{
  "agent_surfaces": {
    "corpus_json": null,
    "llms_txt": null,
    "mcp_discovery": null,
    "mcp_endpoint": null,
    "repo_context": "AGENTS.md"
  },
  "display_name": "MCPAudit",
  "excluded_data": [
    {
      "category": "private_local_state",
      "reason": "The profile includes only public-approved repo identity and bounded structured signals."
    },
    {
      "category": "raw_repo_contents",
      "reason": "The profile does not include source snippets, raw logs, private reports, prompts, or transcripts."
    },
    {
      "category": "secrets_and_credentials",
      "reason": "Credential values, private keys, tokens, and local configuration are never read or emitted."
    }
  ],
  "freshness": {
    "freshness_window_hours": 168,
    "generated_at": "2026-07-19T09:02:02.399203+00:00",
    "notes": "Freshness applies to the GHRA source snapshot used for this public profile, not live repo health.",
    "source_collected_at": "2026-07-19T09:02:02.399203+00:00",
    "status": "fresh"
  },
  "integrity": {
    "generator": "repo-profile-builder v0.1",
    "payload_sha256": "56ec0426ec51e4b4771644ba139b13d8a8c9d0ece8d2dac24eb6527c39989717",
    "source_digests": [
      {
        "digest_sha256": "501b7e58095669ea47ec5738a9d34003986eb93c552de21bba03783c24f49738",
        "id": "ghra-project-subset"
      }
    ]
  },
  "limitations": [
    "This profile is public context, not a code audit, safety approval, or live health guarantee.",
    "Run commands are hints and must be rechecked against repo-local instructions before execution.",
    "Proof references summarize bounded artifacts and inherit each receipt's limitations."
  ],
  "owner_boundary": {
    "agent_role": "read-only public context consumer",
    "owner": "Saagar Patel",
    "write_policy": "no writes through public profile or MCP surfaces"
  },
  "proof_refs": [
    {
      "notes": "Public-safe MCPAudit sample report receipt.",
      "receipt_id": "tr_mcpaudit-sample-audit-report",
      "relationship": "sample_report_receipt",
      "status": "available"
    },
    {
      "notes": "Synthetic SARIF sample receipt.",
      "receipt_id": "tr_sarif-sarif-sample-report",
      "relationship": "sample_sarif_receipt",
      "status": "available"
    },
    {
      "notes": "Automated verification receipt from the portfolio verification campaign.",
      "receipt_id": "tr_verify_mcpaudit",
      "relationship": "repo_verification_receipt",
      "status": "available"
    }
  ],
  "public_reference": "https://github.com/saagpatel/MCPAudit",
  "repo_id": "mcpaudit",
  "runbook": {
    "forbidden_commands": [
      "commands that deploy, publish, send messages, read secrets, or mutate external systems",
      "commands that require credential values inline",
      "commands that read raw private reports, logs, prompts, transcripts, or local-only state"
    ],
    "safe_commands": [
      {
        "command": "pytest -q",
        "id": "unit-tests",
        "mode": "local",
        "notes": "Run from the repo root after checking repo-local instructions.",
        "requires_secrets": false
      },
      {
        "command": "uv run pytest -q",
        "id": "verified-tests",
        "mode": "local",
        "notes": "This exact command ran green during the 2026-07-07 verification campaign; recheck repo-local instructions before running.",
        "requires_secrets": false
      }
    ]
  },
  "schema_version": "repo-profile/v0.1",
  "summary": {
    "attention_state": "decision-needed",
    "category": "infrastructure",
    "context_quality": "minimum-viable",
    "has_ci": true,
    "has_tests": true,
    "last_meaningful_activity": "2026-07-19T02:00:44-07:00",
    "purpose": "local MCP security and drift audit tool",
    "risk_tier": "moderate",
    "stack": [
      "Python"
    ]
  },
  "visibility": {
    "notes": [],
    "source": "projects-data allowlist",
    "status": "public_allowlisted"
  }
}