Harden stamp/verify/hash_report so unknown and content-shaped args fail instead of being ignored; publish additionalProperties=false and cover with schema/runtime tests. Also keep streamable-http host allowlist.
113 B
113 B
What to Change To
Reject forbidden content keys; forbid unknown args; additionalProperties false; tests pass.