You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
build: consolidate Dependabot updates — uvicorn[standard] floor >=0.50.0 -> >=0.51.0 (#46), ruff 0.15.20 -> 0.15.21 (#45), mypy 2.1.0 -> 2.2.0 (#44). Dev/build tooling + ASGI-server bumps only; no runtime behavior or API change. make ci-local green under the new toolchain.
fix(security): guard FastMCP-core not-found reflection on the router aggregator — unknown tool/resource/prompt names (incl. via the call_tool meta-tool), malformed-request records, and AggregateProvider provider-fault logs no longer reach any caller-visible field or server log; unresolved tool names are bucketed to _unknown in the structlog audit sink and Prometheus labels so a grammar-valid-but-nonexistent name cannot inject into operator logs/metrics. Also marks the Response-Envelope Standard v1.1 §Error-message-sanitation fast-follow COMPLETE fleet-wide (21 backends + router). Patch, no schema change. Research use only; not clinical decision support.