{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "getcargohq-cargo",
  "component": "cargo-ai-cli",
  "generated_at": "2026-11-06T18:03:07.734Z",
  "tracking_since": "2026-10-17",
  "counts": {
    "critical": 0,
    "security": 24,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1b023-ba0b-7382-8293-2836bc31c40f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@cargo-ai/app-sdk > react-router-dom > react-router",
        "refs": "[\"CVE-2026-53666\",\"CVE-2026-53669\"]",
        "seen": "326",
        "package": "react-router",
        "version": "6.30.6",
        "assessed": "327",
        "resolved": "326",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"react-router\",\"version\":\"6.30.6\",\"depth\":3,\"path\":[\"@cargo-ai/app-sdk\",\"react-router-dom\",\"react-router\"],\"refs\":[\"CVE-2026-53666\",\"CVE-2026-53669\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-11-06",
      "occurred_at": "2026-11-06 09:14:53.813704+00",
      "observed_since": "2026-11-05",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1b023-ba0b-7382-8293-2836bc31c40f"
    },
    {
      "id": "chg_01a1ab05-5695-7d29-9c4d-ac5a4163d69a",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 09:23:36.195965+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1ab05-5695-7d29-9c4d-ac5a4163d69a"
    },
    {
      "id": "chg_01a1a9ec-0cf9-7c09-923d-7c8b07147b6c",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 04:16:21.710801+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1a9ec-0cf9-7c09-923d-7c8b07147b6c"
    },
    {
      "id": "chg_01a1a9ec-0cf6-7eb0-8147-8213820d24b2",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 04:16:21.710801+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1a9ec-0cf6-7eb0-8147-8213820d24b2"
    },
    {
      "id": "chg_01a18a57-fb33-759d-b900-cfb289eb76ea",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 01:06:24.13066+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a18a57-fb33-759d-b900-cfb289eb76ea"
    },
    {
      "id": "chg_01a18a57-fb31-7698-938c-9f7e357587b5",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-30",
      "occurred_at": "2026-10-30 01:06:24.13066+00",
      "observed_since": "2026-10-29",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a18a57-fb31-7698-938c-9f7e357587b5"
    },
    {
      "id": "chg_01a18687-623b-7c40-a7bf-c2c602eebaec",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@cargo-ai/app-sdk > react-router-dom > react-router",
        "refs": "[\"CVE-2026-53666\",\"CVE-2026-53669\"]",
        "seen": "326",
        "package": "react-router",
        "version": "6.30.6",
        "assessed": "327",
        "resolved": "326",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"react-router\",\"version\":\"6.30.6\",\"depth\":3,\"path\":[\"@cargo-ai/app-sdk\",\"react-router-dom\",\"react-router\"],\"refs\":[\"CVE-2026-53666\",\"CVE-2026-53669\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:19:41.858796+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a18687-623b-7c40-a7bf-c2c602eebaec"
    },
    {
      "id": "chg_01a18687-623d-7031-a3c8-8ccf589c5800",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:19:41.858796+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a18687-623d-7031-a3c8-8ccf589c5800"
    },
    {
      "id": "chg_01a18687-623d-78d4-ba93-45033a3e8586",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-29",
      "occurred_at": "2026-10-29 07:19:41.858796+00",
      "observed_since": "2026-10-28",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a18687-623d-78d4-ba93-45033a3e8586"
    },
    {
      "id": "chg_01a180ec-a3e1-70c1-acd7-d0da4e27d6ce",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 05:12:34.245352+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a180ec-a3e1-70c1-acd7-d0da4e27d6ce"
    },
    {
      "id": "chg_01a1777d-d19d-7a50-90b6-9344c7a859e0",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 09:14:56.76284+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1777d-d19d-7a50-90b6-9344c7a859e0"
    },
    {
      "id": "chg_01a1777d-d19c-790f-b7c3-c7b29d9057a4",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 09:14:56.76284+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1777d-d19c-790f-b7c3-c7b29d9057a4"
    },
    {
      "id": "chg_01a174a7-b4d5-7d9f-a2cb-1dbb625c3f11",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:01:50.253721+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a174a7-b4d5-7d9f-a2cb-1dbb625c3f11"
