Skip to main content
Back

Archive · Article

Your MCP Server Can Change the Contract After Approval

A tool description sits inside the security boundary rather than beside it, because that metadata reaches the model before any handler runs, so I hash the whole canonical tool surface and block stateful work when the digest moves.

X · long-form · 2026-08-13

Open it

  • Open the original (opens in a new tab) — x.com

In the archive

  • Writing — Every dated piece of writing.
All artifactsNext: Inference Engineering From First Token to Production Metric