{"event":{"id":"evt-hist-phase34-tofu-mcp","dedupe_key":"preprint_publication:2026-10-09:tofu-preprint-studies-llm-orchestrator-tool-trust-boundary-and-mcp-security","event_type":"preprint_publication","title":"ToFu preprint studies LLM orchestrator tool trust boundary and MCP security","summary":"Authors report semantic security bugs on evaluated versions of MCP server tools. Tested tools are not evidence every deployment is vulnerable or exploited.","occurred_at":"2026-10-09T00:00:00.000Z","published_at":"2026-10-09T00:00:00.000Z","observed_at":"2026-10-18T12:00:00.000Z","reconstructed_at":"2026-10-18T12:00:00.000Z","ingest_type":"historical_backfill","locations":null,"status":"verified","confidence":0.83,"metadata":{"evidence_only":1,"global_novelty_unproven":1,"independent_outcomes_unproven":1,"original_index_position":1240},"created_at":"2026-10-19T06:04:31.142Z","updated_at":"2026-10-19T06:04:31.142Z"},"artifacts":[{"id":"art-hist-phase34-tofu-mcp","dedupe_key":"8287b756fea3c09c93968dbb8ddc52ab60901805fa3fee5a0d8d2af986f7a2b5","canonical_url":"https://arxiv.org/abs/2610.13651","evidence_locator":"","artifact_type":"original_publication","title":"ToFu preprint studies LLM orchestrator tool trust boundary and MCP security","summary":"","creator_entities":[],"released_at":"2026-10-09T00:00:00.000Z","content_hash":null,"metadata":[],"created_at":"2026-10-19T06:04:31.141Z","updated_at":"2026-10-19T06:04:31.141Z","relation":"documented_by"}],"signals":[]}