{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "openhcsdev-openhcs",
  "component": "openhcs",
  "generated_at": "2026-09-20T14:51:58.525Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 0,
    "security": 67,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a09e16-2e73-7364-93bd-8df84e9961ba",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 04:04:08.813502+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a09e16-2e73-7364-93bd-8df84e9961ba"
    },
    {
      "id": "chg_01a0985b-f2e3-79a2-a87d-586783593580",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-13",
      "occurred_at": "2026-09-13 01:22:37.856957+00",
      "observed_since": "2026-09-12",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0985b-f2e3-79a2-a87d-586783593580"
    },
    {
      "id": "chg_01a08eb4-8b28-7638-8785-297c331efdb4",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-11",
      "occurred_at": "2026-09-11 04:23:11.796432+00",
      "observed_since": "2026-09-10",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a08eb4-8b28-7638-8785-297c331efdb4"
    },
    {
      "id": "chg_01a0891d-597c-761a-89ef-908392b163f9",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "install_failure",
        "status": "failed"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 02:19:57.094297+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0891d-597c-761a-89ef-908392b163f9"
    },
    {
      "id": "chg_01a0891d-597d-723c-971f-c488f3d55acb",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "install_failure",
        "status": "failed"
      },
      "occurred_on": "2026-09-10",
      "occurred_at": "2026-09-10 02:19:57.094297+00",
      "observed_since": "2026-09-09",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this package could not be installed in a clean environment, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0891d-597d-723c-971f-c488f3d55acb"
    },
    {
      "id": "chg_01a0871d-f6d1-7c81-8e9b-bb3afe96c6a8",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 17:01:22.994898+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0871d-f6d1-7c81-8e9b-bb3afe96c6a8"
    },
    {
      "id": "chg_01a0871d-f6d3-787d-903d-85a8e62cdc14",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 17:01:22.994898+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0871d-f6d3-787d-903d-85a8e62cdc14"
    },
    {
      "id": "chg_01a08465-d627-7044-8419-96724dd06dbd",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-09",
      "occurred_at": "2026-09-09 04:21:01.442103+00",
      "observed_since": "2026-09-08",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a08465-d627-7044-8419-96724dd06dbd"
    },
    {
      "id": "chg_01a07ee2-db69-7edf-b834-d118709c19c4",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 02:39:51.574449+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a07ee2-db69-7edf-b834-d118709c19c4"
    },
    {
      "id": "chg_01a06a34-5095-7102-bd71-30cacca4b0e8",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-04",
      "occurred_at": "2026-09-04 02:16:48.384744+00",
      "observed_since": "2026-09-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a06a34-5095-7102-bd71-30cacca4b0e8"
    },
    {
      "id": "chg_01a06055-46d0-75a9-8b75-731f644a4499",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-02",
      "occurred_at": "2026-09-02 04:16:36.472207+00",
      "observed_since": "2026-09-01",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a06055-46d0-75a9-8b75-731f644a4499"
    },
    {
      "id": "chg_01a04574-649b-7e59-85e8-c5b17b16566d",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69248",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69248",
        "severity": "high"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 23:00:50.948135+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "CVE-2026-69248 affects this package (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a04574-649b-7e59-85e8-c5b17b16566d"
    },
    {
      "id": "chg_01a04574-649d-77df-b30f-339e6c76c872",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "cryptography",
        "refs": "[\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\",\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\"]",
        "seen": "119",
        "direct": "1",
        "package": "cryptography",
        "version": "48.0.1",
        "assessed": "120",
        "resolved": "119",
        "severity": "high",
        "vulnerable": "[{\"name\":\"cryptography\",\"version\":\"48.0.1\",\"depth\":1,\"path\":[\"cryptography\"],\"refs\":[\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\",\"CVE-2026-69247\",\"CVE-2026-69249\",\"CVE-2026-69248\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 23:00:50.948135+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a04574-649d-77df-b30f-339e6c76c872"
    },
    {
      "id": "chg_01a04574-649d-7ef1-a796-e6515f241bd7",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69247",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69247",
        "severity": "high"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 23:00:50.948135+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "CVE-2026-69247 affects this package (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a04574-649d-7ef1-a796-e6515f241bd7"
    },
    {
      "id": "chg_01a04574-649e-7566-9c54-f4474881fa7a",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-69249",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-69249",
        "severity": "high"
