{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "com-pickpathly-site",
  "component": "pickpathly",
  "generated_at": "2026-09-27T12:18:57.478Z",
  "tracking_since": "2026-09-06",
  "counts": {
    "critical": 0,
    "security": 13,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0cd82-0270-7dd1-84a4-3d908fec3812",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 09:04:04.507055+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a0cd82-0270-7dd1-84a4-3d908fec3812"
    },
    {
      "id": "chg_01a0cd82-0272-789f-8747-d4d6af6e2951",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_undeclared",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "auth": "none",
        "undeclared_tools": "7"
      },
      "occurred_on": "2026-09-23",
      "occurred_at": "2026-09-23 09:04:04.507055+00",
      "observed_since": "2026-09-22",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a0cd82-0272-789f-8747-d4d6af6e2951"
    },
    {
      "id": "chg_01a0c334-fdc5-7a5f-a041-b750ee966db3",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 09:03:44.455237+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a0c334-fdc5-7a5f-a041-b750ee966db3"
    },
    {
      "id": "chg_01a0c334-fdc6-7b4a-92c0-c83728167c75",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.churn",
      "from_value": "0.47",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "days": "15",
        "added": "0",
        "breaks": "0",
        "removed": "7",
        "auth_transport": "0"
      },
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 09:03:44.455237+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Stability (0.47 → fail)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a0c334-fdc6-7b4a-92c0-c83728167c75"
    },
    {
      "id": "chg_01a0c334-fdc7-7654-8fe7-ee3ec3ec77ca",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_undeclared",
      "to_code": "auth.none_unlisted",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-21",
      "occurred_at": "2026-09-21 09:03:44.455237+00",
      "observed_since": "2026-09-20",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a0c334-fdc7-7654-8fe7-ee3ec3ec77ca"
    },
    {
      "id": "chg_01a08a8d-e3c2-7a4c-a8eb-860993a5921e",
      "kind": "check.verdict",
      "family": "https",
      "subject_kind": "check",
      "subject": "https",
      "subject_child": "",
      "from_code": "https.plaintext",
      "to_code": "https.enforced",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 09:02:29.626421+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "HTTPS (fail → pass)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a08a8d-e3c2-7a4c-a8eb-860993a5921e"
    },
    {
      "id": "chg_01a08567-47b4-75ba-bc61-10c1965bc1b5",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.http_error",
      "to_code": "transport.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 09:02:13.358804+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Transport (fail → pass)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a08567-47b4-75ba-bc61-10c1965bc1b5"
    },
    {
      "id": "chg_01a08567-47b5-7161-ae79-d6251aa92691",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 09:02:13.358804+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a08567-47b5-7161-ae79-d6251aa92691"
    },
    {
      "id": "chg_01a08567-47b5-7779-8d36-96f7c496ec6f",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_unlisted",
      "to_code": "auth.none_undeclared",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "auth": "none",
        "undeclared_tools": "7"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 09:02:13.358804+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 7 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a08567-47b5-7779-8d36-96f7c496ec6f"
    },
    {
      "id": "chg_01a07b26-0a7d-796a-bbd6-32b12ed12ff0",
      "kind": "check.verdict",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.http_error",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "status": "429",
        "transport": "streamable-http"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 09:14:45.464081+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Transport (pass → fail)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a07b26-0a7d-796a-bbd6-32b12ed12ff0"
    },
    {
      "id": "chg_01a07b26-0a7d-7f26-bd28-d6ac3a000d4d",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.unreachable",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 09:14:45.464081+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a07b26-0a7d-7f26-bd28-d6ac3a000d4d"
    },
    {
      "id": "chg_01a07b26-0a7e-74ee-83a8-00fb5a67866d",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.none_undeclared",
      "to_code": "auth.none_unlisted",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 09:14:45.464081+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the whole tool list to see what that exposes.)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a07b26-0a7e-74ee-83a8-00fb5a67866d"
    },
    {
      "id": "chg_01a07b26-0a7f-77b8-9c9d-a845d945de26",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "not_mcp",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "not_mcp",
        "from": "verified"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 09:14:45.464081+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → not serving MCP)",
      "link": "https://verifymcp.io/servers/com-pickpathly-site/pickpathly#chg-chg_01a07b26-0a7f-77b8-9c9d-a845d945de26"
    }
  ],
  "days": [
    {
      "date": "2026-09-26",
      "total": 73,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 63,
        "to": 67,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 19,
          "to_days": 20
        },
        "partial": false,
        "compared_to": "2026-09-25",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-25",
      "total": 72,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-23",
      "total": 72,
      "delta": 25,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-22",
      "total": 47,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-21",
      "total": 47,
      "delta": -23,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-19",
      "total": 70,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 40,
        "to": 43,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 12,
          "to_days": 13
        },
        "partial": false,
        "compared_to": "2026-09-18",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-17",
      "total": 69,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 33,
        "to": 37,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 10,
          "to_days": 11
        },
        "partial": false,
        "compared_to": "2026-09-16",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-15",
      "total": 68,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 27,
        "to": 30,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 8,
          "to_days": 9
        },
        "partial": false,
        "compared_to": "2026-09-14",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}