{"schema_version":"silentcritique.assured-context.v0.1","resource_type":"assured_context_pack","generated_at":"2026-08-11T23:24:55.589Z","snapshot_cursor":"scac_a84e853782a3e3d7ae7f33e2","subject":{"slug":"mcp-git-reference","name":"MCP Git Reference Server","type":"mcp_server","vendor":"Model Context Protocol","canonical_url":"https://github.com/modelcontextprotocol/servers/tree/main/src/git","verdict_url":"https://silentcritique.com/verdicts/mcp-git-reference"},"request":{"task":null,"task_adaptation_applied":false,"task_adaptation_notice":"v0.1 carries the task with the full bounded snapshot; it does not yet filter or rerank evidence for that task.","freshness_required_hours":null,"freshness_requirement_met":null},"assessment":{"claim_tested":"Can the public Git MCP server inspect a real repository and report accurate status and history over MCP?","summary":"The Git reference server passed a real MCP smoke test: against a fresh repository it reported a clean status and returned an accurate commit log. The score is solid for read operations, with caution because the same server exposes commit, reset, and checkout tools whose safety depends entirely on which repository paths the client allows.","score":82,"score_label":"Accurate git reads, powerful write surface","verdict_status":"published","strengths":["Read operations returned accurate, well-formatted repository state.","The repository path is an explicit per-call argument, making scope visible to the client.","The tool list cleanly separates inspection from mutation."],"failure_modes":["reset and checkout can discard work, and commit mutates history, if a client grants a broad repository path.","There is no global allowed-directory scope; safety depends on the client validating repo_path on every call.","The test did not exercise the destructive write tools or untrusted repository contents."],"dissent":["The protocol harness scored this high because reads were precise and correct.","The operator skeptic withheld points because exposing reset and checkout without a directory scope is dangerous under a permissive client."],"improvement_path":["Add an allowed-repository scope analogous to the filesystem server.","Require explicit confirmation semantics for history-rewriting tools.","Document safe client patterns for validating repo_path."]},"evidence":{"mode":"dated_public_smoke_test","methodology_version":"sc-agent-trust-v0.1","tested_at":"2026-06-13","published_at":"2026-06-13","updated_at":"2026-06-13","evaluator_panel":["Protocol harness","Safety reviewer","Operator skeptic"],"test_setup":["Created a temporary git repository with one fixture commit.","Started mcp-server-git via uvx over MCP stdio and pointed it at that repository path.","Listed tools, called git_status, and called git_log; evidence stored in evidence/trust5/2026-06-13-mcp-pilot.json."],"observations":[{"label":"Twelve git tools discovered","detail":"The server exposed 12 tools spanning reads (status, log, diff, show) and writes (add, commit, reset, checkout, create_branch).","source_reference":"evidence/trust5/2026-06-13-mcp-pilot.json","source_is_public_url":false},{"label":"Status reported the repository accurately","detail":"git_status returned \"On branch main / nothing to commit, working tree clean\" for the fixture repository.","source_reference":"evidence/trust5/2026-06-13-mcp-pilot.json","source_is_public_url":false},{"label":"Log returned the real commit","detail":"git_log returned the fixture commit with its hash, the Trust5 author, and the commit date.","source_reference":"evidence/trust5/2026-06-13-mcp-pilot.json","source_is_public_url":false}],"limitations":["This was an unsolicited smoke test of the public package, not a full security audit.","Only a single local repository on macOS was tested.","Only read tools (status, log) were exercised."]},"freshness":{"tier":"aging","label":"Evidence aging","detail":"Tested 59 days ago. The subject may have changed since.","age_days":59,"age_hours":1439,"live_monitoring":false,"interpretation":"This is a dated snapshot. It is not a claim about current live behavior."},"rights_and_reliance":{"source_licences_verified":false,"usage_rights":"not_asserted","reliance":"decision_support_only","notice":"Verify source rights and re-test material claims before autonomous high-impact action."},"reply_and_corrections":{"status":"unclaimed","body":"No vendor reply has been requested or published as of 2026-06-13. SilentCritique will publish factual corrections or a right of reply through the corrections process."},"links":{"self":"/api/assurance/subjects/mcp-git-reference","changes":"/api/assurance/subjects/mcp-git-reference/changes?cursor=scac_a84e853782a3e3d7ae7f33e2","methodology":"https://silentcritique.com/methodology","corrections":"https://silentcritique.com/corrections-and-reply"}}