{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "jonesrobm-physbound",
  "component": "physbound",
  "generated_at": "2026-09-21T19:17:30.818Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 3,
    "security": 31,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0b321-8532-7400-a143-2814615a949f",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 06:08:33.337207+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a0b321-8532-7400-a143-2814615a949f"
    },
    {
      "id": "chg_01a09e84-1d9e-7ca5-b443-2986a2a5ec28",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 06:04:13.323228+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a09e84-1d9e-7ca5-b443-2986a2a5ec28"
    },
    {
      "id": "chg_01a098b9-f3ef-771b-8f5c-590f209d34c7",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 03:05:18.430638+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a098b9-f3ef-771b-8f5c-590f209d34c7"
    },
    {
      "id": "chg_01a08f17-2352-7a6a-9fc8-095aa341daa0",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 06:10:53.242778+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a08f17-2352-7a6a-9fc8-095aa341daa0"
    },
    {
      "id": "chg_01a07a86-e50e-7626-93e2-e2cc0c325659",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 06:20:55.757666+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a07a86-e50e-7626-93e2-e2cc0c325659"
    },
    {
      "id": "chg_01a074b8-b7bd-7b1a-accb-f702213e361e",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-06",
      "occurred_at": "2026-09-06 03:17:37.698172+00",
      "observed_since": "2026-09-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a074b8-b7bd-7b1a-accb-f702213e361e"
    },
    {
      "id": "chg_01a07037-c974-727c-a327-8b656b957070",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-05",
      "occurred_at": "2026-09-05 06:18:19.113748+00",
      "observed_since": "2026-09-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a07037-c974-727c-a327-8b656b957070"
    },
    {
      "id": "chg_01a06b11-7eb8-7d41-a71f-7e1dc5d12bdc",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 06:18:23.678958+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a06b11-7eb8-7d41-a71f-7e1dc5d12bdc"
    },
    {
      "id": "chg_01a065ea-22f2-7e81-b7bc-05106645034c",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-03",
      "occurred_at": "2026-09-03 06:17:18.16964+00",
      "observed_since": "2026-09-02",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a065ea-22f2-7e81-b7bc-05106645034c"
    },
    {
      "id": "chg_01a060d5-122d-7dab-8b44-9f3d4525875d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 06:36:11.526688+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a060d5-122d-7dab-8b44-9f3d4525875d"
    },
    {
      "id": "chg_01a05931-cf94-78dd-85a6-a5ee1902f4fe",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.87",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 19:00:31.433139+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Stability (0.87 → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a05931-cf94-78dd-85a6-a5ee1902f4fe"
    },
    {
      "id": "chg_01a05931-cf96-7073-ab1d-f9e978362f74",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 19:00:31.433139+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a05931-cf96-7073-ab1d-f9e978362f74"
    },
    {
      "id": "chg_01a05931-cf96-761d-939c-2570b49436a9",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "19",
        "assessed": "20",
        "resolved": "19",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 19:00:31.433139+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Known CVEs (fail → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a05931-cf96-761d-939c-2570b49436a9"
    },
    {
      "id": "chg_01a05931-cf96-7cba-b3c6-13137b4a7358",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-32871",
      "subject_child": "",
      "from_code": "cve.unpatched_critical",
      "to_code": "cve.none",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-32871"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 19:00:31.433139+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "CVE-2026-32871 no longer affects this package",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a05931-cf96-7cba-b3c6-13137b4a7358"
    },
    {
      "id": "chg_01a05675-e436-721b-8af6-b86c15608fde",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-31",
      "occurred_at": "2026-08-31 06:16:01.209695+00",
      "observed_since": "2026-08-30",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a05675-e436-721b-8af6-b86c15608fde"
    },
    {
      "id": "chg_01a0378f-3842-767d-bdac-f7f29de89d70",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 06:15:27.844032+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a0378f-3842-767d-bdac-f7f29de89d70"
    },
    {
      "id": "chg_01a03277-1c27-7a4e-9f9b-3e189c81ef67",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 06:31:01.705548+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_01a03277-1c27-7a4e-9f9b-3e189c81ef67"
    },
    {
      "id": "chg_019ff91b-887f-77fa-b87d-d0e5827c35b3",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 03:12:38.964298+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019ff91b-887f-77fa-b87d-d0e5827c35b3"
    },
    {
      "id": "chg_019ff476-7575-78e0-84c9-2ef61a691f6f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 05:33:51.836964+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019ff476-7575-78e0-84c9-2ef61a691f6f"
    },
    {
