{
  "checks": [
    {
      "details": [
        "servers_connected=1",
        "total_tools=1",
        "permission_findings=1",
        "capability_findings=1",
        "injection_findings=0",
        "drift_findings=1",
        "top_composite_risk=8.0"
      ],
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:scan-completed",
      "status": "passed",
      "summary": "Report covers 1 discovered server(s).",
      "title": "MCPAudit scan completed"
    },
    {
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:connection-failures",
      "status": "passed",
      "summary": "0 server(s) failed to connect.",
      "title": "Connection failures"
    },
    {
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:high-risk-servers",
      "status": "failed",
      "summary": "1 high-risk server(s) reported.",
      "title": "High-risk server count"
    },
    {
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:schema-drift",
      "status": "failed",
      "summary": "1 drift finding(s) reported.",
      "title": "Schema drift findings"
    },
    {
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:annotation-coverage",
      "status": "inconclusive",
      "summary": "Minimum annotation coverage was 0%; some risk may rely on scanner inference or MCP spec defaults.",
      "title": "Tool annotation coverage"
    },
    {
      "details": [
        "max_risk (high): Server risk score 8.0 meets or exceeds policy limit 7.0."
      ],
      "evidence_refs": [
        "mcpaudit-json-report"
      ],
      "id": "mcpaudit:policy-gate",
      "status": "failed",
      "summary": "Policy result failed with 1 violation(s).",
      "title": "Policy gate"
    }
  ],
  "evidence": [
    {
      "description": "Summary-only MCPAudit JSON report evidence.",
      "digest_sha256": "118c7a720361f4249938503008bbb987877a01ec1e8dc710606433e818d2bcf7",
      "id": "mcpaudit-json-report",
      "kind": "json",
      "public_safe": true,
      "redaction_status": "summary_only",
      "reference": "local-public-safe-input:mcpaudit-json-report",
      "supports": [
        "mcpaudit:scan-completed",
        "mcpaudit:connection-failures",
        "mcpaudit:high-risk-servers",
        "mcpaudit:schema-drift",
        "mcpaudit:annotation-coverage",
        "mcpaudit:policy-gate"
      ],
      "title": "MCPAudit JSON report"
    }
  ],
  "excluded_data": [
    {
      "category": "Credential values and raw private config",
      "reason": "Receipts summarize report metadata and counts, not raw credential-bearing MCP client configs."
    },
    {
      "category": "Server launch details and local paths",
      "reason": "The adapter intentionally omits command arguments, config paths, resource URIs, and env key names from generated receipt text."
    },
    {
      "category": "Raw tool schemas and prompt/resource text",
      "reason": "The receipt records counts and normalized checks only. Inspect the source report for full scanner detail."
    }
  ],
  "freshness": {
    "age_seconds": 4201200,
    "evidence_collected_at": "2026-05-09T09:00:00Z",
    "generated_at": "2026-06-27T00:00:00Z",
    "notes": "Receipt summarizes an existing MCPAudit report. It does not rerun scans, spawn MCP servers, or upload SARIF.",
    "status": "static_fixture"
  },
  "integrity": {
    "generator": "trust-receipt-generator 0.1.0",
    "payload_sha256": "99d78559522bccd892fd307fd775a18943aec98390d19719c739c741a54472e3",
    "source_digests": [
      {
        "digest_sha256": "118c7a720361f4249938503008bbb987877a01ec1e8dc710606433e818d2bcf7",
        "id": "mcpaudit-json-report"
      }
    ]
  },
  "issued_at": "2026-06-27T00:00:00Z",
  "limitations": [
    "MCPAudit risk is a capability and finding summary, not a claim that a server is malicious.",
    "This receipt does not connect to MCP servers, verify package provenance, or download package artifacts itself.",
    "Policy-gate meaning depends on the policy file used when the source report was generated.",
    "Summary-only receipts may omit individual tool names, local paths, resource URIs, and credential key names for public safety."
  ],
  "producer": {
    "name": "trust-receipt-generator",
    "source_adapter": "mcpaudit-json-report",
    "source_commands": [
      "mcp-audit scan --json <report.json>"
    ],
    "version": "0.1.0"
  },
  "public_safety": {
    "included_data_policy": "Only aggregate report fields and source digest are included by this adapter.",
    "status": "redacted"
  },
  "receipt_id": "tr_mcpaudit-sample-audit-report",
  "reproduce": [
    {
      "command": "mcp-audit scan --json report.json",
      "step": "Generate an MCPAudit report."
    },
    {
      "command": "trust-receipt mcpaudit --input report.json",
      "step": "Generate this receipt."
    }
  ],
  "schema_version": "trust-receipt/v0.1",
  "subject": {
    "claim": "MCPAudit reported capability, drift, risk, and policy signals for configured MCP servers.",
    "name": "MCPAudit report: sample_audit_report",
    "type": "mcp-audit"
  },
  "summary": {
    "badge": {
      "color": "#b42318",
      "label": "trust receipt",
      "message": "issues found",
      "style": "flat"
    },
    "failed_count": 3,
    "headline": "MCPAudit report summarized with policy and risk limitations.",
    "inconclusive_count": 1,
    "not_checked_count": 0,
    "passed_count": 2,
    "verdict": "failed"
  },
  "unverified": [
    {
      "id": "mcpaudit:not-rerun",
      "reason": "The receipt generator reads an existing report and does not spawn MCP servers.",
      "status": "not_checked",
      "title": "Scan not rerun"
    }
  ]
}