Agent Supply Trust Keeps the Verdict

Field notes

The public scanner accepts structured component data rather than requiring a repository checkout. Its example names postmark-mcp 1.0.3, marks the publisher and artifact as unsigned or unverified, and combines three sensitive permissions with hostile instruction text. The resulting decision is designed to preserve both the policy version and exact component digest, addressing cases where a later rescan may produce a different result for the same dependency tag.