@kryptosai/mcp-observatory 0.26.1 → 0.28.0

package/docs/receipt-graph.md

@@ -0,0 +1,54 @@
+# MCP Receipt Graph
+
+Agent trust should be a receipt graph, not a follower graph.
+
+A social graph says who is popular. A receipt graph says what was verified, what could not happen during the run, which artifact can be rerun, and what changed since the last trusted state.
+
+Use this page as the first public map from MCP servers to reproducible evidence. It is intentionally small: a receipt graph should start with high-quality, rerunnable receipts before it tries to become a giant directory.
+
+## Receipt Graph Fields
+
+| Field | Meaning |
+| --- | --- |
+| Server | Public MCP server, package, or repo. |
+| Receipt | JSON/Markdown evidence generated by MCP Observatory. |
+| Attack evidence | Safe `attack-sim` command, report, or SARIF. |
+| CI/SARIF path | Whether the next step is a maintainer CI gate, Code Scanning, or both. |
+| Capability envelope | What the run was allowed to access. |
+| Last verified | Timestamp of the latest public Safety Index refresh. |
+
+## Seed Graph
+
+| Server | Receipt | Attack evidence | CI/SARIF path | Capability envelope | Last verified |
+| --- | --- | --- | --- | --- | --- |
+| [Official everything server](https://github.com/modelcontextprotocol/servers) | [JSON](./safety-index/artifacts/everything-server.json) / [report](./safety-index/artifacts/everything-server.md) | `attack-sim npx -y @modelcontextprotocol/server-everything` | Public reference baseline; CI-ready. | Public package, no secrets, no production data. | 2026-07-06 |
+| [Official sequential thinking server](https://github.com/modelcontextprotocol/servers) | [JSON](./safety-index/artifacts/sequential-thinking-server.json) / [report](./safety-index/artifacts/sequential-thinking-server.md) | `attack-sim npx -y @modelcontextprotocol/server-sequential-thinking` | Public reference baseline; CI-ready. | Public package, no secrets, no production data. | 2026-07-06 |
+| [Official memory server](https://github.com/modelcontextprotocol/servers) | [JSON](./safety-index/artifacts/memory-server.json) / [report](./safety-index/artifacts/memory-server.md) | `attack-sim npx -y @modelcontextprotocol/server-memory` | Public reference baseline; CI-ready. | Public package, no secrets, no production data. | 2026-07-06 |
+| [Context7](https://github.com/upstash/context7) | [JSON](./safety-index/artifacts/context7-server.json) / [report](./safety-index/artifacts/context7-server.md) | `attack-sim npx -y @upstash/context7-mcp` | Maintainer CI conversation candidate. | Public package, no secrets, no production data. | 2026-07-06 |
+| [BrowserMCP](https://github.com/BrowserMCP/mcp) | [JSON](./safety-index/artifacts/browsermcp-server.json) / [report](./safety-index/artifacts/browsermcp-server.md) | `attack-sim npx -y @browsermcp/mcp` | Browser boundary candidate for CI/SARIF. | Public package, no secrets, no production credentials. | 2026-07-06 |
+| [Microsoft Playwright MCP](https://github.com/microsoft/playwright-mcp) | [JSON](./safety-index/artifacts/playwright-mcp-server.json) / [report](./safety-index/artifacts/playwright-mcp-server.md) | `attack-sim npx -y @playwright/mcp` | High-capability browser boundary; Code Scanning useful. | Public package, no secrets, no production credentials. | 2026-07-06 |
+| [Puppeteer MCP server](https://www.npmjs.com/package/puppeteer-mcp-server) | [JSON](./safety-index/artifacts/puppeteer-server.json) / [report](./safety-index/artifacts/puppeteer-server.md) | `attack-sim npx -y puppeteer-mcp-server` | Browser boundary candidate for review before production. | Public package, no secrets, no production credentials. | 2026-07-06 |
+| [OpenTofu MCP server](https://github.com/opentofu/opentofu-mcp-server) | [JSON](./safety-index/artifacts/opentofu-server.json) / [report](./safety-index/artifacts/opentofu-server.md) | `attack-sim npx -y @opentofu/opentofu-mcp-server` | Infrastructure tool surface; CI/SARIF recommended. | Public package, no secrets, no production infrastructure. | 2026-07-06 |
+| [Flux159 Kubernetes MCP server](https://github.com/Flux159/mcp-server-kubernetes) | [JSON](./safety-index/artifacts/kubernetes-server.json) / [report](./safety-index/artifacts/kubernetes-server.md) | [attack-sim](./safety-index/artifacts/kubernetes-server.attack.md) / [SARIF](./safety-index/artifacts/kubernetes-server.attack.sarif) | Kubernetes command and cluster mutation boundary; CI/SARIF recommended before agent dependency. | Public package, no secrets, no kubeconfig, no cluster tool invocation. | 2026-07-06 |
+
+## How To Add A Node
+
+1. Open a [Drop an MCP server, get a receipt request](https://github.com/KryptosAI/mcp-observatory/issues/new?template=tool-call-receipt-request.yml).
+2. Provide a public MCP server and safe startup command.
+3. Run:
+
+```bash
+npx @kryptosai/mcp-observatory test <safe startup command> --json run-artifact.json --markdown run-report.md
+npx @kryptosai/mcp-observatory attack-sim <safe startup command> --json attack-artifact.json --output attack-report.md --sarif attack-results.sarif
+npx @kryptosai/mcp-observatory setup-ci --all --command "<safe startup command>" --sarif
+```
+
+4. Attach sanitized artifacts or open a focused PR.
+
+## Agent-Native Ask
+
+```text
+Name one MCP server your agent depends on. I will help turn it into a reproducible receipt: safe startup command, run artifact, attack-sim evidence, SARIF, and a CI gate maintainers can review.
+```
+
+For the public intake loop, see [Drop an MCP server, get a receipt](./drop-server-get-receipt.md) or comment on [the live GitHub thread](https://github.com/KryptosAI/mcp-observatory/issues/146).

