{
  "name": "Attest",
  "description": "Eval-gated security attestation. A vendor answers a control question and attaches evidence about its own system; two independent gates decide whether the evidence supports the answer before it is recorded.",
  "mcp_endpoint": "/mcp",
  "endpoints": {
    "vendors": "/api/vendors",
    "controls": "/api/controls",
    "assess": "/api/run?vendor=<id>&control=<id>"
  },
  "source": "https://github.com/zubair480/attest",
  "notes": "Where the two gates disagree the control is ESCALATED and nothing is recorded. Evidence is vendor-produced; its digest binds the bundle, not its truth."
}