{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "aitodotai-aito",
  "component": "aito-mcp",
  "generated_at": "2026-11-05T14:07:32.232Z",
  "tracking_since": "2026-10-12",
  "counts": {
    "critical": 0,
    "security": 9,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a171dd-8f3b-780c-b2c8-7ed6cb968703",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 07:01:47.945305+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a171dd-8f3b-780c-b2c8-7ed6cb968703"
    },
    {
      "id": "chg_01a16ec8-1f0f-74b3-9e0f-fbe1c05f1829",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f0f-74b3-9e0f-fbe1c05f1829"
    },
    {
      "id": "chg_01a16ec8-1f10-79a3-ba73-d14ef021efea",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f10-79a3-ba73-d14ef021efea"
    },
    {
      "id": "chg_01a16ec8-1f11-7e78-b047-61afa3defdc9",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "AitoDotAI/aito-python-tools"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f11-7e78-b047-61afa3defdc9"
    },
    {
      "id": "chg_01a16ec8-1f16-7d43-b15e-f3ea0012f6c7",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f16-7d43-b15e-f3ea0012f6c7"
    },
    {
      "id": "chg_01a16ec8-1f17-7578-8bdd-79bbeb6f5057",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "AitoDotAI/aito-python-tools",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "AitoDotAI/aito-python-tools",
        "from": ""
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "The attested source repository moved (AitoDotAI/aito-python-tools)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f17-7578-8bdd-79bbeb6f5057"
    },
    {
      "id": "chg_01a16ec8-1f17-7f18-b9a8-92516f727e67",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "11",
        "judged": "11"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 16:39:31.304737+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a16ec8-1f17-7f18-b9a8-92516f727e67"
    },
    {
      "id": "chg_01a13c47-e412-7793-819c-86dd7bab2d71",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 21:18:26.741384+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a13c47-e412-7793-819c-86dd7bab2d71"
    },
    {
      "id": "chg_01a13c47-e413-738a-b401-b9ade6b5f893",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 21:18:26.741384+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/aitodotai-aito/aito-mcp#chg-chg_01a13c47-e413-738a-b401-b9ade6b5f893"
    }
  ],
  "days": [
    {
      "date": "2026-10-31",
      "total": 75,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-30",
      "total": 75,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-28",
      "total": 75,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-25",
      "total": 75,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-24",
      "total": 60,
      "delta": 21,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 14
    },
    {
      "date": "2026-10-14",
      "total": 39,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-12",
      "total": 39,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}