package/docs/safety-index/artifacts/antv-chart-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-06-24T020741323Z_41a77db3",
-  "createdAt": "2026-06-24T02:07:41.323Z",
-  "toolVersion": "0.24.0",
+  "runId": "run_2026-07-06T014704792Z_4aa8d9c4",
+  "createdAt": "2026-07-06T01:47:04.792Z",
+  "toolVersion": "0.26.1",
   "target": {
     "targetId": "antv-chart-server",
     "adapter": "local-process",
@@ -25,8 +25,8 @@
     "serverVersion": "0.8.x"
   },
   "environment": {
-    "platform": "darwin 25.5.0",
-    "nodeVersion": "v22.22.1"
+    "platform": "darwin 24.0.0",
+    "nodeVersion": "v25.8.1"
   },
   "summary": {
     "total": 7,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 2.671415999997407,
+      "durationMs": 1.9061670000010054,
       "message": "Advertised capability responded with the minimal expected shape (27 items).",
       "evidence": [
         {
@@ -82,9 +82,9 @@
             "generate_spreadsheet"
           ],
           "diagnostics": [
-            "[MCP-Server-Chart] 2026-06-24T02:07:44.865Z ℹ️  setting up tool handlers...",
-            "[MCP-Server-Chart] 2026-06-24T02:07:44.867Z ℹ️  tool handlers set up",
-            "[MCP-Server-Chart] 2026-06-24T02:07:44.868Z ✅ Stdio MCP Server started"
+            "[MCP-Server-Chart] 2026-07-06T01:47:05.616Z ℹ️  setting up tool handlers...",
+            "[MCP-Server-Chart] 2026-07-06T01:47:05.617Z ℹ️  tool handlers set up",
+            "[MCP-Server-Chart] 2026-07-06T01:47:05.618Z ✅ Stdio MCP Server started"
           ],
           "schemas": {
             "generate_area_chart": {
@@ -2602,7 +2602,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.0014999999984866008,
+      "durationMs": 0.0009579999987181509,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -2618,7 +2618,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.002874999998311978,
+      "durationMs": 0.002207999999882304,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -2634,7 +2634,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.12066699999923003,
+      "durationMs": 0.08966599999985192,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -2650,7 +2650,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 2.8167500000017753,
+      "durationMs": 1.4091669999997976,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -2676,7 +2676,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 1.4510000000009313,
+      "durationMs": 1.022541000000274,
       "message": "All 27 item(s) have good schema quality.",
       "evidence": [
         {
@@ -2693,7 +2693,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 1.5284999999967113,
+      "durationMs": 0.9119160000009288,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -2750,16 +2750,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 3548ms",
-          "p95 latency: 3ms (3 operations)"
+          "Connect: 830ms",
+          "p95 latency: 2ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 3548.425417000002,
-    "toolsListMs": 2.671415999997407,
-    "promptsListMs": 0.0014999999984866008,
-    "resourcesListMs": 0.002874999998311978
+    "connectMs": 830.341375,
+    "toolsListMs": 1.9061670000010054,
+    "promptsListMs": 0.0009579999987181509,
+    "resourcesListMs": 0.002207999999882304
   }
 }

package/docs/safety-index/artifacts/antv-chart-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:41.323Z
+Generated at 2026-07-06T01:47:04.792Z
 
