Harden stamp/verify/hash_report so unknown and content-shaped args fail instead of being ignored; publish additionalProperties=false and cover with schema/runtime tests. Also keep streamable-http host allowlist.
109 B
109 B
Recommended changes: reject content/bytes
Review 2026-09-22. See What-to-Change.md. Run: uv run pytest -q