spike: MCP elicitations PoC (do not merge) - #359

Draft

barryroodt wants to merge 20 commits into

mainfrom

barryroodt/mcp-elicitations-poc

Commits on Aug 12, 2026

feat(poc): elicitations PoC package — MRTR server, harness, happy-path tests
barryroodt
committed
c3ad5ed
test(poc): risk 2-4 assertion suites; state key from env/random instead of repo literal
barryroodt
committed
c873493
docs(poc): FINDINGS.md risk-factor verdicts, inspector stretch notes, README
barryroodt
committed
5985fa0
test(poc): partial inputResponses cases — invalid accepted content re-issues input_required
barryroodt
committed
f483360
docs(poc): risk 5 web-UI verification — Inspector 2.0 completes form MRTR flow
barryroodt
committed
c87ab39
feat(poc): env-gated staging project creation — https + supabase.green guard, fail-fast partial config
barryroodt
committed
ee861ef
fix(poc): tool description reflects real-creation mode; FINDINGS scope covers staging adapter
barryroodt
committed
933419a
fix(poc): enable in-memory jti store when staging creation is configured — replays cannot double-POST
barryroodt
committed
d84aeb8
feat(poc): risk-6 url-mode elicitation — connect page, interaction/secret stores, happy path
barryroodt
committed
85c765e
test(poc): risk-6 url-mode security + lifecycle suites; inspector url-mode notes
barryroodt
committed
75c196f
docs(poc): FINDINGS risk-6 url-mode section, scope and RFC-flag amendments
barryroodt
committed
93e4641
fix(poc): no credential fingerprint in MCP results; leak scan covers substrings and encodings
barryroodt
committed
952ca56
docs(poc): separate design guarantee from finite scan coverage in secret-isolation claims
barryroodt
committed
e65a461
docs(poc): capability routing is runtime-owned, per approved design
barryroodt
committed
52ac044
docs(poc): manual browser passes for both flows; Safari gap; 120s lifetime counterexample
barryroodt
committed
56fcead
docs(poc): scope Safari observation to this Inspector run
barryroodt
committed
dbe3966
docs(poc): bound the Human Confirmation claim to integrity and binding, not human presence
barryroodt
committed
077d364
docs(poc): pin client round cap at 10; narrow out-of-band attestation claim
barryroodt
committed
7b9792c
style(poc): apply the repo biome quote style to the PoC sources
barryroodt
committed
6a53898
ci(poc): typecheck and test the elicitations PoC on pull requests
barryroodt
committed
59af11a

Navigation Menu

Uh oh!

spike: MCP elicitations PoC (do not merge) - #359

spike: MCP elicitations PoC (do not merge)#359
barryroodt wants to merge 20 commits into
mainfrom
barryroodt/mcp-elicitations-poc

Commits on Aug 12, 2026

feat(poc): elicitations PoC package — MRTR server, harness, happy-path tests

test(poc): risk 2-4 assertion suites; state key from env/random instead of repo literal

docs(poc): FINDINGS.md risk-factor verdicts, inspector stretch notes, README

test(poc): partial inputResponses cases — invalid accepted content re-issues input_required

docs(poc): risk 5 web-UI verification — Inspector 2.0 completes form MRTR flow

feat(poc): env-gated staging project creation — https + supabase.green guard, fail-fast partial config

fix(poc): tool description reflects real-creation mode; FINDINGS scope covers staging adapter

fix(poc): enable in-memory jti store when staging creation is configured — replays cannot double-POST

feat(poc): risk-6 url-mode elicitation — connect page, interaction/secret stores, happy path

test(poc): risk-6 url-mode security + lifecycle suites; inspector url-mode notes

docs(poc): FINDINGS risk-6 url-mode section, scope and RFC-flag amendments

fix(poc): no credential fingerprint in MCP results; leak scan covers substrings and encodings

docs(poc): separate design guarantee from finite scan coverage in secret-isolation claims

docs(poc): capability routing is runtime-owned, per approved design

docs(poc): manual browser passes for both flows; Safari gap; 120s lifetime counterexample

docs(poc): scope Safari observation to this Inspector run

docs(poc): bound the Human Confirmation claim to integrity and binding, not human presence

docs(poc): pin client round cap at 10; narrow out-of-band attestation claim

style(poc): apply the repo biome quote style to the PoC sources

ci(poc): typecheck and test the elicitations PoC on pull requests