Harden stamp/verify/hash_report so unknown and content-shaped args fail instead of being ignored; publish additionalProperties=false and cover with schema/runtime tests. Also keep streamable-http host allowlist.
95 B
95 B
How to implement
- Add guard.py
- Harden in build_mcp
- Expand tests
- uv run pytest -q