{"id":570455,"recorded_at":"2026-10-27T22:23:05.716677Z","observed_at":"2026-10-27T22:23:05.716631Z","subject_kind":"endpoint","subject":"b91edac5-22c8-46f4-8a0d-c7c67964236f","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":7,"tools":[{"description":"Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act (a name-based heuristic that weights a name's first word most). Read-only: it mints no receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.","inputSchema":{"properties":{"inventory":{"items":{"additionalProperties":true,"type":"object"},"title":"Inventory","type":"array"},"notes":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Notes"}},"required":["inventory"],"title":"audit_my_agent_inventoryArguments","type":"object"},"name":"audit_my_agent_inventory"},{"description":"Egress classification check. Scans a data sample for a finite list of sensitivity markers and classifies as NO_MARKERS_FOUND / INTERNAL / CONFIDENTIAL / RESTRICTED. RESTRICTED sets blocked=true; this tool cannot block anything itself, and NO_MARKERS_FOUND is not clearance to send. Returns classification, retention info, and a tamper-evident receipt.","inputSchema":{"properties":{"data_sample":{"title":"Data Sample","type":"string"},"destination":{"title":"Destination","type":"string"},"provider":{"title":"Provider","type":"string"}},"required":["destination","data_sample","provider"],"title":"check_egressArguments","type":"object"},"name":"check_egress"},{"description":"Two-phase decision gate with a real verdict. PREVIEW returns ALLOW, DENY or ESCALATE with the risk tier and reasons, plus a preview_id, without acting. COMMIT re-evaluates the same inputs and mints a signed receipt for the verdict. Only ALLOW returns a GRANTED permit; DENY returns DENIED; ESCALATE returns WITHHELD_PENDING_HUMAN and a human must decide outside this tool. Applies only to actions the caller routes through it: it does not observe or block what an agent does. Verb-tier heuristic on the action name and resource, not a proof. Stateless. Optional attestation: triggered_by_type, triggered_by_source, decision_model.","inputSchema":{"properties":{"action":{"title":"Action","type":"string"},"context":{"additionalProperties":true,"title":"Context","type":"object"},"decision_model":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Decision Model"},"phase":{"default":"PREVIEW","title":"Phase","type":"string"},"preview_id":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Preview Id"},"resource":{"title":"Resource","type":"string"},"triggered_by_source":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Triggered By Source"},"triggered_by_type":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Triggered By Type"}},"required":["action","resource","context"],"title":"gate_decisionArguments","type":"object"},"name":"gate_decision"},{"description":"Mint a signed receipt (Ed25519, plus ML-DSA-65 when the post-quantum backend is available) for an arbitrary consequential agent action. Optional attestation: triggered_by_type (human/agent/script), triggered_by_source (api/cli/cron), decision_model (the LLM model used). Attestation values are caller claims: allowlisted to safe characters, signed, not verified. Decisions that contain a gate verdict word are reserved for gate_decision.","inputSchema":{"properties":{"agent_id":{"title":"Agent Id","type":"string"},"decision":{"default":"ACTION_GOVERNED","title":"Decision","type":"string"},"decision_model":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Decision Model"},"inputs":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Inputs"},"operation":{"title":"Operation","type":"string"},"policy":{"default":"agent action evidence","title":"Policy","type":"string"},"target":{"title":"Target","type":"string"},"triggered_by_source":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Triggered By Source"},"triggered_by_type":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Triggered By Type"}},"required":["agent_id","operation","target"],"title":"mint_action_receiptArguments","type":"object"},"name":"mint_action_receipt"},{"description":"Mint a