Skip to main content
Back

Archive · Article

Your MCP Server Can Change the Contract After Approval

A tool description sits inside the security boundary, not beside it: that metadata reaches the model before any handler runs. So I hash the canonical tool surface and block stateful work the moment the digest moves. A hash detects change. It does not detect malice.

X · 2026-08-13

Open it

  • Open the original (opens in a new tab) — x.com

In the archive

  • Writing — Every dated piece of writing.
NextInference Engineering From First Token to Production MetricAll artifacts