Evidence row 573182

What was observed

{
  "count": 3,
  "tools": [
    {
      "description": "Lists breach notification laws with who is covered, which data types trigger them, encryption exemptions, every notice with its deadline rule and threshold, penalties and the official source. Filter by US state, country (ISO code or name) or scope (us_state, us_federal_sector, country, region). Free.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "country": {
            "description": "Optional country code or name, for example \"GB\", \"Germany\", \"Canada\".",
            "type": "string"
          },
          "scope": {
            "description": "Optional: us_state, us_federal_sector, country or region.",
            "type": "string"
          },
          "state": {
            "description": "Optional US state code or name.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_breach_laws"
    },
    {
      "description": "Lists coverage (US states, US federal sector rules, countries), the date the data was last checked, and related Nero Labs Rules servers. Free.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "list_capabilities"
    },
    {
      "description": "Works out every data breach notice a company owes and the deadline for each. Give affected (how many people in each US state or country), the data types exposed (for example ssn, drivers_license, payment_card, financial_account, medical, health_insurance, username_password, biometric, passport, dob, email_address), whether the data was encrypted with the key kept safe, the date the breach was discovered, and flags: sec_registrant (US public company), sector (hipaa_covered_entity, hipaa_business_associate, glba_financial, health_app, nydfs_licensee) and role (owner, or service_provider holding data for another company). Returns each notice owed (people affected, state attorneys general, credit bureaus, HHS, SEC Form 8-K, FTC, EU and UK data protection authorities, Canada, Australia) with the deadline as a date where the law sets a fixed period, the deadline rule in words, what the notice must contain, how to send it and the official source, earliest first. Unclear cases give the SAFE answer (notice treated as required) plus what it depends on. Free.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "affected": {
            "description": "Where the affected people live: [{\"state\":\"CA\",\"count\":1200},{\"state\":\"TX\",\"count\":300},{\"country\":\"Germany\",\"count\":40},{\"country\":\"United Kingdom\",\"count\":15},{\"country\":\"Canada\",\"province\":\"Quebec\",\"count\":5}]. A bare two-letter code is read as a US state (CA = California); use {\"country\":\"CA\"} or \"Canada\" for Canada.",
            "items": {
              "type": "object"
            },
            "type": "array"
          },
          "data_types": {
            "description": "Personal data exposed, for example [\"ssn\",\"drivers_license\",\"payment_card\"]. If left out every law is treated as triggered (SAFE).",
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "date_discovered": {
            "description": "Date the breach was discovered (or you became aware of it), YYYY-MM-DD. Defaults to today. Deadlines are counted from it.",
            "type": "string"
          },
          "encrypted": {
            "description": "True only if all the exposed data was encrypted and the key was not exposed. Many US state laws then need no notice. Default false.",
            "type": "boolean"
          },
          "materiality_date": {
            "description": "SEC registrants: date the company decided the incident is material, YYYY-MM-DD. The 8-K is due 4 business days after it.",
            "type": "string"
          },
          "role": {
            "description": "owner (default): the company that owns or licenses the data. service_provider: holds it for another company, which mostly means notifying that company quickly.",
            "enum": [
              "owner",
              "service_provider"
            ],
            "type": "string"
          },
          "sec_registrant": {
            "description": "True for a company that files reports with the US SEC (listed in the US). Adds Form 8-K Item 1.05.",
            "type": "boolean"
          },
          "sector": {
            "description": "Sector rules that apply: hipaa_covered_entity, hipaa_business_associate, glba_financial (non-bank financial firms under the FTC Safeguards Rule), health_app (FTC Health Breach Notification Rule), nydfs_licensee (New York DFS regulated).",
            "items": {
              "enum": [
                "hipaa_covered_entity",
                "hipaa_business_associate",
                "glba_financial",
                "health_app",
                "nydfs_licensee",
                "telecom",
                "critical_infrastructure"
              ],
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "affected"
        ],
        "type": "object"
      },
      "name": "who_to_notify"
    }
  ]
}

What the leaf hashes

{"body":"46c98ef7d6d782448539015a61b619779acaef80de1f56bd23c70e93a10f5812","id":573182,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793140967728584,"prev":null,"subject":"456c9be4-702c-41f2-90f0-cbab3f689130","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xea5ddfe78ce46652372eecaea062a4c9f5b8d41d37d0146f3d9dbce57350e10f
2. 0x764d60973b7814dc064b119fb2ea0645d1bf01aa6a1d020de6522030bb7bfce6
3. 0x4c33914bcdf00039cd2c05a64c4cad12dad31ab41fecbdcc82b029e5aeae9e7b
4. 0xae03e9ce190f7c174d607e856e86b6e1feed72afbda5446b567f171a741be015
5. 0xfd9da7cab16f242859d5cf0fbdd2f1faf6f6562c9094c7aebb96f29f2fffffe6
6. 0x39bf4400de79659442b445f42dc38c288125ef2749876a61fe755f0f68fe108c
7. 0xd989d7d9925f260c5bfed849c5b69c950d1d47b0c82cbc62240aafb03027005b
8. 0x9f09a1804a0eade7618e8dd5b2817d9b4309588b37685b66279acf0b953cf218
9. 0x7ccdf7ff36ebde7df6655ee08c74589be7dba18f5e10f9abba29901ab38aec95
10. 0x18efad64a76eebb9176b156f757703ccaa1d8e00ce45eca065bb985177141909
11. 0x8cc7cdbb404948d6c8277e8104fbf6f6ef7bc67273321adedcf016270a69a84e
12. 0x71d164c799d87b4dc25af672a70aaf73791d8dbb1786a5d4eb3ead269cb7c28a
13. 0x89602081fbcc80aef8908f5df765767a1a41cc8b089111259ea78e6583a8bc4b
14. 0x41f9f462759cb539183e979fb3eb967d94755cf039c44a64a9a3c4ad97523cfd
15. 0x56f7109d4cde42492651beb1237c13cdcbf95e6fee2b2482391a2388e04c4629
16. 0x8745bd887f5ce9f7a49558fd2b04cdcd97a05ea9f8a23f62d0e80cb13d328b0f
17. 0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4