{"schema_version":"verify.policy_export.v3","generated_at":"2026-08-23T17:27:46.770089+00:00","snapshot_id":"trustsnap_80690f98329259e3","current_snapshot":{"schema_version":"verify.trust_snapshot.v1","snapshot_id":"trustsnap_80690f98329259e3","generated_at":"2026-08-23T17:27:46.846895+00:00","trust_evaluated_at":"2026-08-23T17:27:46.846895+00:00","evidence_revision":"b5d9e373d6981f3eb35e1e87","source":"current_snapshot","server":"github-xiaoq-in/xiaoflow-mcp","last_validated_at":"2026-08-23T08:20:57.454849+00:00","validation_age_hours":9.11,"freshness":{"schema_version":"verify.freshness_profile.v1","last_validated_at":"2026-08-23T08:20:57.454849+00:00","age_hours":9.11,"bucket":"verified_last_24h","label":"Verified in last 24h","badges":["verified_last_24h"],"freshness_sla_hours":720.0,"freshness_sla_status":"met","stale_score_suppressed":false,"display_score":69.79,"raw_score":69.79,"confidence_score":82.5,"confidence_weighted_score":57.6,"tier_status":[{"tier":"community","label":"Community","freshness_sla_hours":720,"met":true,"priority_revalidation":false},{"tier":"pro","label":"Pro","freshness_sla_hours":168,"met":true,"priority_revalidation":true},{"tier":"enterprise","label":"Enterprise","freshness_sla_hours":24,"met":true,"priority_revalidation":true}]},"current_status":"healthy","current_score":69.79,"display_score":69.79,"stale_score_suppressed":false,"production_trust_decision":{"schema_version":"verify.executive_verdict.v1","decision":"Block for production","why":"unauthenticated behavior not proven","next_action":"revalidate, add safeguards, export policy","reason_count":1},"production_readiness_class":{"code":"needs_remediation","label":"Needs remediation","reason":"Degraded from Safe for evaluation: 1 open high/critical-severity alert(s) are active, including at least one that blocks even evaluation-level trust."},"evidence_confidence":{"score":82.5,"label":"high","validation_age_hours":9.11,"live_check_count":22,"basis":{"evidence_bearing_validations":6,"affirmative_live_check_count":22,"validation_age_hours":9.11,"freshness_threshold_hours":24}},"active_alerts":[{"code":"server_card_schema_drifted","severity":"critical","title":"Server card describes a different server: card says \"xiaoflow-mcp\", live says \"xiaoflow-mcp-server\""}],"active_alert_summary":{"critical":1,"high":0,"medium":0,"low":0,"high_or_critical":1,"total":1},"materialization":{"state":"partial","trust_core_complete":true,"fields_unavailable":["tool_security_inventory","security_posture_summary","write_action_governance","capability_taxonomy","remediations"],"materialized_at":"2026-08-23T17:27:46.846895+00:00"}},"snapshot_invariant":{"schema_version":"verify.snapshot_invariant.v1","server":"github-xiaoq-in/xiaoflow-mcp","ok":true,"surface_snapshot_ids":{"page":"trustsnap_80690f98329259e3","badge":null,"report":null,"policy":"trustsnap_80690f98329259e3"},"checked_surfaces":["page","policy"],"unchecked_surfaces":["badge","report"],"checked_count_surfaces":[],"count_mismatches":{},"checked_at":"2026-08-23T17:27:46.770111+00:00"},"format":"json","server":"github-xiaoq-in/xiaoflow-mcp","title":"xiaoq-in/xiaoflow-mcp","allow":false,"assessment_status":"assessed","blockers":["evidence_unavailable_fail_closed"],"requires_human_approval":true,"partial":true,"fields_unavailable":["tool_security_inventory","security_posture_summary","write_action_governance","capability_taxonomy","remediations"],"allowed_tools":["discover_keywords","get_keyword_metrics","get_related_keywords","bulk_keyword_metrics","start_keyword_expansion","get_quota","get_keyword_expansion_status","analyze_url","get_domain_stats","list_domain_keywords","get_keyword_details","bulk_keyword_lookup"],"blocked_tools":[],"approval_required_tools":[],"required_scopes":["email","mcp","openid","profile"],"max_risk":"medium","constraints":{"client":null,"requires_oauth":false,"no_write_without_approval":true,"max_freshness_hours":168.0},"trust_snapshot":{"schema_version":"verify.trust_snapshot.v1","snapshot_id":"trustsnap_80690f98329259e3","generated_at":"2026-08-23T17:27:46.846895+00:00","trust_evaluated_at":"2026-08-23T17:27:46.846895+00:00","evidence_revision":"b5d9e373d6981f3eb35e1e87","source":"current_snapshot","server":"github-xiaoq-in/xiaoflow-mcp","last_validated_at":"2026-08-23T08:20:57.454849+00:00","validation_age_hours":9.11,"freshness":{"schema_version":"verify.freshness_profile.v1","last_validated_at":"2026-08-23T08:20:57.454849+00:00","age_hours":9.11,"bucket":"verified_last_24h","label":"Verified in last 