What the work establishes.
Receipt draft and verifier
The Signed Agent Receipt v0.2 defines a strict signed statement. Its offline reference implementation checks the required fields, separate issuer and log signatures, and membership in a signed tree root. The specification, its README and the internal review record are published with the research. The source code, tests and fixtures are on GitHub.
What these artifacts don’t establish
They don’t observe runtime behavior, prove zero retention or include implemented attestation-root checks. Don’t extend their status into a claim about a deployed product environment.
Static source study
We inspected the source of 50 published MCP packages and tied each flag to a line of code. We didn’t run the packages. A flag raises a review question; it doesn’t establish runtime behavior or a vulnerability. It isn’t a conclusion about a package or its operator.
Security question or report.
Send Lugano a concise description of your security question or report. Share only information you can safely send by email. Leave out credentials, secrets and sensitive source material.
contact@lugano.ai