'My AI read your repo and it checks out' is a claim, not proof

MCP — the now-standard way AI agents connect to tools and data — has no built-in way to verify a tool's identity or prove what it returned. 2026 security guidance is blunt: treat every tool response like something off the open internet unless you can prove where it came from.

What it means Anything an agent reports about work done on a machine you don't control is unverified by default. If it matters, re-run the check yourself instead of trusting the summary.