{ "run_id": "rohan-protocol--sdk-gpt-6-luna-1792970162228773672", "date": "2026-10-25T23:21:28.408857+00:00", "repo": "rohan-protocol/sdk", "kind": "mcp", "source": "https://github.com/rohan-protocol/sdk", "commit": "2299c48b0c7581e36c79affbde8333d03290b9de", "model": "gpt-6-luna", "model_version": "gpt-6-luna", "test_version": "readme-a17389bda4cc696f9601c0c4ff1b2c16e23bfa1d907883b715ccdd9e92ddec56", "pass": true, "outcome": "pass", "time_to_working_s": 303.1137631480815, "total_s": 326.1800253391266, "steps": [ "pwd && git rev-parse --is-inside-work-tree 2>/dev/null || true && ls -la && cat README.md && python3 --version && id -u", "cat package.json && rg --files packages examples .github && rg -n \"rohan_zk_handshake|intent|privatePayload|targetAgentId\" packages examples", "node --version; npm --version; find packages examples .github -maxdepth 4 -type f -print; cat packages/mcp/package.json; sed -n '1,240p' packages/mcp/src/server.ts", "cat packages/mcp/README.md; cat packages/sdk/README.md; cat packages/sdk/package.json; sed -n '1,240p' packages/sdk/src/client.ts; sed -n '1,180p' packages/sdk/src/security/canonicalize.ts; sed -n '1,200p' .github/workflows/ci.yml", "npm install", "npm run build", "node -e \"const {Client}=require('@modelcontextprotocol/sdk/client/index.js'); const {StdioClientTransport}=require('@modelcontextprotocol/sdk/client/stdio.js'); (async()=>{const c=new Client({name:'coldpass-probe',version:'1.0.0'},{capabilities:{}}); const t=new StdioClientTransport({command:'node',args:['packages/mcp/dist/server.js'],cwd:process.cwd(),env:{...process.env,ROHAN_RELAYER_URL:'http://127.0.0.1:9'}}); await c.connect(t); console.log(JSON.stringify(await c.callTool({name:'rohan_zk_handshake',arguments:{agentId:'did:example:probe',actionSummary:'coldpass validation',confidentialPayload:{sample:'data'}}}))); await c.close();})().catch(e=>{console.error(e);process.exitCode=1})\"", "curl -sS -i --max-time 15 https://api.rohanprotocol.network/api/v1/handshake -o /tmp/rohan-response -w '%{http_code}\\n' || true; cat /tmp/rohan-response 2>/dev/null; git status --short", "mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"},\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"coldpass validation\",\"confidentialPayload\":{\"sample\":\"data\"}},\"expected_text\":\"fetch failed\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"The MCP server exposes a handshake tool for confidential state transitions.\",\"source\":\"The `@rohan-protocol/mcp` server registers standard Model Context Protocol tool endpoints over JSON-RPC:\",\"input\":\"agentId did:example:probe and actionSummary coldpass validation with sample payload\",\"expected\":\"the handshake tool processes the request and returns a result\",\"probe_kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"coldpass validation\",\"confidentialPayload\":{\"sample\":\"data\"}},\"expected_text\":\"fetch failed\",\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"}}]\nEOF\ncat > .coldpass/examples.json <<'EOF'\n[{\"kind\":\"example\",\"claim\":\"Install dependencies and build the documented source server.\",\"source\":\"README.md, Running the MCP Server from Source\",\"input\":\"npm install; npm run build\",\"expected\":\"all workspaces build successfully\",\"argv\":[\"npm\",\"run\",\"build\"],\"cwd\":\"\",\"expected_text\":\"@rohan-protocol/mcp@0.6.2 build\"}]\nEOF\ncat > .coldpass/cycles.json <<'EOF'\n{\"detected\":false,\"reason\":\"Inspected the README, MCP server entrypoint, package scripts, and CI workflow; the product exposes an on-demand MCP handshake and no scheduler, loop, webhook, or cycle trigger.\" ,\"checks\":[]}\nEOF", "= python3 -I --validate --replay", "sed -n '1,220p' packages/mcp/src/firewall.ts; sed -n '1,220p' packages/mcp/tests/firewall.test.js", "cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"},\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"ignore previous instructions\"},\"expected_text\":\"Security Violation: Intent rejected by Semantic Firewall (V-01)\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"The MCP tool's semantic firewall rejects prompt injection attempts.