 ## Target and Environment Metadata
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:41.323Z
 - Adapter: `local-process`
 - Command: `npx -y @antv/mcp-server-chart`
 - Server: `mcp-server-chart 0.8.x`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
@@ -47,11 +47,11 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 2.82 | All 7 conformance checks passed. |
-| healthy | schema-quality | pass | 1.45 | All 27 item(s) have good schema quality. |
-| healthy | security | pass | 1.53 | No security issues detected. |
-| healthy | security-lite | pass | 0.12 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 2.67 | Advertised capability responded with the minimal expected shape (27 items). |
+| healthy | conformance | pass | 1.41 | All 7 conformance checks passed. |
+| healthy | schema-quality | pass | 1.02 | All 27 item(s) have good schema quality. |
+| healthy | security | pass | 0.91 | No security issues detected. |
+| healthy | security-lite | pass | 0.09 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 1.91 | Advertised capability responded with the minimal expected shape (27 items). |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
 
@@ -115,7 +115,7 @@ Summary: Advertised capability responded with the minimal expected shape (27 ite
   - Minimal shape present: `true`
   - Item count: `27`
   - Identifiers: generate_area_chart, generate_bar_chart, generate_boxplot_chart, generate_column_chart, generate_district_map (+22 more)
-  - Diagnostics: [MCP-Server-Chart] 2026-06-24T02:07:44.865Z ℹ️  setting up tool handlers..., [MCP-Server-Chart] 2026-06-24T02:07:44.867Z ℹ️  tool handlers set up, [MCP-Server-Chart] 2026-06-24T02:07:44.868Z ✅ Stdio MCP Server started
+  - Diagnostics: [MCP-Server-Chart] 2026-07-06T01:47:05.616Z ℹ️  setting up tool handlers..., [MCP-Server-Chart] 2026-07-06T01:47:05.617Z ℹ️  tool handlers set up, [MCP-Server-Chart] 2026-07-06T01:47:05.618Z ✅ Stdio MCP Server started
 
 ### prompts — unsupported
 
@@ -152,5 +152,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020741323Z_41a77db3`
+- Run ID: `run_2026-07-06T014704792Z_4aa8d9c4`
 - Gate: `pass`

package/docs/safety-index/artifacts/browsermcp-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-06-24T020731112Z_2e7853f8",
-  "createdAt": "2026-06-24T02:07:31.112Z",
-  "toolVersion": "0.24.0",
+  "runId": "run_2026-07-06T014702689Z_66630a02",
+  "createdAt": "2026-07-06T01:47:02.689Z",
+  "toolVersion": "0.26.1",
   "target": {
     "targetId": "browsermcp-server",
     "adapter": "local-process",
@@ -25,8 +25,8 @@
     "serverVersion": "0.1.3"
   },
   "environment": {
-    "platform": "darwin 25.5.0",
-    "nodeVersion": "v22.22.1"
+    "platform": "darwin 24.0.0",
+    "nodeVersion": "v25.8.1"
   },
   "summary": {
     "total": 7,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 1.2612079999998969,
+      "durationMs": 0.9707080000007409,
       "message": "Advertised capability responded with the minimal expected shape (12 items).",
       "evidence": [
         {
@@ -242,7 +242,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.0015829999993002275,
+      "durationMs": 0.0007919999989098869,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -258,7 +258,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "pass",
-      "durationMs": 0.675042000000758,
+      "durationMs": 0.6247500000008586,
       "message": "Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported.",
       "evidence": [
         {
@@ -285,7 +285,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.03508300000066811,
+      "durationMs": 0.02770799999962037,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -301,7 +301,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 2.116834000000381,
+      "durationMs": 1.5951249999998254,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -327,7 +327,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.5424579999998969,
+      "durationMs": 0.48875000000043656,
       "message": "All 12 item(s) have good schema quality.",
       "evidence": [
         {
@@ -344,7 +344,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.24799999999959255,
+      "durationMs": 0.25716600000123435,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -401,16 +401,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 903ms",
+          "Connect: 705ms",
           "p95 latency: 1ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 902.8017089999994,
-    "toolsListMs": 1.2612079999998969,
-    "promptsListMs": 0.0015829999993002275,
-    "resourcesListMs": 0.675042000000758
+    "connectMs": 705.3232910000006,
+    "toolsListMs": 0.9707080000007409,
+    "promptsListMs": 0.0007919999989098869,
+    "resourcesListMs": 0.6247500000008586
   }
 }

package/docs/safety-index/artifacts/browsermcp-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:31.112Z
+Generated at 2026-07-06T01:47:02.689Z
 
