{
  "tool_id": "art-18-mcp-developer-readiness-scorecard",
  "note": "golden_hash pinned (see vectors).",
  "vectors": [
    {
      "name": "page_defaults_all_yes",
      "policy_parameters": {
        "answers": {
          "tooldef_schema": "yes",
          "tooldef_desc": "yes",
          "tooldef_ann": "yes",
          "serverjson_name": "yes",
          "serverjson_meta": "yes",
          "serverjson_pkg": "yes",
          "oauth_prm": "yes",
          "oauth_aud": "yes",
          "oauth_pass": "yes",
          "transport_origin": "yes",
          "transport_bind": "yes",
          "poison_clean": "yes",
          "poison_trust": "yes",
          "spec_rev": "yes",
          "spec_stateless": "yes"
        }
      },
      "output_payload": {
        "overall": 100,
        "verdict": "Ship-ready.",
        "sections": [
          {
            "id": "tooldef",
            "name": "Tool Definitions",
            "tool": "T274 Linter",
            "pct": 100
          },
          {
            "id": "serverjson",
            "name": "server.json / Registry",
            "tool": "T275 Validator",
            "pct": 100
          },
          {
            "id": "oauth",
            "name": "OAuth 2.1 Authorization",
            "tool": "T278 Auditor",
            "pct": 100
          },
          {
            "id": "transport",
            "name": "Transport Security",
            "tool": "T284 Auditor",
            "pct": 100
          },
          {
            "id": "poison",
            "name": "Tool-Poisoning Hygiene",
            "tool": "T282 Scanner",
            "pct": 100
          },
          {
            "id": "spec",
            "name": "Spec-Revision Compliance",
            "tool": "T280 Scorer",
            "pct": 100
          }
        ],
        "gaps_count": 0,
        "gaps": [],
        "answers_used": {
          "tooldef_schema": "yes",
          "tooldef_desc": "yes",
          "tooldef_ann": "yes",
          "serverjson_name": "yes",
          "serverjson_meta": "yes",
          "serverjson_pkg": "yes",
          "oauth_prm": "yes",
          "oauth_aud": "yes",
          "oauth_pass": "yes",
          "transport_origin": "yes",
          "transport_bind": "yes",
          "poison_clean": "yes",
          "poison_trust": "yes",
          "spec_rev": "yes",
          "spec_stateless": "yes"
        },
        "note": "Self-reported rollup across six MCP ship-readiness sections. Validate each weak section with its own deep-dive tool before treating this as a launch gate."
      },
      "golden_hash": "09668e854a5e84460e0d6ab83fcfa1ab127bf1c355393e76cc74e719edaa8cc7"
    },
    {
      "name": "mixed_readiness_with_gaps",
      "policy_parameters": {
        "answers": {
          "tooldef_schema": "yes",
          "tooldef_desc": "yes",
          "tooldef_ann": "yes",
          "serverjson_name": "yes",
          "serverjson_meta": "yes",
          "serverjson_pkg": "yes",
          "oauth_prm": "partial",
          "oauth_aud": "no",
          "oauth_pass": "no",
          "transport_origin": "yes",
          "transport_bind": "partial",
          "poison_clean": "yes",
          "poison_trust": "yes",
          "spec_rev": "yes",
          "spec_stateless": "no"
        }
      },
      "output_payload": {
        "overall": 73,
        "verdict": "Nearly there — close the gaps below.",
        "sections": [
          {
            "id": "tooldef",
            "name": "Tool Definitions",
            "tool": "T274 Linter",
            "pct": 100
          },
          {
            "id": "serverjson",
            "name": "server.json / Registry",
            "tool": "T275 Validator",
            "pct": 100
          },
          {
            "id": "oauth",
            "name": "OAuth 2.1 Authorization",
            "tool": "T278 Auditor",
            "pct": 17
          },
          {
            "id": "transport",
            "name": "Transport Security",
            "tool": "T284 Auditor",
            "pct": 75
          },
          {
            "id": "poison",
            "name": "Tool-Poisoning Hygiene",
            "tool": "T282 Scanner",
            "pct": 100
          },
          {
            "id": "spec",
            "name": "Spec-Revision Compliance",
            "tool": "T280 Scorer",
            "pct": 50
          }
        ],
        "gaps_count": 5,
        "gaps": [
          {
            "section": "OAuth 2.1 Authorization",
            "tool": "T278 Auditor",
            "question_id": "prm",
            "severity": "partial"
          },
          {
            "section": "OAuth 2.1 Authorization",
            "tool": "T278 Auditor",
            "question_id": "aud",
            "severity": "gap"
          },
          {
            "section": "OAuth 2.1 Authorization",
            "tool": "T278 Auditor",
            "question_id": "pass",
            "severity": "gap"
          },
          {
            "section": "Transport Security",
            "tool": "T284 Auditor",
            "question_id": "bind",
            "severity": "partial"
          },
          {
            "section": "Spec-Revision Compliance",
            "tool": "T280 Scorer",
            "question_id": "stateless",
            "severity": "gap"
          }
        ],
        "answers_used": {
          "tooldef_schema": "yes",
          "tooldef_desc": "yes",
          "tooldef_ann": "yes",
          "serverjson_name": "yes",
          "serverjson_meta": "yes",
          "serverjson_pkg": "yes",
          "oauth_prm": "partial",
          "oauth_aud": "no",
          "oauth_pass": "no",
          "transport_origin": "yes",
          "transport_bind": "partial",
          "poison_clean": "yes",
          "poison_trust": "yes",
          "spec_rev": "yes",
          "spec_stateless": "no"
        },
        "note": "Self-reported rollup across six MCP ship-readiness sections. Validate each weak section with its own deep-dive tool before treating this as a launch gate."
      },
      "golden_hash": "327aa3fcfe91c58c4fd70e78d16218622dc54aa56776233215dd715c5fc6d243"
    }
  ]
}