{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "visubramaniam-vsp360-mcp",
  "component": "vsp360-mcp",
  "generated_at": "2026-11-05T13:02:01.995Z",
  "tracking_since": "2026-10-18",
  "counts": {
    "critical": 0,
    "security": 19,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a176a1-bf56-76e3-8e65-52e3c535a304",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_verified",
      "to_code": "provenance.repo_http_error",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "status": "404"
      },
      "occurred_on": "2026-10-26",
      "occurred_at": "2026-10-26 05:14:34.157705+00",
      "observed_since": "2026-10-25",
      "source": "scan",
      "summary": "Source repository (pass → fail)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a176a1-bf56-76e3-8e65-52e3c535a304"
    },
    {
      "id": "chg_01a174a8-126c-75f7-94da-bd74339589a8",
      "kind": "check.unverifiable",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.building_history",
      "to_code": "stability.sandbox_pending",
      "from_value": "0.20",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:02:14.224594+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Stability (0.20 → unverified)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a174a8-126c-75f7-94da-bd74339589a8"
    },
    {
      "id": "chg_01a174a8-126e-7ae1-aa6e-f64591e6b60f",
      "kind": "check.unverifiable",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.injection_clean",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:02:14.224594+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Tool safety (pass → unverified)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a174a8-126e-7ae1-aa6e-f64591e6b60f"
    },
    {
      "id": "chg_01a174a8-1273-7970-8167-d45a08d69cae",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_http_error",
      "to_code": "provenance.repo_verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:02:14.224594+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Source repository (fail → pass)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a174a8-1273-7970-8167-d45a08d69cae"
    },
    {
      "id": "chg_01a174a8-1275-75c6-81a2-7242a79c20ff",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": "fail",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "repo": "visubramaniam/vsp360-mcp"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:02:14.224594+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Provenance (fail → pass)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a174a8-1275-75c6-81a2-7242a79c20ff"
    },
    {
      "id": "chg_01a174a8-1276-7579-8e97-c56085310237",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.none",
      "to_code": "provenance.verified",
      "from_value": null,
      "to_value": "visubramaniam/vsp360-mcp",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "visubramaniam/vsp360-mcp",
        "from": ""
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 20:02:14.224594+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "The attested source repository moved (visubramaniam/vsp360-mcp)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a174a8-1276-7579-8e97-c56085310237"
    },
    {
      "id": "chg_01a17177-40fd-7067-b22e-826558ec3c1f",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 05:10:02.238094+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a17177-40fd-7067-b22e-826558ec3c1f"
    },
    {
      "id": "chg_01a17177-410c-7c22-a1a2-179a6581ea8b",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.none",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "seen": "94",
        "assessed": "95",
        "resolved": "94",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-25",
      "occurred_at": "2026-10-25 05:10:02.238094+00",
      "observed_since": "2026-10-24",
      "source": "scan",
      "summary": "Known CVEs (unverified → pass)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a17177-410c-7c22-a1a2-179a6581ea8b"
    },
    {
      "id": "chg_01a16c38-7c96-7f36-a85f-351f428de73a",
      "kind": "check.unverifiable",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "root_version_missing"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 04:43:23.640887+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (pass → unverified)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16c38-7c96-7f36-a85f-351f428de73a"
    },
    {
      "id": "chg_01a16bc8-c767-72b3-b141-42411ebcbd30",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-109869",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-109869",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-109869 affects this package (high)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c767-72b3-b141-42411ebcbd30"
    },
    {
      "id": "chg_01a16bc8-c767-7d06-8933-77341a5b2b48",
      "kind": "check.verdict",
      "family": "provenance-repo",
      "subject_kind": "check",
      "subject": "provenance-repo",
      "subject_child": "",
      "from_code": "provenance.repo_verified",
      "to_code": "provenance.repo_http_error",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "status": "404"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Source repository (pass → fail)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c767-7d06-8933-77341a5b2b48"
    },
    {
      "id": "chg_01a16bc8-c768-7802-b7be-e6949daa0b03",
      "kind": "check.verdict",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.verified",
      "to_code": "provenance.none",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Provenance (pass → fail)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c768-7802-b7be-e6949daa0b03"
