Repository navigation
- Re-tiered findings grounded in MCP spec (DANGEROUS-PKG→INFO, AUTH-MISSING→HIGH)
- Context safety findings now INFO (MCP spec has no standard field)
- TRANSPORT-HTTP on localhost: MEDIUM (was HIGH)
- Client downgrade guard: only applies to HIGH+ findings
- 135 tests passing
- Corrected scan methodology and documentation
- Grounded in: MCP Architecture Spec, OWASP Agentic AI, NSA CSI May 2025