      "id": "chg_019fe481-9b72-77a0-aee4-0cf680d67c9a",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 03:12:06.970754+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fe481-9b72-77a0-aee4-0cf680d67c9a"
    },
    {
      "id": "chg_019fda35-007b-7143-88e0-4f33becdfa7e",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 03:12:14.410735+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fda35-007b-7143-88e0-4f33becdfa7e"
    },
    {
      "id": "chg_019fd58b-4b19-7bb0-85a7-1c72b0229131",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 05:28:23.505805+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fd58b-4b19-7bb0-85a7-1c72b0229131"
    },
    {
      "id": "chg_019fcfe9-3980-7449-b580-cf2b6bbb3b6d",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 03:13:16.113687+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcfe9-3980-7449-b580-cf2b6bbb3b6d"
    },
    {
      "id": "chg_019fcfe9-3980-7e54-8e6a-6eecc526078b",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 03:13:16.113687+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcfe9-3980-7e54-8e6a-6eecc526078b"
    },
    {
      "id": "chg_019fcbae-9630-7198-a3b3-c7d6ff63d839",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.unpatched_critical",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "fastmcp",
        "refs": "[\"CVE-2026-32871\",\"CVE-2026-32871\"]",
        "seen": "78",
        "direct": "1",
        "package": "fastmcp",
        "version": "2.14.5",
        "assessed": "79",
        "resolved": "78",
        "severity": "high",
        "vulnerable": "[{\"name\":\"fastmcp\",\"version\":\"2.14.5\",\"depth\":1,\"path\":[\"fastmcp\"],\"refs\":[\"CVE-2025-64340\",\"CVE-2026-27124\",\"CVE-2026-32871\",\"CVE-2025-64340\",\"CVE-2026-27124\",\"CVE-2026-32871\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 07:30:44.384519+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcbae-9630-7198-a3b3-c7d6ff63d839"
    },
    {
      "id": "chg_019fcbae-9631-7a94-a45b-69189602cdc8",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-32871",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-32871",
        "severity": "high"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 07:30:44.384519+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "CVE-2026-32871 affects this package (high)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcbae-9631-7a94-a45b-69189602cdc8"
    },
    {
      "id": "chg_019fcbae-9632-714d-9762-df78e7ad3bed",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 07:30:44.384519+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcbae-9632-714d-9762-df78e7ad3bed"
    },
    {
      "id": "chg_019fcbae-9633-7386-8dfd-bc71aefc7894",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 07:30:44.384519+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fcbae-9633-7386-8dfd-bc71aefc7894"
    },
    {
      "id": "chg_019fc4a8-824c-7680-9831-b82cc1fb8936",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:46:45.551984+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fc4a8-824c-7680-9831-b82cc1fb8936"
    },
    {
      "id": "chg_019fc4a8-824f-7e7e-955e-3d47b0123176",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:46:45.551984+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fc4a8-824f-7e7e-955e-3d47b0123176"
    },
    {
      "id": "chg_019fc4a8-8250-75a9-89e5-58bc6b669186",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:46:45.551984+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fc4a8-8250-75a9-89e5-58bc6b669186"
    },
    {
      "id": "chg_019fc23d-aee0-7472-9160-b9293aee70e9",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 11:30:50.187434+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fc23d-aee0-7472-9160-b9293aee70e9"
    },
    {
      "id": "chg_019fc23d-aee1-71fa-953a-db1bad13d4f3",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 11:30:50.187434+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fc23d-aee1-71fa-953a-db1bad13d4f3"
    },
    {
      "id": "chg_019fb1d3-b2fe-7438-8c7a-f70d34db08ce",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 07:01:08.983101+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/jonesrobm-physbound/physbound#chg-chg_019fb1d3-b2fe-7438-8c7a-f70d34db08ce"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 65,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 80,
        "to": 83,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 24,
          "to_days": 25
        },
        "partial": false,
        "compared_to": "2026-09-19",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-19",
      "total": 64,
      "delta": -3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 67,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-17",
      "total": 67,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 93,
        "to": 97,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 28,
          "to_days": 29
        },
        "partial": false,
        "compared_to": "2026-09-16",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-15",
      "total": 66,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 87,
        "to": 90,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 26,
          "to_days": 27
        },
        "partial": false,
        "compared_to": "2026-09-14",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-14",
      "total": 65,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 80,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-12",
      "total": 64,
      "delta": -3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}