{
  "$schema": "https://verifymcp.io/schemas/changelog.json",
  "server": "zwitbaum-mcp-devops-on-prem",
  "component": "mcp-devops-onpremise",
  "generated_at": "2026-09-21T02:15:48.299Z",
  "tracking_since": "2026-07-27",
  "counts": {
    "critical": 3,
    "security": 19,
    "functional": 0,
    "cosmetic": 0
  },
  "events": [
    {
      "id": "chg_01a0a463-5755-732c-8acc-d677350a8910",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-09-15",
      "occurred_at": "2026-09-15 09:26:08.879593+00",
      "observed_since": "2026-09-14",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a0a463-5755-732c-8acc-d677350a8910"
    },
    {
      "id": "chg_01a09fd5-0cd3-7b9a-a569-3d7fd5da800a",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-09-14",
      "occurred_at": "2026-09-14 12:12:13.534211+00",
      "observed_since": "2026-09-13",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a09fd5-0cd3-7b9a-a569-3d7fd5da800a"
    },
    {
      "id": "chg_01a08054-7399-7838-af04-63a042df39fe",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 09:23:32.534883+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a08054-7399-7838-af04-63a042df39fe"
    },
    {
      "id": "chg_01a08054-739c-7371-b7a7-79bc77703c7b",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_pending",
      "to_code": "toolsafety.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "needs_declared_env",
        "status": "unreachable"
      },
      "occurred_on": "2026-09-08",
      "occurred_at": "2026-09-08 09:23:32.534883+00",
      "observed_since": "2026-09-07",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: this server's registry entry declares environment variables (an API key or similar) that our sandbox does not supply, so we have no tool text to scan.)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a08054-739c-7371-b7a7-79bc77703c7b"
    },
    {
      "id": "chg_01a07c62-cdd8-7b32-a10e-d81d5c8a304e",
      "kind": "check.reason",
      "family": "tool-safety-injection",
      "subject_kind": "check",
      "subject": "tool-safety-injection",
      "subject_child": "",
      "from_code": "toolsafety.sandbox_failed",
      "to_code": "toolsafety.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 15:00:44.777274+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Tool safety (Tool safety not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a07c62-cdd8-7b32-a10e-d81d5c8a304e"
    },
    {
      "id": "chg_01a07c62-cdda-7b7c-a402-3166a84a6b22",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_failed",
      "to_code": "stability.sandbox_pending",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "reason": "version_superseded"
      },
      "occurred_on": "2026-09-07",
      "occurred_at": "2026-09-07 15:00:44.777274+00",
      "observed_since": "2026-09-06",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a07c62-cdda-7b7c-a402-3166a84a6b22"
    },
    {
      "id": "chg_01a023b2-3748-79da-a260-1e1f8388751b",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-21",
      "occurred_at": "2026-08-21 09:41:17.036291+00",
      "observed_since": "2026-08-20",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_01a023b2-3748-79da-a260-1e1f8388751b"
    },
    {
      "id": "chg_019ffa6c-2b18-76ba-bd02-929b6ab89a0c",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-13",
      "occurred_at": "2026-08-13 09:20:20.745608+00",
      "observed_since": "2026-08-12",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019ffa6c-2b18-76ba-bd02-929b6ab89a0c"
    },
    {
      "id": "chg_019ff544-204c-7154-86d4-71a43a283ddb",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-12",
      "occurred_at": "2026-08-12 09:18:30.438819+00",
      "observed_since": "2026-08-11",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019ff544-204c-7154-86d4-71a43a283ddb"
    },
    {
      "id": "chg_019feaf5-9f8a-7cc1-8ea6-ecfa08347a23",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "reason": "vendor_no_verdict"
      },
      "occurred_on": "2026-08-10",
      "occurred_at": "2026-08-10 09:16:33.422817+00",
      "observed_since": "2026-08-09",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019feaf5-9f8a-7cc1-8ea6-ecfa08347a23"
    },
    {
      "id": "chg_019fe5d3-0b07-703b-8ab9-c5b85df2c2c4",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-09",
      "occurred_at": "2026-08-09 09:20:41.20546+00",
      "observed_since": "2026-08-08",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fe5d3-0b07-703b-8ab9-c5b85df2c2c4"
    },
    {
      "id": "chg_019fd138-22a1-7362-9ded-13b25473d3f0",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-05",
      "occurred_at": "2026-08-05 09:19:04.852357+00",
      "observed_since": "2026-08-04",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fd138-22a1-7362-9ded-13b25473d3f0"
    },
    {
      "id": "chg_019fc8dd-3cb8-75fd-a140-7f5fed2795f4",
      "kind": "check.reverified",
      "family": "vulnerabilities",
      "subject_kind": "check",
      "subject": "vulnerabilities",
      "subject_child": "",
      "from_code": "cve.inconclusive",
      "to_code": "cve.unpatched_critical",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "path": "fastmcp",
        "refs": "[\"CVE-2026-32871\",\"CVE-2026-32871\"]",
        "seen": "81",
        "direct": "1",
        "package": "fastmcp",
        "version": "2.14.7",
        "assessed": "82",
        "resolved": "81",
        "severity": "high",
        "vulnerable": "[{\"name\":\"fastmcp\",\"version\":\"2.14.7\",\"depth\":1,\"path\":[\"fastmcp\"],\"refs\":[\"CVE-2025-64340\",\"CVE-2026-27124\",\"CVE-2026-32871\",\"CVE-2025-64340\",\"CVE-2026-27124\",\"CVE-2026-32871\"]}]",
        "tree_source": "registry",
        "tree_status": "resolved"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 18:22:50.01848+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Known CVEs (unverified → fail)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc8dd-3cb8-75fd-a140-7f5fed2795f4"
    },
    {
      "id": "chg_019fc8dd-3cb9-70d4-b8be-be3fd7a8a040",
      "kind": "advisory.identified",
      "family": "vulnerabilities",
      "subject_kind": "advisory",
      "subject": "CVE-2026-32871",
      "subject_child": "",
      "from_code": null,
      "to_code": "cve.unpatched_critical",
      "from_value": null,
