{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "jellewas-eu-audit-mcp",
  "component": "eu-audit-mcp",
  "generated_at": "2026-09-24T00:24:06.483Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 19,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a060ff-559e-7897-a99c-31262507dd5d",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 07:22:21.281842+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_01a060ff-559e-7897-a99c-31262507dd5d"
    },
    {
      "id": "chg_01a060ff-559f-7848-a30b-494bb9ab1768",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_failed",
      "from_value": "0.90",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 07:22:21.281842+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Stability (0.90 → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_01a060ff-559f-7848-a30b-494bb9ab1768"
    },
    {
      "id": "chg_01a017cc-9fe0-703a-aa8d-f15c66bfd57a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-19",
      "occurred_at": "2026-08-19 02:14:41.300063+00",
      "observed_since": "2026-08-18",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_01a017cc-9fe0-703a-aa8d-f15c66bfd57a"
    },
    {
      "id": "chg_01a00d7f-99b2-74c4-b0bc-a23a89f7710b",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 02:14:21.30376+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_01a00d7f-99b2-74c4-b0bc-a23a89f7710b"
    },
    {
      "id": "chg_019ffe1c-db2f-7602-ab6f-88dbd284fdaf",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 02:32:11.763061+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019ffe1c-db2f-7602-ab6f-88dbd284fdaf"
    },
    {
      "id": "chg_019ff8e5-df88-705a-9a34-0d7df8803b85",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 02:14:02.037763+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019ff8e5-df88-705a-9a34-0d7df8803b85"
    },
    {
      "id": "chg_019ff3d3-c09e-7d94-b5bd-c60a336bdcc8",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 02:36:08.710496+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019ff3d3-c09e-7d94-b5bd-c60a336bdcc8"
    },
    {
      "id": "chg_019fd4ed-9e14-773c-9cb6-634a8dcb7387",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 02:36:10.079948+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fd4ed-9e14-773c-9cb6-634a8dcb7387"
    },
    {
      "id": "chg_019fcfb5-bd9c-7e20-afdd-a3387ff6f8b5",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 02:17:02.060666+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fcfb5-bd9c-7e20-afdd-a3387ff6f8b5"
    },
    {
      "id": "chg_019fcc4c-a4cb-74e5-8ef6-660365ab05ef",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69247",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69247",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:23:22.811936+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69247 affects this package (high)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fcc4c-a4cb-74e5-8ef6-660365ab05ef"
    },
    {
      "id": "chg_019fcc4c-a4cc-7642-9065-656f7bfd8603",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69248",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69248",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:23:22.811936+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69248 affects this package (high)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fcc4c-a4cc-7642-9065-656f7bfd8603"
    },
    {
      "id": "chg_019fcc4c-a4cc-7d0f-9534-2d693f89f902",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69249",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.transitive",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69249",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:23:22.811936+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-69249 affects this package (high)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fcc4c-a4cc-7d0f-9534-2d693f89f902"
    },
    {
      "id": "chg_019fcc4c-a4cd-7241-9fb7-48bd1a212f0c",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.transitive",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "presidio-anonymizer > cryptography",
        "refs": "[\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\"]",
        "seen": "90",
        "package": "cryptography",
        "version": "48.0.1",
        "assessed": "91",
        "resolved": "90",
        "severity": "high",
        "transitive": "1",
        "vulnerable": "[{\"name\":\"cryptography\",\"version\":\"48.0.1\",\"depth\":2,\"path\":[\"presidio-anonymizer\",\"cryptography\"],\"refs\":[\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 10:23:22.811936+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fcc4c-a4cd-7241-9fb7-48bd1a212f0c"
    },
    {
      "id": "chg_019fc707-ef5b-7ba5-a64a-9cb7833276cf",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:50:13.834293+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fc707-ef5b-7ba5-a64a-9cb7833276cf"
    },
    {
      "id": "chg_019fc707-ef5c-7ea4-af00-da73b14e376b",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:50:13.834293+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fc707-ef5c-7ea4-af00-da73b14e376b"
    },
    {
      "id": "chg_019fc707-ef5d-793b-b50f-c68b2cf54e61",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:50:13.834293+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fc707-ef5d-793b-b50f-c68b2cf54e61"
    },
    {
      "id": "chg_019fc707-ef5d-7e5a-a29a-af189be99756",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 09:50:13.834293+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fc707-ef5d-7e5a-a29a-af189be99756"
    },
    {
      "id": "chg_019fc1ec-6e65-7d96-9047-848e6fe330d0",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 10:02:05.271936+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fc1ec-6e65-7d96-9047-848e6fe330d0"
    },
    {
      "id": "chg_019fb1e2-043a-7ea4-a675-070fe705dd07",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 07:16:47.281445+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jellewas-eu-audit-mcp/eu-audit-mcp#chg-chg_019fb1e2-043a-7ea4-a675-070fe705dd07"
    }
  ],
  "days": [
    {
      "date": "2026-09-14",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 34,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-02",
      "total": 34,
      "delta": -41,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 4
    },
    {
      "date": "2026-08-31",
      "total": 75,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 83,
        "to": 87,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 25,
          "to_days": 26
        },
        "partial": false,
        "compared_to": "2026-08-30",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-08-29",
      "total": 74,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 77,
        "to": 80,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 23,
          "to_days": 24
        },
        "partial": false,
        "compared_to": "2026-08-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-08-26",
      "total": 73,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-19",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-17",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}