Implementation source and package-owned tests were derived only from the approved sources below. Independent risk review supplied neutral protocol scenarios only; no third-party implementation code or tests entered the clean-room workspace.
| Source | Revision/license | Requirement use |
|---|---|---|
| MCP 2026-07-28 specification and pinned repository | 57ac4a2ec742e0cb7622d899b0f5d3bcf769fd69; new code and specification contributions Apache-2.0, unrelicensed earlier contributions MIT, non-specification documentation CC-BY-4.0 | R04-R06, R08, R10-R11, R16-R24, R27-R30 |
| MCP 2025-11-25 specification | same pinned repository revision and license transition: Apache-2.0/MIT for code and specifications, CC-BY-4.0 for non-specification documentation | R04-R05, R07, R09, R11, R16-R22, R25 |
| Final SEP-2663 Tasks extension | same pinned revision; final extension; Apache-2.0 specification contribution under the repository transition notice | R26 |
| MCP conformance requirements | Runner 0.2.0-alpha.11; commit 74edef34d674f563537be8c6587cebaa58e830ca; archive SHA-256 28d22ae3a4541a9a68c208e6a5653486bfacd97df45cf63cd8f0f7f9d5938293; new contributions Apache-2.0, unrelicensed earlier contributions MIT | examples/conformance_server.exs, scripts/run_conformance_fixture.sh, frozen server scenarios for R04/R06/R08/R10/R19/R21-R24/R30; scored suites run for both eras without expected-failure baselines |
| Attesto public generated API docs listed in the governing baseline | Attesto git 5fc1b687f78fe869d0a77bfa766433fb1a8c23e9, package v1.15.0; MIT | R12-R15 |
| AttestoMCP public generated API docs and released package | Hex package attesto_mcp v1.2.0; MIT | Public ProtectResource.prepare/1, authenticate/2, and authorize/3; R02, R12-R15 |
| Official TypeScript MCP SDK | npm artifact @modelcontextprotocol/client@2.0.0; MIT; immutable package version | Package Client and Streamable HTTP transport; authenticated negotiation/list/call smoke gate in pinned modern 2026-07-28 and explicit legacy modes; R30/T40 |
| Official Python MCP SDK | PyPI artifact mcp==2.1.1; MIT; immutable package version | High-level Client and Streamable HTTP transport; authenticated negotiation/list/call smoke gate in pinned modern 2026-07-28 and legacy modes; R30/T40 |
Official Elixir/OTP, Plug, Jason, Telemetry, ExUnit, and Mix APIs provide the runtime primitives. Bandit is a development/test/example dependency only.