Pin MCP tool contracts, catch silent drift. Field audit of the npm MCP top: 218 silent contract changes (Microsoft, Google, Hostinger included) - receipts and weekly CI watch inside
Paraphern / rugsnare
