{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "dev-legalize-legalize",
  "component": "legalize",
  "generated_at": "2026-10-03T18:03:32.554Z",
  "tracking_since": "2026-08-26",
  "counts": {
    "critical": 0,
    "security": 15,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0f16f-5245-75da-a386-1147fbe9274b",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.challenge_only",
      "to_code": "auth.rfc9728",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 08:29:59.543245+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Authorization (fail → pass)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0f16f-5245-75da-a386-1147fbe9274b"
    },
    {
      "id": "chg_01a0f16f-5247-7858-90c6-0ac136e12723",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.unreachable",
      "to_code": "toolsafety.auth_gated",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 08:29:59.543245+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Tool safety (Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0f16f-5247-7858-90c6-0ac136e12723"
    },
    {
      "id": "chg_01a0f16f-5248-7e58-8c29-6feffb2b3adf",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "unreachable",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "unreachable"
      },
      "occurred_on": "2026-09-30",
      "occurred_at": "2026-09-30 08:29:59.543245+00",
      "observed_since": "2026-09-29",
      "source": "scan",
      "summary": "Endpoint reachability (unreachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0f16f-5248-7e58-8c29-6feffb2b3adf"
    },
    {
      "id": "chg_01a0ec41-e014-7665-b125-b41dfe831065",
      "kind": "check.verdict",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728",
      "to_code": "auth.challenge_only",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-29",
      "occurred_at": "2026-09-29 08:22:14.895328+00",
      "observed_since": "2026-09-28",
      "source": "scan",
      "summary": "Authorization (pass → fail)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0ec41-e014-7665-b125-b41dfe831065"
    },
    {
      "id": "chg_01a0ec41-e01a-734b-87b8-f3d51393a3ca",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.unreachable",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-29",
      "occurred_at": "2026-09-29 08:22:14.895328+00",
      "observed_since": "2026-09-28",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0ec41-e01a-734b-87b8-f3d51393a3ca"
    },
    {
      "id": "chg_01a0ec41-e021-7a1a-b906-345c8dbc2fbd",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "auth_gated",
      "to_value": "unreachable",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "unreachable",
        "from": "auth_gated"
      },
      "occurred_on": "2026-09-29",
      "occurred_at": "2026-09-29 08:22:14.895328+00",
      "observed_since": "2026-09-28",
      "source": "scan",
      "summary": "Endpoint reachability (behind authorisation → unreachable)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a0ec41-e021-7a1a-b906-345c8dbc2fbd"
    },
    {
      "id": "chg_01a051b1-9db6-79e4-8a62-8b46964473cf",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 08:03:09.719642+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a051b1-9db6-79e4-8a62-8b46964473cf"
    },
    {
      "id": "chg_01a051b1-9db7-70c9-93e7-8ef5cc6dd94b",
      "kind": "check.unverifiable",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.verified",
      "to_code": "transport.auth_gated",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 08:03:09.719642+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Transport (pass → unverified)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a051b1-9db7-70c9-93e7-8ef5cc6dd94b"
    },
    {
      "id": "chg_01a051b1-9db7-7546-8d16-8ef9229ce110",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.insufficient_history",
      "from_value": "0.03",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 08:03:09.719642+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Stability (0.03 → unverified)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a051b1-9db7-7546-8d16-8ef9229ce110"
    },
    {
      "id": "chg_01a051b1-9db8-7180-9160-d49d1500ebe2",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728_invoke",
      "to_code": "auth.rfc9728",
      "from_value": "pass",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 08:03:09.719642+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Authorization (The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a051b1-9db8-7180-9160-d49d1500ebe2"
    },
    {
      "id": "chg_01a051b1-9db8-7e82-9b98-7c19111296f9",
      "kind": "capture.status_changed",
      "family": "",
      "subject_kind": "server",
      "subject": "capture",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "verified",
      "to_value": "auth_gated",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "auth_gated",
        "from": "verified"
      },
      "occurred_on": "2026-08-30",
      "occurred_at": "2026-08-30 08:03:09.719642+00",
      "observed_since": "2026-08-29",
      "source": "scan",
      "summary": "Endpoint reachability (reachable → behind authorisation)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a051b1-9db8-7e82-9b98-7c19111296f9"
    },
    {
      "id": "chg_01a04a2c-3f24-7f19-a337-ee7411c69978",
      "kind": "check.reverified",
      "family": "transport",
      "subject_kind": "check",
      "subject": "transport",
      "subject_child": "",
      "from_code": "transport.auth_gated",
      "to_code": "transport.verified",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "transport": "streamable-http"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 21:00:08.555775+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Transport (unverified → pass)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a04a2c-3f24-7f19-a337-ee7411c69978"
    },
    {
      "id": "chg_01a04a2c-3f26-7680-9e44-c6b97c018e61",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.auth_gated",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 21:00:08.555775+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a04a2c-3f26-7680-9e44-c6b97c018e61"
    },
    {
      "id": "chg_01a04a2c-3f28-752a-badb-3922b671c5b2",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "7",
        "judged": "7"
      },
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 21:00:08.555775+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a04a2c-3f28-752a-badb-3922b671c5b2"
    },
    {
      "id": "chg_01a04a2c-3f28-7eee-8ca7-11d087f29b26",
      "kind": "check.reason",
      "family": "auth-oauth",
      "subject_kind": "check",
      "subject": "auth-oauth",
      "subject_child": "",
      "from_code": "auth.rfc9728",
      "to_code": "auth.rfc9728_invoke",
      "from_value": "pass",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-28",
      "occurred_at": "2026-08-28 21:00:08.555775+00",
      "observed_since": "2026-08-27",
      "source": "scan",
      "summary": "Authorization (Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.)",
      "link": "https://verifymcp.io/servers/dev-legalize-legalize/legalize#chg-chg_01a04a2c-3f28-7eee-8ca7-11d087f29b26"
    }
  ],
  "days": [
    {
      "date": "2026-09-30",
      "total": 38,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-29",
      "total": 38,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-09-28",
      "total": 38,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-25",
      "total": 38,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-30",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-08-29",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-08-28",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 12
    },
    {
      "date": "2026-08-26",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 0
    }
  ]
}