feat: add MCP cache contract auditor by saagpatel · Pull Request #194 · saagpatel/MCPAudit

saagpatel · 2026-07-29T04:02:05Z

Summary

Adds an experimental, fixture-first auditor for observable MCP 2026-07-28
list/read cache-scope and freshness contracts. The command is deterministic,
offline, logical-clock driven, and fail-closed for malformed, unsupported,
ambiguous, truncated, or bounded-out evidence.

Changes

Add strict mcpaudit.cache-contract.trace.v1 and
mcpaudit.cache-contract.report.v1 schemas plus
mcp-audit cache-contract scan|schema.
Add a bounded state machine covering required cache hints, exact request
keys, private authorization partitions, TTL and refresh behavior, validated
notifications, linked page scope, deterministic tools ordering, and
non-cacheable multi-round-trip results.
Separate freshness state from bounded identity-only evidence so invalid or
capped timing evidence cannot hide independently observable key, partition,
or ordering violations and cannot be graded as fresh.
Use tagged public/private ordering partitions and notification epochs so a
private partition named public cannot collide with public scope.
Limit failed-refresh stale-serving permission to the causal interval before
a later valid successful refresh supersedes that failed attempt.
Add stable MCPCACHE000–MCPCACHE009 findings, 35 semantic fixtures, and
adversarial coverage for duplicate JSON keys, malformed resource identity,
private refresh crossings, contradictory page-chain identity, bounded-state
saturation, notification-separated ordering, and superseded refresh errors.
Document the protocol-versus-policy boundary, output compatibility, privacy
bounds, claim ceiling, and CLI discoverability.

Review repairs

The Codex review loop repaired all actionable findings across these categories:

response result/payload/metadata and pagination admission;
source causality, protocol support, and private partition ambiguity;
TTL/refresh/invalidation causality and expiry-independent evidence;
finding-cap and retained-state false-safe downgrades;
public/private ordering identity and notification epoch boundaries;
bounded input, nonblocking descriptor validation, and structured UNKNOWN
output.

All 43 historical review threads are resolved after clean exact-head review.

Checklist

Canonical verifier passes (uv run pytest, uv run ruff check, uv run mypy .)
Security implications considered — does this change affect risk scoring, threat detection, config parsing, or output that feeds into AI systems? If yes, describe the implications below.
CHANGELOG.md updated under [Unreleased]
New or changed behavior is documented (README, docstrings, or both)

Security implications

This adds audit logic and a new standalone output contract, but no connected
scan, proxy, live cache, transport, credential path, or external mutation.
Inputs are program-owned synthetic JSON fixtures read through a bounded,
identity-checked descriptor. Unsupported or unverifiable evidence is
MCPCACHE000/UNKNOWN, never green.

A passing report proves only that the supplied bounded synthetic trace contains
no contradiction covered by the implemented observable contract. It does not
prove HTTP cache compliance, performance, server/client/proxy behavior,
authorization, confidentiality, notification delivery to another cache
instance, or server/discover correctness.

Test plan

uv run pytest -q tests/test_cache_contract_audit.py — 156 passed.
uv run pytest -q — 1,379 passed.
uv run ruff check . and uv run ruff format --check — passed (128 files).
uv run mypy src/ --strict — passed (59 source files).
uv run mypy . --strict — passed (128 source files).
Nine offline CLI smokes covered valid, missing-metadata, private-leak,
wrong-key, expired, refreshed, malformed, unsupported, and ambiguous-clock
traces with expected verdicts and exit codes.
Event-order determinism and no-wall-clock proofs passed; combined with the
CLI smokes, the focused proof command reports 11 passed.
Final CI at 29c28558a8f8cff841b733527316a9bec8a3e89e passed the Python
3.11/3.12/3.13 matrices, Python analysis, self-audit, agent-facing permission
diff, CodeQL, and ClusterFuzzLite.
Clean Codex exact-head receipts:
first
and confirmatory.

Related issues

Coordinates with chore: prepare MCPAudit 2.6.0 release candidate #192, which also changes CHANGELOG.md to establish the
2.6.0 candidate boundary. If this PR lands first, chore: prepare MCPAudit 2.6.0 release candidate #192 should rebase and carry
this new Unreleased entry into the candidate section. If chore: prepare MCPAudit 2.6.0 release candidate #192 lands first,
this PR should rebase and retain the entry under the resulting release
boundary. No other overlapping file was observed.

github-actions · 2026-07-29T04:02:23Z

Agent Permission Diff

Base: 0e101cbfb9136bf62b38e668a15af9f683cde48e
Head: 29c28558a8f8cff841b733527316a9bec8a3e89e
Findings: 0
Gate findings: 0
Acknowledged findings: 0
Permission changes: 0
Gate: pass in observe mode
Fail on: critical
Exit code: 0

Gate Decision

No findings were produced.