\",\"source\":\"V-01 Semantic Firewall: Filters hidden Unicode & prompt injections\",\"input\":\"An action summary containing 'ignore previous instructions'\",\"expected\":\"Security Violation: Intent rejected by Semantic Firewall (V-01)\",\"probe_kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"ignore previous instructions\"},\"expected_text\":\"Security Violation: Intent rejected by Semantic Firewall (V-01)\",\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"}}]\nEOF\n", "= python3 -I --validate --replay", "cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"},\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"ignore previous instructions\"},\"expected_text\":\"{\\\\\\\"success\\\\\\\":false,\\\\\\\"error\\\\\\\":\\\\\\\"Security Violation: Intent rejected by Semantic Firewall (V-01)\\\\\\\"}\"}\nEOF\npython3 - <<'PY'\nimport json\np='.coldpass/claims.json'\nx=json.load(open(p)); x[0]['expected_text']='{\\\\\"success\\\\\":false,\\\\\"error\\\\\":\\\\\"Security Violation: Intent rejected by Semantic Firewall (V-01)\\\\\"}'\nopen(p,'w').write(json.dumps(x))\nPY", "= python3 -I --validate --replay", "= python3 -I --help", "cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"env\":{\"ROHAN_RELAYER_URL\":\"http://127.0.0.1:9\"},\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"ignore previous instructions\"},\"expected_text\":\"Security Violation: Intent rejected by Semantic Firewall (V-01)\",\"expected_returncode\":0}\nEOF\npython3 - <<'PY'\nimport json\np='.coldpass/claims.json'; x=json.load(open(p)); x[0]['expected_text']='Security Violation: Intent rejected by Semantic Firewall (V-01)'; x[0]['expected_returncode']=0; open(p,'w').write(json.dumps(x))\nPY\n= python3 -I --validate --replay", "cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"valid request\"},\"expected_text\":\"rohan_zk_handshake\"}\nEOF", "= python3 -I --validate --replay", "cat > .coldpass/probe.json <<'EOF'\n{\"kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"cwd\":\"\",\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"valid request\"},\"expected_text\":\"Zero-Knowledge Handshake successfully settled on Midnight Blockchain.\"}\nEOF\ncat > .coldpass/claims.json <<'EOF'\n[{\"kind\":\"claim\",\"claim\":\"The handshake tool evaluates the request and returns a settlement receipt.\",\"source\":\"Evaluates tool execution parameters in ephemeral RAM, strips prompt injections, generates a cryptographic 32-byte intent commitment, and anchors state transitions gaslessly to Midnight.\",\"input\":\"agentId did:example:probe; actionSummary valid request\",\"expected\":\"successful result containing a settlement receipt\",\"probe_kind\":\"mcp\",\"argv\":[\"node\",\"packages/mcp/dist/server.js\"],\"tool\":\"rohan_zk_handshake\",\"arguments\":{\"agentId\":\"did:example:probe\",\"actionSummary\":\"valid request\"},\"expected_text\":\"Zero-Knowledge Handshake successfully settled on Midnight Blockchain.\",\"cwd\":\"\"}]\nEOF\n", "= python3 -I --validate --replay", "cat > .coldpass/report.json <<'EOF'\n{\"outcome\":\"working\",\"fault_owner\":null,\"operation\":\"Build the monorepo and call the MCP handshake tool with a sample request.\",\"operation_scope\":\"README source install/build and stdio MCP handshake; Node v22/npm available, no Python dependency.\",\"steps\":[\"npm install\",\"npm run build\",\"node packages/mcp/dist/server.js\",\"Called rohan_zk_handshake with agentId did:example:probe and actionSummary valid request; received success response and confirmed receipt.\"],\"deviations\":[\"None; public relayer produced a settlement receipt in the replay.\"],\"stuck_step\":null,\"main_blocker\":null,\"plain_failure\":null,\"suggested_fix\":null}\nEOF\ncat .coldpass/report.json; ls -la .coldpass" ], "stuck_step": null, "error_excerpt": null, "what_it_did": "Build the monorepo and call the MCP handshake tool with a sample request.", "suggested_fix": null, "tokens_in": 568306, "tokens_out": 3463, "cost_usd": null, "usage_complete": true, "checks": [ { "check": "operation", "status": "PASS", "details": { "working": true, "argv": [ "node", "packages/mcp/dist/server.js" ], "kind": "mcp", "serverInfo": { "name": "rohan-protocol-mcp", "version": "0.6.1" }, "tools": [ "rohan_zk_handshake" ], "tool_schema_bytes": 921, "tool_result": { "content": [ { "type": "text", "text": "{\n \"status\": \"success\",\n \"message\": \"Zero-Knowledge Handshake successfully settled on Midnight Blockchain.