Issues

• Principle 4: Verify that what executes is what was approved

  OWASP/OWASP-MCP-Governance-and-Risk-Project#10 · Filter by author slaxxarn opened on Oct 9, 2026

• Proposal: source-rights evidence hook before content-related agent/tool actions

  OWASP/OWASP-MCP-Governance-and-Risk-Project#9 · Filter by author reflectme-source opened on Oct 5, 2026

• Description and schema changes are tool changes: a digest field, a Rule 2 wording, and two observations from a nightly record

  OWASP/OWASP-MCP-Governance-and-Risk-Project#7 · Filter by author gostanos opened on Sep 14, 2026
  2

• Consider AIUC standard (AIUC-1)

  OWASP/OWASP-MCP-Governance-and-Risk-Project#4 · Filter by author rajeevmishra19 opened on Sep 8, 2026

• v1.0 governs tools only: sampling, elicitation, and roots are ungoverned

  OWASP/OWASP-MCP-Governance-and-Risk-Project#2 · Filter by author Ar9av opened on Sep 8, 2026
  1

• Add EMA references

  OWASP/OWASP-MCP-Governance-and-Risk-Project#1 · Filter by author JonZeolla opened on Sep 3, 2026