signed receipt (Ed25519, plus ML-DSA-65 when the post-quantum backend is available) for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).","inputSchema":{"properties":{"changed_by_agent":{"title":"Changed By Agent","type":"string"},"field":{"title":"Field","type":"string"},"new_value":{"title":"New Value","type":"string"},"object_type":{"title":"Object Type","type":"string"},"old_value":{"title":"Old Value","type":"string"},"policy":{"default":"per-decision CRM change evidence","title":"Policy","type":"string"},"record_id":{"title":"Record Id","type":"string"},"tenant":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Tenant"}},"required":["record_id","object_type","field","old_value","new_value","changed_by_agent"],"title":"mint_receipt_for_record_changeArguments","type":"object"},"name":"mint_receipt_for_record_change"},{"description":"Vendor exit readiness drill. Checks local signing key, local model access (Ollama). Returns step-by-step results and a tamper-evident receipt. Informational; it signs one receipt, which creates the signing key on a host that has none yet.","inputSchema":{"properties":{},"title":"run_exit_drillArguments","type":"object"},"name":"run_exit_drill"},{"description":"Verify a Trust Gate receipt from the certificate alone (offline). ok=true means unchanged since signing, signed, kid consistent with the embedded key, and (require_pq default on) at least one post-quantum leg verified; unsigned receipts fail. It does not prove who signed: pass expected_kid to pin the signer's Ed25519 key; a pin counts only when that key's own signature verifies (see signer_pinned). The post-quantum keys in a receipt are not covered by the kid.","inputSchema":{"properties":{"expected_kid":{"anyOf":[{"type":"string"},{"type":"null"}],"default":null,"title":"Expected Kid"},"receipt":{"additionalProperties":true,"title":"Receipt","type":"object"},"require_pq":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":null,"title":"Require Pq"}},"required":["receipt"],"title":"verify_receiptArguments","type":"object"},"name":"verify_receipt"}]},"body_sha256":"8455d507d8c155127fc34f48ad5aeddaa624574100b7d2a5b9db476197b07632","prev_id":null,"leaf":"0xc1dfa520b3984b1ebd958e48d2935c5294af1578f0ee1cc97f85db47ab9933ef","leaf_text":"{\"body\":\"8455d507d8c155127fc34f48ad5aeddaa624574100b7d2a5b9db476197b07632\",\"id\":570455,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793139785716631,\"prev\":null,\"subject\":\"b91edac5-22c8-46f4-8a0d-c7c67964236f\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-27","leaves":273461,"root":"0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795","chained":"0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4","anchor_chain":"eip155:5042002","anchor_tx":"0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4","anchor_block":69414147},"proof":["0xc1df94f17557f8e0a2d03c1435e995d7ab42b0bdb70d8648c4ab4e815e363682","0x34b2ff5ec37245ba94c5bf34fbb2b943912d8f30f112e13f8de5af722f43b748","0x510b723f97d99b185b0d3aa48379a40c197d806e6946cdc1cffbd3f693e54fa8","0x1555d8bc69a673f6b090e027f118e56328a35d69ecc27ff46122fa1ad34d6481","0xa019d01bfe30e9edccb7a9fdf7b9779880e10f7d024ff1d439dd3dc03eb5017d","0x678d815b8b1539133e7f8e3ad0cfeb77aaffd06a26559e402c9a6e775ff5a7c4","0x42b9155cb9abf85e5819069a1c2cf023993392713e8ccbe07016cbbacead3394","0xa448116d9bced576b1443896960355b2349f506a4940c8eacc395f2aca0db006","0x43811e56383620534275d91652470ee8b4cae9fd8eef4611a8adae5007ead9af","0x603e5d7d552008939814da11386784fe82a74a23617e6ed24fbe3fa47ea3d596","0x5a13fca65d8a7a99a0b9f7a1e93e4c0383a76a0fdbe04d70632715947f716ff4","0xf60d24675361c4e691254e637b8ecddfc4470b91e0ce8ab4c088e46b7460f7f1","0xb48b088603004f0a5232faea4acd65999cbb4832f4c15b0098e853144cb91655","0x077edf0f29e2a3aa19c876439830696b88f0236fd0b2a3c43c76f38cdd29bb2b","0x73341bb09dd901ca47f26173883431496e3d98d6b0fb5b89f36218126d46c5d4","0xa94627de1af0e823832e05a9069b304ecccb8c0cdb8f9cfc4f2039bfb9799dc5","0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310","0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197","0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699"]}