Skip to main content
Glama
Sign In
deenesjakoruzh
dongsheng123132

dsh-vulnerability-remediation-proof

by dongsheng123132
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

dsh-vulnerability-remediation-proof

Offline, deterministic evidence that a supplied vulnerability-remediation campaign covered every declared asset, deployed one fixed artifact, rescanned after deployment, met its remediation deadline and reached fresh zero-residual closure. Inputs and reports contain hashes and bounded public metadata only—never hostnames, addresses, scan bodies or secrets.

This is deliberately not a scanner or patch manager. DeepSec scans DSH code and upstream-radar monitors dependency vulnerabilities; operational platforms deploy patches. This plugin performs no discovery, scanning, installation, mitigation or live-system query. It only recomputes a redacted settlement verdict from explicit receipts.

npm test
npm run check
node bin/dsh-vulnerability-remediation-proof.mjs verify examples/closed.json

DSH tools: dsh_vulnerability_remediation_inspect and dsh_vulnerability_remediation_verify. MCP exposes equivalent proof-only inline tools. Reports explicitly retain authenticatesReceipts: false, provesAssetSetExhaustive: false, and provesAbsenceOfOtherVulnerabilities: false.

References: NIST SP 800-40 Rev. 4 and NIST SP 1800-31.

MIT licensed.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • proofrelay

    GENESISRE
    A
    license
    A
    quality
    F
    maintenance
    Read-only ProofRelay MCP verifier for non-confidential evidence bundles. Exposes 22 public-safe tools, 11 resources, and 11 prompts for bundle integrity checks, receipt-chain review, checkpoint recommendations, MCP risk metadata review, and real-estate closing proof-pack readiness.
    5
    MIT

  • riposte

    SorenSocordia
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables deterministic verification of AI agent decisions and actions, providing PASS/FAIL/ABSTAIN verdicts with replayable proofs and an optional signed receipt ledger.
    5 npm
    Apache 2.0

  • PEA MCP Server

    haothtrteen
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to analyze software artifacts through 35 tools covering read-only reconnaissance, secret/string/symbol scanning, native and Dart AOT structure checks, exposure tiering, protection planning, attack-simulation design, and an append-only evidence ledger with mechanical verified gates that treat unresolved unknowns as blocking. Gated execution tools apply reviewed transforms only to a managed copy inside an authorized workspace, with one-time approval tokens, independent verification, before/after diffs, and rollback.
    MIT

Appeared in Searches