    },
    {
      "id": "chg_01a16bc8-c768-7d23-b0da-b6dc4794c336",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c768-7d23-b0da-b6dc4794c336"
    },
    {
      "id": "chg_01a16bc8-c769-7254-8e20-7487f785617c",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-109841",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-109841",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-109841 affects this package (high)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c769-7254-8e20-7487f785617c"
    },
    {
      "id": "chg_01a16bc8-c769-75db-ae37-9433b162346a",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-109924",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.direct",
      "from_value": null,
      "to_value": "high",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-109924",
        "severity": "high"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "CVE-2026-109924 affects this package (high)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c769-75db-ae37-9433b162346a"
    },
    {
      "id": "chg_01a16bc8-c769-7ab2-800c-fe36457969b2",
      "kind": "check.verdict",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.none",
      "to_code": "cve.direct",
      "from_value": "pass",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "undici",
        "refs": "[\"CVE-2026-109924\",\"CVE-2026-109841\",\"CVE-2026-109869\"]",
        "seen": "94",
        "direct": "1",
        "package": "undici",
        "version": "7.30.0",
        "assessed": "95",
        "resolved": "94",
        "severity": "high",
        "vulnerable": "[{\"name\":\"undici\",\"version\":\"7.30.0\",\"depth\":1,\"path\":[\"undici\"],\"refs\":[\"CVE-2026-109924\",\"CVE-2026-109841\",\"CVE-2026-109869\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "Known CVEs (pass → fail)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c769-7ab2-800c-fe36457969b2"
    },
    {
      "id": "chg_01a16bc8-c76a-702a-8114-4f6dfaa05826",
      "kind": "provenance.repo_changed",
      "family": "build-provenance",
      "subject_kind": "package",
      "subject": "repo",
      "subject_child": "",
      "from_code": "provenance.verified",
      "to_code": "provenance.none",
      "from_value": "visubramaniam/vsp360-mcp",
      "to_value": null,
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "",
        "from": "visubramaniam/vsp360-mcp"
      },
      "occurred_on": "2026-10-24",
      "occurred_at": "2026-10-24 02:41:22.755895+00",
      "observed_since": "2026-10-23",
      "source": "scan",
      "summary": "The attested source repository moved (visubramaniam/vsp360-mcp)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a16bc8-c76a-702a-8114-4f6dfaa05826"
    },
    {
      "id": "chg_01a15cdd-3939-7470-ae5d-7075d6d495f4",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-10-21",
      "occurred_at": "2026-10-21 05:09:24.298877+00",
      "observed_since": "2026-10-20",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a15cdd-3939-7470-ae5d-7075d6d495f4"
    },
    {
      "id": "chg_01a15b7a-b553-7f1e-830b-130813fe5cc3",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_not_cached"
      },
      "occurred_on": "2026-10-20",
      "occurred_at": "2026-10-20 22:42:10.836109+00",
      "observed_since": "2026-10-19",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/visubramaniam-vsp360-mcp/vsp360-mcp#chg-chg_01a15b7a-b553-7f1e-830b-130813fe5cc3"
    }
  ],
  "days": [
    {
      "date": "2026-11-04",
      "total": 82,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 53,
        "to": 57,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 16,
          "to_days": 17
        },
        "partial": false,
        "compared_to": "2026-11-03",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-11-02",
      "total": 81,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 47,
        "to": 50,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 14,
          "to_days": 15
        },
        "partial": false,
        "compared_to": "2026-11-01",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-31",
      "total": 80,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 40,
        "to": 43,
        "delta": 3,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 12,
          "to_days": 13
        },
        "partial": false,
        "compared_to": "2026-10-30",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-29",
      "total": 79,
      "delta": 1,
      "tracked": true,
      "explained": false,
      "beyond_event_horizon": false,
      "attribution": {
        "category": "Stability & Change Management",
        "from": 33,
        "to": 37,
        "delta": 4,
        "others": [],
        "accrual": {
          "code": "stability.building_history",
          "from_days": 10,
          "to_days": 11
        },
        "partial": false,
        "compared_to": "2026-10-28",
        "summary": "No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes."
      },
      "event_count": 0
    },
    {
      "date": "2026-10-27",
      "total": 78,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-26",
      "total": 78,
      "delta": -5,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-10-25",
      "total": 83,
      "delta": 42,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 13
    },
    {
      "date": "2026-10-24",
      "total": 41,
      "delta": -41,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 14
    }
  ]
}