{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "norrietaylor-distillery-mcp",
  "component": "distillery-mcp",
  "generated_at": "2026-09-21T02:48:32.745Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 22,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0b325-4df4-7875-95a2-ca1e0fce7aa3",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-18",
      "occurred_at": "2026-09-18 06:12:41.348492+00",
      "observed_since": "2026-09-17",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a0b325-4df4-7875-95a2-ca1e0fce7aa3"
    },
    {
      "id": "chg_01a08f18-ec3c-7a35-b297-3f023a87bb22",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 06:12:50.123449+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a08f18-ec3c-7a35-b297-3f023a87bb22"
    },
    {
      "id": "chg_01a06b0c-73af-7e8e-b472-bcbd2079be4c",
      "kind": "check.verdict",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.stable",
      "from_value": "0.97",
      "to_value": "pass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 06:12:53.191845+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Stability (0.97 → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a06b0c-73af-7e8e-b472-bcbd2079be4c"
    },
    {
      "id": "chg_01a037f8-d7cd-7d94-baba-062058da7843",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-25",
      "occurred_at": "2026-08-25 08:10:50.024208+00",
      "observed_since": "2026-08-24",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a037f8-d7cd-7d94-baba-062058da7843"
    },
    {
      "id": "chg_01a0331c-0bb3-71ed-b81b-af86a1c13ac9",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 09:31:10.931915+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a0331c-0bb3-71ed-b81b-af86a1c13ac9"
    },
    {
      "id": "chg_01a00e57-1828-7a7b-ba5c-2bc042449f5c",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-17",
      "occurred_at": "2026-08-17 06:09:43.890347+00",
      "observed_since": "2026-08-16",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a00e57-1828-7a7b-ba5c-2bc042449f5c"
    },
    {
      "id": "chg_01a00932-d862-7a11-a171-f8219fbd5b74",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-16",
      "occurred_at": "2026-08-16 06:12:02.097701+00",
      "observed_since": "2026-08-15",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_01a00932-d862-7a11-a171-f8219fbd5b74"
    },
    {
      "id": "chg_019fd5af-e33e-7a9c-92a8-7e77ce44ad28",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.insufficient_history",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 06:08:21.719483+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: not enough scan history yet (needs a 30-day window).)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fd5af-e33e-7a9c-92a8-7e77ce44ad28"
    },
    {
      "id": "chg_019fc11b-e584-731b-a2a5-c7e900595daa",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 06:14:18.742838+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fc11b-e584-731b-a2a5-c7e900595daa"
    },
    {
      "id": "chg_019fb5a4-896c-70fb-917d-89537413a750",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 00:48:07.005845+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fb5a4-896c-70fb-917d-89537413a750"
    },
    {
      "id": "chg_019fb5a4-896d-73c9-98fd-bae32412a954",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 00:48:07.005845+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fb5a4-896d-73c9-98fd-bae32412a954"
    },
    {
      "id": "chg_019fb5a4-896d-7a02-bba0-f25e7a8acf17",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "26",
        "assessed": "27",
        "resolved": "26",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 00:48:07.005845+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fb5a4-896d-7a02-bba0-f25e7a8acf17"
    },
    {
      "id": "chg_019fb5a4-896e-7051-b0c5-8af2952e0827",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 00:48:07.005845+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fb5a4-896e-7051-b0c5-8af2952e0827"
    },
    {
      "id": "chg_019fb5a4-896e-7553-a07f-1f9afa6e15b3",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-07-31",
      "occurred_at": "2026-07-31 00:48:07.005845+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fb5a4-896e-7553-a07f-1f9afa6e15b3"
    },
    {
      "id": "chg_019fae9c-358c-78ea-b5b5-2e3642fcf78c",
      "kind": "check.unverifiable",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 16:01:40.718421+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Provenance (fail → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fae9c-358c-78ea-b5b5-2e3642fcf78c"
    },
    {
      "id": "chg_019fae9c-358d-7936-bda9-1d873de9a5b6",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "advisories_unavailable"
      },
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 16:01:40.718421+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fae9c-358d-7936-bda9-1d873de9a5b6"
    },
    {
      "id": "chg_019fae9c-358d-7dcf-91aa-6557037d2df7",
      "kind": "check.unverifiable",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 16:01:40.718421+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Install scripts (pass → unverified)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fae9c-358d-7dcf-91aa-6557037d2df7"
    },
    {
      "id": "chg_019fae9c-358e-736c-854f-43be6e59072b",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.allowlisted",
      "to_code": "installscript.inconclusive",
      "from_value": "build_backend",
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "",
        "from": "build_backend"
      },
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 16:01:40.718421+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fae9c-358e-736c-854f-43be6e59072b"
    },
    {
      "id": "chg_019fa9c1-6217-7ceb-b233-474ee96e3aed",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:10.894282+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fa9c1-6217-7ceb-b233-474ee96e3aed"
    },
    {
      "id": "chg_019fa9c1-6218-74c7-9dc5-12d148e200dc",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "26",
        "assessed": "27",
        "resolved": "26",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:10.894282+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fa9c1-6218-74c7-9dc5-12d148e200dc"
    },
    {
      "id": "chg_019fa9c1-6218-7a0c-980a-64b19c46273c",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:10.894282+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fa9c1-6218-7a0c-980a-64b19c46273c"
    },
    {
      "id": "chg_019fa9c1-6219-700e-9b98-188715c8c7b3",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 17:24:10.894282+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/norrietaylor-distillery-mcp/distillery-mcp#chg-chg_019fa9c1-6219-700e-9b98-188715c8c7b3"
    }
  ],
  "days": [
    {
      "date": "2026-09-19",
      "total": 80,
      "delta": -3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-18",
      "total": 83,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-16",
      "total": 82,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 90,
        "to": 93,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 27,
          "to_days": 28
        },
        "partial": false,
        "compared_to": "2026-09-15",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-14",
      "total": 81,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 83,
        "to": 87,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 25,
          "to_days": 26
        },
        "partial": false,
        "compared_to": "2026-09-13",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-12",
      "total": 80,
      "delta": -3,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 83,
      "delta": 1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-09",
      "total": 82,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 90,
        "to": 93,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 27,
          "to_days": 28
        },
        "partial": false,
        "compared_to": "2026-09-08",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-09-07",
      "total": 81,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 83,
        "to": 87,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 25,
          "to_days": 26
        },
        "partial": false,
        "compared_to": "2026-09-06",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    }
  ]
}