      },
      "occurred_on": "2026-08-27",
      "occurred_at": "2026-08-27 23:00:50.948135+00",
      "observed_since": "2026-08-26",
      "source": "scan",
      "summary": "CVE-2026-69249 affects this package (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a04574-649e-7566-9c54-f4474881fa7a"
    },
    {
      "id": "chg_01a032c3-a0ae-79e7-89fa-169f1665d665",
      "kind": "check.verdict",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_clean",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 07:54:36.354837+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Malware scan (fail → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a032c3-a0ae-79e7-89fa-169f1665d665"
    },
    {
      "id": "chg_01a032c3-a0af-7d28-ae64-7cfe98597a40",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_clean",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-24",
      "occurred_at": "2026-08-24 07:54:36.354837+00",
      "observed_since": "2026-08-23",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a032c3-a0af-7d28-ae64-7cfe98597a40"
    },
    {
      "id": "chg_01a0036a-7af4-7e16-94c3-84c771f7f494",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 03:15:04.984064+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0036a-7af4-7e16-94c3-84c771f7f494"
    },
    {
      "id": "chg_01a0036a-7af8-7cb9-80e3-c657e1d827b9",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 03:15:04.984064+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0036a-7af8-7cb9-80e3-c657e1d827b9"
    },
    {
      "id": "chg_01a0036a-7af9-7382-804a-9db2a30d24e9",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-15",
      "occurred_at": "2026-08-15 03:15:04.984064+00",
      "observed_since": "2026-08-14",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_01a0036a-7af9-7382-804a-9db2a30d24e9"
    },
    {
      "id": "chg_019ffdd7-d0d6-7eab-83ee-06e270f4d158",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 01:16:47.132789+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffdd7-d0d6-7eab-83ee-06e270f4d158"
    },
    {
      "id": "chg_019ffdd7-d0d8-7426-a45c-d8cc1af8e275",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-14",
      "occurred_at": "2026-08-14 01:16:47.132789+00",
      "observed_since": "2026-08-13",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffdd7-d0d8-7426-a45c-d8cc1af8e275"
    },
    {
      "id": "chg_019ffc11-a4fe-7d9f-9838-c17fc4b404a3",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 17:00:42.59543+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffc11-a4fe-7d9f-9838-c17fc4b404a3"
    },
    {
      "id": "chg_019ffc11-a500-707b-8e4b-b0064f94a439",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 17:00:42.59543+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffc11-a500-707b-8e4b-b0064f94a439"
    },
    {
      "id": "chg_019ffc11-a500-7868-97b7-87e841503f84",
      "kind": "check.verdict",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_found",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"gptMalware:QWp-Js1nYvtZQxtSqM2Ta_qemc9mzkaXoQq7oceEAga8\",\"gptMalware:QgbOtmvtywGFYbQvjdUfUZKifbzJYNd68Xr3ZTleyc54\",\"gptMalware:QtoNQExnqe3vJEHk_m23wS-8MZ9lkIMu5zTZzRBO684k\",\"gptMalware:Qw6NvcMyoJDRGiBuQ-NpBzplUCx8Fm86X_Pr-Up3B3XQ\"]",
        "severity": "high"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 17:00:42.59543+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (pass → fail)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffc11-a500-7868-97b7-87e841503f84"
    },
    {
      "id": "chg_019ffc11-a501-73a6-8972-6db4e7b4f35e",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 17:00:42.59543+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffc11-a501-73a6-8972-6db4e7b4f35e"
    },
    {
      "id": "chg_019ffc11-a501-7f1d-8b7f-6bdfc3ff5fb6",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 17:00:42.59543+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019ffc11-a501-7f1d-8b7f-6bdfc3ff5fb6"
    },
    {
      "id": "chg_019fe482-ca44-7d1e-a5c8-3c1659db7937",
      "kind": "check.verdict",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_clean",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 03:13:24.482585+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (fail → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe482-ca44-7d1e-a5c8-3c1659db7937"
    },
    {
      "id": "chg_019fe482-ca45-7d3a-84af-00a7a2e59c3f",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_clean",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 03:13:24.482585+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe482-ca45-7d3a-84af-00a7a2e59c3f"
    },
    {
      "id": "chg_019fe482-ca48-7769-b937-d10c09faa4de",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_clean",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 03:13:24.482585+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe482-ca48-7769-b937-d10c09faa4de"
    },
    {
      "id": "chg_019fe44b-9e79-7105-9a7a-881d8453345f",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 02:13:08.815322+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (fail → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe44b-9e79-7105-9a7a-881d8453345f"
    },
    {
      "id": "chg_019fe2f6-cf41-74e5-8571-1ecee70ad770",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_found",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "refs": "[\"gptMalware:QIOqa_gG642emHtpN9eIL_87Dgk-UDYfTkBdckHtw4BQ\",\"gptMalware:QZ0wfFzfdCFH3H1aoPPO1DyG-2FKNGs6pO_E-0AUQXEg\"]",
