{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "cryptoduke01-gloam",
  "component": "gloamtrade-mcp",
  "generated_at": "2026-11-05T17:00:35.457Z",
  "tracking_since": "2026-10-11",
  "counts": {
    "critical": 0,
    "security": 14,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1ac64-321e-734e-99e7-94ca14953d85",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 15:46:49.957482+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a1ac64-321e-734e-99e7-94ca14953d85"
    },
    {
      "id": "chg_01a1abbb-9f19-7150-9277-4ef5e38a5ba3",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 12:42:42.29335+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a1abbb-9f19-7150-9277-4ef5e38a5ba3"
    },
    {
      "id": "chg_01a1a988-8b5d-7156-96f2-111a52a06c18",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-118764",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.direct",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-118764"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 02:27:40.467158+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "CVE-2026-118764 no longer affects this package",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a1a988-8b5d-7156-96f2-111a52a06c18"
    },
    {
      "id": "chg_01a19f3f-b8aa-7b89-a1a3-ce226da0a572",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-03",
      "occurred_at": "2026-11-03 02:31:55.546723+00",
      "observed_since": "2026-11-02",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a19f3f-b8aa-7b89-a1a3-ce226da0a572"
    },
    {
      "id": "chg_01a19d59-6017-7d3b-b307-3d68e2eab4e2",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.version_churn",
      "from_value": "0.60",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "0.7.0",
        "days": "19",
        "from": "0.2.0",
        "added": "3",
        "breaks": "0",
        "removed": "3"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 17:40:42.615258+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Stability (0.60 → fail)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a19d59-6017-7d3b-b307-3d68e2eab4e2"
    },
    {
      "id": "chg_01a19d59-601a-7d9b-8c6d-246843edf43c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 17:40:42.615258+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a19d59-601a-7d9b-8c6d-246843edf43c"
    },
    {
      "id": "chg_01a18fcc-6895-7ab8-855c-50e42a549f65",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-118764",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-118764",
        "severity": "high"
      },
      "occurred_on": "2026-10-31",
      "occurred_at": "2026-10-31 02:31:40.344549+00",
      "observed_since": "2026-10-30",
      "source": "scan",
      "summary": "CVE-2026-118764 affects this package (high)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a18fcc-6895-7ab8-855c-50e42a549f65"
    },
    {
      "id": "chg_01a16bbb-65b0-7920-b22d-4b69d56d021a",
      "kind": "check.reason",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.direct",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "path": "zod",
        "refs": "[\"CVE-2026-27601\",\"CVE-2026-45736\",\"CVE-2026-48779\",\"CVE-2023-54404\"]",
        "seen": "200",
        "direct": "1",
        "package": "zod",
        "version": "3.25.76",
        "assessed": "201",
        "resolved": "200",
        "severity": "high",
        "transitive": "3",
        "vulnerable": "[{\"name\":\"elliptic\",\"version\":\"6.6.1\",\"depth\":4,\"path\":[\"circomlibjs\",\"ethers\",\"@ethersproject/signing-key\",\"elliptic\"],\"refs\":[\"CVE-2025-14505\"]},{\"name\":\"underscore\",\"version\":\"1.13.6\",\"depth\":4,\"path\":[\"snarkjs\",\"bfj\",\"jsonpath\",\"underscore\"],\"refs\":[\"CVE-2026-27601\"]},{\"name\":\"ws\",\"version\":\"8.18.0\",\"depth\":4,\"path\":[\"circomlibjs\",\"ethers\",\"@ethersproject/providers\",\"ws\"],\"refs\":[\"CVE-2026-45736\",\"CVE-2026-48779\"]},{\"name\":\"zod\",\"version\":\"3.25.76\",\"depth\":1,\"path\":[\"zod\"],\"refs\":[\"CVE-2023-54404\"]}]",
        "no_fix_refs": "[\"CVE-2025-14505\"]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:26:45.778632+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a16bbb-65b0-7920-b22d-4b69d56d021a"
    },
    {
      "id": "chg_01a16bbb-65ae-714b-af89-7ac068651815",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2023-54404",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2023-54404",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:26:45.778632+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2023-54404 affects this package (high)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a16bbb-65ae-714b-af89-7ac068651815"
    },
    {
      "id": "chg_01a1616e-57c0-720b-83d5-16f86b66bba5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 02:26:23.740457+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a1616e-57c0-720b-83d5-16f86b66bba5"
    },
    {
      "id": "chg_01a15ee7-3c7b-7105-991c-ab0f8340365c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 14:39:34.99561+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a15ee7-3c7b-7105-991c-ab0f8340365c"
    },
    {
      "id": "chg_01a13b02-efda-766c-9cdc-24c8e7e1193d",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "17",
        "judged": "17"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 15:23:30.631288+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a13b02-efda-766c-9cdc-24c8e7e1193d"
    },
    {
      "id": "chg_01a13b02-efda-7db5-b4bd-39b71da40add",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 15:23:30.631288+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a13b02-efda-7db5-b4bd-39b71da40add"
    },
    {
      "id": "chg_01a13b02-efd9-74ea-bd32-9ee9e9846bbe",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 15:23:30.631288+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/cryptoduke01-gloam/gloamtrade-mcp#chg-chg_01a13b02-efd9-74ea-bd32-9ee9e9846bbe"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 49,
      "delta": -20,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-11-04",
      "total": 69,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 49,
        "to": 52,
        "delta": 3,
        "others": [],
        "accrual": null,
        "partial": false,
        "compared_to": "2026-11-03",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 49 to 52."
      },
      "event_count": 0
    },
    {
      "date": "2026-11-03",
      "total": 68,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-02",
      "total": 53,
      "delta": -17,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-31",
      "total": 70,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-30",
      "total": 69,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-29",
      "total": 69,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 47,
        "to": 50,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 14,
          "to_days": 15
        },
        "partial": false,
        "compared_to": "2026-10-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-27",
      "total": 68,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 40,
        "to": 43,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 12,
          "to_days": 13
        },
        "partial": false,
        "compared_to": "2026-10-26",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}