ICE MCP reference run, 2026-10-09T17:27Z
Real LiteLLM proxy 1.104.2, Hive LiteLLM callback, Hive gateway recorder. MCP server is a local stand-in using ICE Data Services' published tool names; all data fictional.

PASS    bundle.json  (6 calls checked)
        call 1  fids.ids_query_trades      gateway: allow record: within_mandate
        call 2  fids.ids_get_reference_data gateway: allow record: within_mandate
        call 3  fids.ids_compute           gateway: deny  record: outside_mandate
        call 4  fids.ids_describe_concept  gateway: allow record: within_mandate
        call 5  fids.ids_compute           gateway: allow record: outside_mandate
        call 6  fids.ids_query_trades      gateway: allow record: within_mandate
  FINDING call 5: the gateway allowed fids.ids_compute and dispatched it, but fids.ids_compute is not in the scope sealed at 2026-10-09T17:26:44Z

tamper/call-removed.json          REJECT  tamper/call-removed.json  [CHAIN_COUNT] the chain seals 6 calls, the bun
tamper/calls-reordered.json       REJECT  tamper/calls-reordered.json  [CHAIN_ORDER] chain step 0 is not call 1 as
tamper/decision-rewritten.json    REJECT  tamper/decision-rewritten.json  [ACTION_RECORD] call 3: the call record 
tamper/other-key.json             REJECT  tamper/other-key.json  [SIGNATURE] grant: the signature does not match t
tamper/outcome-flipped.json       REJECT  tamper/outcome-flipped.json  [PAYLOAD_DIGEST] call 5: the signed body wa
tamper/response-swapped.json      REJECT  tamper/response-swapped.json  [ACTION_RECORD] call 1: the call record (t
tamper/scope-widened-later.json   REJECT  tamper/scope-widened-later.json  [SCOPE_MATCH] the disclosed scope is no