24h","badges":["verified_last_24h"],"freshness_sla_hours":720.0,"freshness_sla_status":"met","stale_score_suppressed":false,"display_score":69.79,"raw_score":69.79,"confidence_score":82.5,"confidence_weighted_score":57.6,"tier_status":[{"tier":"community","label":"Community","freshness_sla_hours":720,"met":true,"priority_revalidation":false},{"tier":"pro","label":"Pro","freshness_sla_hours":168,"met":true,"priority_revalidation":true},{"tier":"enterprise","label":"Enterprise","freshness_sla_hours":24,"met":true,"priority_revalidation":true}]},"current_status":"healthy","current_score":69.79,"display_score":69.79,"stale_score_suppressed":false,"production_trust_decision":{"schema_version":"verify.executive_verdict.v1","decision":"Block for production","why":"unauthenticated behavior not proven","next_action":"revalidate, add safeguards, export policy","reason_count":1},"production_readiness_class":{"code":"needs_remediation","label":"Needs remediation","reason":"Degraded from Safe for evaluation: 1 open high/critical-severity alert(s) are active, including at least one that blocks even evaluation-level trust."},"evidence_confidence":{"score":82.5,"label":"high","validation_age_hours":9.11,"live_check_count":22,"basis":{"evidence_bearing_validations":6,"affirmative_live_check_count":22,"validation_age_hours":9.11,"freshness_threshold_hours":24}},"active_alerts":[{"code":"server_card_schema_drifted","severity":"critical","title":"Server card describes a different server: card says \"xiaoflow-mcp\", live says \"xiaoflow-mcp-server\""}],"active_alert_summary":{"critical":1,"high":0,"medium":0,"low":0,"high_or_critical":1,"total":1},"materialization":{"state":"partial","trust_core_complete":true,"fields_unavailable":["tool_security_inventory","security_posture_summary","write_action_governance","capability_taxonomy","remediations"],"materialized_at":"2026-08-23T17:27:46.846895+00:00"}},"freshness":{"schema_version":"verify.freshness_profile.v1","last_validated_at":"2026-08-23T08:20:57.454849+00:00","age_hours":9.11,"bucket":"verified_last_24h","label":"Verified in last 24h","badges":["verified_last_24h"],"freshness_sla_hours":168.0,"freshness_sla_status":"met","stale_score_suppressed":false,"display_score":69.79,"raw_score":69.79,"confidence_score":82.5,"confidence_weighted_score":57.6,"tier_status":[{"tier":"community","label":"Community","freshness_sla_hours":720,"met":true,"priority_revalidation":false},{"tier":"pro","label":"Pro","freshness_sla_hours":168,"met":true,"priority_revalidation":true},{"tier":"enterprise","label":"Enterprise","freshness_sla_hours":24,"met":true,"priority_revalidation":true}]},"confidence_weighted_score":57.6,"current_status":"healthy","current_score":69.79,"has_oauth":true,"tool_decisions":[{"name":"discover_keywords","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_keyword_metrics","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_related_keywords","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"bulk_keyword_metrics","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"start_keyword_expansion","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_quota","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_keyword_expansion_status","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"analyze_url","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_domain_stats","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"list_domain_keywords","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"get_keyword_details","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]},{"name":"bulk_keyword_lookup","decision":"allowed","risk_level":"medium","write_like":false,"reasons":[]}],"policy_urls":{"json":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=json","rego":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=rego","yaml":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=yaml","github_action":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=github_action"},"public_policy_urls":{"json":"https://verify.sentinelsignal.io/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=json","rego":"https://verify.sentinelsignal.io/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=rego","yaml":"https://verify.sentinelsignal.io/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=yaml","github_action":"https://verify.sentinelsignal.io/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy?format=github_action"},"report_url":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/report","server_url":"https://verify.sentinelsignal.io/servers/github-xiaoq-in/xiaoflow-mcp","publisher_claim":{"verified":false,"status":"unclaimed","claim_url":"https://verify.sentinelsignal.io/claim?server=github-xiaoq-in%2Fxiaoflow-mcp&source=policy_export","reason_code":"claim_to_publish_metadata","reason":"Claim this profile to verify publisher identity, add evidence, and manage trust metadata.","score_neutral":true},"observed_attention":{"schema":"verify.observed_attention.v1","window_days":30,"level":"none","label":"No observed attention","summary":"No recent machine-readable trust or discovery activity observed for this server.","segments":{"useful_ai_user":{"level":"none","observed":false,"description":"AI-assisted user sessions such as ChatGPT/User or Claude/User."