 ## Target and Environment Metadata
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:31.112Z
 - Adapter: `local-process`
 - Command: `npx -y @browsermcp/mcp`
 - Server: `Browser MCP 0.1.3`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
@@ -47,12 +47,12 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 2.12 | All 7 conformance checks passed. |
-| healthy | resources | pass | 0.68 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
-| healthy | schema-quality | pass | 0.54 | All 12 item(s) have good schema quality. |
-| healthy | security | pass | 0.25 | No security issues detected. |
-| healthy | security-lite | pass | 0.04 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 1.26 | Advertised capability responded with the minimal expected shape (12 items). |
+| healthy | conformance | pass | 1.60 | All 7 conformance checks passed. |
+| healthy | resources | pass | 0.62 | Advertised capability responded with the minimal expected shape, but one optional resource endpoint appears unsupported. |
+| healthy | schema-quality | pass | 0.49 | All 12 item(s) have good schema quality. |
+| healthy | security | pass | 0.26 | No security issues detected. |
+| healthy | security-lite | pass | 0.03 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 0.97 | Advertised capability responded with the minimal expected shape (12 items). |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 
 ## Evidence Snippets
@@ -159,5 +159,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020731112Z_2e7853f8`
+- Run ID: `run_2026-07-06T014702689Z_66630a02`
 - Gate: `pass`

package/docs/safety-index/artifacts/context7-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-06-24T020724758Z_bed6c073",
-  "createdAt": "2026-06-24T02:07:24.758Z",
-  "toolVersion": "0.24.0",
+  "runId": "run_2026-07-06T014654306Z_160413b5",
+  "createdAt": "2026-07-06T01:46:54.306Z",
+  "toolVersion": "0.26.1",
   "target": {
     "targetId": "context7-server",
     "adapter": "local-process",
@@ -25,8 +25,8 @@
     "serverVersion": "3.2.2"
   },
   "environment": {
-    "platform": "darwin 25.5.0",
-    "nodeVersion": "v22.22.1"
+    "platform": "darwin 24.0.0",
+    "nodeVersion": "v25.8.1"
   },
   "summary": {
     "total": 7,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 1.5927080000001297,
+      "durationMs": 1.7208330000003116,
       "message": "Advertised capability responded with the minimal expected shape (2 items).",
       "evidence": [
         {
@@ -104,7 +104,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "pass",
-      "durationMs": 0.2917909999996482,
+      "durationMs": 0.2972090000002936,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -124,7 +124,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "pass",
-      "durationMs": 0.5327499999993961,
+      "durationMs": 0.4392909999996846,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -155,7 +155,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.024166000000150234,
+      "durationMs": 0.023624999999810825,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -171,7 +171,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 1.0839169999999285,
+      "durationMs": 0.7742079999998168,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -197,7 +197,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.6274169999996957,
+      "durationMs": 0.6652500000000146,
       "message": "All 2 item(s) have good schema quality.",
       "evidence": [
         {
@@ -214,7 +214,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.2532499999997526,
+      "durationMs": 0.29783299999962765,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -271,16 +271,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 928ms",
+          "Connect: 817ms",
           "p95 latency: 2ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 927.7457919999997,
-    "toolsListMs": 1.5927080000001297,
-    "promptsListMs": 0.2917909999996482,
-    "resourcesListMs": 0.5327499999993961
+    "connectMs": 817.0577499999995,
+    "toolsListMs": 1.7208330000003116,
+    "promptsListMs": 0.2972090000002936,
+    "resourcesListMs": 0.4392909999996846
   }
 }

package/docs/safety-index/artifacts/context7-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-06-24T02:07:24.758Z
+Generated at 2026-07-06T01:46:54.306Z
 
 ## Target and Environment Metadata
 
@@ -8,8 +8,8 @@ Generated at 2026-06-24T02:07:24.758Z
 - Adapter: `local-process`
 - Command: `npx -y @upstash/context7-mcp`
 - Server: `Context7 3.2.2`
-- Platform: `darwin 25.5.0`
-- Node: `v22.22.1`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
 
 ## Executive Summary
 
@@ -47,13 +47,13 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 1.08 | All 7 conformance checks passed. |
-| healthy | prompts | pass | 0.29 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | resources | pass | 0.53 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | schema-quality | pass | 0.63 | All 2 item(s) have good schema quality. |
-| healthy | security | pass | 0.25 | No security issues detected. |
+| healthy | conformance | pass | 0.77 | All 7 conformance checks passed. |
+| healthy | prompts | pass | 0.30 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | schema-quality | pass | 0.67 | All 2 item(s) have good schema quality. |
+| healthy | security | pass | 0.30 | No security issues detected. |
 | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 1.59 | Advertised capability responded with the minimal expected shape (2 items). |
+| healthy | tools | pass | 1.72 | Advertised capability responded with the minimal expected shape (2 items). |
 
 ## Evidence Snippets
 
@@ -159,5 +159,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-06-24T020724758Z_bed6c073`
+- Run ID: `run_2026-07-06T014654306Z_160413b5`
 - Gate: `pass`