        "severity": "high"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 20:00:53.550603+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware scan (unverified → fail)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe2f6-cf41-74e5-8571-1ecee70ad770"
    },
    {
      "id": "chg_019fe2f6-cf42-7a37-b354-04600401fefa",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 20:00:53.550603+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe2f6-cf42-7a37-b354-04600401fefa"
    },
    {
      "id": "chg_019fe2f6-cf42-7f3c-b497-e040ca060aec",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-08-08",
      "occurred_at": "2026-08-08 20:00:53.550603+00",
      "observed_since": "2026-08-07",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fe2f6-cf42-7f3c-b497-e040ca060aec"
    },
    {
      "id": "chg_019fd9c7-cd64-7217-9cfa-18be1297227e",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "install_failure",
        "status": "failed"
      },
      "occurred_on": "2026-08-07",
      "occurred_at": "2026-08-07 01:12:57.91572+00",
      "observed_since": "2026-08-06",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fd9c7-cd64-7217-9cfa-18be1297227e"
    },
    {
      "id": "chg_019fd4a3-76e1-75dd-a688-4452616802cc",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-06",
      "occurred_at": "2026-08-06 01:15:10.40267+00",
      "observed_since": "2026-08-05",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fd4a3-76e1-75dd-a688-4452616802cc"
    },
    {
      "id": "chg_019fcf44-6279-7562-9d71-d58a5a214df4",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 00:13:13.185329+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fcf44-6279-7562-9d71-d58a5a214df4"
    },
    {
      "id": "chg_019fcf44-627a-76e5-afca-fa0c76f08fd5",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 00:13:13.185329+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fcf44-627a-76e5-afca-fa0c76f08fd5"
    },
    {
      "id": "chg_019fcd13-dfb7-7b38-ab5f-52c56f212b28",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 14:00:59.554117+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fcd13-dfb7-7b38-ab5f-52c56f212b28"
    },
    {
      "id": "chg_019fcd13-dfb8-7e7c-95af-7ba7ccf546c6",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 14:00:59.554117+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fcd13-dfb8-7e7c-95af-7ba7ccf546c6"
    },
    {
      "id": "chg_019fcd13-dfb9-7b96-815d-e33886f892fd",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": null,
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 14:00:59.554117+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fcd13-dfb9-7b96-815d-e33886f892fd"
    },
    {
      "id": "chg_019fca66-2fbb-725f-a0b6-d03ad8de5203",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "114",
        "assessed": "115",
        "resolved": "114",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-04",
      "occurred_at": "2026-08-04 01:32:02.332024+00",
      "observed_since": "2026-08-03",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fca66-2fbb-725f-a0b6-d03ad8de5203"
    },
    {
      "id": "chg_019fc4c3-fbd7-7855-ab46-b6ee81434c94",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:46.119458+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fc4c3-fbd7-7855-ab46-b6ee81434c94"
    },
    {
      "id": "chg_019fc4c3-fbda-76dc-b566-a4167d3e4ec0",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.unreviewed",
      "from_value": "unverified",
      "to_value": "partial",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "cmdclass",
        "tier": "unreviewed",
        "hooks": "build_backend,cmdclass",
        "command": "<custom, unreviewed>"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:46.119458+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → partial)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fc4c3-fbda-76dc-b566-a4167d3e4ec0"
    },
    {
      "id": "chg_019fc4c3-fbdb-7047-ab67-38a303bbe73a",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.unreviewed",
      "from_value": null,
      "to_value": "build_backend,cmdclass",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend,cmdclass",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:16:46.119458+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend,cmdclass)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fc4c3-fbdb-7047-ab67-38a303bbe73a"
    },
    {
      "id": "chg_019fc005-ff58-7993-841f-ad9faa30124c",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 01:10:46.339231+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fc005-ff58-7993-841f-ad9faa30124c"
    },
    {
      "id": "chg_019fbd97-b752-726e-a404-a60cd9a3744d",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "unreachable"
      },
      "occurred_on": "2026-08-01",
      "occurred_at": "2026-08-01 13:51:04.515867+00",
      "observed_since": "2026-07-31",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fbd97-b752-726e-a404-a60cd9a3744d"
    },
    {
      "id": "chg_019fb261-8b14-74e8-b76b-1321d98a7b68",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 09:36:04.864724+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware scan (fail → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fb261-8b14-74e8-b76b-1321d98a7b68"
    },
    {
      "id": "chg_019fb261-8b16-7e6e-983f-ba5683a1cc3d",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 09:36:04.864724+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fb261-8b16-7e6e-983f-ba5683a1cc3d"