      "to_value": "high",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "id": "CVE-2026-32871",
        "severity": "high"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 18:22:50.01848+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "CVE-2026-32871 affects this package (high)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc8dd-3cb9-70d4-b8be-be3fd7a8a040"
    },
    {
      "id": "chg_019fc8dd-3cb9-7ce4-b0df-7422ea2f2814",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 18:22:50.01848+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc8dd-3cb9-7ce4-b0df-7422ea2f2814"
    },
    {
      "id": "chg_019fc8dd-3cbb-7079-9dfd-c2be25b726b3",
      "kind": "score.status_changed",
      "family": "",
      "subject_kind": "score",
      "subject": "status",
      "subject_child": "",
      "from_code": null,
      "to_code": null,
      "from_value": "scored",
      "to_value": "failed",
      "materiality": "critical",
      "direction": "regression",
      "score_delta": null,
      "detail": {
        "to": "failed",
        "from": "scored"
      },
      "occurred_on": "2026-08-03",
      "occurred_at": "2026-08-03 18:22:50.01848+00",
      "observed_since": "2026-08-02",
      "source": "scan",
      "summary": "Score status (scored → failed)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc8dd-3cbb-7079-9dfd-c2be25b726b3"
    },
    {
      "id": "chg_019fc4ca-a0fe-716e-a2fe-fceee29bfc44",
      "kind": "check.reverified",
      "family": "build-provenance",
      "subject_kind": "check",
      "subject": "build-provenance",
      "subject_child": "",
      "from_code": "provenance.inconclusive",
      "to_code": "provenance.none",
      "from_value": "unverified",
      "to_value": "fail",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:24:01.592929+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Provenance (unverified → fail)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc4ca-a0fe-716e-a2fe-fceee29bfc44"
    },
    {
      "id": "chg_019fc4ca-a106-79a3-abf8-4095cffec4d6",
      "kind": "check.reverified",
      "family": "install-scripts",
      "subject_kind": "check",
      "subject": "install-scripts",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {
        "hook": "build_backend",
        "tier": "allowlisted",
        "tool": "hatchling.build",
        "hooks": "build_backend"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:24:01.592929+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Install scripts (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc4ca-a106-79a3-abf8-4095cffec4d6"
    },
    {
      "id": "chg_019fc4ca-a109-7cbb-80f7-0deae5a86188",
      "kind": "installscript.hooks_changed",
      "family": "install-scripts",
      "subject_kind": "package",
      "subject": "hooks",
      "subject_child": "",
      "from_code": "installscript.inconclusive",
      "to_code": "installscript.allowlisted",
      "from_value": null,
      "to_value": "build_backend",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "to": "build_backend",
        "from": ""
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:24:01.592929+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "The scripts that run when this package is installed changed (build_backend)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc4ca-a109-7cbb-80f7-0deae5a86188"
    },
    {
      "id": "chg_019fc4ca-a10b-7bef-993c-650327df8f52",
      "kind": "check.reason",
      "family": "stability",
      "subject_kind": "check",
      "subject": "stability",
      "subject_child": "",
      "from_code": "stability.sandbox_pending",
      "to_code": "stability.sandbox_failed",
      "from_value": "unverified",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "neutral",
      "score_delta": null,
      "detail": {
        "status": "failed"
      },
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 23:24:01.592929+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc4ca-a10b-7bef-993c-650327df8f52"
    },
    {
      "id": "chg_019fc382-9d25-7824-849d-13c2424682ac",
      "kind": "check.reverified",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_inconclusive",
      "to_code": "supplychain.malware_clean",
      "from_value": "unverified",
      "to_value": "pass",
      "materiality": "security",
      "direction": "improvement",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-08-02",
      "occurred_at": "2026-08-02 17:25:44.852945+00",
      "observed_since": "2026-08-01",
      "source": "scan",
      "summary": "Malware scan (unverified → pass)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fc382-9d25-7824-849d-13c2424682ac"
    },
    {
      "id": "chg_019fb19d-2f76-7c9b-a97a-a8837cd37581",
      "kind": "check.unverifiable",
      "family": "supplychain-malware",
      "subject_kind": "check",
      "subject": "supplychain-malware",
      "subject_child": "",
      "from_code": "supplychain.malware_clean",
      "to_code": "supplychain.malware_inconclusive",
      "from_value": "pass",
      "to_value": "unverified",
      "materiality": "security",
      "direction": "regression",
      "score_delta": null,
      "detail": {},
      "occurred_on": "2026-07-30",
      "occurred_at": "2026-07-30 06:01:36.365179+00",
      "observed_since": "2026-07-28",
      "source": "scan",
      "summary": "Malware scan (pass → unverified)",
      "link": "https://verifymcp.io/servers/zwitbaum-mcp-devops-on-prem/mcp-devops-onpremise#chg-chg_019fb19d-2f76-7c9b-a97a-a8837cd37581"
    }
  ],
  "days": [
    {
      "date": "2026-09-16",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-15",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 2
    },
    {
      "date": "2026-09-14",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-09-08",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 5
    },
    {
      "date": "2026-09-07",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 7
    },
    {
      "date": "2026-09-03",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-26",
      "total": 0,
      "delta": 0,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    },
    {
      "date": "2026-08-21",
      "total": 0,
      "delta": null,
      "tracked": true,
      "explained": true,
      "beyond_event_horizon": false,
      "attribution": null,
      "event_count": 1
    }
  ]
}