{
 "server": "com.luthersystems.insideout/mcp",
 "url": "https://app.luthersystems.com/v1/insideout-mcp",
 "verdict": "high-severity findings present",
 "current_tool_count": 24,
 "tools_ever_seen": 24,
 "drift_events": 24,
 "findings_by_severity": {
  "high": 26
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 24,
  "ran_at": "2026-10-24T18:17:44.369Z"
 },
 "current_tools": [
  "awsinspect",
  "awsinspect_batch",
  "convoawait",
  "convoinspect",
  "convoopen",
  "convoreply",
  "convostatus",
  "credawait",
  "gcpinspect",
  "gcpinspect_batch",
  "help",
  "stackdiff",
  "stackrollback",
  "stackversions",
  "submit_feedback",
  "tfdeploy",
  "tfdestroy",
  "tfdrift",
  "tfgenerate",
  "tflogs",
  "tfoutputs",
  "tfplan",
  "tfruns",
  "tfstatus"
 ],
 "drift": [
  {
   "tool": "awsinspect",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "awsinspect_batch",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoawait",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoinspect",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoopen",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoreply",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convostatus",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "credawait",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect_batch",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "help",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackdiff",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackrollback",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackversions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_feedback",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdeploy",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdestroy",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdrift",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfgenerate",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tflogs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfoutputs",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfplan",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfruns",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfstatus",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "findings": [
  {
   "tool": "awsinspect",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "frastructure. It fetches temporary read-only credentials securely and queries the AWS API directly. RESPONSE TIERS (def",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "awsinspect",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "awsinspect_batch",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "han ~3 resources. The backend fetches Oracle credentials ONCE per batch and fans out probes against a single AWS config",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "awsinspect_batch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'awsinspect'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoawait",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoawait",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoinspect",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoinspect",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoopen",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "turns a session_id in the response metadata. You MUST use this session_id for ALL subsequent tool calls (convoreply, t",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoopen",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "_xxx?token=yyy) which is part of the session credential — without it, downstream tools fall back to a tokenless connect",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoopen",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoreply'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoreply",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "d say. Examples of questions Riley asks that YOU MUST forward to the user: - 'Any questions or tweaks to these details",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoreply",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convoreply",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoawait'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convostatus",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "convostatus",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "credawait",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "title",
   "evidence": "Await Cloud Credentials",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "credawait",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "frastructure. It fetches temporary read-only credentials securely and queries the GCP API directly. RESPONSE TIERS (def",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect_batch",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "han ~3 resources. The backend fetches Oracle credentials ONCE per batch and fans out probes against a single GCP credent",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "gcpinspect_batch",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'awsinspect'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackdiff",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackdiff",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackrollback",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackrollback",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackversions",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "stackversions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_feedback",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing. Identifies the conversation th",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "submit_feedback",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdeploy",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ly when the existing run is provably wedged. CREDENTIAL FLOW (if credentials are missing): 1. Response includes a connec",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdeploy",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdestroy",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing. The deployed stack for this se",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdestroy",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdrift",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfdrift",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfgenerate",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "y must have signaled [TERRAFORM_READY: true] before calling this tool.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfgenerate",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing. Riley must have signaled [TERR",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfgenerate",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tflogs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tflogs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfoutputs",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfoutputs",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfplan",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "ly when the existing run is provably wedged. CREDENTIAL HANDLING: Same as tfdeploy - credentials must be configured firs",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfplan",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfruns",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing. Returns the deployment-job his",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfruns",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfstatus",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "inputSchema.properties.session_id.description",
   "evidence": "?token=*). The suffix is part of the session credential; never strip it when summarizing.",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "tfstatus",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'convoopen'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 24,
   "ran_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "status": "OK",
   "n_tools": 24,
   "ran_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "status": "OK",
   "n_tools": 24,
   "ran_at": "2026-08-13T18:17:15.851Z"
  }
 ]
}