Evidence row 60085

What was observed

{
  "endpoints": [
    [
      "mcp",
      "https://vitna.costrinity.xyz/api/mcp"
    ],
    [
      "web",
      "https://vitna.costrinity.xyz/"
    ]
  ],
  "name": "VITNA – Containment for rogue AI agents",
  "owner_address": null,
  "raw": {
    "_meta": {
      "io.modelcontextprotocol.registry/official": {
        "isLatest": true,
        "publishedAt": "2026-10-12T01:42:06.399279Z",
        "status": "active",
        "statusChangedAt": "2026-10-12T01:42:06.399279Z",
        "updatedAt": "2026-10-12T01:42:06.399279Z"
      }
    },
    "server": {
      "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
      "description": "Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative",
      "name": "xyz.costrinity/vitna-compliance-preflight",
      "packages": [
        {
          "environmentVariables": [
            {
              "description": "Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted.",
              "name": "VITNA_OWNER_ID"
            },
            {
              "description": "Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted.",
              "isSecret": true,
              "name": "VITNA_API_KEY"
            },
            {
              "description": "Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted.",
              "name": "VITNA_EMAIL"
            },
            {
              "default": "https://vitna.costrinity.xyz",
              "description": "VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted.",
              "name": "VITNA_BASE_URL"
            },
            {
              "description": "Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it.",
              "name": "VITNA_OPEN_CLAIM"
            }
          ],
          "identifier": "@costrinity/vitna-compliance-mcp",
          "registryBaseUrl": "https://registry.npmjs.org",
          "registryType": "npm",
          "transport": {
            "type": "stdio"
          },
          "version": "0.5.6"
        }
      ],
      "remotes": [
        {
          "headers": [
            {
              "description": "Bearer <your VITNA API key>. Discovery (initialize, tools/list) and vitna_help work without it; every governed decision tool requires it. Get a key free at https://vitna.costrinity.xyz/dashboard. X-API-Key is also accepted.",
              "isSecret": true,
              "name": "Authorization"
            }
          ],
          "type": "streamable-http",
          "url": "https://vitna.costrinity.xyz/api/mcp"
        }
      ],
      "repository": {
        "source": "github",
        "url": "https://github.com/COSTRINITY/vitna-compliance-mcp"
      },
      "title": "VITNA – Containment for rogue AI agents",
      "version": "0.5.6",
      "websiteUrl": "https://vitna.costrinity.xyz"
    }
  },
  "source": "mcp_registry",
  "summary": "Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative"
}

What the leaf hashes

{"body":"e57b3dd68b429fcc9a848a910fcf71c7298cef2668c67509658375772bdc2fe0","id":60085,"kind":"listing","method":"baseline/1","observed_us":1793025447880323,"prev":null,"subject":"mcp_registry:xyz.costrinity/vitna-compliance-preflight","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xb220287cae2469292ffec50e1430117bc36c66ab3fbb20261d7039709320c071
2. 0xd24570ec580223c1d82d29b0a539601e7ca845b3628d9c77b9b3bd4a86766752
3. 0xcab3822c7dbec8d1c301ef2074453f0e310f898f5e6ee77072affc717c795111
4. 0x437f1c9277782294864e129cd6ccc4e28edfde030c726a69bb0a1a00b3cb3a13
5. 0x32c1bca0996f8c3bf68c5adaff62688994b22b1f3344cd4bf9c3ec82c506b029
6. 0x1f8e9cc2800f1a8498be097a4a9d31cfea609002c91882942c9b8de328c2825b
7. 0xb55a97aad502aa16b503d2cc03ed73080312f92d8d84cd7d753d23fd185cea16
8. 0x3c1b2957a9ad81996f8791fd3a623047df86aa6412f43e42db7f17644caf6620
9. 0xbb48c7f54a52441a7938687b3d49edf7056fa8a3386661ae7eca7e2c48ad9b20
10. 0xd373f611cc8d60491990c0729396ae5185b763a50d0fff3be7937919e843df36
11. 0xb673e7e79847b2398685ec91a7c3b2395fccef249a8f8983b5eecc97a794a3ec
12. 0xce1aeb889b974291cea1fbfd01595655bd2c1b3636dc5b56eeb8904adb9f6c65
13. 0x3b1c0e225d1b1cb24cd5d5ea4af2de20ed68a1eaf8b61924ed1b81e4b9cf7e39
14. 0x083427e39db4dd470662401f6db5db8fadf084fc4274cf8621b368416952b78b
15. 0x1a74ed3b3756b9cd946da49701bcec120ec88645013da99fa9eea60b39e1a570
16. 0x123ec8bee20ddc55223eeef5a4f4d6c4b6416515adbb911c56759f5cde56e452
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae