{
  "surveillanceSchemaVersion": "1.0",
  "benchmarkKey": "mcp-authorization-safety",
  "observedAt": "2026-10-26T11:35:11.890513+00:00",
  "status": "pass",
  "benchmark": "DN Liquid Co-Invest MCP Authorization & Duplicate-Order Safety Benchmark",
  "benchmarkVersion": "1.0",
  "evidenceLevel": "code-executed-upstream-mcp-authorization-and-idempotency-tests",
  "upstreamRepository": "liquid-public/coinvest-mcp",
  "upstreamCommit": "98d7f7744152f17dc1e4ecf81e67e71da2fc14aa",
  "dnRepositoryCommit": "698e4a90b2207fdd3f87e42e5b211b2c9beefca5",
  "githubRunId": "40316131690",
  "assertions": {
    "readOnlyWriteSuppressionExercised": true,
    "writeCapabilityClassificationExercised": true,
    "perWriteIdempotencyKeyExercised": true,
    "readCallsExcludeIdempotencyKeyExercised": true,
    "mcpTokenAuthorizationPropagationExercised": true,
    "httpFailureSurfacingExercised": true,
    "catalogFilteringExercised": true
  },
  "controls": {},
  "boundaryFinding": {},
  "limitations": [
    "Tests the public local MCP client and mocked HTTP boundary, not Liquid's private backend implementation.",
    "A client-generated idempotency key does not by itself prove backend duplicate-order prevention.",
    "Does not prove live position limits, margin controls, cancel/close behavior, token revocation latency, server-side invariant enforcement or liveness rescue.",
    "Does not justify a DN Machine Exposure Class by itself."
  ],
  "sourceArtifact": "result.json"
}