{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "com-arcat-arcat",
  "component": "mcp",
  "generated_at": "2026-10-07T20:39:44.838Z",
  "tracking_since": "2026-07-26",
  "counts": {
    "critical": 0,
    "security": 24,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0710a-62c2-72d5-85c5-66852c347d99",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 10:08:20.675799+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a0710a-62c2-72d5-85c5-66852c347d99"
    },
    {
      "id": "chg_01a0710a-62c4-7e07-959a-8b43e367f6df",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 10:08:20.675799+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Transport (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a0710a-62c4-7e07-959a-8b43e367f6df"
    },
    {
      "id": "chg_01a0710a-62c6-7ba8-8c26-acc8d4879af5",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.hsts_present",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 10:08:20.675799+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "HSTS header (fail → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a0710a-62c6-7ba8-8c26-acc8d4879af5"
    },
    {
      "id": "chg_01a06be3-3854-7cce-8441-154c5a5020b4",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.challenge_only",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 10:07:28.15297+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a06be3-3854-7cce-8441-154c5a5020b4"
    },
    {
      "id": "chg_01a06be3-3856-7597-a04c-99ad4d0b27bd",
      "kind": "check.unverifiable",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 10:07:28.15297+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Transport (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a06be3-3856-7597-a04c-99ad4d0b27bd"
    },
    {
      "id": "chg_01a06be3-3856-7a38-a1b7-0ea37360a5db",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_present",
      "to_code": "headers.hsts_absent",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 10:07:28.15297+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "HSTS header (pass → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a06be3-3856-7a38-a1b7-0ea37360a5db"
    },
    {
      "id": "chg_01a03862-aa96-7845-a86e-d712d0902a1e",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 10:06:25.200802+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a03862-aa96-7845-a86e-d712d0902a1e"
    },
    {
      "id": "chg_01a03862-aa98-73ce-b445-982abece2dcf",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 10:06:25.200802+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Transport (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a03862-aa98-73ce-b445-982abece2dcf"
    },
    {
      "id": "chg_01a03862-aa98-7962-8073-4d172f886c4b",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.hsts_present",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 10:06:25.200802+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "HSTS header (fail → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a03862-aa98-7962-8073-4d172f886c4b"
    },
    {
      "id": "chg_01a028ed-94a9-76d3-bd5a-2ce834cc4d82",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.challenge_only",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 10:04:13.800168+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a028ed-94a9-76d3-bd5a-2ce834cc4d82"
    },
    {
      "id": "chg_01a028ed-94ab-7562-a751-0f37ae9cdbf8",
      "kind": "check.unverifiable",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 10:04:13.800168+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "Transport (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a028ed-94ab-7562-a751-0f37ae9cdbf8"
    },
    {
      "id": "chg_01a028ed-94ab-7c8f-bcd5-61adfb08c35c",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_present",
      "to_code": "headers.hsts_absent",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-22",
      "occurred_at": "2026-08-22 10:04:13.800168+00",
      "observed_since": "2026-08-21",
      "source": "scan",
      "summary": "HSTS header (pass → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a028ed-94ab-7c8f-bcd5-61adfb08c35c"
    },
    {
      "id": "chg_01a023c7-41d8-734a-b708-4d8fdb4c5f70",
      "kind": "check.unverifiable",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.none_unlisted",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 10:04:15.693008+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Authorization (fail → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a023c7-41d8-734a-b708-4d8fdb4c5f70"
    },
    {
      "id": "chg_01a023c7-41d9-7b5e-b4e5-7920791ee705",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 10:04:15.693008+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Transport (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a023c7-41d9-7b5e-b4e5-7920791ee705"
    },
    {
      "id": "chg_01a023c7-41da-7694-a723-19e1a811205c",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_absent",
      "to_code": "headers.hsts_present",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 10:04:15.693008+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "HSTS header (fail → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a023c7-41da-7694-a723-19e1a811205c"
    },
    {
      "id": "chg_01a01ea1-5964-7828-87db-05963cc6d9cc",
      "kind": "check.unverifiable",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:04:45.697527+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Transport (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a01ea1-5964-7828-87db-05963cc6d9cc"
    },
    {
      "id": "chg_01a01ea1-5965-7dbe-96a5-721280b5609c",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.73",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:04:45.697527+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Stability (0.73 → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a01ea1-5965-7dbe-96a5-721280b5609c"
    },
    {
      "id": "chg_01a01ea1-5966-724b-9554-c7b747ceec05",
      "kind": "check.verdict",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.hsts_present",
      "to_code": "headers.hsts_absent",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:04:45.697527+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "HSTS header (pass → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a01ea1-5966-724b-9554-c7b747ceec05"
    },
    {
      "id": "chg_01a01ea1-596a-7353-8582-d930939fa998",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only_invoke",
      "to_code": "auth.challenge_only",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:04:45.697527+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Authorization (The endpoint enforces authorisation, but returns a challenge with no valid RFC 9728 metadata, so a client cannot discover where to get a token.)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a01ea1-596a-7353-8582-d930939fa998"
    },
    {
      "id": "chg_01a01ea1-596b-7ba2-925e-8675a3d63760",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "verified"
      },
      "occurred_on": "2026-08-20",
      "occurred_at": "2026-08-20 10:04:45.697527+00",
      "observed_since": "2026-08-19",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_01a01ea1-596b-7ba2-925e-8675a3d63760"
    },
    {
      "id": "chg_019fa9d2-f703-722c-9acd-7e4d1c36de92",
      "kind": "check.reverified",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.unreachable",
      "to_code": "auth.challenge_only_invoke",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:43:23.128908+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Authorization (unverified → fail)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_019fa9d2-f703-722c-9acd-7e4d1c36de92"
    },
    {
      "id": "chg_019fa9d2-f703-7e9b-b02d-5817fbe2a909",
      "kind": "check.unverifiable",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.enforced",
      "to_code": "https.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:43:23.128908+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "HTTPS (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_019fa9d2-f703-7e9b-b02d-5817fbe2a909"
    },
    {
      "id": "chg_019fa9d2-f704-755c-89cb-e8a5954be40b",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.unreachable",
      "to_code": "transport.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:43:23.128908+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Transport (fail → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_019fa9d2-f704-755c-89cb-e8a5954be40b"
    },
    {
      "id": "chg_019fa9d2-f704-7a30-8ace-99374823376c",
      "kind": "check.reverified",
      "family": "hsts",
      "subject_kind": "check",
      "subject": "hsts",
      "subject_child": "",
      "from_code": "headers.inconclusive",
      "to_code": "headers.hsts_present",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:43:23.128908+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "HSTS header (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-arcat-arcat/mcp#chg-chg_019fa9d2-f704-7a30-8ace-99374823376c"
    }
  ],
  "days": [
    {
      "date": "2026-09-28",
      "total": 30,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-25",
      "total": 30,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-05",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-09-04",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-08-26",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-25",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-08-22",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    },
    {
      "date": "2026-08-21",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 3
    }
  ]
}