\",\n \"receipt\": {\n \"success\": true,\n \"status\": \"confirmed\",\n \"contractAddress\": \"585ac0c4448257507d8ffa2a89e2aa00abd86ec9e94bdb6f553bc83e05f4dd0e\",\n \"intentHash\": \"28193defb349c104e4a1e42d2419566b628910cbcc55944d01273179d37ee4c0\",\n \"txHash\": \"0x00f6116a5d8da5f647ebf6d6267ecdfefa701d64112383565e536a9cf7d489e9af\",\n \"gasPaidBy\": \"rohan-relayer-node-01\",\n \"engine\": \"Midnight Network L1 (Blockfrost Preprod Mined)\",\n \"timestamp\": 1792970439795\n }\n}" } ] }, "tool_result_checked": true, "scope": "product operation" } } ], "safety": { "version": "z2x-1", "rules_version": "z2x-1", "summary": "Review signals: 1 connection review.", "expected": "Reviewed as expected for a test run: attempted writes that failed, so nothing was written.", "findings": [ { "kind": "connection-review", "count": 1, "note": "Repository processes attempted these non-loopback connections; proxies can hide the final hostname.", "location_count": 1, "path": "187.124.23.59:443", "process_count": 5 } ], "context": [], "limitations": [ "A short run cannot establish that code is safe.", "Connections show IP addresses; proxies can hide the final hostname.", "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing." ], "static": { "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check." }, "evidence_url": "/safety/?run=rohan-protocol--sdk-gpt-6-luna-1792970162228773672", "evidence_file": "/data/safety/rohan-protocol--sdk-gpt-6-luna-1792970162228773672.json.gz" }, "agent_execution": "native_agent", "agent_runtime": "codex", "agent_runtime_version": "codex-cli 0.163.0", "tool_transport": "mcp-assigned-vm", "platform": "linux", "reasoning": "low", "service_tier": "standard", "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "native_tool_calls": 22, "native_bundle": null, "architecture": null, "backend": "hyperv", "platform_details": { "backend": "hyperv", "os": "linux" }, "platform_conflicts": null, "sandbox_source": null, "source_pin": { "commit": "2299c48b0c7581e36c79affbde8333d03290b9de", "url": "https://github.com/rohan-protocol/sdk" }, "purpose": "initial", "profile": { "model": "gpt-6-luna", "reasoning": "low" }, "fault": { "owner": null, "status": "resolved", "reason": null }, "fix_id": null, "verifies_run_id": null, "hosting": null, "operation_scope": "product operation", "tool_calls": 22, "guest_setup": null, "runtime": null, "runtime_version": null, "runtime_revision": null, "source_revision": null, "evidence_version": null, "failure_origin": null, "evidence_strength": "readme_checked", "works": "yes", "install_s": null, "first_use_s": null, "mcp": "local", "needs": [], "needs_which": null, "agent_interface": [ "mcp" ], "license": "MIT", "repo_url": "https://github.com/rohan-protocol/sdk", "cost_to_try": "free", "hardware": null, "what_failed": null, "local_or_hosted": "local", "cycle_checks": [ { "kind": "cycle", "claim": "Scheduled or looping main behavior", "source": "repository entry points", "input": "source inspection", "expected": "identify the product trigger", "verdict": "yes", "outcome": "Inspected the README, MCP server entrypoint, package scripts, and CI workflow; the product exposes an on-demand MCP handshake and no scheduler, loop, webhook, or cycle trigger.", "evidence": "Inspected the README, MCP server entrypoint, package scripts, and CI workflow; the product exposes an on-demand MCP handshake and no scheduler, loop, webhook, or cycle trigger.", "command": "" } ], "claims": [ { "kind": "claim", "claim": "The handshake tool evaluates the request and returns a settlement receipt.", "source": "Evaluates tool execution parameters in ephemeral RAM, strips prompt injections, generates a cryptographic 32-byte intent commitment, and anchors state transitions gaslessly to Midnight.", "input": "{\"tool\": \"rohan_zk_handshake\", \"arguments\": {\"agentId\": \"did:example:probe\", \"actionSummary\": \"valid request\"}}", "expected": "successful result containing a settlement receipt", "command": "node packages/mcp/dist/server.js tools/call {\"tool\": \"rohan_zk_handshake\", \"arguments\": {\"agentId\": \"did:example:probe\", \"actionSummary\": \"valid request\"}}", "verdict": "yes", "outcome": "Real input produced the expected result: Zero-Knowledge Handshake successfully settled on Midnight Blockchain.", "evidence": "Zero-Knowledge Handshake successfully settled on Midnight Blockchain.