verae-mcp-timestamping-server/recommended-changes/2026-09-22-reject-content-bytes/Done-and-not-done.md
George Lambert 326d90a9db fix: reject content/bytes on MCP tools
Harden stamp/verify/hash_report so unknown and content-shaped args fail
instead of being ignored; publish additionalProperties=false and cover
with schema/runtime tests. Also keep streamable-http host allowlist.
2026-09-22 11:11:26 -04:00

112 B

Done and not done

Done: guard.py, server harden, tests, pytest 19 passed. Not done: WASM client, git commit.