{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "mason-levyy-mfp-mcp",
  "component": "mfp-mcp",
  "generated_at": "2026-09-23T04:30:01.488Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 31,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0b2f3-1e5e-7620-ba79-9416e5067483",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 05:17:52.41533+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a0b2f3-1e5e-7620-ba79-9416e5067483"
    },
    {
      "id": "chg_01a0b2f3-1e5f-7845-8bc6-c46be6dee691",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 05:17:52.41533+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a0b2f3-1e5f-7845-8bc6-c46be6dee691"
    },
    {
      "id": "chg_01a0ad27-d9b6-7947-8b9d-615ad79ee81c",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-17",
      "occurred_at": "2026-09-17 02:17:45.016843+00",
      "observed_since": "2026-09-16",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a0ad27-d9b6-7947-8b9d-615ad79ee81c"
    },
    {
      "id": "chg_01a09e59-9f41-778b-84da-dd1f228b397f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 05:17:48.489668+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a09e59-9f41-778b-84da-dd1f228b397f"
    },
    {
      "id": "chg_01a09881-ac4c-797f-b9a4-531fc5eb9f6d",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 02:03:50.100215+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a09881-ac4c-797f-b9a4-531fc5eb9f6d"
    },
    {
      "id": "chg_01a09401-84d3-7906-9719-63aa631873f7",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-12",
      "occurred_at": "2026-09-12 05:05:22.286564+00",
      "observed_since": "2026-09-11",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a09401-84d3-7906-9719-63aa631873f7"
    },
    {
      "id": "chg_01a08e46-ce36-7d4d-9f8d-fcc43a038980",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 02:23:20.020461+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a08e46-ce36-7d4d-9f8d-fcc43a038980"
    },
    {
      "id": "chg_01a06a34-0fa7-7e22-8919-cd53ec73fb9a",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 02:16:31.811613+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a06a34-0fa7-7e22-8919-cd53ec73fb9a"
    },
    {
      "id": "chg_01a03fc7-2fb1-7629-86df-5c1d95c7d57e",
      "kind": "check.appeared",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.injection_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-26",
      "occurred_at": "2026-08-26 20:33:33.292206+00",
      "observed_since": "2026-08-25",
      "source": "scan",
      "summary": "First check of Injection markers (pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a03fc7-2fb1-7629-86df-5c1d95c7d57e"
    },
    {
      "id": "chg_01a03fc7-2fb4-72a0-9d6c-ea65d586beba",
      "kind": "check.appeared",
      "family": "tool-safety-manipulation",
      "subject_kind": "check",
      "subject": "tool-safety-manipulation",
      "subject_child": "",
      "from_code": null,
      "to_code": "toolsafety.manipulation_clean",
      "from_value": null,
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "units": "12",
        "judged": "12"
      },
      "occurred_on": "2026-08-26",
      "occurred_at": "2026-08-26 20:33:33.292206+00",
      "observed_since": "2026-08-25",
      "source": "scan",
      "summary": "First check of Judged manipulation (pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_01a03fc7-2fb4-72a0-9d6c-ea65d586beba"
    },
    {
      "id": "chg_019ff3cd-58b3-79e9-9af5-d48f09752834",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 02:29:08.841086+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019ff3cd-58b3-79e9-9af5-d48f09752834"
    },
    {
      "id": "chg_019fe981-97f7-7766-af4b-764d10a73aa0",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 02:30:12.167286+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fe981-97f7-7766-af4b-764d10a73aa0"
    },
    {
      "id": "chg_019fd4e9-9035-782d-8f9c-57a25858c47f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 02:31:44.381415+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fd4e9-9035-782d-8f9c-57a25858c47f"
    },
    {
      "id": "chg_019fd4e9-9036-79f0-80be-17c1fe2f06a0",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 02:31:44.381415+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fd4e9-9036-79f0-80be-17c1fe2f06a0"
    },
    {
      "id": "chg_019fcb91-99b4-7a93-9d0d-b80573bed3a5",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "lxml",
        "refs": "[\"CVE-2026-41066\",\"CVE-2026-41066\"]",
        "seen": "67",
        "direct": "1",
        "package": "lxml",
        "version": "5.4.0",
        "assessed": "68",
        "resolved": "67",
        "severity": "high",
        "vulnerable": "[{\"name\":\"lxml\",\"version\":\"5.4.0\",\"depth\":1,\"path\":[\"lxml\"],\"refs\":[\"CVE-2026-41066\",\"CVE-2026-41066\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:59:04.727534+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fcb91-99b4-7a93-9d0d-b80573bed3a5"
    },
    {
      "id": "chg_019fcb91-99bd-756f-bb7d-0c8d6baadf7f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 06:59:04.727534+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fcb91-99bd-756f-bb7d-0c8d6baadf7f"
    },
    {
      "id": "chg_019fc4a5-6234-7dc4-b567-5d3a6dec26d0",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:43:20.743248+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fc4a5-6234-7dc4-b567-5d3a6dec26d0"
    },
    {