Findings

No agent-facing permission findings.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b8e1f65f48

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-29T04:53:35Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 943f0bc518

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-29T05:08:46Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 60c884837b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-29T05:19:36Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0d123af02c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-29T05:29:09Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0940d7a624

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-29T05:39:49Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: be67baa89a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T01:10:15Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 30b4edeb4c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T01:23:13Z

@codex review

Please review exact head 55992604b8ddc9ab0eeea8ed771be56ce97f5fa8. This repair makes authorization-partition ambiguity sticky, validates cursors on use/refresh_error events, prevents malformed refresh cursors from superseding prior refresh errors, and stops unsupported use-like methods before cache grading. Local gates: focused 98 passed; full 1321 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 55992604b8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T01:31:11Z

@codex review

Please review exact head fc261f70bdaf1df5f44d7b213d3bc4097f958e52. This repair confines sticky authorization-partition ambiguity to private evidence while preserving public refresh, refresh-error, notification, and ordering checks. Local gates: focused 101 passed; full 1324 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fc261f70bd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T04:30:05Z

@codex review

Please review exact head e8b9b584d2b96135235317f80cc2d9ac30511050. This repair validates response metadata before the malformed-pagination stop, preserving independently observable MCPCACHE001/002/009 findings while malformed cursors still prevent response retention and all state mutation; the prior input_required special case is now covered by the common ordering. Local gates: focused 145 passed; full 1368 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e8b9b584d2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T04:37:33Z

@codex review

Please review exact head 09bda1b4a9b83ac80d63137c68d01237045c6c09. This repair gives private deterministic-order evaluation a separate bounded principal-identity map: matching list response identities remain gradable when the logical clock is globally ambiguous, while clock/expiry-ineligible responses still cannot establish or conflict freshness partition state. Local gates: focused 146 passed; full 1369 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 09bda1b4a9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T04:42:17Z

@codex review

Please review exact head b548427b25ffeaf7fb0c18874a14cabc72ec03fe. This repair reconciles the private ordering identity map with any principal already established by validated partition evidence: later clock/expiry-ineligible list responses cannot bootstrap a conflicting ordering identity, while matching identities preserve expiry-independent ordering checks. Local gates: focused 147 passed; full 1370 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector · 2026-07-30T04:44:15Z

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: b548427b25

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T04:50:10Z

@codex review

Please re-review unchanged exact head b548427b25ffeaf7fb0c18874a14cabc72ec03fe. The prior request cleared its in-progress reaction without posting a review thread or clean 👍 receipt. This head reconciles private ordering identity with validated partition principals while keeping timing-ineligible evidence out of freshness state. Local gates remain: focused 147 passed; full 1370 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b548427b25

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T04:54:55Z

@codex review

Please review exact head ff6be0f666f438e033fa50db9fc151685e6bba7b. This repair removes TTL eligibility from private ordering-identity admission: otherwise-valid complete list responses can establish/match ordering identity and preserve MCPCACHE006 even when TTL is outside the simulator clock, while those responses remain excluded from freshness partition state. Local gates: focused 148 passed; full 1371 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector · 2026-07-30T04:58:12Z

Codex Review: Didn't find any major issues. 👍

Reviewed commit: ff6be0f666

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:01:00Z

@codex review

Please re-review unchanged exact head ff6be0f666f438e033fa50db9fc151685e6bba7b. The prior request cleared its in-progress reaction without posting a review or clean 👍 receipt. This head keeps private ordering identity independent of TTL eligibility while freshness state remains bounded by valid TTL/expiry. Local gates remain: focused 148 passed; full 1371 passed; Ruff, format, strict mypy (src and all), determinism/no-wall-clock, and nine CLI smokes passed.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ff6be0f666

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:07:31Z

@codex review

Please review exact head 59d340f9b95d9b3762d9fd2432e21b8f9dcf77a0. The prior retained-entry-cap finding is repaired: responses with ungradable scope are tracked only by bounded event identity and no longer consume MAX_RETAINED_ENTRIES; a saturation regression proves a later gradable zero-TTL entry still produces MCPCACHE005. Local gates: 149 focused, 1372 full, Ruff check/format, strict mypy (src + all), and 11 deterministic/CLI proofs all pass.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 59d340f9b9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:13:48Z