    },
    {
      "id": "chg_01a174a7-b4d1-75b4-b108-1fd5392a9208",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:01:50.253721+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a174a7-b4d1-75b4-b108-1fd5392a9208"
    },
    {
      "id": "chg_01a1705d-449f-7d36-b33a-2070b5049790",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "@cargo-ai/app-sdk > react-router-dom > react-router",
        "refs": "[\"CVE-2026-53666\",\"CVE-2026-53669\"]",
        "seen": "326",
        "package": "react-router",
        "version": "6.30.6",
        "assessed": "327",
        "resolved": "326",
        "severity": "medium",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"react-router\",\"version\":\"6.30.6\",\"depth\":3,\"path\":[\"@cargo-ai/app-sdk\",\"react-router-dom\",\"react-router\"],\"refs\":[\"CVE-2026-53666\",\"CVE-2026-53669\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 00:02:02.985531+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1705d-449f-7d36-b33a-2070b5049790"
    },
    {
      "id": "chg_01a16b70-79f2-702d-989a-49e3e804b960",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.transitive",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 01:04:55.77648+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a16b70-79f2-702d-989a-49e3e804b960"
    },
    {
      "id": "chg_01a166f3-b8fd-789c-9f1e-de7c10fb2111",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 04:10:11.00159+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a166f3-b8fd-789c-9f1e-de7c10fb2111"
    },
    {
      "id": "chg_01a166f3-b8fc-76f8-b9b5-ae50bfe3ff23",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-23",
      "occurred_at": "2026-10-23 04:10:11.00159+00",
      "observed_since": "2026-10-22",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a166f3-b8fc-76f8-b9b5-ae50bfe3ff23"
    },
    {
      "id": "chg_01a16123-68c5-71d1-bd41-9ef3e70da49b",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 01:04:32.928963+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a16123-68c5-71d1-bd41-9ef3e70da49b"
    },
    {
      "id": "chg_01a16123-68c5-7ef8-b12a-12aa1e13201f",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-22",
      "occurred_at": "2026-10-22 01:04:32.928963+00",
      "observed_since": "2026-10-21",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a16123-68c5-7ef8-b12a-12aa1e13201f"
    },
    {
      "id": "chg_01a15896-6ce1-7b4f-afc4-be3b4d4ac276",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-20",
      "occurred_at": "2026-10-20 09:13:35.697356+00",
      "observed_since": "2026-10-19",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a15896-6ce1-7b4f-afc4-be3b4d4ac276"
    },
    {
      "id": "chg_01a15896-6ce1-74d4-a9ea-b6dd4d7c4a7a",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-10-20",
      "occurred_at": "2026-10-20 09:13:35.697356+00",
      "observed_since": "2026-10-19",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar), and its server did not start in our sandbox, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a15896-6ce1-74d4-a9ea-b6dd4d7c4a7a"
    },
    {
      "id": "chg_01a1517a-016a-75c0-ba5f-77b0670be395",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-19",
      "occurred_at": "2026-10-19 00:05:12.602856+00",
      "observed_since": "2026-10-18",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1517a-016a-75c0-ba5f-77b0670be395"
    },
    {
      "id": "chg_01a1517a-0167-700f-83c0-cb3d3b772ab1",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-19",
      "occurred_at": "2026-10-19 00:05:12.602856+00",
      "observed_since": "2026-10-18",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/getcargohq-cargo/cargo-ai-cli#chg-chg_01a1517a-0167-700f-83c0-cb3d3b772ab1"
    }
  ],
  "days": [
    {
      "date": "2026-11-06",
      "total": 29,
      "delta": 9,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-11-05",
      "total": 20,
      "delta": -9,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 9
    },
    {
      "date": "2026-10-30",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 6
    },
    {
      "date": "2026-10-29",
      "total": 29,
      "delta": 9,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-10-28",
      "total": 20,
      "delta": -9,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-10-27",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-10-25",
      "total": 29,
      "delta": 9,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 10
    }
  ]
}