    },
    {
      "id": "chg_019fb261-8b17-7616-9740-48ef65a74d6a",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 09:36:04.864724+00",
      "observed_since": "2026-07-29",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fb261-8b17-7616-9740-48ef65a74d6a"
    },
    {
      "id": "chg_019fae17-74a8-7016-b825-58fe3eba866b",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 13:36:40.592342+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fae17-74a8-7016-b825-58fe3eba866b"
    },
    {
      "id": "chg_019fae17-74a8-7a71-aff2-76a1e021eadd",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 13:36:40.592342+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fae17-74a8-7a71-aff2-76a1e021eadd"
    },
    {
      "id": "chg_019fac90-0bc0-7d59-acd5-a07e0fd64a61",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 06:29:09.170705+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fac90-0bc0-7d59-acd5-a07e0fd64a61"
    },
    {
      "id": "chg_019fac90-0bc3-7375-9f24-d0420b89bf66",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 06:29:09.170705+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fac90-0bc3-7375-9f24-d0420b89bf66"
    },
    {
      "id": "chg_019fac90-0bc3-7963-b864-3612affdedd8",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-29",
      "occurred_at": "2026-07-29 06:29:09.170705+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fac90-0bc3-7963-b864-3612affdedd8"
    },
    {
      "id": "chg_019faad5-6cbe-7183-8662-75906723e12d",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 22:25:41.553913+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019faad5-6cbe-7183-8662-75906723e12d"
    },
    {
      "id": "chg_019faad5-6cbe-7af3-99a4-a5dd8ddaf8e8",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 22:25:41.553913+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019faad5-6cbe-7af3-99a4-a5dd8ddaf8e8"
    },
    {
      "id": "chg_019fa9f6-046d-782d-abd2-8a2c4ebd54d8",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "fail",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 18:21:40.32321+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware scan (fail → unverified)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa9f6-046d-782d-abd2-8a2c4ebd54d8"
    },
    {
      "id": "chg_019fa9f6-046d-7dc8-965c-fc3d29b162e4",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 18:21:40.32321+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa9f6-046d-7dc8-965c-fc3d29b162e4"
    },
    {
      "id": "chg_019fa9f6-046e-729f-bb50-fd09cc8f0b64",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 18:21:40.32321+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa9f6-046e-729f-bb50-fd09cc8f0b64"
    },
    {
      "id": "chg_019fa9f6-046e-775b-bb9e-b069f161c09a",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 18:21:40.32321+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa9f6-046e-775b-bb9e-b069f161c09a"
    },
    {
      "id": "chg_019fa677-f460-73aa-8c0e-9a1d08d42ebf",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f460-73aa-8c0e-9a1d08d42ebf"
    },
    {
      "id": "chg_019fa677-f462-776a-93d4-c62efa622a62",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f462-776a-93d4-c62efa622a62"
    },
    {
      "id": "chg_019fa677-f462-7eba-9cb8-dd5c496cb299",
      "kind": "malware.identified",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": null,
      "to_code": "supplychain.malware_found",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "severity": "high"
      },
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) (high)",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f462-7eba-9cb8-dd5c496cb299"
    },
    {
      "id": "chg_019fa677-f463-7a11-96d5-91e3aea2bf7d",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f463-7a11-96d5-91e3aea2bf7d"
    },
    {
      "id": "chg_019fa677-f464-7114-8343-961f0a9467c6",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f464-7114-8343-961f0a9467c6"
    },
    {
      "id": "chg_019fa677-f464-79b3-953d-0ff77caa1189",
      "kind": "malware.resolved",
      "family": "supplychain-malware",
      "subject_kind": "advisory",
      "subject": "gptMalware",
      "subject_child": "",
      "from_code": "supplychain.malware_found",
      "to_code": "supplychain.malware_found",
      "from_value": "high",
      "to_value": null,
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-28",
      "occurred_at": "2026-07-28 02:05:07.022487+00",
      "observed_since": "2026-07-27",
      "source": "scan",
      "summary": "Malware indicator (automated code analysis) cleared",
      "link": "https://verifymcp.io/servers/openhcsdev-openhcs/openhcs#chg-chg_019fa677-f464-79b3-953d-0ff77caa1189"
    }
  ],
  "days": [
    {
      "date": "2026-09-20",
      "total": 14,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-14",
      "total": 14,
      "delta": -15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-13",
      "total": 29,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-11",
      "total": 14,
      "delta": -14,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-10",
      "total": 28,
      "delta": -1,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-09",
      "total": 29,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 8
    },
    {
      "date": "2026-09-08",
      "total": 29,
      "delta": 15,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-04",
      "total": 14,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    }
  ]
}