@codex review

Please review exact head 1c18a931dc56323902d6950edd0cdea1179890ed. The prior capacity finding is repaired by separating bounded identity-only evidence from freshness state: known-scope/uncomputable-expiry responses still support MCPCACHE003/004, do not consume MAX_RETAINED_ENTRIES, and ordering evaluation continues even after the freshness-entry cap. Regressions cover unsupported result type, TTL beyond the clock bound, later zero-TTL reuse, and ordering drift beyond the cap. Local gates: 151 focused, 1374 full, Ruff check/format, strict mypy (src + all), and 11 deterministic/CLI proofs all pass.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1c18a931dc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:22:11Z

@codex review

Please review exact head d44add6fa70eb248da3232615eccdebf267b94f5. Both prior findings are repaired: cap-excluded responses are retained as identity-only evidence for MCPCACHE003/004, and relevant list-change notifications advance ordering epochs from the ordering baselines themselves, including identity-only and cap-excluded observations, with private partition/principal checks. Bounds docs now distinguish 512 freshness-state entries from compact identities bounded by 2048 events. Regressions cover post-cap wrong-key reuse plus public/private identity-only notification boundaries. Local gates: 154 focused, 1377 full, Ruff check/format, strict mypy (src + all), and 11 deterministic/CLI proofs all pass.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d44add6fa7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:28:43Z

@codex review

Please review exact head 29c28558a8f8cff841b733527316a9bec8a3e89e. Both prior findings are structurally repaired: identity-only entries always strip TTL/expiry state, including cap-excluded responses, and ordering partitions now use tagged (scope_kind, partition) identities so private partition public cannot collide with public scope. Regressions prove capped same-key reuse remains UNKNOWN without MCPCACHE005 and unrelated notifications do not suppress ordering drift for a private partition named public. Local gates: 156 focused, 1379 full, Ruff check/format, strict mypy (src + all), and 11 deterministic/CLI proofs all pass.

chatgpt-codex-connector · 2026-07-30T05:32:48Z

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: 29c28558a8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel · 2026-07-30T05:33:27Z

@codex review

Re-requesting review of unchanged exact head 29c28558a8f8cff841b733527316a9bec8a3e89e: the prior request cleared without a review object, thread, or 👍 receipt. Please return a clean reaction or actionable finding for this exact commit.

chatgpt-codex-connector · 2026-07-30T05:36:06Z

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: 29c28558a8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

saagpatel added 2 commits July 28, 2026 20:39

feat: add MCP cache contract auditor

15f0b30

fix: enforce cache trace identity boundaries

b8e1f65

saagpatel mentioned this pull request Jul 29, 2026

chore: prepare MCPAudit 2.6.0 release candidate #192

Open

4 tasks

saagpatel marked this pull request as ready for review July 29, 2026 04:10

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py

fix: supersede stale refresh error permission

943f0bc

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix: report oversized cache traces as unknown

60c8848

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py

fix: validate cache pagination cursor shapes

0d123af

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix: prevent blocking cache trace path races

0940d7a

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix: fail closed on cache partition ambiguity

be67baa

chatgpt-codex-connector Bot reviewed Jul 29, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix: stop grading unsupported cache events

30b4ede

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

Comment thread src/mcp_audit/cache_contract_scanner.py

fix: preserve cache evidence ambiguity

5599260

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix: keep public cache checks independent

fc261f7

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix(cache-audit): preserve metadata findings before cursor stop

e8b9b58

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py

fix(cache-audit): separate ordering identity from clock state

09bda1b

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py

fix(cache-audit): reconcile ordering partition identity

b548427

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix(cache-audit): keep ordering identity TTL-independent

ff6be0f

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix(cache-audit): preserve capacity for gradable entries

59d340f

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py

fix(cache-audit): separate identity from freshness state

1c18a93

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

Comment thread src/mcp_audit/cache_contract_scanner.py

fix(cache-audit): preserve identity and ordering boundaries

d44add6

chatgpt-codex-connector Bot reviewed Jul 30, 2026

View reviewed changes

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

Comment thread src/mcp_audit/cache_contract_scanner.py Outdated

fix(cache-audit): tag ordering partitions and cap freshness

29c2855

Conversation

saagpatel commented Jul 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Review repairs

Checklist

Security implications

Test plan

Related issues

Uh oh!

github-actions Bot commented Jul 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Agent Permission Diff

Gate Decision

Findings

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 29, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 30, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

saagpatel commented Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

saagpatel commented Jul 30, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

saagpatel commented Jul 29, 2026 •

edited

Loading

github-actions Bot commented Jul 29, 2026 •

edited

Loading

saagpatel commented Jul 30, 2026 •

edited

Loading