{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "agentic-private-office-rco-a2a",
  "component": "mcp",
  "generated_at": "2026-11-05T10:39:02.533Z",
  "tracking_since": "2026-10-23",
  "counts": {
    "critical": 0,
    "security": 21,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a18f45-bae4-7415-b4b2-5aed761cb8cf",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 00:04:34.042973+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18f45-bae4-7415-b4b2-5aed761cb8cf"
    },
    {
      "id": "chg_01a18ad1-1167-7858-a707-6e60cc3d621e",
      "kind": "check.verdict",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.plaintext",
      "to_code": "https.enforced",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 03:18:39.569985+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "HTTPS (fail → pass)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18ad1-1167-7858-a707-6e60cc3d621e"
    },
    {
      "id": "chg_01a18ad1-116a-7372-9035-847836a28149",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "verify_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "verify_receipt"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 03:18:39.569985+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Tool “verify_receipt” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18ad1-116a-7372-9035-847836a28149"
    },
    {
      "id": "chg_01a18ad1-116b-7b7e-86a9-2b5f4ddcab3f",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "write_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "write_receipt"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 03:18:39.569985+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "Tool “write_receipt” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18ad1-116b-7b7e-86a9-2b5f4ddcab3f"
    },
    {
      "id": "chg_01a18ad1-1171-7ea5-9961-f41b893b602b",
      "kind": "server.name_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "rco-records",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "RCO-A2A — Record of Cleared Orders",
      "to_value": "rco-records",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "rco-records",
        "from": "RCO-A2A — Record of Cleared Orders"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 03:18:39.569985+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "The server changed its declared name (RCO-A2A — Record of Cleared Orders → rco-records)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18ad1-1171-7ea5-9961-f41b893b602b"
    },
    {
      "id": "chg_01a18ad1-1172-7b17-b3ff-c2ecf1244f29",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 03:18:39.569985+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a18ad1-1172-7b17-b3ff-c2ecf1244f29"
    },
    {
      "id": "chg_01a1868c-9310-73c9-8368-c9a734effbc2",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.churn",
      "from_value": "0.17",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "6",
        "added": "1",
        "breaks": "1",
        "removed": "1",
        "auth_transport": "0"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Stability (0.17 → fail)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9310-73c9-8368-c9a734effbc2"
    },
    {
      "id": "chg_01a1868c-9311-7575-8b74-db009a3e1154",
      "kind": "check.verdict",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.enforced",
      "to_code": "https.plaintext",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "HTTPS (pass → fail)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9311-7575-8b74-db009a3e1154"
    },
    {
      "id": "chg_01a1868c-9312-7e7d-b995-9326c190eb63",
      "kind": "tool.removed",
      "family": "",
      "subject_kind": "tool",
      "subject": "get_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "tool": "get_receipt"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Tool “get_receipt” was removed",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9312-7e7d-b995-9326c190eb63"
    },
    {
      "id": "chg_01a1868c-9313-7ce0-8604-37cf8989fb50",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "write_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "write_receipt"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Tool “write_receipt” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9313-7ce0-8604-37cf8989fb50"
    },
    {
      "id": "chg_01a1868c-9318-7061-91d1-8b29a6a7a266",
      "kind": "server.name_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "RCO-A2A — Record of Cleared Orders",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "rco-a2a",
      "to_value": "RCO-A2A — Record of Cleared Orders",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "RCO-A2A — Record of Cleared Orders",
        "from": "rco-a2a"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "The server changed its declared name (rco-a2a → RCO-A2A — Record of Cleared Orders)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9318-7061-91d1-8b29a6a7a266"
    },
    {
      "id": "chg_01a1868c-9318-7c33-b7ff-60242c38fe5a",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:25:22.039627+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a1868c-9318-7c33-b7ff-60242c38fe5a"
    },
    {
      "id": "chg_01a184f8-39c8-7d20-9195-8734adc9a729",
      "kind": "check.unverifiable",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "HSTS header (fail → unverified)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39c8-7d20-9195-8734adc9a729"
    },
    {
      "id": "chg_01a184f8-39ca-78fa-8005-94e82fe65026",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_no_destructive",
      "to_code": "auth.unreachable",
      "from_value": "partial",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Authorization (partial → unverified)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39ca-78fa-8005-94e82fe65026"
    },
    {
      "id": "chg_01a184f8-39cb-76e3-b979-65bbd551b788",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39cb-76e3-b979-65bbd551b788"
    },
    {
      "id": "chg_01a184f8-39cb-7c96-86c3-7348542ffbac",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.17",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Stability (0.17 → unverified)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39cb-7c96-86c3-7348542ffbac"
    },
    {
      "id": "chg_01a184f8-39cc-7609-9c1a-3f7cafcca072",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.unreachable",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Transport (pass → fail)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39cc-7609-9c1a-3f7cafcca072"
    },
    {
      "id": "chg_01a184f8-39cf-74c5-afcf-be9317c311a3",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "unreachable",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "unreachable",
        "from": "verified"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 00:03:42.637164+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → unreachable)",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a184f8-39cf-74c5-afcf-be9317c311a3"
    },
    {
      "id": "chg_01a16beb-bc0b-74a4-9e63-04f76178cd77",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "get_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "get_receipt"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 03:19:33.617768+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool “get_receipt” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a16beb-bc0b-74a4-9e63-04f76178cd77"
    },
    {
      "id": "chg_01a16beb-bc0b-7ba6-9d01-e7a0e77abaff",
      "kind": "tool.description_changed",
      "family": "",
      "subject_kind": "tool",
      "subject": "write_receipt",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "tool": "write_receipt"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 03:19:33.617768+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool “write_receipt” rewrote its description, which is the text the model reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a16beb-bc0b-7ba6-9d01-e7a0e77abaff"
    },
    {
      "id": "chg_01a16beb-bc0d-7630-8f9c-7c4359a6217c",
      "kind": "server.instructions_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "instructions",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 03:19:33.617768+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "The server rewrote its instructions, which are the text every model session reads",
      "link": "https://verifymcp.io/servers/agentic-private-office-rco-a2a/mcp#chg-chg_01a16beb-bc0d-7630-8f9c-7c4359a6217c"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 68,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 68,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-03",
      "total": 68,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-01",
      "total": 68,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 68,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-10-30",
      "total": 68,
      "delta": -4,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 24
    },
    {
      "date": "2026-10-29",
      "total": 72,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 29
    },
    {
      "date": "2026-10-28",
      "total": 72,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 13,
        "to": 17,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 4,
          "to_days": 5
        },
        "partial": false,
        "compared_to": "2026-10-27",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}