Evidence row 773020

What was observed

{
  "count": 5,
  "tools": [
    {
      "description": "Fetch one record by CVE ID, GHSA ID, or KEVWire record ID, with every source, measurement date, CISA deadline and a permalink. Any published CVE resolves, even outside the tracked set. Returns isError with a hint when nothing matches; then try search_vulnerabilities.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "id": {
            "maxLength": 200,
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "name": "get_record"
    },
    {
      "description": "Vulnerabilities with documented exploitation (CISA KEV or explicit reporting) published within the last N days, most urgent first. Use it for briefings such as \"what was exploited this week\"; to narrow by product or words, use search_vulnerabilities with known_exploited_only. Paged with offset and hasMore.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "days": {
            "default": 30,
            "maximum": 365,
            "minimum": 1,
            "type": "integer"
          },
          "limit": {
            "default": 20,
            "maximum": 50,
            "minimum": 1,
            "type": "integer"
          },
          "offset": {
            "default": 0,
            "maximum": 100000,
            "minimum": 0,
            "type": "integer"
          }
        },
        "type": "object"
      },
      "name": "list_recent_exploited"
    },
    {
      "description": "Every source KEVWire ingests, with scope, limitations, retrieval status, last success and record counts. Use it to describe coverage honestly or to explain why something may be missing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "list_sources"
    },
    {
      "description": "Technology labels (vendors and products) usable in search_vulnerabilities' technologies filter, with how many records each covers, most covered first. Use it to find the exact label before filtering. Optionally filter by text.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "limit": {
            "default": 100,
            "maximum": 500,
            "minimum": 1,
            "type": "integer"
          },
          "query": {
            "maxLength": 120,
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_technologies"
    },
    {
      "description": "Search the KEVWire corpus (CISA KEV, NVD high/critical CVEs, GitHub advisories, national CERTs, security reporting, editorial records) by words, technology, kind or exploitation. Use it to answer \"is X affected\" or \"what is known about Y\"; for a known ID use get_record, and for a plain \"what is being exploited lately\" list use list_recent_exploited. Default order is \"urgent\": the last 30 days first, then known exploitation, CVSS 9+, breaches. Results are paged (see hasMore and offset) and include source URLs to cite.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "kind": {
            "enum": [
              "vulnerability",
              "breach",
              "advisory",
              "ai-research"
            ],
            "type": "string"
          },
          "known_exploited_only": {
            "description": "Only records in the CISA Known Exploited Vulnerabilities catalog.",
            "type": "boolean"
          },
          "limit": {
            "default": 10,
            "maximum": 50,
            "minimum": 1,
            "type": "integer"
          },
          "offset": {
            "default": 0,
            "maximum": 100000,
            "minimum": 0,
            "type": "integer"
          },
          "query": {
            "description": "Words to match, e.g. \"php rce\", a CVE ID, a product, or an event name like \"PHP2Shell\".",
            "maxLength": 500,
            "type": "string"
          },
          "sort": {
            "enum": [
              "urgent",
              "newest",
              "priority",
              "cvss",
              "epss"
            ],
            "type": "string"
          },
          "technologies": {
            "description": "Technology labels, e.g. [\"Microsoft Windows\", \"PHP\"]. Matches any.",
            "items": {
              "maxLength": 120,
              "type": "string"
            },
            "maxItems": 50,
            "type": "array"
          }
        },
        "type": "object"
      },
      "name": "search_vulnerabilities"
    }
  ]
}

What the leaf hashes

{"body":"844b7358b9e0b01eb5fdb0a97a5a5b4c369d0bfbacd2575b2648efe72a2e37bc","id":773020,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793194505319434,"prev":586761,"subject":"5f113918-10a4-4f7c-8231-57c77c1ed299","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-28 (231336 rows).

1. 0x796ff8f964cfb80cd1ec7b96c6ed440e769a2f38d1c1bac2d274abb371c475ea
2. 0xfdb61b95eed76f3edd8c31e186fc983a6c9698a66b86de89079d4c5bae3b4f1f
3. 0x2aa7d994bdbecd3db8586f74b56f08e9221fb1e7049bb5860c5592d1ec8a646a
4. 0x2b46a3355571b4ad26f123fa735090757a161f8ebf17379ad097b991509f87fb
5. 0x06f837e2c870b794fce2e9ecd31de6a4381ac4a4905894a75068eac68468dad0
6. 0x88796a618551087fa3376d89fb7b89115168dcf4fa7f0fec1563a4381a3ac4cc
7. 0xad902dc4f13077a7d7772bd9c9710995dbac26e880839f23f71de3fbbb14b476
8. 0x78d2f6ba40f894809113ca01c99326ff282827a6f9e80d4a922ecb215d350d5a
9. 0xa35597b271a0b24a72e64e1f376113db52ad2fbc59f3f58b2dc13906092d4b99
10. 0xd6e611b3b7733bf46b7366291661346a628e816d6840f9f5b29bb8970cdeb094
11. 0xd7b6f3791d679b5e1ec9209128252cc85037c888c183b65a574fb24c9f62ed05
12. 0x14bc09b6df5a608be5eb21fd732d89ed12cec17a5315a631f36ba8d1ba314ab3
13. 0x95d7bc27dc9ea43e607251bd7e1cdfa9e00b59b71051b5db78fe06bf25becc5b
14. 0x40581185279a8bf075dca3a4c3a5648ec6f62098ba7402cbc097d5cc707e0840
15. 0xab4e84d781dccd579dcf5c47a356a4a2e6cac58a2aefdf3543a3fa15238fa4db
16. 0x74cf00e07b52415c2184cf20be69d195ed2725497a6892c2f3e449497c17d0ec
17. 0x7a743a0a09057bae687051274e1d45bf973bd36a1a4ba16a191b5d29e3bdfa2a
18. 0xe027395fafb7fc41921c42ca0542524ea22204cbd5908b70b27f3d5fb26f5d0f

Day root

0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e

Chained

0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be

Published

On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae