a35d69ecc27ff46122fa1ad34d6481
5. 0xa019d01bfe30e9edccb7a9fdf7b9779880e10f7d024ff1d439dd3dc03eb5017d
6. 0x678d815b8b1539133e7f8e3ad0cfeb77aaffd06a26559e402c9a6e775ff5a7c4
7. 0x42b9155cb9abf85e5819069a1c2cf023993392713e8ccbe07016cbbacead3394
8. 0xa448116d9bced576b1443896960355b2349f506a4940c8eacc395f2aca0db006
9. 0x43811e56383620534275d91652470ee8b4cae9fd8eef4611a8adae5007ead9af
10. 0x603e5d7d552008939814da11386784fe82a74a23617e6ed24fbe3fa47ea3d596
11. 0x5a13fca65d8a7a99a0b9f7a1e93e4c0383a76a0fdbe04d70632715947f716ff4
12. 0xf60d24675361c4e691254e637b8ecddfc4470b91e0ce8ab4c088e46b7460f7f1
13. 0xb48b088603004f0a5232faea4acd65999cbb4832f4c15b0098e853144cb91655
14. 0x077edf0f29e2a3aa19c876439830696b88f0236fd0b2a3c43c76f38cdd29bb2b
15. 0x73341bb09dd901ca47f26173883431496e3d98d6b0fb5b89f36218126d46c5d4
16. 0xa94627de1af0e823832e05a9069b304ecccb8c0cdb8f9cfc4f2039bfb9799dc5
17. 0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4