      "id": "chg_019fc4a5-6235-7a7e-b2f2-67db56d61dfa",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:43:20.743248+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fc4a5-6235-7a7e-b2f2-67db56d61dfa"
    },
    {
      "id": "chg_019fc4a5-6235-7ea3-b2a3-9bba3f3445be",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 22:43:20.743248+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fc4a5-6235-7ea3-b2a3-9bba3f3445be"
    },
    {
      "id": "chg_019fc1ec-25c6-739b-b3f3-7dd0d90dd424",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 10:01:46.662507+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fc1ec-25c6-739b-b3f3-7dd0d90dd424"
    },
    {
      "id": "chg_019fb718-525b-7436-8e1d-991ce0cc1d65",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41066",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41066",
        "severity": "high"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "CVE-2026-41066 affects this package (high)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525b-7436-8e1d-991ce0cc1d65"
    },
    {
      "id": "chg_019fb718-525c-78de-85dc-afc91c109c68",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525c-78de-85dc-afc91c109c68"
    },
    {
      "id": "chg_019fb718-525c-7e07-a81d-c07e90c1317e",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525c-7e07-a81d-c07e90c1317e"
    },
    {
      "id": "chg_019fb718-525d-7485-a0ae-4c29cfb3a39f",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.direct",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "lxml",
        "refs": "[\"CVE-2026-41066\",\"CVE-2026-41066\"]",
        "seen": "67",
        "direct": "1",
        "package": "lxml",
        "version": "5.4.0",
        "assessed": "68",
        "resolved": "67",
        "severity": "high",
        "vulnerable": "[{\"name\":\"lxml\",\"version\":\"5.4.0\",\"depth\":1,\"path\":[\"lxml\"],\"refs\":[\"CVE-2026-41066\",\"CVE-2026-41066\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525d-7485-a0ae-4c29cfb3a39f"
    },
    {
      "id": "chg_019fb718-525d-7b32-a976-221f12beb80d",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525d-7b32-a976-221f12beb80d"
    },
    {
      "id": "chg_019fb718-525e-735e-a86c-4f8bb6ef3846",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 07:34:12.291123+00",
      "observed_since": "2026-07-30",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fb718-525e-735e-a86c-4f8bb6ef3846"
    },
    {
      "id": "chg_019fa9c1-d3ee-7789-a10d-eb33f43e347f",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "resolver_unavailable"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:40.035727+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Known CVEs (fail → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fa9c1-d3ee-7789-a10d-eb33f43e347f"
    },
    {
      "id": "chg_019fa9c1-d3ef-7068-a677-dfafa4b3a83a",
      "kind": "check.unverifiable",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:40.035727+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Provenance (fail → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fa9c1-d3ef-7068-a677-dfafa4b3a83a"
    },
    {
      "id": "chg_019fa9c1-d3ef-76c2-b318-300ed6d24916",
      "kind": "check.unverifiable",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:40.035727+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Install scripts (pass → unverified)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fa9c1-d3ef-76c2-b318-300ed6d24916"
    },
    {
      "id": "chg_019fa9c1-d3ef-7b56-ade7-2e19d22c7100",
      "kind": "advisory.resolved",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-41066",
      "subject_child": "",
      "from_code": "cve.direct",
      "to_code": "cve.inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-41066"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:40.035727+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "CVE-2026-41066 no longer affects this package",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fa9c1-d3ef-7b56-ade7-2e19d22c7100"
    },
    {
      "id": "chg_019fa9c1-d3f0-7281-b7bb-4fdfd22e5d7e",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "build_backend",
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "",
        "from": "build_backend"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:40.035727+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/mason-levyy-mfp-mcp/mfp-mcp#chg-chg_019fa9c1-d3f0-7281-b7bb-4fdfd22e5d7e"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 55,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 80,
        "to": 83,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 24,
          "to_days": 25
        },
        "partial": false,
        "compared_to": "2026-09-19",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-19",
      "total": 54,
      "delta": -3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 57,
      "delta": -14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-17",
      "total": 71,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-15",
      "total": 55,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 87,
        "to": 90,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 26,
          "to_days": 27
        },
        "partial": false,
        "compared_to": "2026-09-14",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-14",
      "total": 54,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 69,
      "delta": 16,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-12",
      "total": 53,
      "delta": -18,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}