docs/remote-mcp/threat-model-anchors.json

@@ -8,7 +8,7 @@
     "document. #930's inventory had no such guard and its gitea_mcp_server.py",
     "anchors drifted between 7bf4f125 and aad5c8b4."
   ],
-  "generated_against_commit": "c1626081757dff76ea49fcb1869fc0362dea45b1",
+  "generated_against_commit": "a143cd065ba06e1a2bdc5143a19ec156e53650ef",
   "anchors": [
     {"anchor": "gitea_mcp_server.py:24728", "expect": "mcp_daemon_guard.bind_native_mcp_transport()"},
     {"anchor": "mcp_daemon_guard.py:49", "expect": "_PRODUCTION_TRANSPORTS = mcp_transport_config.SUPPORTED_TRANSPORTS"},

docs/remote-mcp/threat-model.md

@@ -5,7 +5,7 @@ What the adversary is, what each boundary protects, and which services may share
 - **Issue:** #956 (Remote-MCP threat model), child of epic #929, cross-linked to #955.
 - **Depends on:** #930 (closed) — `docs/remote-mcp/coupling-inventory.md`.
 - **Blocks:** #932, #933, #934, #938.
-- **Generated against commit:** `c1626081757dff76ea49fcb1869fc0362dea45b1` (#931's transport
+- **Generated against commit:** `a143cd065ba06e1a2bdc5143a19ec156e53650ef` (#931's transport
   bind seam). Originally generated against `aad5c8b42361d380a8eeb07b94b90815e594c2c5`
   (`master`) and re-anchored when #931 shifted the cited lines.
 - **Scope:** documentation only. This child changes no server behavior. It adds one
@@ -73,7 +73,7 @@ authenticate the *caller*, not the *intent*.
 ## 3. Trust boundaries
 
 "Crossing requires today" is what the code actually enforces at
-`c1626081757dff76ea49fcb1869fc0362dea45b1`, not what the design intends.
+`a143cd065ba06e1a2bdc5143a19ec156e53650ef`, not what the design intends.
 
 | ID | Boundary | Protects | Crossing requires today | Crossing must require remotely |
 | -- | -------- | -------- | ----------------------- | ------------------------------ |