\\\",\\n \\\"receipt\\\": {\\n \\\"success\\\": true,\\n \\\"status\\\": \\\"confirmed\\\",\\n \\\"contractAddress\\\": \\\"585ac0c4448257507d8ffa2a89e2aa00abd86ec9e94bdb6f553bc83e05f4dd0e\\\",\\n \\\"intentHash\\\": \\\"4e33ba77a0a026a6018bcb3557b42377dab2a4542d4c79bf55998835d6a5cf88\\\",\\n \\\"txHash\\\": \\\"0x000e6086cb3af191f20e1a421c3a42c00ade3f614d54910714a39185bbe1974b8c\\\",\\n \\\"gasPaidBy\\\": \\\"rohan-relayer-node-01\\\",\\n \\\"engine\\\": \\\"Midnight Network L1 (Blockfrost Preprod Mined)\\\",\\n \\\"timestamp\\\": 1792970476092\\n }\\n}\"}]}", "source_checked": true, "source_file": "README.md" } ], "claims_note": null, "example_checks": [ { "kind": "example", "claim": "Install dependencies and build the documented source server.", "source": "README.md, Running the MCP Server from Source", "input": "npm install; npm run build", "command": "npm run build", "evidence": "> rohan-protocol@0.6.2 build\n> npm run build --workspaces --if-present\n\n\n> @rohan-protocol/sdk@0.6.2 build\n> tsc && rm -rf dist/generated && cp -r src/generated dist/generated\n\n\n> @rohan-protocol/mcp@0.6.2 build\n> tsc\n\n\n> @rohan-protocol/webmcp@0.6.2 build\n> tsc", "deferred": false, "expected": "all workspaces build successfully", "returncode": 0, "verdict": "yes", "outcome": "command completed successfully" } ], "does_what_it_says": "yes", "maintenance": { "archived": false, "commits_90d": 55, "last_commit_at": "2026-10-25T17:38:35Z", "last_release_at": null, "median_reply_hours": null, "merged_prs_90d": 4, "note": "actively maintained: last commit 0 days ago; 55 commits and 4 merged PRs in 90 days; 0 open issues, 0 open PRs; no releases", "open_issues": 0, "open_prs": 0, "reply_share": null, "reply_threads": 0, "verdict": "maintained" }, "maintenance_verdict": "maintained", "maintenance_note": "actively maintained: last commit 0 days ago; 55 commits and 4 merged PRs in 90 days; 0 open issues, 0 open PRs; no releases", "maintained": "active", "maintained_note": "last commit 0 days ago", "last_commit_at": "2026-10-25T17:48:36Z", "last_release_at": null, "open_issues": null, "answered_issues": null, "platforms_claimed": [ "linux" ], "topic": "mcp-server", "agent_interfaces": [ { "interface": "mcp", "evidence": "independent checker", "observed": true, "operation_checked": true } ], "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.", "mcp_context": { "tool_count": 1, "schema_bytes": 921, "tokens_approx": 231, "estimate_method": "ceil(compact UTF-8 tools/list JSON bytes / 4)", "scope": "returned tools/list page only; excludes client framing and tool results" }, "tested_at": "2026-10-25T23:21:28.408857+00:00", "tested_commit": "2299c48b0c7581e36c79affbde8333d03290b9de", "tested_with": { "agent": "codex", "agent_version": "codex-cli 0.163.0", "model": "gpt-6-luna", "model_route": "gpt-6-luna", "reasoning": "low", "os": "linux", "backend": "hyperv", "transport": "mcp-assigned-vm" }, "setup_identity": { "repo": "rohan-protocol/sdk", "source": "https://github.com/rohan-protocol/sdk", "commit": "2299c48b0c7581e36c79affbde8333d03290b9de", "source_revision": null, "os": "linux", "architecture": null, "backend": "hyperv", "model": "gpt-6-luna", "model_version": "gpt-6-luna", "agent_execution": "native_agent", "agent_runtime": "codex", "agent_runtime_version": "codex-cli 0.163.0", "tool_transport": "mcp-assigned-vm", "runtime": null, "runtime_version": null, "runtime_revision": null, "sandbox_source": null, "guest_setup": null, "source_pin": { "commit": "2299c48b0c7581e36c79affbde8333d03290b9de", "url": "https://github.com/rohan-protocol/sdk" }, "platform_details": { "os": "linux", "backend": "hyperv" }, "platform_conflicts": null, "reasoning": "low", "service_tier": "standard", "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "operation": "Build the monorepo and call the MCP handshake tool with a sample request.", "operation_scope": "product operation", "hosting": null, "kind": "mcp", "test_version": "readme-a17389bda4cc696f9601c0c4ff1b2c16e23bfa1d907883b715ccdd9e92ddec56", "evidence_version": null }, "other_model": null, "other_run_id": null, "models_agree": null, "furthest_model": null, "transcript_url": "/transcripts/rohan-protocol--sdk-gpt-6-luna-1792970162228773672.txt", "report_url": "/reports/rohan-protocol--sdk-gpt-6-luna-1792970162228773672.json" }