{
 "server": "com.monopoly-gold.planner/mcp",
 "url": "https://planner.monopoly-gold.com/_mcp",
 "verdict": "CRITICAL findings present",
 "current_tool_count": 43,
 "tools_ever_seen": 43,
 "drift_events": 43,
 "findings_by_severity": {
  "low": 3,
  "critical": 1,
  "high": 2
 },
 "last_probe": {
  "status": "OK",
  "n_tools": 43,
  "ran_at": "2026-10-24T18:17:44.369Z"
 },
 "current_tools": [
  "account-delete",
  "goal-add-assumption",
  "goal-add-criterion",
  "goal-add-evidence-text",
  "goal-add-note",
  "goal-attach-assumption-evidence",
  "goal-attach-evidence",
  "goal-attach-file",
  "goal-block",
  "goal-create",
  "goal-delete",
  "goal-dismiss-red-team",
  "goal-get",
  "goal-list",
  "goal-move",
  "goal-read-evidence-content",
  "goal-recent-unresolved",
  "goal-record-iteration-certificate",
  "goal-register-iteration-finding",
  "goal-remove-assumption",
  "goal-remove-blocker",
  "goal-remove-criterion",
  "goal-remove-evidence",
  "goal-remove-note",
  "goal-reorder",
  "goal-request-ac-change",
  "goal-request-upload",
  "goal-resolve-escalation",
  "goal-start-iteration-tracking",
  "goal-suggest-assumptions",
  "goal-summary",
  "goal-todo",
  "goal-tree",
  "goal-update",
  "goal-update-assumption",
  "goal-update-criterion",
  "project-add-dependency",
  "project-create",
  "project-delete",
  "project-get",
  "project-list",
  "project-remove-dependency",
  "project-update"
 ],
 "drift": [
  {
   "tool": "project-list",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-create",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-get",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-update",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-delete",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-add-dependency",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "project-remove-dependency",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-list",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-create",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-get",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-delete",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-move",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-reorder",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-block",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-blocker",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-todo",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-note",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-note",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-tree",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-summary",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-criterion",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update-criterion",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-criterion",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-evidence",
   "kind": "mutated",
   "severity": "critical",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-request-upload",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-evidence-text",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-evidence",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-assumption",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update-assumption",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-assumption",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-suggest-assumptions",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-assumption-evidence",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-request-ac-change",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-resolve-escalation",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-file",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-dismiss-red-team",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-read-evidence-content",
   "kind": "added",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-recent-unresolved",
   "kind": "mutated",
   "severity": "high",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-record-iteration-certificate",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-register-iteration-finding",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-start-iteration-tracking",
   "kind": "added",
   "severity": "info",
   "detected_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "account-delete",
   "kind": "mutated",
   "severity": "medium",
   "detected_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "findings": [
  {
   "tool": "project-list",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'project-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-create",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-update'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-get",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-list'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-add-criterion'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-delete",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-update'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-block",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-remove-blocker'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-todo",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-create'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-note",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-remove-note",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-criterion",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.probeSpec.description",
   "evidence": "https://planner.monopoly-gold.com/api/healthz",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-criterion",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-create'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update-criterion",
   "detector": "url_in_description",
   "severity": "low",
   "field": "inputSchema.properties.probeSpec.description",
   "evidence": "https://planner.monopoly-gold.com/api/healthz",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update-criterion",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-update'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-evidence",
   "detector": "user_concealment",
   "severity": "critical",
   "field": "description",
   "evidence": "6 of raw bytes BEFORE base64). Without it, a silently truncated PNG looks valid to the MIME sniffer; the server cannot",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-evidence",
   "detector": "secret_material_reference",
   "severity": "high",
   "field": "description",
   "evidence": "the signed ?t= ticket in the URL is the only credential, single-use, criterion-scoped. The PUT response is the same evid",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-evidence",
   "detector": "url_in_description",
   "severity": "low",
   "field": "description",
   "evidence": "https://planner.monopoly-gold.com/api/cli/planner-attach.sh",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-evidence",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-list'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-request-upload",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-attach-evidence'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-add-evidence-text",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-attach-evidence'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-update-assumption",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-update'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-suggest-assumptions",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-add-assumption'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-request-ac-change",
   "detector": "model_directed_instruction",
   "severity": "high",
   "field": "description",
   "evidence": "ing else) — no failed attempts required, but you MUST pass quotedFragment: a verbatim slice of the criterion text you",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-attach-file",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-update'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-dismiss-red-team",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-read-evidence-content",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "tool": "goal-recent-unresolved",
   "detector": "cross_tool_reference",
   "severity": "high",
   "field": "description",
   "evidence": "references sibling tool 'goal-get'",
   "seen_at": "2026-10-23T00:17:43.435Z"
  }
 ],
 "probes": [
  {
   "status": "OK",
   "n_tools": 43,
   "ran_at": "2026-10-24T18:17:44.369Z"
  },
  {
   "status": "OK",
   "n_tools": 43,
   "ran_at": "2026-10-23T00:17:43.435Z"
  },
  {
   "status": "OK",
   "n_tools": 38,
   "ran_at": "2026-08-13T18:17:15.851Z"
  }
 ]
}