<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.coderifts/api-governance · app · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/coderifts-api-governance/app/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] app: Stability (unverified → fail)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd91-7ae8-b27b-50dea33f22b0</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd91-7ae8-b27b-50dea33f22b0</guid><description>Stability (unverified → fail). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 17:39:44 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] app: Transport (fail → pass)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd92-796f-944f-5bce0cd9279e</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd92-796f-944f-5bce0cd9279e</guid><description>Transport (fail → pass). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 17:39:44 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] app: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd92-7ef6-b66b-5696a2702b25</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019faef5-fd92-7ef6-b66b-5696a2702b25</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 3 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-07-28.</description><pubDate>Wed, 29 Jul 2026 17:39:44 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] app: Stability (0.03 → unverified)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ad-7afd-bcab-1e65436c3a2f</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ad-7afd-bcab-1e65436c3a2f</guid><description>Stability (0.03 → unverified). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 18:29:03 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] app: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ae-73b3-88ee-30ba2bfcd6c9</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ae-73b3-88ee-30ba2bfcd6c9</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the tool list to see what that exposes.). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 18:29:03 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] app: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6af-7e8c-b252-80cb02242336</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6af-7e8c-b252-80cb02242336</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 18:29:03 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item><item><title>[SECURITY] app: Transport (pass → fail)</title><link>https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ad-7480-a688-05c13e6eaaec</link><guid isPermaLink="true">https://verifymcp.io/servers/coderifts-api-governance/app#chg-chg_019fa9fc-c6ad-7480-a688-05c13e6eaaec</guid><description>Transport (pass → fail). Compared against 2026-07-27.</description><pubDate>Tue, 28 Jul 2026 18:29:03 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item></channel></rss>