{
 "server": "com.datavrn/schedule-iii",
 "url": "https://app.datavrn.com/api/mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 67,
 "tools_ever_seen": 67,
 "drift_events": 67,
 "findings_by_severity": {
  "high": 22,
  "low": 1,
  "critical": 1
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 67,
  "ran_at": "2026-10-22T18:17:43.445Z"
 },
 "current_tools": [
  "assert_previous_year_no_activity",
  "confirm_capture_review",
  "confirm_centre_mappings",
  "confirm_column_mapping",
  "confirm_complete_chart",
  "confirm_groupings",
  "confirm_reporting_lines",
  "copy_capture_declarations",
  "create_client",
  "create_cost_centre",
  "create_profit_centre",
  "create_upload_link",
  "declare_capture_na",
  "finalise_statement",
  "generate_schedule_iii",
  "get_allocation_account_figures",
  "get_allocation_target_figures",
  "get_budget",
  "get_comparative_source_state",
  "get_consolidated_statements",
  "get_finalise_readiness",
  "get_help",
  "get_job",
  "get_partner_capital",
  "get_pending_work",
  "get_schedule3_workspace",
  "get_setup_status",
  "get_spreading_reconciliation",
  "get_statement_figures",
  "get_statement_notes",
  "get_tb_rows",
  "get_upload",
  "get_upload_link_status",
  "get_variance_report",
  "get_workbook_download",
  "ingest_upload",
  "list_account_mappings",
  "list_allocation_runs",
  "list_budgets",
  "list_chart_rebaselines",
  "list_clients",
  "list_cost_centres",
  "list_grouping_suggestions",
  "list_periods",
  "list_profit_centres",
  "list_replacements",
  "list_reporting_lines",
  "list_snapshots",
  "list_statement_policy_choices",
  "preview_chart_rebaseline",
  "preview_replacement_restore",
  "restore_replacement",
  "revoke_capture_declaration",
  "save_accounting_policies",
  "save_adjustments",
  "save_asset_movements",
  "save_disclosures",
  "save_partner_capital",
  "save_provision_movements",
  "save_py_values",
  "save_regulatory_affirmations",
  "save_reserves_movements",
  "save_share_capital",
  "save_statement_settings",
  "set_header_row",
  "upload_trial_balance",
  "verify_connection"
 ],
 "drift": [
  {
   "tool": "list_clients",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_client",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "upload_trial_balance",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_upload",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "set_header_row",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_column_mapping",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "ingest_upload",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_periods",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_schedule3_workspace",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_grouping_suggestions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_groupings",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_adjustments",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_py_values",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_asset_movements",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_provision_movements",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_reserves_movements",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_share_capital",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_statement_settings",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_disclosures",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "declare_capture_na",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_capture_review",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "revoke_capture_declaration",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "copy_capture_declarations",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_partner_capital",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_partner_capital",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_accounting_policies",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_regulatory_affirmations",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_statement_policy_choices",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_finalise_readiness",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "finalise_statement",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_comparative_source_state",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "assert_previous_year_no_activity",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "generate_schedule_iii",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_job",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_snapshots",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_workbook_download",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_upload_link",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_upload_link_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_statement_figures",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_statement_notes",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_tb_rows",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_pending_work",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_allocation_runs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_allocation_account_figures",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_allocation_target_figures",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_spreading_reconciliation",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_budgets",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_budget",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_variance_report",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_consolidated_statements",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_cost_centres",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_cost_centre",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_profit_centres",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_profit_centre",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_account_mappings",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_centre_mappings",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_reporting_lines",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_reporting_lines",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_setup_status",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_replacements",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_replacement_restore",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "restore_replacement",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_chart_rebaselines",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_chart_rebaseline",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_complete_chart",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "verify_connection",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_help",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "findings": [
  {
   "tool": "list_clients",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "List the entities (companies) this credential can work with. Call this first to resolve the client_id every ot",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "upload_trial_balance",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_upload",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'upload_trial_balance'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "set_header_row",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'upload_trial_balance'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_column_mapping",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'upload_trial_balance'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "ingest_upload",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'upload_trial_balance'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_periods",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_schedule3_workspace",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_grouping_suggestions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_groupings",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_adjustments",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_py_values",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_asset_movements",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_provision_movements",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_reserves_movements",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_share_capital",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_statement_settings",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_disclosures",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "at section — there is no row-level merge, so always send that section complete. To CLEAR a section, send it explicitly wi",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_disclosures",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_disclosures",
   "detector": "oversized_description",
   "severity": "low",
   "field": "description",
   "evidence": "5755 chars",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "declare_capture_na",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "declare_capture_na",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_capture_review",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "l assertion, recorded as authorised by them. Before calling this, show them what you are confirming — the whole comparative, or t",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_capture_review",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_capture_review",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "revoke_capture_declaration",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "revoke_capture_declaration",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "copy_capture_declarations",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "copy_capture_declarations",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_partner_capital",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_partner_capital",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_partner_capital",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_accounting_policies",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_accounting_policies",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_regulatory_affirmations",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "save_regulatory_affirmations",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_statement_policy_choices",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "r user about that second case explicitly: it silently replaces a policy they wrote. The summary gives you both numbers",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_statement_policy_choices",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_finalise_readiness",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_finalise_readiness",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "finalise_statement",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "finalise_statement",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_comparative_source_state",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_comparative_source_state",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "assert_previous_year_no_activity",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "assert_previous_year_no_activity",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "generate_schedule_iii",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_job",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'generate_schedule_iii'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_snapshots",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_workbook_download",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_upload_link",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_upload_link_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'get_upload'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_statement_figures",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_statement_notes",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_tb_rows",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_pending_work",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_replacements'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_allocation_runs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_allocation_account_figures",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_allocation_target_figures",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_spreading_reconciliation",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_budgets",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_budget",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_variance_report",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_cost_centres",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_cost_centre",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_profit_centres",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "create_profit_centre",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_account_mappings",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "licy pointing at a deactivated centre, which you must report rather than calling the entity profit-mapped.",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_account_mappings",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_centre_mappings",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_reporting_lines",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_reporting_lines",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_setup_status",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ganization view): it lists the entities this credential can see, or — if there are none — the step to create the first o",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_setup_status",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_replacements",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_replacement_restore",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_replacement_restore",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "restore_replacement",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "restore_replacement",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_chart_rebaselines",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "list_chart_rebaselines",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_chart_rebaseline",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "preview_chart_rebaseline",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_complete_chart",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.on_behalf_of.description",
   "evidence": "the connection that made it. REQUIRED on an API-key connection — ask your user for it, do not guess. On an OAuth con",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "confirm_complete_chart",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'list_clients'",
   "seen_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "tool": "get_help",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "agent guide: how connecting works (OAuth and API key), what an assistant can do, how reading a statement as data work",
   "seen_at": "2026-10-22T18:17:43.445Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 67,
   "ran_at": "2026-10-22T18:17:43.445Z"
  },
  {
   "status": "OK",
   "n_tools": 59,
   "ran_at": "2026-08-13T12:17:15.844Z"
  }
 ]
}