Dependency pinning and lockfiles

An MCP server can rewrite its tool descriptions after your config is committed

Tool text is fetched from the server every time an agent connects, so the description reviewed at install time can differ from the one the model reads next week. A dev.to post proposes pinning a hash of it and checking that hash in CI.