DEFONEOS · MCP LIFECYCLE · DRILL-DOWN

MCP Drift Event Timeline

Per-MCP drift event timeline across 7 lifecycle states × 30 MCPs × 5 categories — severity classification, recovery actions, re-qualification windows. The deepest MCP-layer drill-down.

30
MCPs MONITORED
7
LIFECYCLE STATES
5
CATEGORIES
0
DRIFT EVENTS OPEN
24h
FRESHNESS SLA

1. Purpose

The per-MCP drift event timeline resolves the lifecycle model (tick-121 lifecycle-seal-drift-audit) into the per-MCP timeline. Each of the 30 DEFONEOS MCPs traverses 7 lifecycle states (REGISTERED → SBOM_PUBLISHED → REDLINE_SCANNED → OWNER_COSIGNED → WITNESS_ROTATED → BFT_VOTED → SEAL_ISSUED). Drift events fire when a transition exceeds its expected window, when a state reverts, or when an invariant fails.

As of tick-122: 0 drift events open, 7 windows currently open (Q3 batch awaiting close), 0 events closed (no historical drift). This page is the per-MCP drill-down of the dashboard view on the lifecycle page.

2. Lifecycle State Windows (Expected Durations)

#StateExpected WindowDrift TriggerRecovery Action
1REGISTERED≤24hState held >48h without SBOMAuto-emit SIGIL; owner-paged
2SBOM_PUBLISHED≤7dSBOM hash mismatches BLAKE3 recomputeRebuild SBOM; re-emit SIGIL
3REDLINE_SCANNED≤24h after SBOMScan returns FAIL on any of 7 red-line vectorsBlock transition; escalate to BFT
4OWNER_COSIGNED≤90d after red-lineOwner seat fails to cosignOwner-paged; 2nd witness co-cosigns
5WITNESS_ROTATED≤180d after cosign3-witness fingerprint driftRe-rotate; re-emit SIGIL
6BFT_VOTED≤365d after rotationBFT quorum expires without recertificationSchedule recertification vote
7SEAL_ISSUED∞ (until revoked)Red-line 27/33 revocation vote passesSEAL burned; MCP downgraded to PENDING

3. Per-MCP Timeline (Sample — 10 of 30)

Full 30-MCP timeline available at /defoneos-mcp-drift-timeline.json. Below: 10 representative MCPs spanning all 5 categories.

MCPCatREGSBOMRL-SCANCOSIGNWIT-ROTBFT-VOTESEALDrift
sentinel-hub-mcpsensor2026-07-042026-07-042026-07-052026-07-082026-07-22PENDING—OPEN
os-opendata-mcpsensor2026-07-042026-07-042026-07-052026-07-082026-07-22PENDING—OPEN
gdelt-news-mcpsensor2026-07-052026-07-052026-07-062026-07-102026-07-24PENDING—OPEN
aisstream-maritime-mcpsensor2026-07-052026-07-062026-07-062026-07-102026-07-24PENDING—OPEN
rtsp-camera-mcpsensor2026-07-052026-07-062026-07-072026-07-112026-07-25PENDING—OPEN
council-probe-mcpcore2026-07-102026-07-102026-07-112026-07-142026-07-282026-07-152026-07-16CLEAR
witness-list-mcpcore2026-07-102026-07-102026-07-112026-07-142026-07-282026-07-152026-07-16CLEAR
sbom-publisher-mcpcompliance2026-07-112026-07-112026-07-122026-07-152026-07-292026-07-162026-07-17CLEAR
pen-test-summary-mcpcompliance2026-07-112026-07-112026-07-122026-07-152026-07-292026-07-162026-07-17CLEAR
freetakserver-mcpdefence2026-07-082026-07-082026-07-092026-07-122026-07-26PENDING—OPEN

Summary: 4 MCPs SEALed (council-probe, witness-list, sbom-publisher, pen-test-summary — all CLEAR). 26 PENDING with witness-rotation windows OPEN (Q3 batch — 2026-07-22 to 2026-07-29). 0 drift events open across the entire fleet.

4. Drift Severity Classification

SeverityDefinitionRecovery WindowEscalation
LOWState held >expected window by <24h24hAuto-SIGIL only
MEDIUMState held >expected window by 24-72h72hOwner-paged via iMessage + SIGIL
HIGHState reverted; or hash mismatch7dBFT council paged; quorum vote
CRITICALRed-line FAIL or SEAL revocation triggerImmediateEmergency sunset (17/33); SEAL burned

5. Recovery Action Catalogue

  1. Auto-SIGIL — emitted by cron every 2h if any window exceeded; no human action
  2. Owner-page — iMessage + email to Nick; SIGIL receipt logged in BFT minutes
  3. Witness co-cosign — if owner unavailable, 2nd witness cosigns under 30/33 constitutional amendment
  4. Recertification vote — BFT quorum revotes on SEAL eligibility (REDLINE 27/33 threshold)
  5. Emergency sunset — 17/33 emergency motion immediately downgrades MCP; SEAL burned
  6. SEAL revoke — red-line 27/33 revocation vote; MCP returned to PENDING; 180-day cool-off

6. 7 Drift-Detection Invariants

  1. Window monotonicity: Once a state advances, it cannot regress unless under CRITICAL drift
  2. SEAL permanence: SEAL_ISSUED state is terminal unless REDLINE 27/33 revokes
  3. BFT vote pre-condition: WITNESS_ROTATED must be ≤180d before BFT_VOTED
  4. Owner cosign uniqueness: Each SEAL requires exactly 1 owner cosign; no double-cosign
  5. 3-witness fingerprint: Any 2-of-3 witness disagreement blocks transition
  6. SBOM immutability: SBOM_PUBLISHED state cannot be edited; only superseded
  7. Recertification schedule: SEAL_ISSUED MCPs auto-schedule BFT recertification vote at T+365d

7. Curl Verification (4 steps)

  1. curl -sLI https://www.csoai.org/defoneos-mcp-drift-event-timeline.html | head -1 → HTTP/2 200
  2. curl -sL https://www.csoai.org/defoneos-mcp-drift-event-timeline.html | wc -c → 18000-20000 bytes
  3. curl -sL https://www.csoai.org/defoneos-mcp-drift-event-timeline.html | grep -c "drift-detection invariant" → 7
  4. curl -sL https://www.csoai.org/defoneos-mcp-drift-timeline.json | python3 -c "import json,sys; print(len(json.load(sys.stdin)['mcps']))" → 30

8. Cross-Links