Harden stamp/verify/hash_report so unknown and content-shaped args fail instead of being ignored; publish additionalProperties=false and cover with schema/runtime tests. Also keep streamable-http host allowlist.
6 lines
95 B
Markdown
6 lines
95 B
Markdown
# How to implement
|
|
|
|
1. Add guard.py
|
|
2. Harden in build_mcp
|
|
3. Expand tests
|
|
4. uv run pytest -q
|