{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "hkturtco-qrfile",
  "component": "qrfile-mcp",
  "generated_at": "2026-11-05T11:39:05.203Z",
  "tracking_since": "2026-10-13",
  "counts": {
    "critical": 0,
    "security": 16,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a1a9e8-2939-72fd-bc61-62978e2f4826",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-05",
      "occurred_at": "2026-11-05 04:12:06.79595+00",
      "observed_since": "2026-11-04",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a1a9e8-2939-72fd-bc61-62978e2f4826"
    },
    {
      "id": "chg_01a1a4f7-23dc-7dbb-a656-7bee51e066ca",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-11-04",
      "occurred_at": "2026-11-04 05:10:22.396679+00",
      "observed_since": "2026-11-03",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a1a4f7-23dc-7dbb-a656-7bee51e066ca"
    },
    {
      "id": "chg_01a19a01-0baa-7721-8157-128eb73ead3f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-11-02",
      "occurred_at": "2026-11-02 02:05:22.187953+00",
      "observed_since": "2026-11-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a19a01-0baa-7721-8157-128eb73ead3f"
    },
    {
      "id": "chg_01a180e8-1a3f-7b52-80b1-121445864b17",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-10-28",
      "occurred_at": "2026-10-28 05:07:36.876545+00",
      "observed_since": "2026-10-27",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a180e8-1a3f-7b52-80b1-121445864b17"
    },
    {
      "id": "chg_01a151ea-50b6-75f6-b148-c11d4d76e27c",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-19",
      "occurred_at": "2026-10-19 02:07:52.987818+00",
      "observed_since": "2026-10-18",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a151ea-50b6-75f6-b148-c11d4d76e27c"
    },
    {
      "id": "chg_01a14e49-e146-7f2c-94cf-8d4d390ce59b",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.07",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 09:13:46.90039+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Stability (0.07 → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a14e49-e146-7f2c-94cf-8d4d390ce59b"
    },
    {
      "id": "chg_01a14e49-e149-718d-af5a-46da0a0f5625",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 09:13:46.90039+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a14e49-e149-718d-af5a-46da0a0f5625"
    },
    {
      "id": "chg_01a14cc3-9074-70f7-a262-302c4927967a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-18",
      "occurred_at": "2026-10-18 02:07:27.24658+00",
      "observed_since": "2026-10-17",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a14cc3-9074-70f7-a262-302c4927967a"
    },
    {
      "id": "chg_01a149b3-acf6-71c9-96d7-4dda9ddceacd",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-17",
      "occurred_at": "2026-10-17 11:51:14.393443+00",
      "observed_since": "2026-10-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a149b3-acf6-71c9-96d7-4dda9ddceacd"
    },
    {
      "id": "chg_01a13f61-ca01-7290-b4f7-c78265cad5f7",
      "kind": "check.reverified",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.injection_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 11:45:35.652838+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Injection markers (unverified → pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13f61-ca01-7290-b4f7-c78265cad5f7"
    },
    {
      "id": "chg_01a13f61-ca02-758e-9340-c57e9e00cbb3",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "6",
        "judged": "6"
      },
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 11:45:35.652838+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13f61-ca02-758e-9340-c57e9e00cbb3"
    },
    {
      "id": "chg_01a13f61-ca02-79eb-b6d0-aeca30dbd26f",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-15",
      "occurred_at": "2026-10-15 11:45:35.652838+00",
      "observed_since": "2026-10-14",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13f61-ca02-79eb-b6d0-aeca30dbd26f"
    },
    {
      "id": "chg_01a13869-e891-73d6-b306-b9144ff0ab14",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 03:17:03.349093+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13869-e891-73d6-b306-b9144ff0ab14"
    },
    {
      "id": "chg_01a13869-e893-7503-92e6-a1888c5b1818",
      "kind": "check.unverifiable",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "metadata_unavailable"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 03:17:03.349093+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Install scripts (pass → unverified)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13869-e893-7503-92e6-a1888c5b1818"
    },
    {
      "id": "chg_01a13869-e8fe-7c45-bc89-07e941b9cfbb",
      "kind": "check.reason",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.version_unpublished",
      "from_value": "fail",
      "to_value": "fail",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 03:17:03.349093+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "Provenance (Provenance check failed: the declared version isn't published, so its provenance can't be verified.)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13869-e8fe-7c45-bc89-07e941b9cfbb"
    },
    {
      "id": "chg_01a13869-e94a-7e3a-930f-c533e8321bbd",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "build_backend",
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "",
        "from": "build_backend"
      },
      "occurred_on": "2026-10-14",
      "occurred_at": "2026-10-14 03:17:03.349093+00",
      "observed_since": "2026-10-13",
      "source": "scan",
      "summary": "The code this package runs automatically changed (its declared build backend)",
      "link": "https://verifymcp.io/servers/hkturtco-qrfile/qrfile-mcp#chg-chg_01a13869-e94a-7e3a-930f-c533e8321bbd"
    }
  ],
  "days": [
    {
      "date": "2026-11-05",
      "total": 68,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-04",
      "total": 53,
      "delta": -14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-11-02",
      "total": 67,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-31",
      "total": 51,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 50,
        "to": 53,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 15,
          "to_days": 16
        },
        "partial": false,
        "compared_to": "2026-10-30",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-29",
      "total": 50,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 43,
        "to": 47,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 13,
          "to_days": 14
        },
        "partial": false,
        "compared_to": "2026-10-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-28",
      "total": 49,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 64,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 33,
        "to": 37,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 10,
          "to_days": 11
        },
        "partial": false,
        "compared_to": "2026-10-25",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-24",
      "total": 63,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 27,
        "to": 30,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 8,
          "to_days": 9
        },
        "partial": false,
        "compared_to": "2026-10-23",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}