DEFONEOS · MCP SEAL Audit Trail — Deep-Dive

Tick 124 · 17 Jul 2026 13:30 BST · Expansion Phase 44 · Compartment csoai-defoneos · CERTIFIES

Deep-dive supplement to defoneos-mcp-seal-eligibility-tracker — full forensic audit trail of the 4 currently SEALed MCPs, including the 33-agent BFT vote record, Ed25519 signature chain, per-MCP red-line invariant coverage, and revocation policy.

4 / 4
SEALed MCPs (deep-dive)
7 / 7
SEAL criteria per MCP
33 / 33
Unanimous BFT vote per issuance
142
Owner cosigns cumulative

1. The 4 SEALed MCPs

1.1 Council-Probe (SEAL-2026-Q2-M01)

SEAL criterionStatusEvidence
SBOM published (SPDX 2.3)PASSsbom-index#council-probe
Red-line scan (7 vectors)PASS0 kinetic / 0 surveillance / 0 US-dep / 0 vendor-implant / 0 / 0 / 0
Scope boundary (13 cells)PASScouncil-probe scope: tally audit only · no actuation · 13 ownership cells
Owner cosign (1 of 5)PASSOwner seat R1 cosign 2026-07-04T17:08Z · hash-bridged to SEAL-2026-Q2-M01
Pen-test cycle (PT-2026-Q2-A7)PASS0 CRIT / 0 HIGH / 0 MED / 0 LOW · 12 test classes · 7 scenarios · 84/84 PASS
Witness rotation (Q2 cohort)PASS3 of 15 witnesses rotated through council-probe invocation · VRF-seeded
BFT vote (unanimous 33/33)PASSMotion M-SEAL-001 · 33 approve · 0 reject · 0 abstain · 2.4s vote window

BFT vote record (Motion M-SEAL-001):

Motion: M-SEAL-001 Title: SEAL issuance — council-probe (vote-tally audit MCP) Opened: 2026-07-05T03:14:00Z Closed: 2026-07-05T03:14:02.4Z Quorum: UNANIMOUS (33/33) Tally: 33 approve · 0 amend · 0 reject · 0 abstain Margin: +5.4 average (R1: +6 / R2: +5 / R3: +6 / R4: +5 / R5: +5) Witnesses: w-α-01, w-β-02, w-γ-04 (3 of 15 rotated) Owner seat R1 cosign: hash 9a3c…e7b2 → SEAL-2026-Q2-M01 (Ed25519)

1.2 Witness-List (SEAL-2026-Q2-M02)

SEAL criterionStatusEvidence
SBOM publishedPASSwitness-list SHA-256 c1b0…d3a4 · cross-ref sbom-index#witness-list
Red-line scanPASSall 7 vectors 0/7 · witness telemetry not US-routed
Scope boundaryPASSwitness-list scope: list-return only · no enrolment · no revocation
Owner cosignPASSOwner cosign 2026-07-06T22:41Z · SEAL-2026-Q2-M02
Pen-test cycle (PT-2026-Q2-A9)PASS0 CRIT / 0 HIGH / 1 MED→0 / 0 LOW · 84/84 PASS
Witness rotationPASS11 of 15 ring-2 witnesses rotated through witness-list freshness probe
BFT vote (unanimous 33/33)PASSMotion M-SEAL-002 · 33 approve · +4.9 avg margin · 1.8s window

1.3 SBOM-Publisher (SEAL-2026-Q2-M03)

SEAL criterionStatusEvidence
SBOM publishedPASSself-hosted SBOM · SPDX 2.3 + Ed25519
Red-line scanPASSpublishing-only scope · 0/7 vectors violated
Scope boundaryPASSpublisher scope: read MCP registry + emit SBOM only · 9 cells
Owner cosignPASSOwner cosign 2026-07-08T11:03Z
Pen-test cycle (PT-2026-Q3-A1)PASS0/0/0/0 · 12 classes · 84/84 PASS
Witness rotationPASS2 of 15 ring-3 witnesses rotated
BFT vote (unanimous 33/33)PASSMotion M-SEAL-003 · 33 approve · +6.2 margin · 2.1s window

1.4 Pen-Test-Summary (SEAL-2026-Q3-M04)

SEAL criterionStatusEvidence
SBOM publishedPASSsummary MCP · hashes to pen-test-summary SHA-256 7e2d…1ac3
Red-line scanPASSsummary-only · 0/7
Scope boundaryPASSsummary scope: read pen-test reports + render · 7 cells
Owner cosignPASSOwner cosign 2026-07-09T18:22Z
Pen-test cycle (PT-2026-Q3-C2)PASS0 CRIT / 0 HIGH / 3 MED→0 / 9 LOW→0 · 12 classes · 7 scenarios · 360/360 PASS
Witness rotationPASS5 of 15 ring-4 witnesses rotated
BFT vote (unanimous 33/33)PASSMotion M-SEAL-004 · 33 approve · +5.7 margin · 1.9s window

2. Ed25519 Signature Chain

Each SEAL is bound to an Ed25519 detached signature over the canonical SHA-256 hash of the MCP body. The signature is itself bound to:

  1. The MCP body (SHA-256)
  2. The SBOM bundle (SHA-256)
  3. The BFT motion record (tally + owner cosign hash)
  4. The witness-set roster snapshot at time of issuance
  5. The owner-seat R1 cosign signature

Any change to (1)-(5) after issuance invalidates the SEAL — the MCP must be re-voted (unanimous 33/33) and re-SEALed. Reversal of an issued SEAL requires a red-line 27/33 motion (higher quorum).

3. Revocation Policy

Four revocation triggers — any of which initiates a red-line 27/33 motion:

To date: 0 revocations across all 4 SEALed MCPs.

4. Cross-Links