},"machine_trust_evaluator":{"level":"none","observed":false,"description":"Synthetic sessions inspecting multiple trust surfaces such as report, policy, ledger, badge, trust-summary, or compare."},"possible_agent_or_script":{"level":"none","observed":false,"description":"Structured direct sessions with rapid profile, compare, report, policy, badge, or trust-surface fan-out."},"isolated_machine_surface":{"level":"none","observed":false,"description":"Aged-out direct synthetic singleton sessions that touched a machine-readable trust surface without becoming a broader evaluator."},"ai_crawler":{"level":"none","observed":false,"description":"Known AI crawler activity such as ClaudeBot, GPTBot, or similar crawlers."},"search_crawler":{"level":"none","observed":false,"description":"Search and SEO crawler activity."},"browser_like_automation":{"level":"none","observed":false,"description":"Browser-like synthetic sessions with rapid structured endpoint activity."},"confirmed_human":{"level":"none","observed":false,"description":"Confirmed browser-session human activity."}},"surfaces_observed":{"server_profile":false,"compare":false,"compare_json":false,"compare_api":false,"report_json":false,"policy":false,"ledger":false,"badge_metadata":false,"badge_svg":false,"trust_summary":false,"mcp_tool":false},"claim_prompt":{"recommended":false,"reason":"No claim prompt is recommended from observed attention in the current window."},"notes":["Observed attention is based on segmented first-party telemetry.","Crawler and evaluator activity is not treated as confirmed human demand.","Public levels are bucketed to avoid exposing raw traffic counts."]},"owner_activation":{"claim_recommended":false,"reason":"no_observed_attention"},"related_machine_surfaces":{"compare_index":"/compare.json","compare_api":"/v1/compare?server=github-xiaoq-in%2Fxiaoflow-mcp","trust_summary":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/trust-summary","ledger":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/ledger","policy":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/policy","report":"/v1/servers/github-xiaoq-in/xiaoflow-mcp/report"},"intelligence_api":{"available":true,"signup_url":"https://verify.sentinelsignal.io/verify-intelligence-api","use_case":"Programmatic MCP server trust, comparison, policy, and evidence enrichment."},"cache_note":"Fast fallback response; named deep policy fields are deferred to the regular cache refresh path.","trust_evaluated_at":"2026-08-23T17:27:46.846895+00:00","evidence_revision":"b5d9e373d6981f3eb35e1e87","active_alerts":[{"code":"server_card_schema_drifted","severity":"critical","title":"Server card describes a different server: card says \"xiaoflow-mcp\", live says \"xiaoflow-mcp-server\"","message":"Severity: critical. The published server card's serverInfo.name does not match the live server. 1 tool(s) diverge on output-schema presence: get_keyword_metrics.","addressee":"publisher"}],"active_alert_summary":{"critical":1,"high":0,"medium":0,"low":0,"high_or_critical":1,"total":1},"evidence_confidence":{"score":82.5,"label":"high","reason":"Based on 6 recent validations, 22 captured checks, and validation age of 9.1 hours.","live_check_count":22,"validation_age_hours":9.11,"basis":{"evidence_bearing_validations":6,"affirmative_live_check_count":22,"validation_age_hours":9.11,"freshness_threshold_hours":24}},"production_readiness":{"code":"needs_remediation","label":"Needs remediation","reason":"Degraded from Safe for evaluation: 1 open high/critical-severity alert(s) are active, including at least one that blocks even evaluation-level trust.","badge":"score-low","critical_alerts":1,"high_or_critical_alerts":1,"degraded_by_active_alerts":true},"materialization":{"state":"partial","trust_core_complete":true,"fields_unavailable":["tool_security_inventory","security_posture_summary","write_action_governance","capability_taxonomy","remediations"],"materialized_at":"2026-08-23T17:27:46.846895+00:00"}}