{
      "tool_id": "art-33-mcp-server-self-attestation-pack",
      "tool_version": "1.0.0",
      "display_name": "MCP Server Self-Attestation Pack",
      "mcp_name": "attest_mcp_server",
      "mandate_type": "infrastructure_mandate",
      "wave": 6,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-33-mcp-server-self-attestation-pack.html",
      "description": "Combines the five MCP-dev checks: tool-definition lint (JSON Schema 2020-12), server.json validation (2025-12-11 schema), OAuth 2.1 audit (RFC 9728 PRM, RFC 8707 audience), tool-poisoning scan, and ops/readiness, into one signed attestation: composite A-F ship-readiness grade + per-domain scores + ordered remediation. Dogfooding: the AINumbers server can attest itself.",
      "input_schema_ref": "chaingraph/art-33-mcp-server-self-attestation-pack.html#manifest",
      "deadline": null,
      "deadline_note": "MCP 2026-07-28 spec hardening makes server attestation a live need.",
      "consumes": [],
      "feeds": [
        "cry-05-agent-action-audit-trail-aggregator",
        "ptg-01-ap2-prompt-template-generator"
      ],
      "status": "live",
      "conformance_fixtures": false,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:0fa24d32f68661ef9900f03ddab76d94fc674c6cf4327d809bd7bd5d2451c316","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "BR5SFgz+F1TcJIil874bQmCdI0NSZGayXZ8l+xFGGUEP1ghg9UOOL2r0dXSJxTnqp5wj/jfLxshMFDrx05ryByyXz+6JwJ7mVG0GuU+4UCVAD8E0fooGgoBrtpkd5AnQKorxUuWwVNrN+AR88XgY08SF+Ua7pelFwv36mYg9M6UjKB+d5XkuS5GWkLN6DB2j2TfDiAfrPyAX2giPH5C6gA1PIaD7r13FNddlJJAo9/Bf/Xb356QLVOzLynCDztGBL0fbXAaHBn1TiDlONGZUwcJcai2P4BbLVJ5bjpSNRUkVn+nplebcAEFgV8y2pzqIjOpEKyYMpD6wM7tLutkB6Q==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:0fa24d32f68661ef9900f03ddab76d94fc674c6cf4327d809bd7bd5d2451c316",
          "output": {
            "composite_grade": "A",
            "composite_score": 98,
            "fail_count": 0,
            "pass_count": 23,
            "per_domain_scores": [
              {
                "domain": "A",
                "label": "Tool Definition Lint",
                "score": 100
              },
              {
                "domain": "B",
                "label": "Server JSON Validation",
                "score": 92
              },
              {
                "domain": "C",
                "label": "OAuth Audit",
                "score": 100
              },
              {
                "domain": "D",
                "label": "Tool Poisoning Scan",
                "score": 100
              },
              {
                "domain": "E",
                "label": "Ops Readiness",
                "score": 100
              }
            ],
            "remediation": [
              {
                "code": "B01",
                "domain": "B",
                "note": "$schema present but not 2025-12-11 version",
                "rank": 1,
                "severity": "warn"
              }
            ],
            "warn_count": 1
          }
        }
      },
      "export_capability": [
        "xlsx",
        "csv",
        "pdf",
        "xbrl:ocg-ext"
      ]
    }